2026 CVEs (page 458)
Page 458 of 462 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-20860 | High | 7.8 | 2026-01-13 | Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privile… |
CVE-2026-20859 | High | 7.8 | 2026-01-13 | Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. |
CVE-2026-20858 | High | 7.8 | 2026-01-13 | Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally. |
CVE-2026-20857 | High | 7.8 | 2026-01-13 | Untrusted pointer dereference in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-20856 | High | 8.1 | 2026-01-13 | Improper input validation in Windows Server Update Service allows an unauthorized attacker to execute code over a network. |
CVE-2026-20854 | High | 7.5 | 2026-01-13 | Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to execute code over a network. |
CVE-2026-20853 | High | 7.4 | 2026-01-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows WalletService allows an unauthorized attacker to elevate… |
CVE-2026-20852 | High | 7.7 | 2026-01-13 | Incorrect privilege assignment in Windows Hello allows an unauthorized attacker to perform tampering locally. |
CVE-2026-20851 | Medium | 6.2 | 2026-01-13 | Out-of-bounds read in Capability Access Management Service (camsvc) allows an unauthorized attacker to disclose information locally. |
CVE-2026-20849 | High | 7.5 | 2026-01-13 | Reliance on untrusted inputs in a security decision in Windows Kerberos allows an authorized attacker to elevate privileges over a network. |
CVE-2026-20848 | High | 7.5 | 2026-01-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to elevate priv… |
CVE-2026-20847 | Medium | 6.5 | 2026-01-13 | Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to perform spoofing over a network. |
CVE-2026-20844 | High | 7.4 | 2026-01-13 | Use after free in Windows Clipboard Server allows an unauthorized attacker to elevate privileges locally. |
CVE-2026-20843 | High | 7.8 | 2026-01-13 | Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally. |
CVE-2026-20842 | High | 7.0 | 2026-01-13 | Use after free in Windows DWM allows an authorized attacker to elevate privileges locally. |
CVE-2026-20840 | High | 7.8 | 2026-01-13 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. |
CVE-2026-20839 | Medium | 5.5 | 2026-01-13 | Improper access control in Windows Client-Side Caching (CSC) Service allows an authorized attacker to disclose information locally. |
CVE-2026-20838 | Medium | 5.5 | 2026-01-13 | Generation of error message containing sensitive information in Windows Kernel allows an authorized attacker to disclose information locally. |
CVE-2026-20837 | High | 7.8 | 2026-01-13 | Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally. |
CVE-2026-20836 | High | 7.0 | 2026-01-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Graphics Kernel allows an authorized attacker to elevate privile… |
CVE-2026-20835 | Medium | 5.5 | 2026-01-13 | Out-of-bounds read in Capability Access Management Service (camsvc) allows an authorized attacker to disclose information locally. |
CVE-2026-20834 | Medium | 4.6 | 2026-01-13 | Absolute path traversal in Windows Shell allows an unauthorized attacker to perform spoofing with a physical attack. |
CVE-2026-20833 | Medium | 5.5 | 2026-01-13 | Use of a broken or risky cryptographic algorithm in Windows Kerberos allows an authorized attacker to disclose information locally. |
CVE-2026-20832 | High | 7.8 | 2026-01-13 | Windows Remote Procedure Call Interface Definition Language (IDL) Elevation of Privilege Vulnerability |
CVE-2026-20831 | High | 7.8 | 2026-01-13 | Time-of-check time-of-use (toctou) race condition in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
CVE-2026-20830 | High | 7.0 | 2026-01-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Management Service (camsvc) allows an authoriz… |
CVE-2026-20829 | Medium | 5.5 | 2026-01-13 | Out-of-bounds read in Windows TPM allows an authorized attacker to disclose information locally. |
CVE-2026-20828 | Medium | 4.6 | 2026-01-13 | Out-of-bounds read in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to disclose information with a physical attack. |
