CVE Feed

    Dashboard / CVE

    8
    High

    CVE-2026-68838

    Last Modified: 14 Sept 2026

    Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.

    Published: 8 Sept 2026
    5.5
    Medium

    CVE-2026-68843

    Last Modified: 29 Sept 2026

    Use after free in Microsoft Office Word allows an authorized attacker to disclose information locally.

    Published: 8 Sept 2026
    8
    High

    CVE-2026-68834

    Last Modified: 14 Sept 2026

    Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.

    Published: 8 Sept 2026
    8
    High

    CVE-2026-68827

    Last Modified: 17 Sept 2026

    Integer underflow (wrap or wraparound) in Windows GDI+ allows an authorized attacker to elevate privileges over a network.

    Published: 8 Sept 2026
    5.5
    Medium

    CVE-2026-68831

    Last Modified: 16 Sept 2026

    Files or directories accessible to external parties in Windows Defender Firewall Service allows an authorized attacker to disclose information locally.

    Published: 8 Sept 2026
    8.8
    High

    CVE-2026-68828

    Last Modified: 29 Sept 2026

    Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

    Published: 8 Sept 2026
    6.5
    Medium

    CVE-2026-68780

    Last Modified: 15 Sept 2026

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

    Published: 8 Sept 2026
    6.5
    Medium

    CVE-2026-68779

    Last Modified: 15 Sept 2026

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

    Published: 8 Sept 2026
    6.5
    Medium

    CVE-2026-68778

    Last Modified: 15 Sept 2026

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

    Published: 8 Sept 2026
    6.5
    Medium

    CVE-2026-68777

    Last Modified: 15 Sept 2026

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

    Published: 8 Sept 2026
    6.5
    Medium

    CVE-2026-68776

    Last Modified: 15 Sept 2026

    Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

    Published: 8 Sept 2026
    8.8
    High

    CVE-2026-68775

    Last Modified: 15 Sept 2026

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

    Published: 8 Sept 2026
    6.5
    Medium

    CVE-2026-67648

    Last Modified: 15 Sept 2026

    Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

    Published: 8 Sept 2026
    8.8
    High

    CVE-2026-67642

    Last Modified: 10 Sept 2026

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

    Published: 8 Sept 2026
    6.5
    Medium

    CVE-2026-67641

    Last Modified: 10 Sept 2026

    Integer overflow or wraparound in SQL Server allows an authorized attacker to deny service over a network.

    Published: 8 Sept 2026
    8.8
    High

    CVE-2026-67639

    Last Modified: 15 Sept 2026

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

    Published: 8 Sept 2026
    8.8
    High

    CVE-2026-67638

    Last Modified: 10 Sept 2026

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

    Published: 8 Sept 2026
    6.5
    Medium

    CVE-2026-67393

    Last Modified: 15 Sept 2026

    Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.

    Published: 8 Sept 2026
    6.5
    Medium

    CVE-2026-67390

    Last Modified: 15 Sept 2026

    Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.

    Published: 8 Sept 2026
    8.8
    High

    CVE-2026-67388

    Last Modified: 16 Sept 2026

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

    Published: 8 Sept 2026
    6.5
    Medium

    CVE-2026-67386

    Last Modified: 16 Sept 2026

    Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

    Published: 8 Sept 2026
    8.8
    High

    CVE-2026-67385

    Last Modified: 16 Sept 2026

    Use after free in SQL Server allows an authorized attacker to execute code over a network.

    Published: 8 Sept 2026
    8.8
    High

    CVE-2026-67381

    Last Modified: 16 Sept 2026

    Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

    Published: 8 Sept 2026
    8.8
    High

    CVE-2026-67380

    Last Modified: 16 Sept 2026

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

    Published: 8 Sept 2026
    8.8
    High

    CVE-2026-66820

    Last Modified: 16 Sept 2026

    Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

    Published: 8 Sept 2026
    8.8
    High

    CVE-2026-66818

    Last Modified: 16 Sept 2026

    Improper privilege management in SQL Server allows an authorized attacker to elevate privileges over a network.

