CVE-database
126.581 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2026-103558 HIGH · 7.5 Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.
- CVE-2026-103555 HIGH · 7.0 Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-103554 HIGH · 7.0 Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-103553 HIGH · 7.8 Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-102870 HIGH · 8.8 Improper control of generation of code ('code injection') in ASP.NET Core allows an unauthorized attacker to execute code over a network.
- CVE-2026-102869 HIGH · 8.8 Access of resource using incompatible type ('type confusion') in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-102867 MEDIUM · 6.5 Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. Microsoft
- CVE-2026-102866 HIGH · 8.1 Improper verification of cryptographic signature in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network. Microsoft
- CVE-2026-102865 MEDIUM · 6.5 Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. Microsoft
- CVE-2026-102864 MEDIUM · 4.6 Onjuiste neutralisatie van invoer tijdens het genereren van webpagina's ('cross-site scripting') in Microsoft Office SharePoint stelt een geautoriseerde aanvaller in staat om spoofing uit te… Microsoft
- CVE-2026-102863 HIGH · 8.8 Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. Microsoft
- CVE-2026-102862 HIGH · 8.8 Onjuiste autorisatie in Microsoft Office SharePoint stelt een geautoriseerde aanvaller in staat om privileges over een netwerk te verhogen. Microsoft
- CVE-2026-102861 HIGH · 8.8 Ontbrekende autorisatie in Microsoft Office SharePoint stelt een geautoriseerde aanvaller in staat om privileges over een netwerk te verhogen. Microsoft
- CVE-2026-102860 HIGH · 8.8 Improper access control in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. Microsoft
- CVE-2026-102859 MEDIUM · 4.6 Onjuiste neutralisatie van invoer tijdens het genereren van webpagina's ('cross-site scripting') in Microsoft Office SharePoint stelt een geautoriseerde aanvaller in staat om spoofing uit te… Microsoft
- CVE-2026-102858 HIGH · 8.8 Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network.
- CVE-2026-102857 HIGH · 8.8 Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.
- CVE-2026-102856 HIGH · 8.8 Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.
- CVE-2026-102851 MEDIUM · 6.1 Incorrect privilege assignment in Visual Studio Code allows an authorized attacker to bypass a security feature locally.
- CVE-2026-102850 HIGH · 8.8 Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- CVE-2026-102849 HIGH · 8.8 Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- CVE-2026-102599 HIGH · 7.5 Socket.IO enables bidirectional and low-latency communication for every platform. From Engine.IO 6.6.0 until 6.6.10, a transport upgrade can independently derive an Engine.IO protocol revision from…
- CVE-2026-102233 HIGH · 7.8 Missing authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
- CVE-2026-102232 HIGH · 7.0 Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
- CVE-2026-102231 HIGH · 7.7 Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
- CVE-2026-102229 MEDIUM · 6.8 Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an authorized attacker to disclose information over a network.
- CVE-2026-102227 HIGH · 7.8 Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.
- CVE-2026-102226 HIGH · 8.8 Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an authorized attacker to elevate privileges over a network.
- CVE-2026-102225 HIGH · 8.8 Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
- CVE-2026-102221 MEDIUM · 4.4 No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
- CVE-2026-102220 HIGH · 7.8 Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-102218 HIGH · 7.8 Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
- CVE-2026-102217 HIGH · 8.8 Improper resolution of path equivalence in WebDAV allows an authorized attacker to elevate privileges over a network.
- CVE-2026-102216 HIGH · 7.8 Access of resource using incompatible type ('type confusion') in Windows StateRepository API allows an authorized attacker to elevate privileges locally.
- CVE-2026-102215 HIGH · 7.8 Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
- CVE-2026-102214 HIGH · 8.8 Use after free in Windows Hyper-V allows an authorized attacker to execute code locally.
- CVE-2026-102211 HIGH · 7.0 Use after free in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
- CVE-2026-102210 CRITICAL · 9.8 Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
- CVE-2026-102209 HIGH · 7.0 Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
- CVE-2026-102208 HIGH · 7.0 Gebruik na gratis in Windows Win32 Kernel-subsysteem stelt een geautoriseerde aanvaller in staat om de privileges lokaal te verhogen.
- CVE-2026-102207 HIGH · 7.0 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2026-102206 MEDIUM · 6.8 Heap-based buffer overflow in Windows Portable Device MTP Driver allows an unauthorized attacker to elevate privileges with a physical attack.
- CVE-2026-102205 HIGH · 7.8 Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
- CVE-2026-102204 HIGH · 7.8 Improper link resolution before file access ('link following') in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally.
- CVE-2026-102203 HIGH · 8.8 Access of resource using incompatible type ('type confusion') in RPC Runtime allows an unauthorized attacker to execute code over a network.
- CVE-2026-102202 HIGH · 7.8 Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
- CVE-2026-102201 HIGH · 7.8 Use after free in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.
- CVE-2026-102199 MEDIUM · 6.5 Stack-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to deny service over a network.
- CVE-2026-102198 MEDIUM · 5.3 Out-of-bounds read in Windows Remote Desktop Protocol allows an authorized attacker to disclose information over a network.
- CVE-2026-102197 HIGH · 7.0 Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.