2026 CVEs (page 26)
Page 26 of 445 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-65814 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Storage Port Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-65813 | Medium | 6.5 | 2026-08-11 | Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. |
CVE-2026-65811 | High | 8.8 | 2026-08-11 | Improper input validation in Power BI allows an authorized attacker to execute code over a network. |
CVE-2026-65810 | High | 7.8 | 2026-08-11 | Relative path traversal in .NET Framework allows an unauthorized attacker to elevate privileges locally. |
CVE-2026-65807 | High | 8.8 | 2026-08-11 | Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-65806 | Medium | 6.5 | 2026-08-11 | Missing authorization in Azure CycleCloud allows an authorized attacker to disclose information over a network. |
CVE-2026-65799 | Medium | 6.7 | 2026-08-11 | Integer overflow or wraparound in Windows DNS allows an authorized attacker to elevate privileges locally. |
CVE-2026-65798 | Medium | 6.7 | 2026-08-11 | Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. |
CVE-2026-65797 | Medium | 6.7 | 2026-08-11 | Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. |
CVE-2026-65796 | High | 8.1 | 2026-08-11 | Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network. |
CVE-2026-65795 | Medium | 6.7 | 2026-08-11 | No cwe for this issue in Windows DNS allows an authorized attacker to elevate privileges locally. |
CVE-2026-65794 | Medium | 6.5 | 2026-08-11 | Buffer over-read in Windows SMB Client allows an unauthorized attacker to disclose information over a network. |
CVE-2026-65791 | Critical | 9.8 | 2026-08-11 | Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network. |
CVE-2026-65790 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally. |
CVE-2026-65789 | High | 8.1 | 2026-08-11 | Use after free in Windows DNS allows an unauthorized attacker to execute code over a network. |
CVE-2026-65788 | High | 7.0 | 2026-08-11 | Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
CVE-2026-65787 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
CVE-2026-65786 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
CVE-2026-65785 | Medium | 6.5 | 2026-08-11 | Uncontrolled resource consumption in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network. |
CVE-2026-65784 | Medium | 5.5 | 2026-08-11 | Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. |
CVE-2026-65783 | High | 7.0 | 2026-08-11 | Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally. |
CVE-2026-65782 | High | 7.0 | 2026-08-11 | Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally. |
CVE-2026-65781 | High | 7.0 | 2026-08-11 | Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally. |
CVE-2026-65780 | High | 7.0 | 2026-08-11 | Double free in Windows Autopilot allows an authorized attacker to elevate privileges locally. |
CVE-2026-65779 | High | 7.0 | 2026-08-11 | Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally. |
CVE-2026-65778 | High | 7.0 | 2026-08-11 | Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally. |
CVE-2026-65777 | Medium | 5.3 | 2026-08-11 | Inadequate encryption strength in Windows Active Directory allows an authorized attacker to bypass a security feature over a network. |
CVE-2026-65776 | High | 7.0 | 2026-08-11 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
CVE-2026-65775 | High | 7.8 | 2026-08-11 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
CVE-2026-65774 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
CVE-2026-65773 | High | 7.8 | 2026-08-11 | Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-65769 | Medium | 6.5 | 2026-08-11 | Exposure of sensitive information to an unauthorized actor in Microsoft Teams Mobile allows an unauthorized attacker to disclose information over a network. |
CVE-2026-65768 | High | 8.8 | 2026-08-11 | Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Teams for Android allows an unauthorized attacker to execute code o… |
CVE-2026-65767 | High | 8.8 | 2026-08-11 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Teams for Android allows an authorized attacker to perform sp… |
CVE-2026-65681 | High | 7.5 | 2026-08-11 | Null pointer dereference in Windows iSCSI Target Service allows an unauthorized attacker to deny service over a network. |
CVE-2026-65679 | High | 8.1 | 2026-08-11 | Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network. |
CVE-2026-65678 | High | 7.0 | 2026-08-11 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
CVE-2026-65675 | High | 7.1 | 2026-08-11 | No cwe for this issue in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to bypass a security feature over a network. |
CVE-2026-65673 | High | 7.8 | 2026-08-11 | Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Entra Connect Sync allows an authorized attacker to elevate p… |
CVE-2026-65672 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally. |
CVE-2026-65671 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally. |
CVE-2026-65665 | High | 8.8 | 2026-08-11 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
CVE-2026-65664 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-65663 | High | 8.8 | 2026-08-11 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
CVE-2026-65662 | Medium | 5.5 | 2026-08-11 | Out-of-bounds read in Windows GDI allows an authorized attacker to disclose information locally. |
