CVE-database
126.581 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2026-70260 MEDIUM · 5.5 Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.
- CVE-2026-70259 MEDIUM · 6.5 Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. Microsoft
- CVE-2026-70258 HIGH · 8.8 Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
- CVE-2026-70257 HIGH · 8.8 Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-70256 HIGH · 8.8 Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-70255 HIGH · 7.8 Op heap gebaseerde bufferoverloop in Desktop Window Manager stelt een geautoriseerde aanvaller in staat om lokale privileges te verhogen.
- CVE-2026-70254 HIGH · 8.8 Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. Microsoft
- CVE-2026-70253 HIGH · 7.0 Gebruik na gratis in Windows Win32 Kernel-subsysteem stelt een geautoriseerde aanvaller in staat om de privileges lokaal te verhogen.
- CVE-2026-70252 HIGH · 7.0 Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-70251 HIGH · 7.5 Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. Microsoft
- CVE-2026-70250 HIGH · 8.8 Use after free in Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network.
- CVE-2026-70249 HIGH · 7.0 Gebruik na gratis in Windows Win32 Kernel-subsysteem stelt een geautoriseerde aanvaller in staat om de privileges lokaal te verhogen.
- CVE-2026-70248 MEDIUM · 6.5 Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.
- CVE-2026-70247 HIGH · 7.8 Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute code locally.
- CVE-2026-70246 HIGH · 8.8 Onjuiste autorisatie in Microsoft Office SharePoint stelt een geautoriseerde aanvaller in staat om privileges over een netwerk te verhogen. Microsoft
- CVE-2026-70245 HIGH · 7.8 Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
- CVE-2026-70244 MEDIUM · 6.5 Out-of-bounds read in DNS Server allows an unauthorized attacker to disclose information over a network.
- CVE-2026-70243 HIGH · 7.0 Gebruik na gratis in Windows Kernel stelt een geautoriseerde aanvaller in staat om de privileges lokaal te verhogen.
- CVE-2026-70242 CRITICAL · 9.8 Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-70241 HIGH · 7.0 Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally.
- CVE-2026-70238 HIGH · 7.8 Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
- CVE-2026-70237 HIGH · 7.0 Gebruik na gratis in Windows Ancillary Function Driver voor WinSock stelt een geautoriseerde aanvaller in staat om de privileges lokaal te verhogen.
- CVE-2026-70236 HIGH · 7.0 Gebruik na gratis in Windows Win32 Kernel-subsysteem stelt een geautoriseerde aanvaller in staat om de privileges lokaal te verhogen.
- CVE-2026-70235 MEDIUM · 5.5 Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally.
- CVE-2026-70234 MEDIUM · 5.5 Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose information locally.
- CVE-2026-70233 HIGH · 7.8 Op heap gebaseerde bufferoverloop in Windows Common Log File System Driver stelt een geautoriseerde aanvaller in staat om de privileges lokaal te verhogen.
- CVE-2026-70232 MEDIUM · 5.5 Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.
- CVE-2026-70230 HIGH · 7.0 Gebruik na gratis in Windows Audio Service stelt een geautoriseerde aanvaller in staat om de privileges lokaal te verhogen.
- CVE-2026-70229 HIGH · 8.1 Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.
- CVE-2026-70228 HIGH · 7.8 Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
- CVE-2026-70227 MEDIUM · 5.5 Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.
- CVE-2026-70225 HIGH · 7.8 Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
- CVE-2026-70223 HIGH · 7.0 Use after free in Windows Console Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-70222 HIGH · 7.8 Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally.
- CVE-2026-70220 HIGH · 7.8 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. Microsoft
- CVE-2026-70219 MEDIUM · 6.5 Buiten de grenzen gelezen in Microsoft Office Excel stelt een ongeautoriseerde aanvaller in staat om informatie via een netwerk bekend te maken. Microsoft
- CVE-2026-70218 HIGH · 7.8 Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally.
- CVE-2026-70217 MEDIUM · 4.9 Onjuiste toegangscontrole in Microsoft Office SharePoint stelt een geautoriseerde aanvaller in staat om informatie via een netwerk bekend te maken. Microsoft
- CVE-2026-70216 MEDIUM · 5.5 Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally.
- CVE-2026-70215 HIGH · 8.8 Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
- CVE-2026-70214 MEDIUM · 5.5 Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. Microsoft
- CVE-2026-70213 HIGH · 8.0 Origin validation error in Microsoft Power Apps allows an authorized attacker to execute code over a network.
- CVE-2026-70212 HIGH · 7.0 Improper restriction of communication channel to intended endpoints in Windows Security Center allows an authorized attacker to elevate privileges locally.
- CVE-2026-70211 MEDIUM · 5.5 Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
- CVE-2026-70210 HIGH · 8.8 Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-70209 HIGH · 7.0 Gebruik na gratis in Windows Win32 Kernel-subsysteem stelt een geautoriseerde aanvaller in staat om de privileges lokaal te verhogen.
- CVE-2026-70208 MEDIUM · 5.5 Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to disclose information locally.
- CVE-2026-70207 HIGH · 7.5 Heap-based buffer overflow in Network Policy Server (NPS) allows an authorized attacker to execute code over a network.
- CVE-2026-70206 MEDIUM · 6.5 Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. Microsoft
- CVE-2026-70205 HIGH · 7.0 Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.