Security Box Score — October 13, 2026 — page 2
Edition of October 13, 2026, continued — page 2 of 5. Back to page 1 · page 3
| CVE | CVSS | EPSS %ile | Vendor | Product | CWE | Title |
|---|---|---|---|---|---|---|
| CVE-2026-97759 | 8.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-416 | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97761 | 8.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-121 | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97762 | 8.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-787 | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97763 | 8.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-122 | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97765 | 8.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-122 | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97766 | 8.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-122 | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97767 | 8.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-415 | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97768 | 8.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-122 | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97769 | 8.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-20 | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97770 | 8.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-121 | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97771 | 8.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-416 | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97772 | 8.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-415 | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97773 | 8.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-122 | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97775 | 8.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-400 | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97776 | 8.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-122 | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97777 | 8.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-122 | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97778 | 8.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-190 | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97780 | 8.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-122 | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97781 | 8.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-77 | Microsoft Office OneNote Remote Code Execution Vulnerability |
| CVE-2026-100209 | 8.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-416 | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-100210 | 8.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-122 | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-100211 | 8.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-416 | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-100212 | 8.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-416 | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-100214 | 8.8 | — | Microsoft | Microsoft Dynamics NAV 2017 | CWE-502 | Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability |
| CVE-2026-100220 | 8.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Media Video Decoder Remote Code Execution Vulnerability |
| CVE-2026-102073 | 8.8 | — | Siemens | APOGEE MBC (PPC) (BACnet) | CWE-191 | A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All version… |
| CVE-2026-102203 | 8.8 | — | Microsoft | Windows 10 Version 1607 | CWE-843 | RPC Runtime Remote Code Execution Vulnerability |
| CVE-2026-102214 | 8.8 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Hyper-V Remote Code Execution Vulnerability |
| CVE-2026-102217 | 8.8 | — | Microsoft | Windows 10 Version 1607 | CWE-41 | WebDAV Elevation of Privilege Vulnerability |
| CVE-2026-102225 | 8.8 | — | Microsoft | Windows 10 Version 1607 | CWE-125 | Windows Text Shaping Remote Code Execution Vulnerability |
| CVE-2026-102226 | 8.8 | — | Microsoft | Microsoft Dynamics NAV 2018 | CWE-22 | Dynamics Business Central Elevation of Privilege Vulnerability |
| CVE-2026-102235 | 8.8 | — | Microsoft | Visual Studio Code | CWE-116 | Visual Studio Code Remote Code Execution Vulnerability |
| CVE-2026-102849 | 8.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-122 | Microsoft Office Access Remote Code Execution Vulnerability |
| CVE-2026-102850 | 8.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-122 | Microsoft Office Access Remote Code Execution Vulnerability |
| CVE-2026-102855 | 8.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-122 | Microsoft Office Visio Remote Code Execution Vulnerability |
| CVE-2026-102856 | 8.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-122 | Microsoft Office Visio Remote Code Execution Vulnerability |
| CVE-2026-102857 | 8.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-122 | Microsoft Office Visio Remote Code Execution Vulnerability |
| CVE-2026-102858 | 8.8 | — | Microsoft | Microsoft Office 365 for Mac | CWE-122 | Microsoft Office OneNote Remote Code Execution Vulnerability |
| CVE-2026-102860 | 8.8 | — | Microsoft | Microsoft SharePoint Server Subscription Edition | CWE-284 | Microsoft Office SharePoint Elevation of Privilege Vulnerability |
| CVE-2026-102861 | 8.8 | — | Microsoft | Microsoft SharePoint Server Subscription Edition | CWE-862 | Microsoft Office SharePoint Elevation of Privilege Vulnerability |
| CVE-2026-102862 | 8.8 | — | Microsoft | Microsoft SharePoint Server Subscription Edition | CWE-863 | Microsoft Office SharePoint Elevation of Privilege Vulnerability |
| CVE-2026-102863 | 8.8 | — | Microsoft | Microsoft SharePoint Server Subscription Edition | CWE-94 | Microsoft Office SharePoint Elevation of Privilege Vulnerability |
| CVE-2026-102869 | 8.8 | — | Microsoft | Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 | CWE-843 | .NET and Visual Studio Elevation of Privilege Vulnerability |
| CVE-2026-102870 | 8.8 | — | Microsoft | Microsoft Visual Studio 2022 version 17.14 | CWE-94 | ASP.NET Core Remote Code Execution Vulnerability |
| CVE-2026-103572 | 8.8 | — | Microsoft | Microsoft Visual Studio 2022 version 17.14 | CWE-94 | Visual Studio Tools for Applications and SQL Server Management Studio Remote … |