CVE-2026-65661 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-65660 | Medium | 6.5 | 2026-08-11 | Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. |
CVE-2026-65658 | High | 8.8 | 2026-08-11 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
CVE-2026-65657 | High | 7.8 | 2026-08-11 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-65656 | High | 7.8 | 2026-08-11 | Improper neutralization of special elements used in a command ('command injection') in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-64922 | Medium | 4.6 | 2026-08-11 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform sp… |
CVE-2026-64921 | High | 8.8 | 2026-08-11 | Missing authentication for critical function in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. |
CVE-2026-64920 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. |
CVE-2026-64919 | High | 7.8 | 2026-08-11 | Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. |
CVE-2026-64917 | Medium | 5.5 | 2026-08-11 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
CVE-2026-64916 | Medium | 4.6 | 2026-08-11 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform sp… |
CVE-2026-64915 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-64914 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. |
CVE-2026-64912 | High | 7.8 | 2026-08-11 | Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. |
CVE-2026-64911 | High | 7.8 | 2026-08-11 | Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-64910 | High | 7.8 | 2026-08-11 | Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-64909 | High | 7.8 | 2026-08-11 | Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-64908 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. |
CVE-2026-64907 | High | 7.8 | 2026-08-11 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-64906 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. |
CVE-2026-64905 | High | 7.8 | 2026-08-11 | Buffer over-read in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-64904 | High | 7.8 | 2026-08-11 | Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-64903 | High | 7.8 | 2026-08-11 | Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-64902 | Medium | 4.6 | 2026-08-11 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform sp… |
CVE-2026-64901 | High | 8.8 | 2026-08-11 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
CVE-2026-64900 | High | 7.3 | 2026-08-11 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform sp… |
CVE-2026-64899 | Medium | 5.5 | 2026-08-11 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. |
CVE-2026-64898 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-64897 | Medium | 4.6 | 2026-08-11 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform sp… |
CVE-2026-63533 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-63532 | High | 7.8 | 2026-08-11 | Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-63531 | Medium | 5.5 | 2026-08-11 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
CVE-2026-63530 | Medium | 5.5 | 2026-08-11 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
CVE-2026-63529 | Medium | 5.5 | 2026-08-11 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. |
CVE-2026-63528 | Medium | 5.5 | 2026-08-11 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
CVE-2026-63527 | High | 7.8 | 2026-08-11 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-63526 | High | 7.8 | 2026-08-11 | Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-63525 | High | 7.8 | 2026-08-11 | Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-63524 | Medium | 5.5 | 2026-08-11 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. |
CVE-2026-63522 | High | 7.8 | 2026-08-11 | Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate privileges locally. |
CVE-2026-63521 | Medium | 5.5 | 2026-08-11 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
CVE-2026-63520 | High | 8.1 | 2026-08-11 | Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. |
CVE-2026-63519 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-63518 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-63517 | Medium | 5.5 | 2026-08-11 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. |
CVE-2026-63516 | Medium | 6.5 | 2026-08-11 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. |
CVE-2026-63515 | High | 7.8 | 2026-08-11 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-63514 | High | 8.8 | 2026-08-11 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
CVE-2026-63513 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-63512 | Medium | 6.5 | 2026-08-11 | Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network. |
CVE-2026-62917 | Medium | 4.6 | 2026-08-11 | Improper input validation in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. |
CVE-2026-62915 | Medium | 6.5 | 2026-08-11 | Missing authorization in Microsoft Exchange Server allows an authorized attacker to bypass a security feature over a network. |
CVE-2026-62914 | High | 7.3 | 2026-08-11 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an authorized attacker to perform spoo… |
CVE-2026-62913 | High | 8.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network. |
CVE-2026-62912 | Medium | 6.5 | 2026-08-11 | Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to deny service over a network. |