    Published: 8 Sept 2026
    6.5
    Medium

    CVE-2026-66816

    Last Modified: 8 Sept 2026

    Insufficient logging in SQL Server allows an authorized attacker to bypass a security feature over a network.

    Published: 8 Sept 2026
    8.8
    High

    CVE-2026-66814

    Last Modified: 16 Sept 2026

    Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network.

    Published: 8 Sept 2026
    7.8
    High

    CVE-2026-56172

    Last Modified: 17 Sept 2026

    Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally.

    Published: 8 Sept 2026
    7.8
    High

    CVE-2026-62697

    Last Modified: 17 Sept 2026

    Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

    Published: 8 Sept 2026
    7.5
    High

    CVE-2026-62813

    Last Modified: 30 Sept 2026

    Use after free in Active Directory Domain Services allows an authorized attacker to execute code over a network.

    Published: 8 Sept 2026
    6.5
    Medium

    CVE-2026-62762

    Last Modified: 29 Sept 2026

    Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.

    Published: 8 Sept 2026
    7.5
    High

    CVE-2026-62759

    Last Modified: 17 Sept 2026

    Authentication bypass by spoofing in Windows Netlogon allows an unauthorized attacker to perform spoofing over an adjacent network.

    Published: 8 Sept 2026
    7.8
    High

    CVE-2026-62810

    Last Modified: 30 Sept 2026

    Heap-based buffer overflow in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally.

    Published: 8 Sept 2026
    7.8
    High

    CVE-2026-58611

    Last Modified: 9 Sept 2026

    Improper authorization in XBox Gaming Services allows an authorized attacker to elevate privileges locally.

    Published: 8 Sept 2026
    7.8
    High

    CVE-2026-56198

    Last Modified: 29 Sept 2026

    Out-of-bounds read in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally.

    Published: 8 Sept 2026
    7.8
    High

    CVE-2026-56177

    Last Modified: 17 Sept 2026

    Use after free in Windows Server allows an authorized attacker to elevate privileges locally.

    Published: 8 Sept 2026
    7.8
    High

    CVE-2026-85880

    Last Modified: 16 Sept 2026

    Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.

    Published: 8 Sept 2026
    8.8
    High

    CVE-2026-85877

    Last Modified: 9 Sept 2026

    Heap-based buffer overflow in Windows Print Spooler Components allows an unauthorized attacker to execute code over a network.

    Published: 8 Sept 2026
    7.5
    High

    CVE-2026-84001

    Last Modified: 10 Sept 2026

    Out-of-bounds read in Windows Key Distribution Center allows an unauthorized attacker to deny service over a network.

    Published: 8 Sept 2026
    7
    High

    CVE-2026-83999

    Last Modified: 13 Sept 2026

    Improper link resolution before file access ('link following') in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to elevate privileges locally.

    Published: 8 Sept 2026
    8.8
    High

    CVE-2026-83998

    Last Modified: 23 Sept 2026

    Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

    Published: 8 Sept 2026
    8.8
    High

    CVE-2026-83996

    Last Modified: 13 Sept 2026

    Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

    Published: 8 Sept 2026
    5.5
    Medium

    CVE-2026-83991

    Last Modified: 13 Sept 2026

    Missing authentication for critical function in Windows Cloud Files Mini Filter Driver allows an authorized attacker to perform tampering locally.

    Published: 8 Sept 2026
    5.5
    Medium

    CVE-2026-70290

    Last Modified: 15 Sept 2026

    Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

    Published: 8 Sept 2026
    7.8
    High

    CVE-2026-83976

    Last Modified: 11 Sept 2026

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

    Published: 8 Sept 2026
    7.8
    High

    CVE-2026-83975

    Last Modified: 10 Sept 2026

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

    Published: 8 Sept 2026
    7.8
    High

    CVE-2026-83974

    Last Modified: 13 Sept 2026

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

    Published: 8 Sept 2026
    7.8
    High

    CVE-2026-83979

    Last Modified: 10 Sept 2026

    Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

    Published: 8 Sept 2026
    7.8
    High

    CVE-2026-83988

    Last Modified: 13 Sept 2026

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

    Published: 8 Sept 2026