CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2026-83702 HIGH · 7.0 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-83701 HIGH · 7.0 Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally.
- CVE-2026-83700 HIGH · 7.8 Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally.
- CVE-2026-83699 HIGH · 7.8 Stack-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-83698 HIGH · 7.8 Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-83697 MEDIUM · 4.7 Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.
- CVE-2026-83696 HIGH · 7.0 Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-83695 MEDIUM · 5.5 Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally.
- CVE-2026-83694 HIGH · 7.0 Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-83693 CRITICAL · 9.8 Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
- CVE-2026-83692 HIGH · 7.8 Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-83691 HIGH · 7.8 Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
- CVE-2026-83690 HIGH · 7.8 Gebruik na gratis in Windows Kernel stelt een geautoriseerde aanvaller in staat om de privileges lokaal te verhogen.
- CVE-2026-83689 HIGH · 7.0 Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
- CVE-2026-83688 HIGH · 8.8 Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- CVE-2026-83687 HIGH · 7.0 Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.
- CVE-2026-83686 MEDIUM · 5.5 Buiten de grenzen gelezen in Microsoft Windows Search Component stelt een geautoriseerde aanvaller in staat om informatie lokaal bekend te maken.
- CVE-2026-83685 MEDIUM · 6.5 Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a network.
- CVE-2026-83683 MEDIUM · 6.5 Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information over a network.
- CVE-2026-83682 HIGH · 7.0 Gebruik na gratis in Windows TCP/IP stelt een geautoriseerde aanvaller in staat om de privileges lokaal te verhogen.
- CVE-2026-83681 MEDIUM · 5.5 Weak authentication in Microsoft PowerToys allows an authorized attacker to perform tampering locally.
- CVE-2026-83680 HIGH · 7.0 Op heap gebaseerde bufferoverloop in Windows Installer stelt een geautoriseerde aanvaller in staat om de privileges lokaal te verhogen.
- CVE-2026-83679 HIGH · 7.8 Use after free in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-83678 HIGH · 7.8 Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
- CVE-2026-83677 HIGH · 7.5 Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over a network.
- CVE-2026-83676 HIGH · 7.0 Integer underflow (wrap or wraparound) in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-83675 HIGH · 7.0 Gebruik na gratis in Windows Kernel stelt een geautoriseerde aanvaller in staat om de privileges lokaal te verhogen.
- CVE-2026-83674 HIGH · 8.1 Zwakke authenticatie in Active Directory Federation Services (AD FS) stelt een onbevoegde aanvaller in staat om via een netwerk identiteitsvervalsing uit te voeren.
- CVE-2026-83672 MEDIUM · 4.7 Exposure of sensitive system information to an unauthorized control sphere in Windows Installer allows an authorized attacker to disclose information locally.
- CVE-2026-83671 MEDIUM · 6.5 Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally.
- CVE-2026-83670 HIGH · 7.5 Out-of-bounds gelezen in Function Discovery Service (fdwsd.dll) staat een ongeautoriseerde aanvaller toe om informatie via een netwerk bekend te maken.
- CVE-2026-83669 HIGH · 7.8 Use of uninitialized resource in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
- CVE-2026-83668 MEDIUM · 5.5 Out-of-bounds read in Windows WLAN Service allows an authorized attacker to disclose information locally.
- CVE-2026-83667 MEDIUM · 6.5 Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network.
- CVE-2026-83666 HIGH · 7.0 Concurrent execution using shared resource with improper synchronization ('race condition') in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally.
- CVE-2026-83665 HIGH · 7.5 Null pointer dereference in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
- CVE-2026-83664 MEDIUM · 5.5 Access of resource using incompatible type ('type confusion') in Windows Portable Device File System Driver allows an authorized attacker to disclose information locally.
- CVE-2026-83659 HIGH · 7.8 Onjuiste linkresolutie vóór bestandstoegang ('linkvolgend') in Windows User Profile Service stelt een geautoriseerde aanvaller in staat om de privileges lokaal te verhogen.
- CVE-2026-83658 MEDIUM · 5.5 Improper access control in Windows Error Reporting allows an authorized attacker to disclose information locally.
- CVE-2026-83657 MEDIUM · 5.5 Weak authentication in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.
- CVE-2026-83656 MEDIUM · 4.7 Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.
- CVE-2026-83655 HIGH · 7.5 Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to deny service over a network.
- CVE-2026-83654 HIGH · 7.8 Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
- CVE-2026-83652 HIGH · 7.8 Een bufferoverloop in het heapgeheugen van Windows NTFS stelt een geautoriseerde aanvaller in staat om lokaal privileges te verkrijgen.
- CVE-2026-83651 MEDIUM · 6.5 Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.
- CVE-2026-83650 HIGH · 7.8 Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.
- CVE-2026-83649 MEDIUM · 6.5 Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network.
- CVE-2026-83648 MEDIUM · 6.5 Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.
- CVE-2026-83647 HIGH · 7.5 Out-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to deny service over a network.
- CVE-2026-83646 MEDIUM · 4.8 Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an authorized attacker to perform spoofing over a network.