| CVE-2026-103575 | 8.8 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Remote Desktop Client Remote Code Execution Vulnerability |
| CVE-2026-105007 | 8.8 | — | Microsoft | Windows 10 Version 1607 | CWE-125 | Windows NDIS Elevation of Privilege Vulnerability |
| CVE-2026-105591 | 8.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-122 | Microsoft Office Access Remote Code Execution Vulnerability |
| CVE-2026-105593 | 8.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-122 | Microsoft Office Access Remote Code Execution Vulnerability |
| CVE-2026-105595 | 8.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-125 | Microsoft Office Access Remote Code Execution Vulnerability |
| CVE-2026-105596 | 8.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-122 | Microsoft Office Access Remote Code Execution Vulnerability |
| CVE-2026-105597 | 8.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-122 | Microsoft Office Access Remote Code Execution Vulnerability |
| CVE-2026-105598 | 8.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-122 | Microsoft Office Access Remote Code Execution Vulnerability |
| CVE-2026-105716 | 8.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-122 | Microsoft Office Access Remote Code Execution Vulnerability |
| CVE-2026-105717 | 8.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-20 | Microsoft Office Access Remote Code Execution Vulnerability |
| CVE-2026-105718 | 8.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-20 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2026-105727 | 8.8 | — | Microsoft | Microsoft Dynamics NAV 2018 | CWE-22 | Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability |
| CVE-2026-105733 | 8.8 | — | Microsoft | Windows 10 Version 21H2 | CWE-1419 | Windows Hyper-V Remote Code Execution Vulnerability |
| CVE-2026-105901 | 8.8 | — | Adobe | ColdFusion 2025 | CWE-863 | ColdFusion | Incorrect Authorization (CWE-863) |
| CVE-2026-106089 | 8.8 | — | Adobe | ColdFusion 2025 | CWE-863 | ColdFusion | Incorrect Authorization (CWE-863) |
| CVE-2026-106090 | 8.8 | — | Adobe | ColdFusion 2025 | CWE-863 | ColdFusion | Incorrect Authorization (CWE-863) |
| CVE-2026-106613 | 8.8 | — | Adobe | ColdFusion 2025 | CWE-20 | ColdFusion | Improper Input Validation (CWE-20) |
| CVE-2026-106615 | 8.8 | — | Adobe | ColdFusion 2025 | CWE-863 | ColdFusion | Incorrect Authorization (CWE-863) |
| CVE-2026-106617 | 8.8 | — | Adobe | ColdFusion 2025 | CWE-863 | ColdFusion | Incorrect Authorization (CWE-863) |
| CVE-2026-106618 | 8.8 | — | Adobe | ColdFusion 2025 | CWE-863 | ColdFusion | Incorrect Authorization (CWE-863) |
| CVE-2026-108375 | 8.8 | — | marcosschroh | dataclasses-avroschema | CWE-94 | dataclasses-avroschema allows code injection through generated field-default … |
| CVE-2026-108376 | 8.8 | — | marcosschroh | dataclasses-avroschema | CWE-94 | dataclasses-avroschema allows code injection through record names in generate… |
| CVE-2026-108377 | 8.8 | — | marcosschroh | dataclasses-avroschema | CWE-94 | dataclasses-avroschema allows code injection through generated Meta.schema_name |
| CVE-2026-108378 | 8.8 | — | marcosschroh | dataclasses-avroschema | CWE-94 | dataclasses-avroschema record documentation can terminate generated class doc… |
| CVE-2026-108379 | 8.8 | — | marcosschroh | dataclasses-avroschema | CWE-94 | dataclasses-avroschema fixed namespaces allow code injection in generated ann… |
| CVE-2026-108380 | 8.8 | — | marcosschroh | dataclasses-avroschema | CWE-94 | dataclasses-avroschema field documentation allows code injection in generated… |
| CVE-2026-108381 | 8.8 | — | marcosschroh | dataclasses-avroschema | CWE-94 | dataclasses-avroschema pydantic-class metadata allows code injection in gener… |
| CVE-2026-108382 | 8.8 | — | marcosschroh | dataclasses-avroschema | CWE-94 | dataclasses-avroschema allows code injection through generated enum-symbol st… |
| CVE-2026-108383 | 8.8 | — | marcosschroh | dataclasses-avroschema | CWE-94 | dataclasses-avroschema enum field defaults can inject statements into generat… |
| CVE-2026-108384 | 8.8 | — | marcosschroh | dataclasses-avroschema | CWE-94 | dataclasses-avroschema allows code injection through fixed-type aliases suppl… |
| CVE-2026-108385 | 8.8 | — | marcosschroh | dataclasses-avroschema | CWE-94 | dataclasses-avroschema enum symbols can inject statements through generated m… |
| CVE-2026-108398 | 8.8 | — | Microsoft | Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 | CWE-426 | .NET Framework Security Feature Bypass Vulnerability |
| CVE-2026-108400 | 8.8 | — | Microsoft | HEVC Video Extensions | CWE-190 | HEVC Video Extensions Remote Code Execution Vulnerability |
| CVE-2026-108458 | 8.8 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Remote Desktop Client Remote Code Execution Vulnerability |
| CVE-2026-108463 | 8.8 | — | Microsoft | Windows 11 Version 24H2 | CWE-41 | Windows SmartScreen Security Feature Bypass Vulnerability |
| CVE-2026-108467 | 8.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Microsoft PostScript Printer Driver Remote Code Execution Vulnerability |
| CVE-2026-108471 | 8.8 | — | Microsoft | Windows 10 Version 1809 | CWE-822 | Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vu… |
| CVE-2026-109709 | 8.8 | — | Mozilla | Firefox | CWE-200 | Information disclosure, privilege escalation in the Security: Process Sandbox… |
| CVE-2026-109756 | 8.8 | — | Mozilla | Firefox | CWE-269 | Privilege escalation in the DOM: Navigation component |
| CVE-2026-109778 | 8.8 | — | Mozilla | Firefox | CWE-269 | Privilege escalation in the WebExtensions component |
| CVE-2026-110116 | 8.8 | — | risesoft-y9 | Digital-Infrastructure | CWE-22 | Digital-Infrastructure 9.6.5 through 9.6.11 Path Traversal via fileManager st… |
| CVE-2026-12656 | 8.7 | — | Rockwell Automation | 1732E ArmorBlock® I/O | CWE-770 | 1732E ArmorBlock® - Multiple Vulnerabilities |
| CVE-2026-55823 | 8.7 | — | frappe | frappe | CWE-89 | Frappe: Possibility of SQL injection in reportview |
| CVE-2026-59241 | 8.7 | — | Siemens | SIMATIC WinCC V7.5 | CWE-266 | A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIM… |
| CVE-2026-63154 | 8.7 | — | Omnispace | Agora Project | CWE-89 | Omnispace Agora Project < 26.10.0 SQL Identifier Injection via agoraFields[] |
