CVE Feed

    Dashboard / CVE

    7.8
    High

    CVE-2026-78448

    Last Modified: 10 Sept 2026

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

    Published: 8 Sept 2026
    7.8
    High

    CVE-2026-78447

    Last Modified: 13 Sept 2026

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

    Published: 8 Sept 2026
    8.1
    High

    CVE-2026-78450

    Last Modified: 16 Sept 2026

    Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.

    Published: 8 Sept 2026
    8.1
    High

    CVE-2026-78444

    Last Modified: 11 Sept 2026

    Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.

    Published: 8 Sept 2026
    8.1
    High

    CVE-2026-78449

    Last Modified: 22 Sept 2026

    Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.

    Published: 8 Sept 2026
    7.5
    High

    CVE-2026-78446

    Last Modified: 7 Oct 2026

    Use after free in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.

    Published: 8 Sept 2026
    9.8
    Critical

    CVE-2026-78445

    Last Modified: 11 Sept 2026

    Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network.

    Published: 8 Sept 2026
    6.5
    Medium

    CVE-2026-78441

    Last Modified: 23 Sept 2026

    Out-of-bounds read in Windows OLE DB allows an unauthorized attacker to disclose information over a network.

    Published: 8 Sept 2026
    8.8
    High

    CVE-2026-78442

    Last Modified: 23 Sept 2026

    Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network.

    Published: 8 Sept 2026
    6.5
    Medium

    CVE-2026-69562

    Last Modified: 2 Oct 2026

    Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over a network.

    Published: 8 Sept 2026
    6.5
    Medium

    CVE-2026-77911

    Last Modified: 10 Sept 2026

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

    Published: 8 Sept 2026
    7
    High

    CVE-2026-77905

    Last Modified: 11 Sept 2026

    Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

    Published: 8 Sept 2026
    9
    Critical

    CVE-2026-69854

    Last Modified: 29 Sept 2026

    Improper authentication in Spring Cloud Azure allows an unauthorized attacker to elevate privileges over a network.

    Published: 8 Sept 2026
    8.8
    High

    CVE-2026-77901

    Last Modified: 8 Sept 2026

    Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

    Published: 8 Sept 2026
    5.5
    Medium

    CVE-2026-77488

    Last Modified: 15 Sept 2026

    Integer underflow (wrap or wraparound) in SQL Server allows an authorized attacker to disclose information locally.

    Published: 8 Sept 2026
    8.8
    High

    CVE-2026-77486

    Last Modified: 15 Sept 2026

    Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a network.

    Published: 8 Sept 2026
    7
    High

    CVE-2026-77485

    Last Modified: 15 Sept 2026

    Use after free in SQL Server allows an authorized attacker to elevate privileges locally.

    Published: 8 Sept 2026
    8.8
    High

    CVE-2026-77487

    Last Modified: 15 Sept 2026

    Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.

    Published: 8 Sept 2026
    8.8
    High

    CVE-2026-77484

    Last Modified: 10 Sept 2026

    Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.

    Published: 8 Sept 2026
    8.8
    High

    CVE-2026-77483

    Last Modified: 15 Sept 2026

    Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network.

    Published: 8 Sept 2026
    8.8
    High

    CVE-2026-77480

    Last Modified: 15 Sept 2026

    Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network.

    Published: 8 Sept 2026
    8.8
    High

    CVE-2026-73028

    Last Modified: 15 Sept 2026

    Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.

    Published: 8 Sept 2026
    8.8
    High

    CVE-2026-71328

    Last Modified: 11 Sept 2026

    Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

    Published: 8 Sept 2026
    7.5
    High

    CVE-2026-73017

    Last Modified: 11 Sept 2026

    Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to execute code locally.

    Published: 8 Sept 2026
    8.8
    High

    CVE-2026-73016

    Last Modified: 10 Sept 2026

    Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

    Published: 8 Sept 2026
    9.8
    Critical

    CVE-2026-73025

    Last Modified: 17 Sept 2026

    Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security feature over a network.

