CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2026-85376 HIGH · 7.8 Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
- CVE-2026-85375 HIGH · 7.8 Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
- CVE-2026-85374 MEDIUM · 5.5 Buiten de grenzen gelezen in Windows Installer staat een geautoriseerde aanvaller toe om informatie lokaal bekend te maken.
- CVE-2026-85373 HIGH · 7.8 Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
- CVE-2026-85372 HIGH · 7.0 Gebruik na gratis in Windows Kernel stelt een geautoriseerde aanvaller in staat om de privileges lokaal te verhogen.
- CVE-2026-85371 HIGH · 8.1 Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.
- CVE-2026-85370 HIGH · 7.0 Use after free in WebDAV allows an authorized attacker to elevate privileges locally.
- CVE-2026-85369 HIGH · 8.2 Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
- CVE-2026-85368 HIGH · 7.8 Op heap gebaseerde bufferoverloop in Windows TCP/IP stelt een geautoriseerde aanvaller in staat om de privileges lokaal te verhogen.
- CVE-2026-85367 HIGH · 7.0 Use after free in Windows Cash Drawer Protocol Provider allows an authorized attacker to elevate privileges locally.
- CVE-2026-85366 HIGH · 7.8 Op heap gebaseerde bufferoverloop in Windows Installer stelt een geautoriseerde aanvaller in staat om de privileges lokaal te verhogen.
- CVE-2026-85365 HIGH · 7.0 Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.
- CVE-2026-85364 HIGH · 7.0 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-85363 HIGH · 8.8 Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-85362 HIGH · 7.0 Release of invalid pointer or reference in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
- CVE-2026-85361 HIGH · 7.0 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-85359 HIGH · 7.8 Improper control of generation of code ('code injection') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.
- CVE-2026-85358 HIGH · 7.8 Op heap gebaseerde bufferoverloop in Windows Installer stelt een geautoriseerde aanvaller in staat om de privileges lokaal te verhogen.
- CVE-2026-85357 HIGH · 7.0 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Phone Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-85356 HIGH · 7.8 Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-85355 HIGH · 7.0 Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-85354 HIGH · 7.0 Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
- CVE-2026-85353 HIGH · 7.5 Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network.
- CVE-2026-85352 HIGH · 7.0 Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-85343 HIGH · 7.8 Improper link resolution before file access ('link following') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
- CVE-2026-85342 HIGH · 7.0 Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-85341 HIGH · 7.8 Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-85340 HIGH · 7.8 De functie 'Gebruik na vrijgave' in Microsoft Office Click-To-Run stelt een geautoriseerde aanvaller in staat om lokaal bevoegdheden te verhogen.
- CVE-2026-85339 HIGH · 8.8 Met Remote Code Execution in Windows Routing and Remote Access Service (RRAS) kan de aanvaller ongeautoriseerde toegang krijgen tot de machine van het slachtoffer
- CVE-2026-85338 HIGH · 7.8 Out-of-bounds read in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
- CVE-2026-85337 MEDIUM · 6.5 Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.
- CVE-2026-85336 MEDIUM · 5.5 Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.
- CVE-2026-85334 HIGH · 7.5 Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.
- CVE-2026-85333 MEDIUM · 6.7 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.
- CVE-2026-85332 HIGH · 7.8 Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-85331 MEDIUM · 6.5 Een leesfout buiten de toegestane geheugenruimte in de Windows Device Association Service stelt een geautoriseerde aanvaller in staat om informatie via een netwerk openbaar te…
- CVE-2026-85329 HIGH · 7.0 Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Account allows an authorized attacker to elevate privileges locally.
- CVE-2026-85328 HIGH · 7.0 Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally.
- CVE-2026-85327 HIGH · 7.8 Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
- CVE-2026-85324 HIGH · 7.5 Memory allocation with excessive size value in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
- CVE-2026-85323 MEDIUM · 6.8 Weak authentication in Network Device Enrollment Service (NDES) allows an authorized attacker to perform spoofing over a network.
- CVE-2026-85322 HIGH · 7.5 Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
- CVE-2026-85321 HIGH · 7.5 Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
- CVE-2026-85320 MEDIUM · 5.5 Use of uninitialized resource in Windows Print Spooler Components allows an authorized attacker to disclose information locally.
- CVE-2026-85319 HIGH · 7.5 Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
- CVE-2026-85318 HIGH · 7.8 Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.
- CVE-2026-84994 NONE Qwik is a performance-focused JavaScript framework. Prior to @builder.io/qwik 1.20.0 and @qwik.dev/core 2.0.0-beta.37, default server-side qwik-json deserialization causes ResourceSerializer.$fill$ to pass resource._resolved to Promise.resolve without…
- CVE-2026-84020 HIGH · 7.0 Use after free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
- CVE-2026-84019 HIGH · 7.0 Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
- CVE-2026-84018 HIGH · 7.0 Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.