| CVE-2026-63162 | 8.7 | — | Omnispace | Agora Project | CWE-22 | Omnispace Agora Project < 26.10.0 Path Traversal via tmpFolderName Parameter |
| CVE-2026-63163 | 8.7 | — | Omnispace | Agora Project | CWE-639 | Omnispace Agora Project < 26.10.0 Broken Access Control via MobileFileDownload |
| CVE-2026-63316 | 8.7 | — | Payload | Payload CMS | CWE-89 | SQL Injection in Payload CMS |
| CVE-2026-74034 | 8.7 | — | Wazuh | wazuh-manager | CWE-862 | Wazuh 4.1.0 before 4.14.8 Arbitrary File Read via upgrade_custom Command |
| CVE-2026-77090 | 8.7 | — | Commvault | Commvault Cloud | — | CVFS Information Disclosure |
| CVE-2026-77100 | 8.7 | — | Commvault | Commvault Cloud | CWE-122 | MediaAgent Denial of Service |
| CVE-2026-84994 | 8.7 | — | QwikDev | qwik | CWE-248 | Qwik: Crashing any Qwik Server via Resource thenable |
| CVE-2026-85114 | 8.7 | — | Siemens | .NET Client Library for SIMATIC S7 Webserver API | CWE-22 | A vulnerability has been identified in .NET Client Library for SIMATIC S7 Web… |
| CVE-2026-89196 | 8.7 | — | Siemens | RUGGEDCOM CROSSBOW | CWE-89 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.… |
| CVE-2026-89197 | 8.7 | — | Siemens | RUGGEDCOM CROSSBOW | CWE-89 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.… |
| CVE-2026-89198 | 8.7 | — | Siemens | RUGGEDCOM CROSSBOW | CWE-89 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.… |
| CVE-2026-89199 | 8.7 | — | Siemens | RUGGEDCOM CROSSBOW | CWE-639 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.… |
| CVE-2026-92817 | 8.7 | — | Inductive Automation | Ignition | CWE-863 | Inductive Automation Ignition Software Incorrect Authorization |
| CVE-2026-92911 | 8.7 | — | Adobe | Adobe Commerce | CWE-79 | Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) |
| CVE-2026-95631 | 8.7 | — | Adobe | Adobe Commerce | CWE-20 | Adobe Commerce | Improper Input Validation (CWE-20) |
| CVE-2026-97334 | 8.7 | — | Commvault | Commvault Cloud | CWE-409 | Network messaging layer decompression resource exhaustion |
| CVE-2026-101294 | 8.7 | — | IBM | WebSphere Application Server - Liberty | CWE-325 | IBM WebSphere Application Server and WebSphere Application Server Liberty are… |
| CVE-2026-102074 | 8.7 | — | Siemens | APOGEE MBC (PPC) (BACnet) | CWE-121 | A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All version… |
| CVE-2026-102075 | 8.7 | — | Siemens | APOGEE MBC (PPC) (BACnet) | CWE-121 | A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All version… |
| CVE-2026-102076 | 8.7 | — | Siemens | APOGEE MBC (PPC) (BACnet) | CWE-121 | A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All version… |
| CVE-2026-103937 | 8.7 | — | misskey-dev | misskey | CWE-459 | Misskey: Denial of service resulting from insufficient cleanup processing dur… |
| CVE-2026-104085 | 8.7 | — | odt2spip | odt2spip | CWE-78 | odt2spip < 4.4.0 OS Command Injection via Document Filename |
| CVE-2026-104817 | 8.7 | — | misskey-dev | misskey | CWE-405 | Misskey: Lack of rate limiting and size restrictions in RSS fetching API |
| CVE-2026-109428 | 8.7 | — | mistralai | mistral-vibe | CWE-436 | Mistral Vibe < 2.25.5 Permission Bypass via Bash Line Continuation |
| CVE-2026-109429 | 8.7 | — | mistralai | mistral-vibe | CWE-436 | Mistral Vibe < 2.25.4 Bash Permission Bypass via ${var@P} Prompt-Transform |
| CVE-2026-109676 | 8.7 | — | FreeRDP | FreeRDP | CWE-416 | FreeRDP 3.0.0-beta1 before 3.32.0 Use-After-Free via Smartcard Connect |
| CVE-2026-109960 | 8.7 | — | froxlor | froxlor | CWE-79 | Froxlor 2.0.0 before 2.3.14 Stored XSS via Customer Theme Value |
| CVE-2026-109967 | 8.7 | — | marcopiovanello | yt-dlp-web-ui | CWE-476 | yt-dlp-web-ui through 4.0.0 NULL Pointer Dereference DoS via Service.Formats |
| CVE-2026-110115 | 8.7 | — | risesoft-y9 | Digital-Infrastructure | CWE-22 | Digital-Infrastructure 9.6.5 through 9.6.11 Path Traversal via fileManager re… |
| CVE-2026-110128 | 8.7 | — | fushengqian | fuint | CWE-306 | fuint through commit 4c4bc8a Missing Authentication via /clientApi/order/detail |
| CVE-2026-110207 | 8.7 | — | WuKongOpenSource | Wukong AICRM | CWE-862 | Wukong AICRM through 20260610 Missing Authorization in User and Role Manageme… |
| CVE-2026-110215 | 8.7 | — | youlaitech | youlai-boot | CWE-862 | youlai-boot through 2.21.1 Missing Authorization in Role Menu Assignment Allo… |
| CVE-2026-110238 | 8.7 | — | zofe | rapyd-admin | CWE-639 | Rapyd Admin 9.0.0 before 9.20.0 Authorization Bypass via UsersModalEditEmbed … |
| CVE-2026-34634 | 8.6 | — | Adobe | ColdFusion 2025 | CWE-918 | ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918) |
| CVE-2026-63152 | 8.6 | — | Omnispace | Agora Project | CWE-89 | Omnispace Agora Project < 26.10.0 Second-Order SQL Injection via _idCategoryF… |
| CVE-2026-63153 | 8.6 | — | Omnispace | Agora Project | CWE-639 | Omnispace Agora Project < 26.10.0 Broken Access Control via setAffectations() |
| CVE-2026-63161 | 8.6 | — | Omnispace | Agora Project | CWE-384 | Omnispace Agora Project < 26.10.0 Session Fixation via Authentication |
| CVE-2026-63165 | 8.6 | — | Omnispace | Agora Project | CWE-89 | Omnispace Agora Project < 26.10.0 SQL Injection via sortEvents Parameter |
| CVE-2026-63174 | 8.6 | — | Omnispace | Agora Project | CWE-862 | Omnispace Agora Project < 26.10.0 Broken Access Control via spaceAffectList |
| CVE-2026-65101 | 8.6 | — | NVIDIA | AIStore framework | CWE-918 | NVIDIA AIStore for Linux contains a vulnerability in the distributed sort com… |
| CVE-2026-65170 | 8.6 | — | NVIDIA | AIStore framework | CWE-918 | NVIDIA AIStore for Linux contains a vulnerability in the experimental HT back… |
| CVE-2026-65172 | 8.6 | — | NVIDIA | AIStore framework | CWE-862 | NVIDIA AIStore for Linux and Kubernetes contains a missing authorization vuln… |
| CVE-2026-65198 | 8.6 | — | Huawei | openUBMC | CWE-321 | Huawei Default SNMPv3 USM key |
| CVE-2026-74035 | 8.6 | — | Wazuh | wazuh-manager | CWE-863 | Wazuh 4.6.0 before 4.14.8 Authentication Bypass via Empty Password in update_… |
| CVE-2026-74036 | 8.6 | — | Wazuh | wazuh-agent | CWE-863 | Wazuh 4.3.0 before 4.14.8 Remote Code Execution via SCA Command Policies |
| CVE-2026-74037 | 8.6 | — | Wazuh | wazuh-manager | CWE-613 | Wazuh 4.0.0 before 4.14.8 Session Invalidation Bypass in check_token |
