CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2026-88079 HIGH · 7.0 Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
- CVE-2026-88076 HIGH · 7.0 Null pointer dereference in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-88075 HIGH · 8.8 Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a…
- CVE-2026-88074 HIGH · 7.8 Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
- CVE-2026-88073 HIGH · 8.8 Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2026-88072 HIGH · 7.8 Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-88071 HIGH · 7.8 Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
- CVE-2026-88070 HIGH · 7.8 Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally.
- CVE-2026-87716 HIGH · 7.5 Heap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized attacker to deny service over a network.
- CVE-2026-87715 HIGH · 7.0 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-87714 MEDIUM · 6.5 Missing authorization in WebDAV allows an authorized attacker to bypass a security feature over a network.
- CVE-2026-87713 HIGH · 7.5 Use after free in Windows Bluetooth Port Driver allows an unauthorized attacker to elevate privileges over an adjacent network.
- CVE-2026-87712 HIGH · 7.8 Use after free in Windows Quality of Service (QoS) Packet Scheduler allows an authorized attacker to elevate privileges locally.
- CVE-2026-87711 HIGH · 7.8 Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-87710 HIGH · 7.0 Improper access control in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.
- CVE-2026-87709 MEDIUM · 5.5 Improper access control in Windows Host Guardian Service allows an authorized attacker to perform tampering locally.
- CVE-2026-87708 HIGH · 7.0 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-87707 HIGH · 7.8 Heap-based buffer overflow in Windows Fax and Scan Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-87706 HIGH · 7.8 Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
- CVE-2026-87705 HIGH · 7.4 Improper verification of source of a communication channel in Windows Hyper-V allows an unauthorized attacker to bypass a security feature over an adjacent network.
- CVE-2026-87704 HIGH · 7.0 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-87702 HIGH · 7.8 Integer overflow of wraparound in Windows Resource Management (MRM) stelt een geautoriseerde aanvaller in staat om de bevoegdheden lokaal te verhogen.
- CVE-2026-87700 HIGH · 7.8 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-87699 HIGH · 7.8 Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally.
- CVE-2026-87698 MEDIUM · 5.5 Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to disclose information locally.
- CVE-2026-87697 HIGH · 8.8 Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.
- CVE-2026-87696 HIGH · 7.5 Improper verification of cryptographic signature in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
- CVE-2026-87695 HIGH · 7.8 Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.
- CVE-2026-87694 HIGH · 7.8 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-87693 HIGH · 7.0 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-87692 HIGH · 7.8 Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.
- CVE-2026-87691 HIGH · 7.8 Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.
- CVE-2026-86063 NONE Claude Code is an agentic coding tool. Prior to 2.1.179, the Claude Code and Claude Desktop plugin installation flow runs git checkout for a marketplace-pinned…
- CVE-2026-85945 HIGH · 7.8 Gebruik na gratis in Windows Kernel stelt een geautoriseerde aanvaller in staat om de privileges lokaal te verhogen.
- CVE-2026-85943 HIGH · 7.0 Time-of-check time-of-use (toctou) race condition in Reliable Multicast Transport Driver (RMCAST) allows an authorized attacker to elevate privileges locally.
- CVE-2026-85941 HIGH · 7.0 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-85939 MEDIUM · 5.3 Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature over a network.
- CVE-2026-85938 MEDIUM · 5.5 Improper access control in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.
- CVE-2026-85936 HIGH · 8.8 Double free in Windows Shell allows an unauthorized attacker to execute code over a network.
- CVE-2026-85935 MEDIUM · 5.5 Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally.
- CVE-2026-85934 HIGH · 7.0 Use after free in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-85933 HIGH · 7.8 Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
- CVE-2026-85932 MEDIUM · 6.5 Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. Microsoft
- CVE-2026-85931 HIGH · 8.8 Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.
- CVE-2026-85930 HIGH · 7.0 Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
- CVE-2026-85928 CRITICAL · 9.8 Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.
- CVE-2026-85927 HIGH · 7.8 Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
- CVE-2026-85926 HIGH · 8.1 Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
- CVE-2026-85925 HIGH · 8.2 Improper restriction of communication channel to intended endpoints in Azure Key Vault allows an authorized attacker to elevate privileges over a network.
- CVE-2026-85922 HIGH · 7.4 Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network.