CVE Feed

    Dashboard / CVE

    8.8
    High

    CVE-2026-73018

    Last Modified: 23 Sept 2026

    Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.

    Published: 8 Sept 2026
    7.8
    High

    CVE-2026-72997

    Last Modified: 11 Sept 2026

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

    Published: 8 Sept 2026
    7.8
    High

    CVE-2026-72996

    Last Modified: 11 Sept 2026

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

    Published: 8 Sept 2026
    7.8
    High

    CVE-2026-72994

    Last Modified: 11 Sept 2026

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

    Published: 8 Sept 2026
    7.8
    High

    CVE-2026-72993

    Last Modified: 16 Sept 2026

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

    Published: 8 Sept 2026
    7.8
    High

    CVE-2026-72992

    Last Modified: 11 Sept 2026

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

    Published: 8 Sept 2026
    7.8
    High

    CVE-2026-72991

    Last Modified: 14 Sept 2026

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

    Published: 8 Sept 2026
    7.8
    High

    CVE-2026-72990

    Last Modified: 10 Sept 2026

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

    Published: 8 Sept 2026
    7.8
    High

    CVE-2026-72988

    Last Modified: 16 Sept 2026

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

    Published: 8 Sept 2026
    7.8
    High

    CVE-2026-72995

    Last Modified: 10 Sept 2026

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

    Published: 8 Sept 2026
    8.1
    High

    CVE-2026-72987

    Last Modified: 17 Sept 2026

    Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.

    Published: 8 Sept 2026
    7.5
    High

    CVE-2026-72989

    Last Modified: 21 Sept 2026

    Use of uninitialized resource in Windows Failover Cluster allows an unauthorized attacker to disclose information over a network.

    Published: 8 Sept 2026
    5.9
    Medium

    CVE-2026-69304

    Last Modified: 30 Sept 2026

    Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network.

    Published: 8 Sept 2026
    8.8
    High

    CVE-2026-69465

    Last Modified: 9 Sept 2026

    Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

    Published: 8 Sept 2026
    6.8
    Medium

    CVE-2026-65812

    Last Modified: 8 Sept 2026

    Insertion of sensitive information into sent data in Microsoft Teams for Android allows an authorized attacker to disclose information over a network.

    Published: 8 Sept 2026
    8.8
    High

    CVE-2026-65772

    Last Modified: 9 Sept 2026

    Deserialization of untrusted data in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network.

    Published: 8 Sept 2026
    6.8
    Medium

    CVE-2026-72985

    Last Modified: 21 Sept 2026

    Heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized attacker to elevate privileges with a physical attack.

    Published: 8 Sept 2026
    5
    Medium

    CVE-2026-72976

    Last Modified: 8 Sept 2026

    Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information locally.

    Published: 8 Sept 2026
    6.5
    Medium

    CVE-2026-72975

    Last Modified: 9 Sept 2026

    Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

    Published: 8 Sept 2026
    6.5
    Medium

    CVE-2026-72977

    Last Modified: 9 Sept 2026

    Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

    Published: 8 Sept 2026
    6.5
    Medium

    CVE-2026-72974

    Last Modified: 9 Sept 2026

    Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

    Published: 8 Sept 2026
    8.8
    High

    CVE-2026-72973

    Last Modified: 12 Sept 2026

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

    Published: 8 Sept 2026
    6.5
    Medium

    CVE-2026-72938

    Last Modified: 9 Sept 2026

    Access of resource using incompatible type ('type confusion') in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

    Published: 8 Sept 2026
    8.8
    High

    CVE-2026-72972

    Last Modified: 9 Sept 2026

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

    Published: 8 Sept 2026
    6.5
    Medium

    CVE-2026-72956

    Last Modified: 10 Sept 2026

    Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

    Published: 8 Sept 2026
    7.5
    High

    CVE-2026-70570

    Last Modified: 24 Sept 2026

    Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

    Published: 8 Sept 2026
    9.8
    Critical

    CVE-2026-70296

    Last Modified: 16 Sept 2026

    Out-of-bounds write in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

    Published: 8 Sept 2026
    8.8
    High

    CVE-2026-70203

    Last Modified: 16 Sept 2026

    Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.

    Published: 8 Sept 2026
    8.2
    High

    CVE-2026-69906

    Last Modified: 15 Sept 2026

    Heap-based buffer overflow in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

    Published: 8 Sept 2026
    3.5
    Low

    CVE-2026-69904

    Last Modified: 8 Sept 2026

    Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

    Published: 8 Sept 2026
    7
    High

    CVE-2026-69441

    Last Modified: 25 Sept 2026

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.

    Published: 8 Sept 2026
    7.5
    High

    CVE-2026-69805

    Last Modified: 29 Sept 2026

    External control of file name or path in .NET allows an unauthorized attacker to elevate privileges over a network.

    Published: 8 Sept 2026
    8.8
    High

    CVE-2026-69439

    Last Modified: 29 Sept 2026

    Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.

    Published: 8 Sept 2026
    8.8
    High

    CVE-2026-69632

    Last Modified: 9 Sept 2026

    Use after free in Microsoft Office allows an unauthorized attacker to execute code over a network.

    Published: 8 Sept 2026
    6.5
    Medium

    CVE-2026-69626

    Last Modified: 9 Sept 2026

    Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a network.

    Published: 8 Sept 2026
    7.3
    High

    CVE-2026-69477

    Last Modified: 10 Sept 2026

    Heap-based buffer overflow in Microsoft Office Access allows an authorized attacker to execute code locally.

    Published: 8 Sept 2026
    8.8
    High

    CVE-2026-69629

    Last Modified: 9 Sept 2026

    Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

    Published: 8 Sept 2026
    6.5
    Medium

    CVE-2026-69636

    Last Modified: 8 Sept 2026

    Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

    Published: 8 Sept 2026
    8.8
    High

    CVE-2026-69614

    Last Modified: 10 Sept 2026

    Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

    Published: 8 Sept 2026
    8.8
    High

    CVE-2026-69464

    Last Modified: 10 Sept 2026

    Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

    Published: 8 Sept 2026
    3.5
    Low

    CVE-2026-69615

    Last Modified: 11 Sept 2026

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

    Published: 8 Sept 2026
    8.8
    High

    CVE-2026-69442

    Last Modified: 9 Sept 2026

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

    Published: 8 Sept 2026
    8.8
    High

    CVE-2026-69601

    Last Modified: 21 Sept 2026

    Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

    Published: 8 Sept 2026
    9.8
    Critical

    CVE-2026-69590

    Last Modified: 21 Sept 2026

    Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

    Published: 8 Sept 2026
    7.5
    High

    CVE-2026-69607

    Last Modified: 17 Sept 2026

    Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network.

    Published: 8 Sept 2026
    7
    High

    CVE-2026-69575

    Last Modified: 21 Sept 2026

    Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.

    Published: 8 Sept 2026
    5.5
    Medium

    CVE-2026-69568

    Last Modified: 18 Sept 2026

    Out-of-bounds read in Windows Storage Spaces Controller allows an authorized attacker to disclose information locally.

    Published: 8 Sept 2026
    7.8
    High

    CVE-2026-69593

    Last Modified: 11 Sept 2026

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

    Published: 8 Sept 2026
    7
    High

    CVE-2026-69564

    Last Modified: 24 Sept 2026

    Heap-based buffer overflow in Windows Online Certificate Status Protocol (OCSP) allows an authorized attacker to elevate privileges locally.

    Published: 8 Sept 2026
    7
    High

    CVE-2026-69560

    Last Modified: 24 Sept 2026

    Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally.

    Published: 8 Sept 2026