| CVE-2026-92088 | 8.6 | — | upKeeper Solutions | upKeeper Instant Privilege Access | CWE-232 | Improper handling of undefined values vulnerability in upKeeper Solutions upK… |
| CVE-2026-95634 | 8.6 | — | Adobe | Content Credentials Rust SDK | CWE-918 | CAI Content Credentials | Server-Side Request Forgery (SSRF) (CWE-918) |
| CVE-2026-95639 | 8.6 | — | Adobe | Photoshop | CWE-863 | Photoshop Desktop | Incorrect Authorization (CWE-863) |
| CVE-2026-102250 | 8.6 | — | Schneider Electric | Sage RTU 1410 | CWE-345 | CWE-345: Insufficient Verification of Data Authenticity vulnerability exists … |
| CVE-2026-103845 | 8.6 | — | Adobe | Adobe Dimension | CWE-427 | Dimension | Uncontrolled Search Path Element (CWE-427) |
| CVE-2026-103846 | 8.6 | — | Adobe | Adobe Dimension | CWE-79 | Dimension | Improper Neutralization of Input During Web Page Generation (Cros… |
| CVE-2026-103847 | 8.6 | — | Adobe | Adobe Dimension | CWE-426 | Dimension | Untrusted Search Path (CWE-426) |
| CVE-2026-105897 | 8.6 | — | Adobe | ColdFusion 2025 | CWE-918 | ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918) |
| CVE-2026-106616 | 8.6 | — | Adobe | ColdFusion 2025 | CWE-611 | ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (C… |
| CVE-2026-109157 | 8.6 | — | TRENDnet | TEW-432BRP | CWE-119 | TRENDnet TEW-432BRP formTcpipSetup stack-based overflow |
| CVE-2026-110097 | 8.6 | — | ikaros-dev | ikaros | CWE-287 | Ikaros 1.2.0 through 1.2.5 TOTP Authentication Bypass via Temp Token |
| CVE-2026-110108 | 8.6 | — | mateaix | MateCloud | CWE-862 | MateCloud through 5.0.8 Missing Authorization via /api/v1/admin/storage API |
| CVE-2026-110124 | 8.6 | — | kerwincui | FastBee | CWE-639 | FastBee through 2.1.0 IDOR via DeviceController /iot/device Endpoints |
| CVE-2026-53562 | 8.5 | — | Citrix | UniconOS | CWE-59 | Local Privilege Escalation |
| CVE-2026-67625 | 8.5 | — | Microsoft | Microsoft SQL Server 2017 (GDR) | CWE-122 | Microsoft SQL Server Remote Code Execution Vulnerability |
| CVE-2026-68883 | 8.5 | — | Microsoft | Microsoft SQL Server 2017 (GDR) | CWE-122 | Microsoft SQL Server Elevation of Privilege Vulnerability |
| CVE-2026-74043 | 8.5 | — | Wazuh | wazuh-manager | CWE-22 | Wazuh 4.1.1 before 4.14.8 Path Traversal via Cluster Upload Functions |
| CVE-2026-85886 | 8.5 | — | Microsoft | Microsoft SQL Server 2017 (GDR) | CWE-122 | Microsoft SQL Server Remote Code Execution Vulnerability |
| CVE-2026-102982 | 8.5 | — | makeplane | plane | CWE-79 | Plane: XSS in work item comments |
| CVE-2026-104816 | 8.5 | — | misskey-dev | misskey | CWE-79 | Misskey: Cross-site scripting in RSS feed item links |
| CVE-2026-71385 | 8.4 | — | Adobe | ColdFusion 2025 | CWE-863 | ColdFusion | Incorrect Authorization (CWE-863) |
| CVE-2026-72895 | 8.4 | — | Siemens | SIMATIC IPC BX-21A | CWE-1394 | A vulnerability has been identified in SIMATIC IPC BX-21A (All versions < V31… |
| CVE-2026-74033 | 8.4 | — | Wazuh | wazuh-manager | CWE-22 | Wazuh from 4.1.1 before 4.14.8 Path Traversal in CDB List Cluster Handlers |
| CVE-2026-75995 | 8.4 | — | Adobe | ColdFusion 2025 | CWE-20 | ColdFusion | Improper Input Validation (CWE-20) |
| CVE-2026-83845 | 8.4 | — | Microsoft | Windows 10 Version 21H2 | CWE-290 | Windows Internet (wininet.dll) Spoofing Vulnerability |
| CVE-2026-89200 | 8.4 | — | Siemens | RUGGEDCOM CROSSBOW | CWE-89 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.… |
| CVE-2026-109961 | 8.4 | — | froxlor | froxlor | CWE-74 | Froxlor 0.10.0 before 2.3.14 Newline Injection via Ftps.add additional_members |
| CVE-2026-109965 | 8.4 | — | oraios | serena | CWE-59 | Serena before 2.0.0 Symlink Following in File Tools Allows Access Outside Pro… |
| CVE-2026-110233 | 8.4 | — | NSPC911 | rovr | CWE-78 | rovr through 0.10.3 OS Command Injection via Unquoted Path to cmd.exe |
| CVE-2026-110255 | 8.4 | — | Finsys | dockhand | CWE-918 | Dockhand before 1.0.43 SSRF via /api/templates/compose Endpoint |
| CVE-2025-58774 | 8.3 | — | AMI | AptioV | CWE-805 | UEFI OOB Write and Buffer Overflow Vulnerabilities |
| CVE-2026-92908 | 8.3 | — | Adobe | Adobe Commerce | CWE-863 | Adobe Commerce | Incorrect Authorization (CWE-863) |
| CVE-2026-109954 | 8.3 | — | parse-community | parse-server | CWE-362 | Parse Server 9.0.0 before 9.10.2-alpha.5 Transactional Batch Request Write In… |
| CVE-2026-109956 | 8.3 | — | nltk | nltk | CWE-22 | NLTK through 3.10.3 Path Traversal via WekaClassifier Model Path |
| CVE-2025-58772 | 8.2 | — | AMI | AptioV | CWE-120 | UEFI OOB Write and Buffer Overflow Vulnerabilities |
| CVE-2026-85369 | 8.2 | — | Microsoft | Windows 10 Version 21H2 | CWE-125 | Windows Hyper-V Elevation of Privilege Vulnerability |
| CVE-2026-85925 | 8.2 | — | Microsoft | azure-keyvault-administration | CWE-923 | Azure Key Vault Client SDK Elevation of Privilege Vulnerability |
| CVE-2026-86016 | 8.2 | — | vnotex | vnote | CWE-79 | VNote: Stored XSS via YAML Frontmatter Leading to Local File Read and Remote … |
| CVE-2026-93905 | 8.2 | — | IBM | WebSphere Application Server - Liberty | CWE-502 | IBM WebSphere Application Server Liberty is affected by a deserialization of … |
| CVE-2026-105443 | 8.2 | — | IBM | WebSphere Application Server - Liberty | CWE-284 | IBM WebSphere Application Server Liberty is affected by an improper access co… |
| CVE-2026-105898 | 8.2 | — | Adobe | ColdFusion 2025 | CWE-863 | ColdFusion | Incorrect Authorization (CWE-863) |
| CVE-2026-110104 | 8.2 | — | xxyopen | novel | CWE-916 | novel through 3.5.0 Unsalted MD5 Password Storage |
| CVE-2026-53418 | 8.1 | — | Zoom Communications | Zoom Workplace | CWE-939 | Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace for… |
| CVE-2026-65103 | 8.1 | — | NVIDIA | AIStore framework | CWE-22 | NVIDIA AIStore for Linux contains a path traversal vulnerability in the targe… |
| CVE-2026-65164 | 8.1 | — | NVIDIA | AIStore framework | CWE-22 | NVIDIA AIStore for Linux contains a path traversal vulnerability in the dSort… |
| CVE-2026-69802 | 8.1 | — | Microsoft | Windows Server 2012 | CWE-1390 | Network Device Enrollment Service (NDES) Remote Code Execution Vulnerability |
| CVE-2026-69830 | 8.1 | — | Microsoft | Windows 10 Version 1607 | CWE-362 | Windows DHCP Server Remote Code Execution Vulnerability |
