CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2026-85920 HIGH · 7.0 Time-of-check time-of-use (toctou) race condition in Windows BitLocker allows an authorized attacker to elevate privileges locally.
- CVE-2026-85918 HIGH · 7.0 Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
- CVE-2026-85916 MEDIUM · 6.2 Exposure of private personal information to an unauthorized actor in Azure Active Directory allows an unauthorized attacker to disclose information locally.
- CVE-2026-85915 HIGH · 7.8 Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-85914 HIGH · 7.0 Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-85912 HIGH · 7.0 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-85911 HIGH · 7.8 Use after free in Windows StateRepository API allows an authorized attacker to elevate privileges locally.
- CVE-2026-85910 MEDIUM · 5.5 Buffer over-read in Windows StateRepository API allows an authorized attacker to disclose information locally.
- CVE-2026-85909 MEDIUM · 5.5 Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.
- CVE-2026-85908 HIGH · 7.8 Op heap gebaseerde bufferoverloop in Windows Win32K - GRFX stelt een geautoriseerde aanvaller in staat om de privileges lokaal te verhogen.
- CVE-2026-85906 HIGH · 7.8 Gebruik na gratis in Windows Direct Composition stelt een geautoriseerde aanvaller in staat om de privileges lokaal te verhogen.
- CVE-2026-85905 HIGH · 8.8 Heap-based buffer overflow in Windows UI Immersive Server allows an authorized attacker to elevate privileges locally.
- CVE-2026-85904 HIGH · 7.0 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-85903 HIGH · 8.8 Niet-vertrouwde pointer-dereferentie in DNS Server stelt een ongeautoriseerde aanvaller in staat om code uit te voeren via een netwerk.
- CVE-2026-85902 HIGH · 7.8 Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
- CVE-2026-85901 HIGH · 7.8 Op heap gebaseerde bufferoverloop in Windows Win32K - GRFX stelt een geautoriseerde aanvaller in staat om de privileges lokaal te verhogen.
- CVE-2026-85900 HIGH · 8.8 Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. Microsoft
- CVE-2026-85891 HIGH · 7.5 Exposure of sensitive information to an unauthorized actor in Azure HDInsight allows an unauthorized attacker to disclose information over a network.
- CVE-2026-85884 HIGH · 7.8 Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-85881 HIGH · 8.0 Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network.
- CVE-2026-85879 HIGH · 7.0 Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
- CVE-2026-85874 HIGH · 7.8 Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to execute code locally.
- CVE-2026-85873 MEDIUM · 6.5 Improper authorization in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.
- CVE-2026-85872 HIGH · 7.8 Use after free in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-85871 HIGH · 7.8 Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
- CVE-2026-85870 HIGH · 7.0 Op heap gebaseerde bufferoverloop in Windows Common Log File System Driver stelt een geautoriseerde aanvaller in staat om de privileges lokaal te verhogen.
- CVE-2026-85869 HIGH · 7.8 Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
- CVE-2026-85868 HIGH · 7.0 Gebruik na gratis in Windows Common Log File System Driver stelt een geautoriseerde aanvaller in staat om de privileges lokaal te verhogen.
- CVE-2026-85867 HIGH · 7.8 Op heap gebaseerde bufferoverloop in Windows Remote Access Connection Manager stelt een geautoriseerde aanvaller in staat om de privileges lokaal te verhogen.
- CVE-2026-85866 MEDIUM · 4.7 Exposure of sensitive system information to an unauthorized control sphere in Windows ALPC allows an authorized attacker to disclose information locally.
- CVE-2026-85865 MEDIUM · 5.5 Improper authentication in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.
- CVE-2026-85864 HIGH · 7.8 Improper privilege management in Python allows an authorized attacker to elevate privileges locally.
- CVE-2026-85863 HIGH · 7.8 Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-85861 HIGH · 7.8 Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-85860 HIGH · 7.8 Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to elevate privileges locally.
- CVE-2026-85859 MEDIUM · 6.5 Null pointer dereference in Windows Message Queuing Queue Manager allows an authorized attacker to deny service over a network.
- CVE-2026-85858 HIGH · 7.8 Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- CVE-2026-85857 MEDIUM · 5.5 Insertion of sensitive information into log file in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.
- CVE-2026-85856 HIGH · 7.1 Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to execute code over an adjacent network.
- CVE-2026-85855 HIGH · 7.0 Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
- CVE-2026-85854 HIGH · 7.0 Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
- CVE-2026-85853 HIGH · 7.0 Buiten de grenzen gelezen in Windows DWM Core Library stelt een geautoriseerde aanvaller in staat om de privileges lokaal te verhogen.
- CVE-2026-85852 MEDIUM · 5.5 Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.
- CVE-2026-85851 HIGH · 7.8 Use after free in Windows SmartScreen allows an authorized attacker to elevate privileges locally.
- CVE-2026-85850 HIGH · 7.8 Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2026-85849 HIGH · 7.8 Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-85848 HIGH · 7.8 Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.
- CVE-2026-85847 MEDIUM · 6.5 Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network.
- CVE-2026-85846 HIGH · 7.0 Use after free in Windows Web Account Manager allows an authorized attacker to elevate privileges locally.
- CVE-2026-85843 HIGH · 7.8 Use of uninitialized resource in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.