CVE-database
126.541 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2026-83505 HIGH · 7.0 Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
- CVE-2026-83504 MEDIUM · 4.7 Time-of-check time-of-use (toctou) race condition in Windows SmartScreen allows an authorized attacker to disclose information locally.
- CVE-2026-83500 MEDIUM · 6.1 Url redirection to untrusted site ('open redirect') in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
- CVE-2026-83499 HIGH · 7.8 Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-81971 HIGH · 7.0 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows NTFS allows an authorized attacker to elevate privileges locally.
- CVE-2026-81969 HIGH · 7.8 Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-81964 MEDIUM · 5.5 Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally.
- CVE-2026-78459 HIGH · 7.8 Heap-based buffer overflow in Windows Internet Information Services allows an authorized attacker to elevate privileges locally.
- CVE-2026-77910 HIGH · 8.8 Incorrect authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
- CVE-2026-77902 HIGH · 8.8 Op heap gebaseerde bufferoverloop in Microsoft Office Excel stelt een ongeautoriseerde aanvaller in staat om code uit te voeren via een netwerk. Microsoft
- CVE-2026-77496 HIGH · 8.8 Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
- CVE-2026-75120 NONE The OpenText™ (EnCase SAFE Agents) component utilized by OpenText™ Endpoint Investigator, OpenText™ Endpoint Forensics & Response, OpenText™ Information Assurance, and OpenText™ Endpoint Security contains a…
- CVE-2026-73027 HIGH · 7.8 External control of system or configuration setting in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
- CVE-2026-72969 HIGH · 7.0 Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-72968 HIGH · 7.0 Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-72955 HIGH · 7.0 Use after free in Windows Application Compatibility Cache allows an authorized attacker to elevate privileges locally.
- CVE-2026-72934 HIGH · 7.0 Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-71347 MEDIUM · 6.4 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Security Center allows an authorized attacker to elevate privileges locally.
- CVE-2026-70580 HIGH · 8.8 Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally.
- CVE-2026-70571 HIGH · 8.1 Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.
- CVE-2026-70566 HIGH · 7.8 Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally.
- CVE-2026-70343 HIGH · 8.8 Heap-based buffer overflow in Microsoft MPEG-2 Video Extension allows an unauthorized attacker to execute code over a network.
- CVE-2026-70303 HIGH · 7.8 Out-of-bounds write in Windows Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2026-70302 HIGH · 8.8 Op heap gebaseerde bufferoverloop in Microsoft Office Word stelt een ongeautoriseerde aanvaller in staat om code uit te voeren via een netwerk. Microsoft
- CVE-2026-70301 HIGH · 8.8 Op heap gebaseerde bufferoverloop in Microsoft Office Word stelt een ongeautoriseerde aanvaller in staat om code uit te voeren via een netwerk. Microsoft
- CVE-2026-70300 CRITICAL · 9.8 Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network. Microsoft
- CVE-2026-70299 HIGH · 8.8 Improper access control in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-70298 MEDIUM · 6.5 Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. Microsoft
- CVE-2026-70297 HIGH · 8.8 Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to execute code over a network.
- CVE-2026-70295 MEDIUM · 5.5 Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
- CVE-2026-70294 MEDIUM · 5.5 Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
- CVE-2026-70293 MEDIUM · 5.5 Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
- CVE-2026-70292 MEDIUM · 5.5 Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
- CVE-2026-70291 CRITICAL · 9.8 Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-70288 MEDIUM · 5.5 Time-of-check time-of-use (toctou) raceconditie in Windows Win32 Kernel Subsysteem stelt een geautoriseerde aanvaller in staat om lokaal informatie vrij te geven.
- CVE-2026-70287 HIGH · 8.8 Op heap gebaseerde bufferoverloop in Microsoft Office Word stelt een ongeautoriseerde aanvaller in staat om code uit te voeren via een netwerk. Microsoft
- CVE-2026-70286 HIGH · 7.8 Op heap gebaseerde bufferoverloop in Windows Win32K - GRFX stelt een geautoriseerde aanvaller in staat om de privileges lokaal te verhogen.
- CVE-2026-70285 HIGH · 7.8 Op heap gebaseerde bufferoverloop in Windows Win32 Kernel-subsysteem stelt een geautoriseerde aanvaller in staat om de privileges lokaal te verhogen.
- CVE-2026-70284 MEDIUM · 5.5 Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
- CVE-2026-70282 HIGH · 8.8 Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-70281 HIGH · 7.5 Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
- CVE-2026-70280 MEDIUM · 4.4 Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature locally.
- CVE-2026-70279 CRITICAL · 9.3 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
- CVE-2026-70278 HIGH · 7.8 Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.
- CVE-2026-70277 MEDIUM · 5.5 Out-of-bounds read in Windows Fast FAT Driver allows an unauthorized attacker to disclose information locally.
- CVE-2026-70276 HIGH · 7.0 De functie 'Gebruik na vrijgave' in Microsoft Office Click-To-Run stelt een geautoriseerde aanvaller in staat om lokaal bevoegdheden te verhogen.
- CVE-2026-70275 HIGH · 8.8 Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network.
- CVE-2026-70274 HIGH · 7.8 Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-70273 HIGH · 7.0 Gebruik na gratis in Windows Win32 Kernel-subsysteem stelt een geautoriseerde aanvaller in staat om de privileges lokaal te verhogen.
- CVE-2026-70272 HIGH · 7.0 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.