| CVE-2026-69913 | 8.1 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows TCP/IP Remote Code Execution Vulnerability |
| CVE-2026-70013 | 8.1 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows iSCSI Remote Code Execution Vulnerability |
| CVE-2026-70038 | 8.1 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows iSCSI Remote Code Execution Vulnerability |
| CVE-2026-70062 | 8.1 | — | Microsoft | Windows 10 Version 1809 | CWE-415 | Windows libarchive Remote Code Execution Vulnerability |
| CVE-2026-70111 | 8.1 | — | Microsoft | Windows 10 Version 1607 | CWE-822 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-70127 | 8.1 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Domain Name Service Remote Code Execution Vulnerability |
| CVE-2026-70175 | 8.1 | — | Microsoft | ASP.NET Core 10.0 | CWE-640 | ASP.NET Core Elevation of Privilege Vulnerability |
| CVE-2026-70187 | 8.1 | — | Microsoft | Windows Server 2012 | CWE-416 | Windows Remote Desktop Services Remote Code Execution Vulnerability |
| CVE-2026-70197 | 8.1 | — | Microsoft | .NET 10.0 | CWE-787 | .NET Remote Code Execution Vulnerability |
| CVE-2026-70229 | 8.1 | — | Microsoft | Windows 10 Version 1607 | CWE-863 | Windows Active Directory Domain Services Remote Code Execution Vulnerability |
| CVE-2026-70269 | 8.1 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-122 | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-70571 | 8.1 | — | Microsoft | Microsoft Exchange Server 2016 Cumulative Update 23 | CWE-121 | Microsoft Exchange Server Remote Code Execution Vulnerability |
| CVE-2026-83522 | 8.1 | — | Microsoft | Windows 10 Version 1607 | CWE-807 | Windows IKE Extension Spoofing Vulnerability |
| CVE-2026-83674 | 8.1 | — | Microsoft | Windows 10 Version 1607 | CWE-1390 | Active Directory Federation Services (AD FS) Spoofing Vulnerability |
| CVE-2026-83746 | 8.1 | — | Microsoft | Skype for Business Server 2015 CU13 | CWE-36 | Skype for Business Elevation of Privilege Vulnerability |
| CVE-2026-83844 | 8.1 | — | Microsoft | Microsoft Paint | CWE-125 | Windows Paint Remote Code Execution Vulnerability |
| CVE-2026-83914 | 8.1 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Microsoft XML Remote Code Execution Vulnerability |
| CVE-2026-84012 | 8.1 | — | Microsoft | Windows 10 Version 1607 | CWE-415 | Windows Remote Desktop Services Remote Code Execution Vulnerability |
| CVE-2026-85371 | 8.1 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Network Policy Server (NPS) Remote Code Execution Vulnerability |
| CVE-2026-85799 | 8.1 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Network Policy Server (NPS) Remote Code Execution Vulnerability |
| CVE-2026-85926 | 8.1 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnera… |
| CVE-2026-88094 | 8.1 | — | Microsoft | Azure Storage Blobs client library for Java | CWE-74 | Azure Storage Library Elevation of Privilege Vulnerability |
| CVE-2026-88117 | 8.1 | — | Microsoft | Windows Server 2012 | CWE-416 | Windows DHCP Server Remote Code Execution Vulnerability |
| CVE-2026-88119 | 8.1 | — | Microsoft | Windows Server 2012 | CWE-416 | Windows DHCP Server Remote Code Execution Vulnerability |
| CVE-2026-88120 | 8.1 | — | Microsoft | Windows Server 2012 | CWE-416 | Windows DHCP Server Remote Code Execution Vulnerability |
| CVE-2026-88171 | 8.1 | — | Microsoft | Windows 10 Version 1607 | CWE-415 | Windows DHCP Server Remote Code Execution Vulnerability |
| CVE-2026-88173 | 8.1 | — | Microsoft | Windows 10 Version 1607 | CWE-367 | Windows Background Intelligent Transfer Service (BITS) Remote Code Execution … |
| CVE-2026-88174 | 8.1 | — | Microsoft | Windows 10 Version 1607 | CWE-362 | Windows Deployment Services Remote Code Execution Vulnerability |
| CVE-2026-88185 | 8.1 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-122 | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-92922 | 8.1 | — | Adobe | Adobe Commerce | CWE-79 | Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) |
| CVE-2026-93907 | 8.1 | — | IBM | WebSphere Application Server | CWE-287 | IBM WebSphere Application Server is affected by a bypass authentication vulne… |
| CVE-2026-97783 | 8.1 | — | Microsoft | Microsoft SharePoint Server 2019 | CWE-79 | Microsoft Office SharePoint Spoofing Vulnerability |
| CVE-2026-100218 | 8.1 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Remote Desktop Gateway Service Remote Code Execution Vulnerability |
| CVE-2026-102866 | 8.1 | — | Microsoft | Microsoft SharePoint Server Subscription Edition | CWE-347 | Microsoft Office SharePoint Elevation of Privilege Vulnerability |
| CVE-2026-105005 | 8.1 | — | Microsoft | Windows 11 version 26H1 | CWE-787 | Windows Schannel Remote Code Execution Vulnerability |
| CVE-2026-108457 | 8.1 | — | Microsoft | Windows 10 Version 21H2 | CWE-787 | Microsoft Windows PDF Remote Code Execution Vulnerability |
| CVE-2026-108460 | 8.1 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Message Queuing Remote Code Execution Vulnerability |
| CVE-2026-53420 | 8.0 | — | Zoom Communications | Zoom Workplace | CWE-120 | Buffer overflow in a Zoom Phone feature of Zoom Workplace Clients may allow a… |
| CVE-2026-69363 | 8.0 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Error Reporting Elevation of Privilege Vulnerability |
| CVE-2026-70049 | 8.0 | — | Microsoft | Microsoft Configuration Manager | CWE-89 | Microsoft Configuration Manager Elevation of Privilege Vulnerability |
| CVE-2026-70213 | 8.0 | — | Microsoft | Microsoft Power Apps | CWE-346 | Microsoft Power Apps Remote Code Execution Vulnerability |
| CVE-2026-83838 | 8.0 | — | Microsoft | Windows 10 Version 1607 | CWE-191 | Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability |
| CVE-2026-85881 | 8.0 | — | Microsoft | Microsoft Office for Android | CWE-121 | Microsoft Office Graphics Elevation of Privilege Vulnerability |
| CVE-2026-88121 | 8.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Background Intelligent Transfer Service (BITS) Remote Code Execution … |
| CVE-2026-95680 | 8.0 | — | IBM | WebSphere Application Server | CWE-287 | IBM WebSphere Application Server is affected by an authorization bypass |
| CVE-2026-96844 | 8.0 | — | Microsoft | Windows 10 Version 1607 | CWE-191 | Microsoft Bluetooth Driver Elevation of Privilege Vulnerability |