CVE-2026-20827 | Medium | 5.5 | 2026-01-13 | Exposure of sensitive information to an unauthorized actor in Tablet Windows User Interface (TWINUI) Subsystem allows an authorized attacker to disclose inform… |
CVE-2026-20826 | High | 7.8 | 2026-01-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Tablet Windows User Interface (TWINUI) Subsystem allows an autho… |
CVE-2026-20825 | Medium | 4.4 | 2026-01-13 | Improper access control in Windows Hyper-V allows an authorized attacker to disclose information locally. |
CVE-2026-20824 | Medium | 5.5 | 2026-01-13 | Protection mechanism failure in Windows Remote Assistance allows an unauthorized attacker to bypass a security feature locally. |
CVE-2026-20823 | Medium | 5.5 | 2026-01-13 | Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally. |
CVE-2026-20822 | High | 7.8 | 2026-01-13 | Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. |
CVE-2026-20821 | Medium | 6.2 | 2026-01-13 | Exposure of sensitive information to an unauthorized actor in Windows Remote Procedure Call allows an unauthorized attacker to disclose information locally. |
CVE-2026-20820 | High | 7.8 | 2026-01-13 | Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-20819 | Medium | 5.5 | 2026-01-13 | Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose information locally. |
CVE-2026-20818 | Medium | 6.2 | 2026-01-13 | Insertion of sensitive information into log file in Windows Kernel allows an unauthorized attacker to disclose information locally. |
CVE-2026-20817 | High | 7.8 | 2026-01-13 | Improper handling of insufficient permissions or privileges in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
CVE-2026-20816 | High | 7.8 | 2026-01-13 | Time-of-check time-of-use (toctou) race condition in Windows Installer allows an authorized attacker to elevate privileges locally. |
CVE-2026-20815 | High | 7.0 | 2026-01-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Management Service (camsvc) allows an authoriz… |
CVE-2026-20814 | High | 7.0 | 2026-01-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Graphics Kernel allows an authorized attacker to elevate privile… |
CVE-2026-20812 | Medium | 6.5 | 2026-01-13 | Improper input validation in Windows LDAP - Lightweight Directory Access Protocol allows an authorized attacker to perform tampering over a network. |
CVE-2026-20811 | High | 7.8 | 2026-01-13 | Access of resource using incompatible type ('type confusion') in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally. |
CVE-2026-20810 | High | 7.8 | 2026-01-13 | Free of memory not on the heap in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
CVE-2026-20809 | High | 7.8 | 2026-01-13 | Time-of-check time-of-use (toctou) race condition in Windows Kernel Memory allows an authorized attacker to elevate privileges locally. |
CVE-2026-20808 | High | 7.0 | 2026-01-13 | Concurrent execution using shared resource with improper synchronization ('race condition') in Printer Association Object allows an authorized attacker to elev… |
CVE-2026-20805 | Medium | 5.5 | 2026-01-13 | Exposure of sensitive information to an unauthorized actor in Desktop Windows Manager allows an authorized attacker to disclose information locally. |
CVE-2026-20804 | High | 7.7 | 2026-01-13 | Incorrect privilege assignment in Windows Hello allows an unauthorized attacker to perform tampering locally. |
CVE-2026-20803 | High | 7.2 | 2026-01-13 | Missing authentication for critical function in SQL Server allows an authorized attacker to elevate privileges over a network. |
CVE-2026-0386 | High | 7.5 | 2026-01-13 | Improper access control in Windows Deployment Services allows an unauthorized attacker to execute code over an adjacent network. |
CVE-2026-0408 | High | 8.0 | 2026-01-13 | A path traversal vulnerability in NETGEAR WiFi range extenders allows an attacker with LAN authentication to access the router's IP and review the contents o… |
CVE-2026-0407 | High | 8.0 | 2026-01-13 | An insufficient authentication vulnerability in NETGEAR WiFi range extenders allows a network adjacent attacker with WiFi authentication or a physical Ethern… |
