CVE Feed

    Dashboard / CVE

    6.5
    Medium

    CVE-2026-67383

    Last Modified: 8 Sept 2026

    Generation of error message containing sensitive information in SQL Server allows an authorized attacker to disclose information over a network.

    Published: 8 Sept 2026
    8.5
    High

    CVE-2026-67379

    Last Modified: 8 Sept 2026

    Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

    Published: 8 Sept 2026
    7.5
    High

    CVE-2026-67376

    Last Modified: 16 Sept 2026

    Integer overflow or wraparound in SQL Server allows an unauthorized attacker to deny service over a network.

    Published: 8 Sept 2026
    8.8
    High

    CVE-2026-78463

    Last Modified: 22 Sept 2026

    Improper control of generation of code ('code injection') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

    Published: 8 Sept 2026
    9
    Critical

    CVE-2026-67378

    Last Modified: 17 Sept 2026

    Untrusted pointer dereference in SQL Server allows an unauthorized attacker to execute code over a network.

    Published: 8 Sept 2026
    7.4
    High

    CVE-2026-78461

    Last Modified: 11 Sept 2026

    Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

    Published: 8 Sept 2026
    8.8
    High

    CVE-2026-78439

    Last Modified: 9 Sept 2026

    Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

    Published: 8 Sept 2026
    7.7
    High

    CVE-2026-77909

    Last Modified: 8 Sept 2026

    Insufficiently protected credentials in Azure CycleCloud allows an authorized attacker to disclose information over a network.

    Published: 8 Sept 2026
    8.8
    High

    CVE-2026-77908

    Last Modified: 9 Sept 2026

    Improper control of generation of code ('code injection') in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network.

    Published: 8 Sept 2026
    8.8
    High

    CVE-2026-77907

    Last Modified: 8 Sept 2026

    Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

    Published: 8 Sept 2026
    7.8
    High

    CVE-2026-77904

    Last Modified: 11 Sept 2026

    Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.

    Published: 8 Sept 2026
    7
    High

    CVE-2026-77899

    Last Modified: 16 Sept 2026

    Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally.

    Published: 8 Sept 2026
    7.5
    High

    CVE-2026-77898

    Last Modified: 14 Sept 2026

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

    Published: 8 Sept 2026
    8.8
    High

    CVE-2026-69282

    Last Modified: 8 Sept 2026

    Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

    Published: 8 Sept 2026
    8.8
    High

    CVE-2026-69273

    Last Modified: 9 Sept 2026

    Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

    Published: 8 Sept 2026
    8.8
    High

    CVE-2026-69285

    Last Modified: 9 Sept 2026

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

    Published: 8 Sept 2026
    8.8
    High

    CVE-2026-69268

    Last Modified: 9 Sept 2026

    Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

    Published: 8 Sept 2026
    6.5
    Medium

    CVE-2026-77896

    Last Modified: 28 Sept 2026

    Integer overflow or wraparound in Remote Desktop Client allows an unauthorized attacker to deny service over a network.

    Published: 8 Sept 2026
    7.5
    High

    CVE-2026-77895

    Last Modified: 16 Sept 2026

    Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

    Published: 8 Sept 2026
    7
    High

    CVE-2026-77894

    Last Modified: 16 Sept 2026

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.

    Published: 8 Sept 2026
    7.5
    High

    CVE-2026-77893

    Last Modified: 16 Sept 2026

    Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

    Published: 8 Sept 2026
    6.8
    Medium

    CVE-2026-77892

    Last Modified: 16 Sept 2026

    No cwe for this issue in Windows Boot Manager allows an unauthorized attacker to elevate privileges with a physical attack.

    Published: 8 Sept 2026
    6.4
    Medium

    CVE-2026-77891

    Last Modified: 16 Sept 2026

    Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally.