| CVE-2026-96956 | 8.0 | — | Microsoft | Microsoft SQL Server 2017 (GDR) | CWE-121 | SQL Server Elevation of Privilege Vulnerability |
| CVE-2026-49785 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-404 | UEFI Secure Boot Security Feature Bypass Vulnerability |
| CVE-2026-61931 | 7.8 | — | Microsoft | Windows 10 Version 1809 | CWE-416 | Windows Perception Simulation Service Elevation of Privilege Vulnerability |
| CVE-2026-65110 | 7.8 | — | NVIDIA | Megatron-LM | CWE-502 | NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where, an a… |
| CVE-2026-65141 | 7.8 | — | NVIDIA | Isaac Lab | CWE-95 | NVIDIA Isaac Lab contains a vulnerability where an attacker could cause an ev… |
| CVE-2026-65180 | 7.8 | — | NVIDIA | Megatron-LM | CWE-502 | NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an At… |
| CVE-2026-68836 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows kernel32.dll Elevation of Privilege Vulnerability |
| CVE-2026-69354 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Error Reporting Elevation of Privilege Vulnerability |
| CVE-2026-69471 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-69633 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Update Elevation of Privilege Vulnerability |
| CVE-2026-69650 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-347 | Windows Key Distribution Center Elevation of Privilege Vulnerability |
| CVE-2026-69673 | 7.8 | — | Microsoft | Windows 11 version 23H2 | CWE-59 | Windows Update Elevation of Privilege Vulnerability |
| CVE-2026-69718 | 7.8 | — | Microsoft | Windows 11 version 23H2 | CWE-77 | Windows Update Elevation of Privilege Vulnerability |
| CVE-2026-69733 | 7.8 | — | Microsoft | Windows 11 version 23H2 | CWE-426 | Windows Update Elevation of Privilege Vulnerability |
| CVE-2026-69783 | 7.8 | — | Microsoft | Windows 11 version 23H2 | CWE-73 | Windows Update Elevation of Privilege Vulnerability |
| CVE-2026-69798 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Wired AutoConfig Service Elevation of Privilege Vulnerability |
| CVE-2026-69850 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-822 | Windows Certificates Elevation of Privilege Vulnerability |
| CVE-2026-69867 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-125 | SQLite Elevation of Privilege Vulnerability |
| CVE-2026-69880 | 7.8 | — | Microsoft | Windows 10 Version 1809 | CWE-843 | Desktop Window Manager Elevation of Privilege Vulnerability |
| CVE-2026-69882 | 7.8 | — | Microsoft | Windows 11 version 23H2 | CWE-426 | Windows Update Elevation of Privilege Vulnerability |
| CVE-2026-69884 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-126 | Windows GDI Elevation of Privilege Vulnerability |
| CVE-2026-69898 | 7.8 | — | Microsoft | Windows 10 Version 1809 | CWE-122 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-69909 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Microsoft COM for Windows Elevation of Privilege Vulnerability |
| CVE-2026-69916 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-190 | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2026-69923 | 7.8 | — | Microsoft | Windows 11 Version 24H2 | CWE-427 | Windows AI Elevation of Privilege Vulnerability |
| CVE-2026-69926 | 7.8 | — | Microsoft | Windows 10 Version 1809 | CWE-843 | Desktop Window Manager Elevation of Privilege Vulnerability |
| CVE-2026-69934 | 7.8 | — | Microsoft | Windows 11 version 23H2 | CWE-20 | Windows Spaceport.sys Elevation of Privilege Vulnerability |
| CVE-2026-69942 | 7.8 | — | Microsoft | Windows 11 version 23H2 | CWE-126 | Windows Overlay Filter Remote Code Execution Vulnerability |
| CVE-2026-69949 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Client for NFS Elevation of Privilege Vulnerability |
| CVE-2026-69950 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-126 | Windows Overlay Filter Elevation of Privilege Vulnerability |
| CVE-2026-69952 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-125 | Windows Overlay Filter Elevation of Privilege Vulnerability |
| CVE-2026-69953 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-126 | Windows Overlay Filter Elevation of Privilege Vulnerability |
| CVE-2026-69957 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-126 | Windows Overlay Filter Elevation of Privilege Vulnerability |
| CVE-2026-69959 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-125 | Windows Overlay Filter Remote Code Execution Vulnerability |
| CVE-2026-69963 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Kernel Streaming Service Driver Elevation of Privilege Vulnerability |
| CVE-2026-69966 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-190 | Kernel Streaming Service Driver Elevation of Privilege Vulnerability |
| CVE-2026-70008 | 7.8 | — | Microsoft | Windows 10 Version 21H2 | CWE-190 | Windows IP Over USB Service Elevation of Privilege Vulnerability |
| CVE-2026-70010 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2026-70015 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privi… |
| CVE-2026-70023 | 7.8 | — | Microsoft | Windows 10 Version 1809 | CWE-416 | Windows Hyper-V Elevation of Privilege Vulnerability |
| CVE-2026-70027 | 7.8 | — | Microsoft | Windows 10 Version 21H2 | CWE-122 | Windows Subsystem for Linux Elevation of Privilege Vulnerability |
| CVE-2026-70048 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability |
| CVE-2026-70051 | 7.8 | — | Microsoft | Windows 10 Version 1809 | CWE-843 | Windows SmartScreen Elevation of Privilege Vulnerability |
| CVE-2026-70052 | 7.8 | — | Microsoft | Windows 11 version 23H2 | CWE-122 | Microsoft PowerShell Remote Code Execution Vulnerability |
| CVE-2026-70054 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows NetBIOS Elevation of Privilege Vulnerability |
| CVE-2026-70059 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows OLE Elevation of Privilege Vulnerability |
| CVE-2026-70060 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-70064 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-191 | Windows Kerberos Elevation of Privilege Vulnerability |
| CVE-2026-70092 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability |
| CVE-2026-70093 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Rich Text Edit Control Elevation of Privilege Vulnerability |