CVE-2026-0406 | High | 8.0 | 2026-01-13 | An insufficient input validation vulnerability in the NETGEAR XR1000v2 allows attackers connected to the router's LAN to execute OS command injections. |
CVE-2026-0405 | High | 7.8 | 2026-01-13 | An authentication bypass vulnerability in NETGEAR Orbi devices allows users connected to the local network to access the router web interface as an admin. |
CVE-2026-0404 | High | 8.0 | 2026-01-13 | An insufficient input validation vulnerability in NETGEAR Orbi devices' DHCPv6 functionality allows network adjacent attackers authenticated over WiFi or on… |
CVE-2026-0403 | High | 8.0 | 2026-01-13 | An insufficient input validation vulnerability in NETGEAR Orbi routers allows attackers connected to the router's LAN to execute OS command injections. |
CVE-2026-22755 | | 2026-01-13 | Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Vivotek Affected device model numbers are FD8365, FD8365v2… | |
CVE-2026-0892 | Critical | 9.8 | 2026-01-13 | Memory safety bugs present in Firefox 146 and Thunderbird 146. Some of these bugs showed evidence of memory corruption and we presume that with enough effort s… |
CVE-2026-0891 | High | 8.1 | 2026-01-13 | Memory safety bugs present in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146. Some of these bugs showed evidence of memory corruptio… |
CVE-2026-0890 | Medium | 5.4 | 2026-01-13 | Spoofing issue in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunder… |
CVE-2026-0889 | High | 7.5 | 2026-01-13 | Denial-of-service in the DOM: Service Workers component. This vulnerability was fixed in Firefox 147 and Thunderbird 147. |
CVE-2026-0888 | Medium | 5.3 | 2026-01-13 | Information disclosure in the XML component. This vulnerability was fixed in Firefox 147 and Thunderbird 147. |
CVE-2026-0887 | Medium | 4.3 | 2026-01-13 | Clickjacking issue, information disclosure in the PDF Viewer component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Th… |
CVE-2026-0886 | Medium | 5.3 | 2026-01-13 | Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, a… |
CVE-2026-0885 | Medium | 6.5 | 2026-01-13 | Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7. |
CVE-2026-0884 | Critical | 9.8 | 2026-01-13 | Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7. |
CVE-2026-0883 | Medium | 5.3 | 2026-01-13 | Information disclosure in the Networking component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7. |
CVE-2026-0882 | High | 8.8 | 2026-01-13 | Use-after-free in the IPC component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7. |
CVE-2026-0881 | Critical | 10.0 | 2026-01-13 | Sandbox escape in the Messaging System component. This vulnerability was fixed in Firefox 147 and Thunderbird 147. |
CVE-2026-0880 | High | 8.8 | 2026-01-13 | Sandbox escape due to integer overflow in the Graphics component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbi… |
CVE-2026-0879 | Critical | 9.8 | 2026-01-13 | Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140… |
CVE-2026-0878 | High | 8.0 | 2026-01-13 | Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thu… |
CVE-2026-0877 | High | 8.1 | 2026-01-13 | Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thun… |
CVE-2026-0684 | Medium | 4.3 | 2026-01-13 | The CP Image Store with Slideshow plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.9 due to a logic error i… |
CVE-2026-0859 | High | 7.8 | 2026-01-13 | TYPO3's mail‑file spool deserialization flaw lets local users with write access to the spool directory craft a malicious file that is deserialized during the m… |
CVE-2026-0514 | Medium | 6.1 | 2026-01-13 | Due to a Cross-Site Scripting (XSS) vulnerability in SAP Business Connector, an unauthenticated attacker could craft a malicious link. When an unsuspecting use… |
CVE-2026-0513 | Medium | 4.7 | 2026-01-13 | Due to an Open Redirect Vulnerability in SAP Supplier Relationship Management (SICF Handler in SRM Catalog), an unauthenticated attacker could craft a maliciou… |
CVE-2026-0511 | High | 8.1 | 2026-01-13 | SAP Fiori App Intercompany Balance Reconciliation does not perform necessary authorization checks for an authenticated user, resulting in escalation of privile… |
