2026 CVEs (page 291)
Page 291 of 707 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-62781 | High | 8.1 | 2026-08-11 | Heap-based buffer overflow in RPC Runtime allows an unauthorized attacker to execute code over a network. |
CVE-2026-62780 | High | 7.0 | 2026-08-11 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-62779 | High | 7.8 | 2026-08-11 | Use after free in Windows Schannel allows an authorized attacker to elevate privileges locally. |
CVE-2026-62778 | High | 8.1 | 2026-08-11 | Use after free in Windows DNS allows an unauthorized attacker to elevate privileges over a network. |
CVE-2026-62777 | High | 7.8 | 2026-08-11 | Missing authentication for critical function in Windows License Manager allows an authorized attacker to elevate privileges locally. |
CVE-2026-62776 | High | 7.8 | 2026-08-11 | Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally. |
CVE-2026-62775 | Medium | 5.5 | 2026-08-11 | Incorrect authorization in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to disclose information locally. |
CVE-2026-62774 | High | 7.0 | 2026-08-11 | Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-62773 | High | 7.0 | 2026-08-11 | Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally. |
CVE-2026-62772 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally. |
CVE-2026-62771 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-62770 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Shell allows an authorized attacker to elevate privileges locally. |
CVE-2026-62769 | Medium | 6.7 | 2026-08-11 | Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. |
CVE-2026-62768 | High | 7.8 | 2026-08-11 | Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
CVE-2026-62766 | High | 7.0 | 2026-08-11 | Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally. |
CVE-2026-62761 | High | 7.8 | 2026-08-11 | Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally. |
CVE-2026-62758 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. |
CVE-2026-62757 | Medium | 5.3 | 2026-08-11 | Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to bypass a security feature over a network. |
CVE-2026-62755 | High | 7.8 | 2026-08-11 | Stack-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally. |
CVE-2026-62754 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally. |
CVE-2026-62753 | High | 7.0 | 2026-08-11 | Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. |
CVE-2026-62752 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally. |
CVE-2026-62751 | High | 7.8 | 2026-08-11 | Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges locally. |
CVE-2026-62750 | Medium | 6.5 | 2026-08-11 | Partial string comparison in Windows HTTP Protocol Stack allows an unauthorized attacker to perform tampering over an adjacent network. |
CVE-2026-62749 | High | 7.0 | 2026-08-11 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-62748 | High | 7.0 | 2026-08-11 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to eleva… |
CVE-2026-62747 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-62746 | Medium | 5.5 | 2026-08-11 | Buffer over-read in Windows Win32K allows an authorized attacker to disclose information locally. |
CVE-2026-62745 | Medium | 6.5 | 2026-08-11 | Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network. |
CVE-2026-62743 | Medium | 5.5 | 2026-08-11 | Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally. |
CVE-2026-62742 | Medium | 6.5 | 2026-08-11 | Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network. |
CVE-2026-62741 | High | 7.8 | 2026-08-11 | Integer underflow (wrap or wraparound) in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. |
CVE-2026-62740 | Medium | 5.5 | 2026-08-11 | Use of uninitialized resource in Windows Imaging Component allows an authorized attacker to disclose information locally. |
CVE-2026-62739 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. |
CVE-2026-62738 | Medium | 5.5 | 2026-08-11 | Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally. |
CVE-2026-62737 | High | 7.8 | 2026-08-11 | Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-62736 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally. |
CVE-2026-62735 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. |
CVE-2026-62734 | High | 7.0 | 2026-08-11 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to eleva… |
CVE-2026-62733 | High | 7.8 | 2026-08-11 | Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally. |
CVE-2026-62732 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-62730 | Medium | 5.5 | 2026-08-11 | Buffer over-read in Windows Wired AutoConfig Service allows an authorized attacker to disclose information locally. |
CVE-2026-62729 | High | 7.0 | 2026-08-11 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to eleva… |
CVE-2026-62728 | High | 7.0 | 2026-08-11 | Time-of-check time-of-use (toctou) race condition in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-62726 | High | 7.0 | 2026-08-11 | Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-62725 | High | 7.0 | 2026-08-11 | Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-62724 | High | 7.0 | 2026-08-11 | Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-62723 | High | 7.0 | 2026-08-11 | Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-62722 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Brokering File System allows an authorized attacker to elevate privileges locally. |