| CVE-2026-70102 | 7.8 | — | Microsoft | Windows 10 Version 1809 | CWE-416 | Windows Spaceport.sys Elevation of Privilege Vulnerability |
| CVE-2026-70103 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Error Reporting Elevation of Privilege Vulnerability |
| CVE-2026-70104 | 7.8 | — | Microsoft | Windows 10 Version 1809 | CWE-822 | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-70106 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-70108 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-70109 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability |
| CVE-2026-70110 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-121 | Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability |
| CVE-2026-70112 | 7.8 | — | Microsoft | Windows 10 Version 1809 | CWE-122 | Windows Spaceport.sys Remote Code Execution Vulnerability |
| CVE-2026-70113 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-190 | Windows Client for NFS Elevation of Privilege Vulnerability |
| CVE-2026-70114 | 7.8 | — | Microsoft | Windows 11 version 23H2 | CWE-122 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-70117 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-70121 | 7.8 | — | Microsoft | Windows 10 Version 1809 | CWE-122 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-70123 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Microsoft Graphics Component Elevation of Privilege Vulnerability |
| CVE-2026-70131 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Microsoft Windows Media Foundation Elevation of Privilege Vulnerability |
| CVE-2026-70132 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Portable Device File System Driver Elevation of Privilege Vulnerability |
| CVE-2026-70138 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows OLE Elevation of Privilege Vulnerability |
| CVE-2026-70139 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Update Service Elevation of Privilege Vulnerability |
| CVE-2026-70142 | 7.8 | — | Microsoft | Windows 11 version 23H2 | CWE-426 | Windows Update Service Elevation of Privilege Vulnerability |
| CVE-2026-70143 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Network File System Remote Code Execution Vulnerability |
| CVE-2026-70151 | 7.8 | — | Microsoft | Windows 10 Version 21H2 | CWE-416 | Windows Direct Composition Elevation of Privilege Vulnerability |
| CVE-2026-70172 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-822 | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2026-70177 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-20 | Microsoft Windows Search Component Elevation of Privilege Vulnerability |
| CVE-2026-70184 | 7.8 | — | Microsoft | Windows 10 Version 21H2 | CWE-41 | Windows Backup Engine Elevation of Privilege Vulnerability |
| CVE-2026-70218 | 7.8 | — | Microsoft | Windows 11 Version 24H2 | CWE-285 | Windows StateRepository API Elevation of Privilege Vulnerability |
| CVE-2026-70220 | 7.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-122 | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-70222 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-23 | Windows Shell Elevation of Privilege Vulnerability |
| CVE-2026-70225 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-843 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerab… |
| CVE-2026-70228 | 7.8 | — | Microsoft | Windows 10 Version 1809 | CWE-125 | Desktop Window Manager Elevation of Privilege Vulnerability |
| CVE-2026-70233 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
| CVE-2026-70238 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Storage Spaces Controller Elevation of Privilege Vulnerability |
| CVE-2026-70245 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-843 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerab… |
| CVE-2026-70247 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-125 | HTTP.sys Remote Code Execution Vulnerability |
| CVE-2026-70255 | 7.8 | — | Microsoft | Windows 10 Version 1809 | CWE-122 | Desktop Window Manager Elevation of Privilege Vulnerability |
| CVE-2026-70274 | 7.8 | — | Microsoft | Windows 11 version 23H2 | CWE-416 | Windows Bind Filter Driver Elevation of Privilege Vulnerability |
| CVE-2026-70278 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Microsoft Windows Media Foundation Elevation of Privilege Vulnerability |
| CVE-2026-70285 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-70286 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Graphics Component Elevation of Privilege Vulnerability |
| CVE-2026-70303 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-787 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-70566 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-476 | Windows Schannel Elevation of Privilege Vulnerability |
| CVE-2026-73027 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-15 | Windows Setup Files Cleanup Elevation of Privilege Vulnerability |
| CVE-2026-78459 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Microsoft Internet Information Services Elevation of Privilege Vulnerability |
| CVE-2026-81969 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-1220 | Windows Server Update Service Elevation of Privilege Vulnerability |
| CVE-2026-83499 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-1220 | Windows Server Update Service Elevation of Privilege Vulnerability |
| CVE-2026-83506 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-426 | Servicing Stack Updates Elevation of Privilege Vulnerability |
| CVE-2026-83508 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-125 | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2026-83513 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privileg… |
| CVE-2026-83514 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Partition Management Driver Elevation of Privilege Vulnerability |
| CVE-2026-83518 | 7.8 | — | Microsoft | Windows 11 version 23H2 | CWE-122 | RPC Runtime Elevation of Privilege Vulnerability |
| CVE-2026-83567 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-125 | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2026-83568 | 7.8 | — | Microsoft | Windows 11 Version 24H2 | CWE-862 | Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability |
