CVE-database
126.569 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2026-70303 HIGH · 7.8 Out-of-bounds write in Windows Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2026-70302 HIGH · 8.8 Op heap gebaseerde bufferoverloop in Microsoft Office Word stelt een ongeautoriseerde aanvaller in staat om code uit te voeren via een netwerk. Microsoft
- CVE-2026-70301 HIGH · 8.8 Op heap gebaseerde bufferoverloop in Microsoft Office Word stelt een ongeautoriseerde aanvaller in staat om code uit te voeren via een netwerk. Microsoft
- CVE-2026-70300 CRITICAL · 9.8 Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network. Microsoft
- CVE-2026-70299 HIGH · 8.8 Improper access control in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-70298 MEDIUM · 6.5 Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. Microsoft
- CVE-2026-70297 HIGH · 8.8 Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to execute code over a network.
- CVE-2026-70295 MEDIUM · 5.5 Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
- CVE-2026-70294 MEDIUM · 5.5 Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
- CVE-2026-70293 MEDIUM · 5.5 Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
- CVE-2026-70292 MEDIUM · 5.5 Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
- CVE-2026-70291 CRITICAL · 9.8 Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-70288 MEDIUM · 5.5 Time-of-check time-of-use (toctou) raceconditie in Windows Win32 Kernel Subsysteem stelt een geautoriseerde aanvaller in staat om lokaal informatie vrij te geven.
- CVE-2026-70287 HIGH · 8.8 Op heap gebaseerde bufferoverloop in Microsoft Office Word stelt een ongeautoriseerde aanvaller in staat om code uit te voeren via een netwerk. Microsoft
- CVE-2026-70286 HIGH · 7.8 Op heap gebaseerde bufferoverloop in Windows Win32K - GRFX stelt een geautoriseerde aanvaller in staat om de privileges lokaal te verhogen.
- CVE-2026-70285 HIGH · 7.8 Op heap gebaseerde bufferoverloop in Windows Win32 Kernel-subsysteem stelt een geautoriseerde aanvaller in staat om de privileges lokaal te verhogen.
- CVE-2026-70284 MEDIUM · 5.5 Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
- CVE-2026-70282 HIGH · 8.8 Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-70281 HIGH · 7.5 Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
- CVE-2026-70280 MEDIUM · 4.4 Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature locally.
- CVE-2026-70279 CRITICAL · 9.3 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
- CVE-2026-70278 HIGH · 7.8 Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.
- CVE-2026-70277 MEDIUM · 5.5 Out-of-bounds read in Windows Fast FAT Driver allows an unauthorized attacker to disclose information locally.
- CVE-2026-70276 HIGH · 7.0 De functie 'Gebruik na vrijgave' in Microsoft Office Click-To-Run stelt een geautoriseerde aanvaller in staat om lokaal bevoegdheden te verhogen.
- CVE-2026-70275 HIGH · 8.8 Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network.
- CVE-2026-70274 HIGH · 7.8 Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-70273 HIGH · 7.0 Gebruik na gratis in Windows Win32 Kernel-subsysteem stelt een geautoriseerde aanvaller in staat om de privileges lokaal te verhogen.
- CVE-2026-70272 HIGH · 7.0 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-70271 HIGH · 7.0 Gebruik na gratis in Windows Win32 Kernel-subsysteem stelt een geautoriseerde aanvaller in staat om de privileges lokaal te verhogen.
- CVE-2026-70270 MEDIUM · 5.5 Untrusted pointer dereference in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-70269 HIGH · 8.1 Op heap gebaseerde bufferoverloop in Microsoft Office Word stelt een ongeautoriseerde aanvaller in staat om code uit te voeren via een netwerk. Microsoft
- CVE-2026-70268 HIGH · 8.8 Op heap gebaseerde bufferoverloop in Microsoft Office Word stelt een ongeautoriseerde aanvaller in staat om code uit te voeren via een netwerk. Microsoft
- CVE-2026-70267 HIGH · 7.2 Inclusion of functionality from untrusted control sphere in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. Microsoft
- CVE-2026-70266 HIGH · 8.8 Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a… Microsoft
- CVE-2026-70264 MEDIUM · 5.5 Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to disclose information locally.
- CVE-2026-70263 MEDIUM · 6.5 Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. Microsoft
- CVE-2026-70262 HIGH · 8.8 Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-70261 MEDIUM · 5.5 Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.
- CVE-2026-70260 MEDIUM · 5.5 Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.
- CVE-2026-70259 MEDIUM · 6.5 Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. Microsoft
- CVE-2026-70258 HIGH · 8.8 Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
- CVE-2026-70257 HIGH · 8.8 Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-70256 HIGH · 8.8 Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-70255 HIGH · 7.8 Op heap gebaseerde bufferoverloop in Desktop Window Manager stelt een geautoriseerde aanvaller in staat om lokale privileges te verhogen.
- CVE-2026-70254 HIGH · 8.8 Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. Microsoft
- CVE-2026-70253 HIGH · 7.0 Gebruik na gratis in Windows Win32 Kernel-subsysteem stelt een geautoriseerde aanvaller in staat om de privileges lokaal te verhogen.
- CVE-2026-70252 HIGH · 7.0 Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-70251 HIGH · 7.5 Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. Microsoft
- CVE-2026-70250 HIGH · 8.8 Use after free in Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network.
- CVE-2026-70249 HIGH · 7.0 Gebruik na gratis in Windows Win32 Kernel-subsysteem stelt een geautoriseerde aanvaller in staat om de privileges lokaal te verhogen.