    Published: 8 Sept 2026
    7.5
    High

    CVE-2026-77889

    Last Modified: 16 Sept 2026

    Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

    Published: 8 Sept 2026
    7.5
    High

    CVE-2026-77890

    Last Modified: 16 Sept 2026

    Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

    Published: 8 Sept 2026
    7.5
    High

    CVE-2026-77886

    Last Modified: 16 Sept 2026

    Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

    Published: 8 Sept 2026
    7.5
    High

    CVE-2026-77888

    Last Modified: 16 Sept 2026

    Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

    Published: 8 Sept 2026
    8.1
    High

    CVE-2026-77505

    Last Modified: 28 Sept 2026

    Use after free in DNS Server allows an unauthorized attacker to execute code over a network.

    Published: 8 Sept 2026
    8.8
    High

    CVE-2026-77504

    Last Modified: 29 Sept 2026

    Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

    Published: 8 Sept 2026
    6.4
    Medium

    CVE-2026-77887

    Last Modified: 16 Sept 2026

    Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally.

    Published: 8 Sept 2026
    8.4
    High

    CVE-2026-77503

    Last Modified: 10 Sept 2026

    Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.

    Published: 8 Sept 2026
    7.5
    High

    CVE-2026-77502

    Last Modified: 16 Sept 2026

    Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

    Published: 8 Sept 2026
    7.5
    High

    CVE-2026-77501

    Last Modified: 16 Sept 2026

    Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

    Published: 8 Sept 2026
    7.5
    High

    CVE-2026-77499

    Last Modified: 16 Sept 2026

    Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

    Published: 8 Sept 2026
    7.8
    High

    CVE-2026-77500

    Last Modified: 16 Sept 2026

    Release of invalid pointer or reference in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

    Published: 8 Sept 2026
    7.5
    High

    CVE-2026-77498

    Last Modified: 16 Sept 2026

    Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

    Published: 8 Sept 2026
    7.5
    High

    CVE-2026-77494

    Last Modified: 16 Sept 2026

    Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

    Published: 8 Sept 2026
    9.8
    Critical

    CVE-2026-77493

    Last Modified: 10 Sept 2026

    Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

    Published: 8 Sept 2026
    5.5
    Medium

    CVE-2026-77492

    Last Modified: 28 Sept 2026

    Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally.

    Published: 8 Sept 2026
    5.5
    Medium

    CVE-2026-77491

    Last Modified: 30 Oct 2026

    Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally.

    Published: 8 Sept 2026
    7.8
    High

    CVE-2026-77489

    Last Modified: 11 Sept 2026

    Null pointer dereference in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

    Published: 8 Sept 2026
    9.8
    Critical

    CVE-2026-69579

    Last Modified: 21 Sept 2026

    Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.

    Published: 8 Sept 2026
    8.8
    High

    CVE-2026-72986

    Last Modified: 23 Sept 2026

    Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.

    Published: 8 Sept 2026
    7.8
    High

    CVE-2026-69787

    Last Modified: 11 Sept 2026

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

    Published: 8 Sept 2026
    7.8
    High

    CVE-2026-69476

    Last Modified: 11 Sept 2026

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

    Published: 8 Sept 2026
    9.8
    Critical

    CVE-2026-72982

    Last Modified: 21 Sept 2026

    Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.

    Published: 8 Sept 2026
    9.8
    Critical

    CVE-2026-72983

    Last Modified: 21 Sept 2026

    Use after free in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to execute code over a network.

    Published: 8 Sept 2026
    8.1
    High

    CVE-2026-72981

    Last Modified: 22 Sept 2026

    Use after free in IP Helper allows an unauthorized attacker to execute code over a network.

    Published: 8 Sept 2026
    4.4
    Medium

    CVE-2026-72980

    Last Modified: 17 Sept 2026

    Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally.

    Published: 8 Sept 2026
    9.8
    Critical

    CVE-2026-72979

    Last Modified: 17 Sept 2026

    Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

    Published: 8 Sept 2026