CVE-2026-67383
Last Modified: 8 Sept 2026Generation of error message containing sensitive information in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67379
Last Modified: 8 Sept 2026Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67376
Last Modified: 16 Sept 2026Integer overflow or wraparound in SQL Server allows an unauthorized attacker to deny service over a network.
CVE-2026-78463
Last Modified: 22 Sept 2026Improper control of generation of code ('code injection') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-67378
Last Modified: 17 Sept 2026Untrusted pointer dereference in SQL Server allows an unauthorized attacker to execute code over a network.
CVE-2026-78461
Last Modified: 11 Sept 2026Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-78439
Last Modified: 9 Sept 2026Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
CVE-2026-77909
Last Modified: 8 Sept 2026Insufficiently protected credentials in Azure CycleCloud allows an authorized attacker to disclose information over a network.
CVE-2026-77908
Last Modified: 9 Sept 2026Improper control of generation of code ('code injection') in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network.
CVE-2026-77907
Last Modified: 8 Sept 2026Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
CVE-2026-77904
Last Modified: 11 Sept 2026Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-77899
Last Modified: 16 Sept 2026Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally.
CVE-2026-77898
Last Modified: 14 Sept 2026Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
CVE-2026-69282
Last Modified: 8 Sept 2026Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-69273
Last Modified: 9 Sept 2026Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-69285
Last Modified: 9 Sept 2026Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
CVE-2026-69268
Last Modified: 9 Sept 2026Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-77896
Last Modified: 28 Sept 2026Integer overflow or wraparound in Remote Desktop Client allows an unauthorized attacker to deny service over a network.
CVE-2026-77895
Last Modified: 16 Sept 2026Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVE-2026-77894
Last Modified: 16 Sept 2026Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-77893
Last Modified: 16 Sept 2026Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVE-2026-77892
Last Modified: 16 Sept 2026No cwe for this issue in Windows Boot Manager allows an unauthorized attacker to elevate privileges with a physical attack.
CVE-2026-77891
Last Modified: 16 Sept 2026Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally.
CVE-2026-77889
Last Modified: 16 Sept 2026Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVE-2026-77890
Last Modified: 16 Sept 2026Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVE-2026-77886
Last Modified: 16 Sept 2026Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVE-2026-77888
Last Modified: 16 Sept 2026Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVE-2026-77505
Last Modified: 28 Sept 2026Use after free in DNS Server allows an unauthorized attacker to execute code over a network.
CVE-2026-77504
Last Modified: 29 Sept 2026Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-77887
Last Modified: 16 Sept 2026Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally.
CVE-2026-77503
Last Modified: 10 Sept 2026Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.
CVE-2026-77502
Last Modified: 16 Sept 2026Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVE-2026-77501
Last Modified: 16 Sept 2026Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVE-2026-77499
Last Modified: 16 Sept 2026Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVE-2026-77500
Last Modified: 16 Sept 2026Release of invalid pointer or reference in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVE-2026-77498
Last Modified: 16 Sept 2026Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVE-2026-77494
Last Modified: 16 Sept 2026Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVE-2026-77493
Last Modified: 10 Sept 2026Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
CVE-2026-77492
Last Modified: 28 Sept 2026Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally.
CVE-2026-77491
Last Modified: 30 Oct 2026Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally.
CVE-2026-77489
Last Modified: 11 Sept 2026Null pointer dereference in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69579
Last Modified: 21 Sept 2026Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
CVE-2026-72986
Last Modified: 23 Sept 2026Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.
CVE-2026-69787
Last Modified: 11 Sept 2026Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69476
Last Modified: 11 Sept 2026Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-72982
Last Modified: 21 Sept 2026Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.
CVE-2026-72983
Last Modified: 21 Sept 2026Use after free in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to execute code over a network.
CVE-2026-72981
Last Modified: 22 Sept 2026Use after free in IP Helper allows an unauthorized attacker to execute code over a network.
CVE-2026-72980
Last Modified: 17 Sept 2026Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally.
CVE-2026-72979
Last Modified: 17 Sept 2026Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
