CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2026-84017 HIGH · 7.5 Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.
- CVE-2026-84016 HIGH · 7.8 Out-of-bounds write in Windows EAPHost Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-84015 CRITICAL · 9.8 Heap-based buffer overflow in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an unauthorized attacker to execute code over a network.
- CVE-2026-84014 HIGH · 7.0 Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-84013 HIGH · 7.8 Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally.
- CVE-2026-84012 HIGH · 8.1 Double free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
- CVE-2026-84011 MEDIUM · 5.5 Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security feature locally.
- CVE-2026-84009 MEDIUM · 4.7 Time-of-check time-of-use (toctou) race condition in Windows Projected File System allows an authorized attacker to perform tampering locally.
- CVE-2026-84008 HIGH · 7.5 Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
- CVE-2026-84007 MEDIUM · 6.5 Out-of-bounds read in Remote Desktop Gateway Service allows an authorized attacker to disclose information over a network.
- CVE-2026-83935 CRITICAL · 9.8 Heap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute code over a network.
- CVE-2026-83934 HIGH · 8.8 Stack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.
- CVE-2026-83933 MEDIUM · 5.5 Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally.
- CVE-2026-83932 HIGH · 7.8 Heap-based buffer overflow in Windows Group Policy allows an authorized attacker to elevate privileges locally.
- CVE-2026-83931 HIGH · 7.8 Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
- CVE-2026-83930 HIGH · 7.0 Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-83929 HIGH · 8.8 Out-of-bounds write in Windows GDI allows an unauthorized attacker to execute code over a network.
- CVE-2026-83928 HIGH · 8.8 Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network.
- CVE-2026-83927 HIGH · 7.8 Improper link resolution before file access ('link following') in Windows Registry allows an authorized attacker to elevate privileges locally.
- CVE-2026-83926 MEDIUM · 4.4 Improper certificate validation in Windows Hello allows an authorized attacker to bypass a security feature locally.
- CVE-2026-83925 MEDIUM · 4.7 Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally.
- CVE-2026-83924 HIGH · 7.0 Gebruik na gratis in Windows Kernel stelt een geautoriseerde aanvaller in staat om de privileges lokaal te verhogen.
- CVE-2026-83923 HIGH · 8.8 Relative path traversal in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
- CVE-2026-83922 HIGH · 7.8 Gebruik na gratis in Windows Direct Composition stelt een geautoriseerde aanvaller in staat om de privileges lokaal te verhogen.
- CVE-2026-83921 HIGH · 7.0 Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
- CVE-2026-83920 HIGH · 7.8 Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
- CVE-2026-83919 HIGH · 7.8 Heap-based buffer overflow in Microsoft Internet Messaging API allows an authorized attacker to execute code locally.
- CVE-2026-83918 HIGH · 7.8 Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2026-83917 HIGH · 7.0 Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally.
- CVE-2026-83916 HIGH · 7.0 Double free in Windows Error Reporting allows an authorized attacker to execute code locally.
- CVE-2026-83915 HIGH · 7.0 Use after free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-83914 HIGH · 8.1 Use after free in Microsoft XML allows an unauthorized attacker to execute code over a network.
- CVE-2026-83913 HIGH · 7.8 Gebruik na gratis in Windows Kernel stelt een geautoriseerde aanvaller in staat om de privileges lokaal te verhogen.
- CVE-2026-83912 HIGH · 7.8 Gebruik na gratis in Windows Direct Composition stelt een geautoriseerde aanvaller in staat om de privileges lokaal te verhogen.
- CVE-2026-83911 HIGH · 7.0 Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
- CVE-2026-83910 CRITICAL · 9.8 Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.
- CVE-2026-83909 MEDIUM · 4.7 Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
- CVE-2026-83908 HIGH · 7.0 Release of invalid pointer or reference in RPC Runtime allows an authorized attacker to elevate privileges locally.
- CVE-2026-83907 MEDIUM · 5.5 Exposure of sensitive system information to an unauthorized control sphere in Windows Hello allows an authorized attacker to disclose information locally.
- CVE-2026-83906 MEDIUM · 6.5 Incorrect implementation of authentication algorithm in Windows Shell allows an unauthorized attacker to perform spoofing over a network.
- CVE-2026-83905 MEDIUM · 4.7 Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows an authorized attacker to disclose information locally.
- CVE-2026-83904 MEDIUM · 5.5 Buiten de grenzen gelezen IN HID Parser Library stelt een geautoriseerde aanvaller in staat om informatie lokaal bekend te maken.
- CVE-2026-83903 HIGH · 7.8 Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
- CVE-2026-83902 HIGH · 7.8 Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
- CVE-2026-83901 HIGH · 7.0 Gebruik na gratis in Windows Win32 Kernel-subsysteem stelt een geautoriseerde aanvaller in staat om de privileges lokaal te verhogen.
- CVE-2026-83900 HIGH · 7.0 Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-83899 HIGH · 7.0 Improper privilege management in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-83898 MEDIUM · 5.5 Buiten de grenzen gelezen IN HID Parser Library stelt een geautoriseerde aanvaller in staat om informatie lokaal bekend te maken.
- CVE-2026-83897 MEDIUM · 4.7 Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
- CVE-2026-83896 HIGH · 7.8 Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.