CVE-2026-78448
Last Modified: 10 Sept 2026Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-78447
Last Modified: 13 Sept 2026Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-78450
Last Modified: 16 Sept 2026Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.
CVE-2026-78444
Last Modified: 11 Sept 2026Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.
CVE-2026-78449
Last Modified: 22 Sept 2026Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.
CVE-2026-78446
Last Modified: 7 Oct 2026Use after free in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.
CVE-2026-78445
Last Modified: 11 Sept 2026Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network.
CVE-2026-78441
Last Modified: 23 Sept 2026Out-of-bounds read in Windows OLE DB allows an unauthorized attacker to disclose information over a network.
CVE-2026-78442
Last Modified: 23 Sept 2026Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network.
CVE-2026-69562
Last Modified: 2 Oct 2026Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over a network.
CVE-2026-77911
Last Modified: 10 Sept 2026Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-77905
Last Modified: 11 Sept 2026Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
CVE-2026-69854
Last Modified: 29 Sept 2026Improper authentication in Spring Cloud Azure allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-77901
Last Modified: 8 Sept 2026Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-77488
Last Modified: 15 Sept 2026Integer underflow (wrap or wraparound) in SQL Server allows an authorized attacker to disclose information locally.
CVE-2026-77486
Last Modified: 15 Sept 2026Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a network.
CVE-2026-77485
Last Modified: 15 Sept 2026Use after free in SQL Server allows an authorized attacker to elevate privileges locally.
CVE-2026-77487
Last Modified: 15 Sept 2026Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-77484
Last Modified: 10 Sept 2026Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-77483
Last Modified: 15 Sept 2026Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-77480
Last Modified: 15 Sept 2026Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-73028
Last Modified: 15 Sept 2026Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-71328
Last Modified: 11 Sept 2026Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
CVE-2026-73017
Last Modified: 11 Sept 2026Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to execute code locally.
CVE-2026-73016
Last Modified: 10 Sept 2026Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
CVE-2026-73025
Last Modified: 17 Sept 2026Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-73013
Last Modified: 30 Oct 2026Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
CVE-2026-73023
Last Modified: 17 Sept 2026Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
CVE-2026-73010
Last Modified: 17 Sept 2026Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.
CVE-2026-73006
Last Modified: 10 Sept 2026Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
CVE-2026-73009
Last Modified: 17 Sept 2026Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
CVE-2026-73012
Last Modified: 17 Sept 2026Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network.
CVE-2026-73004
Last Modified: 17 Sept 2026Missing authentication for critical function in Windows Autopilot allows an authorized attacker to perform tampering locally.
CVE-2026-73026
Last Modified: 10 Sept 2026Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-73007
Last Modified: 11 Sept 2026Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-73024
Last Modified: 17 Sept 2026Heap-based buffer overflow in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-73005
Last Modified: 17 Sept 2026Use after free in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.
CVE-2026-73008
Last Modified: 10 Sept 2026Exposure of private personal information to an unauthorized actor in Windows Biometric Service allows an authorized attacker to disclose information locally.
CVE-2026-73014
Last Modified: 23 Sept 2026Missing authorization in Data Sharing Service Client allows an authorized attacker to elevate privileges locally.
CVE-2026-73011
Last Modified: 10 Sept 2026Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-73022
Last Modified: 16 Sept 2026Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
CVE-2026-73003
Last Modified: 17 Sept 2026Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
CVE-2026-73015
Last Modified: 11 Sept 2026Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-73021
Last Modified: 10 Sept 2026Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-73001
Last Modified: 10 Sept 2026Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-73000
Last Modified: 11 Sept 2026Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-73020
Last Modified: 11 Sept 2026Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-73002
Last Modified: 11 Sept 2026Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-72999
Last Modified: 17 Sept 2026Out-of-bounds read in Windows USB Hub Driver allows an unauthorized attacker to elevate privileges with a physical attack.
CVE-2026-73019
Last Modified: 16 Sept 2026Improper resolution of path equivalence in Windows URL Moniker allows an unauthorized attacker to bypass a security feature over a network.