CVE-2026-62721 | High | 7.8 | 2026-08-11 | Insufficient granularity of access control in User-Mode Power Service (UMPS) allows an authorized attacker to elevate privileges locally. |
CVE-2026-62720 | Medium | 6.5 | 2026-08-11 | Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network. |
CVE-2026-62719 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally. |
CVE-2026-62718 | Medium | 6.5 | 2026-08-11 | Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network. |
CVE-2026-62717 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally. |
CVE-2026-62716 | Medium | 6.5 | 2026-08-11 | Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network. |
CVE-2026-62715 | Medium | 6.5 | 2026-08-11 | Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network. |
CVE-2026-62714 | Medium | 6.5 | 2026-08-11 | Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network. |
CVE-2026-62713 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-62712 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally. |
CVE-2026-62711 | High | 7.8 | 2026-08-11 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
CVE-2026-62710 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-62709 | Medium | 5.5 | 2026-08-11 | Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally. |
CVE-2026-62708 | Medium | 6.4 | 2026-08-11 | Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack. |
CVE-2026-62707 | High | 7.8 | 2026-08-11 | Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. |
CVE-2026-62705 | High | 7.0 | 2026-08-11 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bind Filter Driver allows an authorized attacker to elev… |
CVE-2026-62703 | Medium | 5.5 | 2026-08-11 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally. |
CVE-2026-62702 | Medium | 6.8 | 2026-08-11 | Null pointer dereference in Windows Graphics Kernel allows an unauthorized attacker to deny service over a network. |
CVE-2026-62701 | High | 7.8 | 2026-08-11 | Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-62700 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. |
CVE-2026-62699 | Medium | 6.8 | 2026-08-11 | Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally. |
CVE-2026-62698 | High | 7.8 | 2026-08-11 | Numeric truncation error in Microsoft Digest Authentication allows an authorized attacker to elevate privileges locally. |
CVE-2026-62696 | High | 7.8 | 2026-08-11 | Integer underflow (wrap or wraparound) in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-62695 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. |
CVE-2026-62693 | High | 7.0 | 2026-08-11 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows MIDI Service Module allows an authorized attacker to ele… |
CVE-2026-62692 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. |
CVE-2026-62690 | High | 7.0 | 2026-08-11 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elev… |
CVE-2026-62688 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. |
CVE-2026-61939 | High | 7.0 | 2026-08-11 | Use after free in Winlogon allows an authorized attacker to elevate privileges locally. |
CVE-2026-61938 | High | 7.0 | 2026-08-11 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
CVE-2026-61937 | High | 7.8 | 2026-08-11 | Integer overflow or wraparound in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. |
CVE-2026-61936 | Medium | 5.5 | 2026-08-11 | Missing authorization in Windows Defender Firewall Service allows an authorized attacker to bypass a security feature locally. |
CVE-2026-61934 | High | 7.8 | 2026-08-11 | Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-61933 | Medium | 5.5 | 2026-08-11 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally. |
CVE-2026-61932 | High | 7.8 | 2026-08-11 | Access of resource using incompatible type ('type confusion') in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
CVE-2026-61930 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-61929 | High | 7.0 | 2026-08-11 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-61928 | Medium | 5.5 | 2026-08-11 | Cleartext storage of sensitive information in Windows Hello allows an authorized attacker to perform tampering locally. |
CVE-2026-61927 | High | 7.0 | 2026-08-11 | Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-61926 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-61925 | High | 7.8 | 2026-08-11 | Incorrect authorization in Windows Installer allows an authorized attacker to elevate privileges locally. |
CVE-2026-61924 | Medium | 6.5 | 2026-08-11 | Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network. |
CVE-2026-61923 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-61921 | Medium | 6.5 | 2026-08-11 | Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network. |
CVE-2026-61920 | Medium | 6.6 | 2026-08-11 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an authorized attacker to execute code over a… |
CVE-2026-61918 | Medium | 6.5 | 2026-08-11 | Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network. |
CVE-2026-61368 | Medium | 5.0 | 2026-08-11 | Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information locally. |
CVE-2026-61367 | High | 7.8 | 2026-08-11 | Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. |
CVE-2026-61366 | High | 7.0 | 2026-08-11 | Double free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally. |
CVE-2026-61365 | High | 7.8 | 2026-08-11 | Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. |
CVE-2026-61364 | High | 7.8 | 2026-08-11 | Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. |