CVE-database
126.581 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2026-69902 MEDIUM · 6.7 Untrusted pointer dereference in Windows NTFS allows an authorized attacker to execute code locally.
- CVE-2026-69898 HIGH · 7.8 Op heap gebaseerde bufferoverloop in Windows Kernel stelt een geautoriseerde aanvaller in staat om privileges lokaal te verhogen.
- CVE-2026-69886 CRITICAL · 9.8 Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
- CVE-2026-69884 HIGH · 7.8 Buffer over-read in Windows GDI allows an authorized attacker to elevate privileges locally.
- CVE-2026-69883 CRITICAL · 9.8 Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.
- CVE-2026-69882 HIGH · 7.8 Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally.
- CVE-2026-69880 HIGH · 7.8 Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
- CVE-2026-69877 MEDIUM · 6.5 Origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over a network.
- CVE-2026-69867 HIGH · 7.8 Out-of-bounds read in SQLite allows an authorized attacker to elevate privileges locally.
- CVE-2026-69856 HIGH · 7.0 Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
- CVE-2026-69850 HIGH · 7.8 Untrusted pointer dereference in Windows Certificates allows an authorized attacker to elevate privileges locally.
- CVE-2026-69840 HIGH · 7.0 Use after free in Windows Certificates allows an authorized attacker to elevate privileges locally.
- CVE-2026-69830 HIGH · 8.1 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
- CVE-2026-69802 HIGH · 8.1 Weak authentication in Network Device Enrollment Service (NDES) allows an unauthorized attacker to execute code over a network.
- CVE-2026-69798 HIGH · 7.8 Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69795 HIGH · 7.0 Null pointer dereference in Windows Clipboard Server allows an authorized attacker to elevate privileges locally.
- CVE-2026-69789 HIGH · 7.5 Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network.
- CVE-2026-69783 HIGH · 7.8 External control of file name or path in Windows Update allows an authorized attacker to elevate privileges locally.
- CVE-2026-69766 HIGH · 7.0 Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
- CVE-2026-69765 HIGH · 8.8 Use after free in Windows Storport Miniport Driver allows an unauthorized attacker to execute code over a network.
- CVE-2026-69763 HIGH · 7.0 Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
- CVE-2026-69743 HIGH · 7.0 Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69736 HIGH · 7.0 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Manager allows an authorized attacker to elevate privileges locally.
- CVE-2026-69733 HIGH · 7.8 Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally. Microsoft
- CVE-2026-69721 MEDIUM · 5.5 Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information locally.
- CVE-2026-69718 HIGH · 7.8 Onjuiste neutralisatie van speciale elementen die worden gebruikt in een opdracht ('opdrachtinjectie') in Windows Update stelt een geautoriseerde aanvaller in staat om de bevoegdheden lokaal… Microsoft
- CVE-2026-69705 CRITICAL · 9.8 Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network.
- CVE-2026-69675 MEDIUM · 5.5 Out-of-bounds read in Windows Network File System allows an authorized attacker to disclose information locally.
- CVE-2026-69673 HIGH · 7.8 Improper link resolution before file access ('link following') in Windows Update allows an authorized attacker to elevate privileges locally. Microsoft
- CVE-2026-69651 HIGH · 7.5 Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
- CVE-2026-69650 HIGH · 7.8 Improper verification of cryptographic signature in Windows Key Distribution Center allows an authorized attacker to elevate privileges locally.
- CVE-2026-69644 MEDIUM · 5.5 Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows an authorized attacker to disclose information locally.
- CVE-2026-69640 MEDIUM · 5.3 Incorrect authorization in Windows Key Distribution Center allows an authorized attacker to bypass a security feature over a network.
- CVE-2026-69639 CRITICAL · 9.8 Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network.
- CVE-2026-69635 MEDIUM · 6.6 Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges with a physical attack.
- CVE-2026-69634 CRITICAL · 9.8 Op heap gebaseerde bufferoverloop in Windows iSCSI stelt een ongeautoriseerde aanvaller in staat om code uit te voeren via een netwerk.
- CVE-2026-69633 HIGH · 7.8 Heap-based buffer overflow in Windows Update allows an authorized attacker to elevate privileges locally.
- CVE-2026-69596 HIGH · 7.0 Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69577 HIGH · 7.5 Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network.
- CVE-2026-69521 HIGH · 8.8 Integer overflow or wraparound in Windows iSCSI allows an unauthorized attacker to execute code over a network. Microsoft
- CVE-2026-69506 MEDIUM · 4.7 Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally. Microsoft
- CVE-2026-69471 HIGH · 7.8 Op heap gebaseerde bufferoverloop in Windows Installer stelt een geautoriseerde aanvaller in staat om de privileges lokaal te verhogen. Microsoft
- CVE-2026-69454 HIGH · 7.5 Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network.
- CVE-2026-69452 HIGH · 7.1 Use after free in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network. Microsoft
- CVE-2026-69387 HIGH · 7.0 Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally. Microsoft
- CVE-2026-69370 HIGH · 8.8 Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.
- CVE-2026-69363 HIGH · 8.0 Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network. Microsoft
- CVE-2026-69354 HIGH · 7.8 Op heap gebaseerde bufferoverloop in Windows Error Reporting stelt een geautoriseerde aanvaller in staat om privileges lokaal te verhogen. Microsoft
- CVE-2026-69326 HIGH · 8.8 Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network. Microsoft
- CVE-2026-68836 HIGH · 7.8 Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally. Microsoft