    Published: 8 Sept 2026
    8.8
    High

    CVE-2026-73013

    Last Modified: 30 Oct 2026

    Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

    Published: 8 Sept 2026
    8.8
    High

    CVE-2026-73023

    Last Modified: 17 Sept 2026

    Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

    Published: 8 Sept 2026
    9.8
    Critical

    CVE-2026-73010

    Last Modified: 17 Sept 2026

    Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.

    Published: 8 Sept 2026
    8.8
    High

    CVE-2026-73006

    Last Modified: 10 Sept 2026

    Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

    Published: 8 Sept 2026
    9.8
    Critical

    CVE-2026-73009

    Last Modified: 17 Sept 2026

    Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.

    Published: 8 Sept 2026
    8.8
    High

    CVE-2026-73012

    Last Modified: 17 Sept 2026

    Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network.

    Published: 8 Sept 2026
    5.5
    Medium

    CVE-2026-73004

    Last Modified: 17 Sept 2026

    Missing authentication for critical function in Windows Autopilot allows an authorized attacker to perform tampering locally.

    Published: 8 Sept 2026
    7.8
    High

    CVE-2026-73026

    Last Modified: 10 Sept 2026

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

    Published: 8 Sept 2026
    7.8
    High

    CVE-2026-73007

    Last Modified: 11 Sept 2026

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

    Published: 8 Sept 2026
    7.8
    High

    CVE-2026-73024

    Last Modified: 17 Sept 2026

    Heap-based buffer overflow in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to elevate privileges locally.

    Published: 8 Sept 2026
    7
    High

    CVE-2026-73005

    Last Modified: 17 Sept 2026

    Use after free in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.

    Published: 8 Sept 2026
    5.5
    Medium

    CVE-2026-73008

    Last Modified: 10 Sept 2026

    Exposure of private personal information to an unauthorized actor in Windows Biometric Service allows an authorized attacker to disclose information locally.

    Published: 8 Sept 2026
    7.8
    High

    CVE-2026-73014

    Last Modified: 23 Sept 2026

    Missing authorization in Data Sharing Service Client allows an authorized attacker to elevate privileges locally.

    Published: 8 Sept 2026
    7.8
    High

    CVE-2026-73011

    Last Modified: 10 Sept 2026

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

    Published: 8 Sept 2026
    7
    High

    CVE-2026-73022

    Last Modified: 16 Sept 2026

    Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

    Published: 8 Sept 2026
    7
    High

    CVE-2026-73003

    Last Modified: 17 Sept 2026

    Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

    Published: 8 Sept 2026
    7.8
    High

    CVE-2026-73015

    Last Modified: 11 Sept 2026

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

    Published: 8 Sept 2026
    7.8
    High

    CVE-2026-73021

    Last Modified: 10 Sept 2026

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

    Published: 8 Sept 2026
    7.8
    High

    CVE-2026-73001

    Last Modified: 10 Sept 2026

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

    Published: 8 Sept 2026
    7.8
    High

    CVE-2026-73000

    Last Modified: 11 Sept 2026

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

    Published: 8 Sept 2026
    7.8
    High

    CVE-2026-73020

    Last Modified: 11 Sept 2026

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

    Published: 8 Sept 2026
    7.8
    High

    CVE-2026-73002

    Last Modified: 11 Sept 2026

    Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

    Published: 8 Sept 2026
    6.8
    Medium

    CVE-2026-72999

    Last Modified: 17 Sept 2026

    Out-of-bounds read in Windows USB Hub Driver allows an unauthorized attacker to elevate privileges with a physical attack.

    Published: 8 Sept 2026
    4.3
    Medium

    CVE-2026-73019

    Last Modified: 16 Sept 2026

    Improper resolution of path equivalence in Windows URL Moniker allows an unauthorized attacker to bypass a security feature over a network.

    Published: 8 Sept 2026