CVE-2026-0510 | Low | 3.0 | 2026-01-13 | The User Management Engine (UME) in NetWeaver Application Server for Java (NW AS Java) utilizes an obsolete cryptographic algorithm for encrypting User Mapping… |
CVE-2026-0507 | High | 8.4 | 2026-01-13 | Due to an OS Command Injection vulnerability in SAP Application Server for ABAP and SAP NetWeaver RFCSDK, an authenticated attacker with administrative access… |
CVE-2026-0506 | High | 8.1 | 2026-01-13 | Due to a Missing Authorization Check vulnerability in Application Server ABAP and ABAP Platform, an authenticated attacker could misuse an RFC function to exec… |
CVE-2026-0504 | Low | 3.8 | 2026-01-13 | Due to insufficient input handling, the SAP Identity Management REST interface allows an authenticated administrator to submit specially crafted malicious REST… |
CVE-2026-0503 | Medium | 6.4 | 2026-01-13 | Due to missing authorization check in the SAP ERP Central Component (SAP ECC) and SAP S/4HANA (SAP EHS Management), an attacker could extract hardcoded clear-t… |
CVE-2026-0501 | Critical | 9.9 | 2026-01-13 | Due to insufficient input validation in SAP S/4HANA Private Cloud and On-Premise (Financials General Ledger), an authenticated user could execute crafted SQL q… |
CVE-2026-0500 | Critical | 9.6 | 2026-01-13 | Due to the usage of vulnerable third party component in SAP Wily Introscope Enterprise Manager (WorkStation), an unauthenticated attacker could create a malici… |
CVE-2026-0499 | Medium | 6.1 | 2026-01-13 | SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject malicious scripts into a URL parameter. The scripts are reflected in the server re… |
CVE-2026-0498 | Critical | 9.1 | 2026-01-13 | SAP S/4HANA (Private Cloud and On-Premise) allows an attacker with admin privileges to exploit a vulnerability in the function module exposed via RFC. This fla… |
CVE-2026-0497 | Medium | 4.3 | 2026-01-13 | SAP Product Designer Web UI of Business Server Pages allows authenticated non-administrative users to access non-sensitive information. This results in a low i… |
CVE-2026-0496 | Medium | 6.6 | 2026-01-13 | SAP Fiori App Intercompany Balance Reconciliation allows an attacker with high privileges to upload any file (including script files) without proper file form… |
CVE-2026-0495 | Medium | 5.1 | 2026-01-13 | SAP Fiori App Intercompany Balance Reconciliation allows an attacker with high privileges to send uploaded files to arbitrary emails which could enable effect… |
CVE-2026-0494 | Medium | 4.3 | 2026-01-13 | Under certain conditions SAP Fiori App Intercompany Balance Reconciliation application allows an attacker to access information which would otherwise be restri… |
CVE-2026-0493 | Medium | 4.3 | 2026-01-13 | Due to a Cross-Site Request Forgery (CSRF) vulnerability in SAP Fiori App Intercompany Balance Reconciliation an attacker could execute state?changing actions… |
CVE-2026-0492 | High | 8.8 | 2026-01-13 | SAP HANA database is vulnerable to privilege escalation allowing an attacker with valid credentials of any user to switch to another user potentially gaining a… |
CVE-2026-0491 | Critical | 9.1 | 2026-01-13 | SAP Landscape Transformation allows an attacker with admin privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the… |
CVE-2026-22813 | Medium | 6.1 | 2026-01-12 | OpenCode is an open source AI coding agent. The markdown renderer used for LLM responses will insert arbitrary HTML into the DOM. There is no sanitization with… |
CVE-2026-22812 | High | 8.8 | 2026-01-12 | OpenCode is an open source AI coding agent. Prior to 1.0.216, OpenCode automatically starts an unauthenticated HTTP server that allows any local process (or an… |
CVE-2026-22805 | High | 8.6 | 2026-01-12 | Metabase is an open-source data analytics platform. Prior to 55.13, 56.3, and 57.1, self-hosted Metabase instances that allow users to create subscriptions cou… |
CVE-2026-22804 | High | 8.0 | 2026-01-12 | Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 1.7.0 to 1.9.0, Stored Cross-Site Scripting… |
CVE-2026-22801 | Medium | 6.8 | 2026-01-12 | LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From 1.6.26 to 1.6… |