CVE-2026-68838
Last Modified: 14 Sept 2026Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.
CVE-2026-68843
Last Modified: 29 Sept 2026Use after free in Microsoft Office Word allows an authorized attacker to disclose information locally.
CVE-2026-68834
Last Modified: 14 Sept 2026Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.
CVE-2026-68827
Last Modified: 17 Sept 2026Integer underflow (wrap or wraparound) in Windows GDI+ allows an authorized attacker to elevate privileges over a network.
CVE-2026-68831
Last Modified: 16 Sept 2026Files or directories accessible to external parties in Windows Defender Firewall Service allows an authorized attacker to disclose information locally.
CVE-2026-68828
Last Modified: 29 Sept 2026Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-68780
Last Modified: 15 Sept 2026Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-68779
Last Modified: 15 Sept 2026Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-68778
Last Modified: 15 Sept 2026Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-68777
Last Modified: 15 Sept 2026Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-68776
Last Modified: 15 Sept 2026Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-68775
Last Modified: 15 Sept 2026Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67648
Last Modified: 15 Sept 2026Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67642
Last Modified: 10 Sept 2026Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67641
Last Modified: 10 Sept 2026Integer overflow or wraparound in SQL Server allows an authorized attacker to deny service over a network.
CVE-2026-67639
Last Modified: 15 Sept 2026Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67638
Last Modified: 10 Sept 2026Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67393
Last Modified: 15 Sept 2026Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67390
Last Modified: 15 Sept 2026Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67388
Last Modified: 16 Sept 2026Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67386
Last Modified: 16 Sept 2026Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67385
Last Modified: 16 Sept 2026Use after free in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67381
Last Modified: 16 Sept 2026Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-67380
Last Modified: 16 Sept 2026Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-66820
Last Modified: 16 Sept 2026Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-66818
Last Modified: 16 Sept 2026Improper privilege management in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-66816
Last Modified: 8 Sept 2026Insufficient logging in SQL Server allows an authorized attacker to bypass a security feature over a network.
CVE-2026-66814
Last Modified: 16 Sept 2026Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-56172
Last Modified: 17 Sept 2026Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally.
CVE-2026-62697
Last Modified: 17 Sept 2026Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
CVE-2026-62813
Last Modified: 30 Sept 2026Use after free in Active Directory Domain Services allows an authorized attacker to execute code over a network.
CVE-2026-62762
Last Modified: 29 Sept 2026Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.
CVE-2026-62759
Last Modified: 17 Sept 2026Authentication bypass by spoofing in Windows Netlogon allows an unauthorized attacker to perform spoofing over an adjacent network.
CVE-2026-62810
Last Modified: 30 Sept 2026Heap-based buffer overflow in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally.
CVE-2026-58611
Last Modified: 9 Sept 2026Improper authorization in XBox Gaming Services allows an authorized attacker to elevate privileges locally.
CVE-2026-56198
Last Modified: 29 Sept 2026Out-of-bounds read in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally.
CVE-2026-56177
Last Modified: 17 Sept 2026Use after free in Windows Server allows an authorized attacker to elevate privileges locally.
CVE-2026-85880
Last Modified: 16 Sept 2026Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.
CVE-2026-85877
Last Modified: 9 Sept 2026Heap-based buffer overflow in Windows Print Spooler Components allows an unauthorized attacker to execute code over a network.
CVE-2026-84001
Last Modified: 10 Sept 2026Out-of-bounds read in Windows Key Distribution Center allows an unauthorized attacker to deny service over a network.
CVE-2026-83999
Last Modified: 13 Sept 2026Improper link resolution before file access ('link following') in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83998
Last Modified: 23 Sept 2026Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-83996
Last Modified: 13 Sept 2026Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-83991
Last Modified: 13 Sept 2026Missing authentication for critical function in Windows Cloud Files Mini Filter Driver allows an authorized attacker to perform tampering locally.
CVE-2026-70290
Last Modified: 15 Sept 2026Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
CVE-2026-83976
Last Modified: 11 Sept 2026Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83975
Last Modified: 10 Sept 2026Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83974
Last Modified: 13 Sept 2026Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83979
Last Modified: 10 Sept 2026Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83988
Last Modified: 13 Sept 2026Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