| CVE-2026-83569 | 7.8 | — | Microsoft | Windows 10 Version 1809 | CWE-122 | HID Parser Library Elevation of Privilege Vulnerability |
| CVE-2026-83570 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Search Service Elevation of Privilege Vulnerability |
| CVE-2026-83579 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Smart Card Elevation of Privilege Vulnerability |
| CVE-2026-83583 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-862 | Windows Geotag Broker Elevation of Privilege Vulnerability |
| CVE-2026-83585 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-134 | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2026-83586 | 7.8 | — | Microsoft | Windows 11 version 23H2 | CWE-1390 | Windows Resilient File System (ReFS) Deduplication Service Elevation of Privi… |
| CVE-2026-83587 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-822 | Windows Core Messaging Elevation of Privilege Vulnerability |
| CVE-2026-83588 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows USB Driver Elevation of Privilege Vulnerability |
| CVE-2026-83634 | 7.8 | — | Microsoft | Windows 11 version 23H2 | CWE-415 | Windows BitLocker Elevation of Privilege Vulnerability |
| CVE-2026-83637 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-125 | Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability |
| CVE-2026-83638 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows USB Driver Elevation of Privilege Vulnerability |
| CVE-2026-83639 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Sensor Data Service Elevation of Privilege Vulnerability |
| CVE-2026-83640 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows NTFS Remote Code Execution Vulnerability |
| CVE-2026-83641 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Media Elevation of Privilege Vulnerability |
| CVE-2026-83650 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Media Elevation of Privilege Vulnerability |
| CVE-2026-83652 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2026-83654 | 7.8 | — | Microsoft | Windows 10 Version 21H2 | CWE-306 | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability |
| CVE-2026-83659 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-59 | Windows User Profile Service Elevation of Privilege Vulnerability |
| CVE-2026-83661 | 7.8 | — | Adobe | Photoshop | CWE-190 | Photoshop Desktop | Integer Overflow or Wraparound (CWE-190) |
| CVE-2026-83669 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-908 | Windows Error Reporting Elevation of Privilege Vulnerability |
| CVE-2026-83678 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows TCP/IP Elevation of Privilege Vulnerability |
| CVE-2026-83679 | 7.8 | — | Microsoft | Windows 11 version 23H2 | CWE-416 | Windows Defender Firewall Service Elevation of Privilege Vulnerability |
| CVE-2026-83690 | 7.8 | — | Microsoft | Windows 10 Version 1809 | CWE-416 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-83691 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows DHCP Server Elevation of Privilege Vulnerability |
| CVE-2026-83692 | 7.8 | — | Microsoft | Windows 10 Version 21H2 | CWE-122 | Windows Bind Filter Driver Elevation of Privilege Vulnerability |
| CVE-2026-83698 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability |
| CVE-2026-83699 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-121 | Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability |
| CVE-2026-83700 | 7.8 | — | Microsoft | Windows 10 Version 1809 | CWE-416 | Windows Now Playing Session Manager Elevation of Privilege Vulnerability |
| CVE-2026-83704 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-59 | Microsoft Windows Search Component Elevation of Privilege Vulnerability |
| CVE-2026-83709 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows NTLM Elevation of Privilege Vulnerability |
| CVE-2026-83712 | 7.8 | — | Microsoft | Windows 10 Version 1809 | CWE-787 | Windows NTFS Remote Code Execution Vulnerability |
| CVE-2026-83721 | 7.8 | — | Microsoft | Windows 11 Version 24H2 | CWE-416 | Win32k Elevation of Privilege Vulnerability |
| CVE-2026-83726 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows DWM Core Library Elevation of Privilege Vulnerability |
| CVE-2026-83727 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-126 | Windows Overlay Filter Elevation of Privilege Vulnerability |
| CVE-2026-83732 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Win32k Elevation of Privilege Vulnerability |
| CVE-2026-83735 | 7.8 | — | Microsoft | Windows 11 version 23H2 | CWE-763 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-83741 | 7.8 | — | Microsoft | Windows 10 Version 1809 | CWE-416 | Internet Explorer Elevation of Privilege Vulnerability |
| CVE-2026-83753 | 7.8 | — | Microsoft | Windows 10 Version 21H2 | CWE-122 | Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability |
| CVE-2026-83756 | 7.8 | — | Microsoft | Windows 10 Version 21H2 | CWE-416 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability |
| CVE-2026-83757 | 7.8 | — | Microsoft | Windows 11 version 23H2 | CWE-122 | Win32k Elevation of Privilege Vulnerability |
| CVE-2026-83758 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Error Reporting Remote Code Execution Vulnerability |
| CVE-2026-83761 | 7.8 | — | Microsoft | Windows 10 Version 1809 | CWE-416 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability |
| CVE-2026-83762 | 7.8 | — | Microsoft | Windows 10 Version 1809 | CWE-416 | Win32k Elevation of Privilege Vulnerability |
| CVE-2026-83763 | 7.8 | — | Microsoft | Windows 10 Version 1809 | CWE-843 | Windows Input System Elevation of Privilege Vulnerability |
| CVE-2026-83767 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-121 | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-83768 | 7.8 | — | Microsoft | Windows 10 Version 1809 | CWE-122 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-83769 | 7.8 | — | Microsoft | Windows 10 Version 1809 | CWE-416 | Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability |
| CVE-2026-83779 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-83781 | 7.8 | — | Microsoft | Windows 11 version 23H2 | CWE-170 | Windows Program Compatibility Assistant Service Elevation of Privilege Vulner… |
| CVE-2026-83783 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Management Instrumentation Elevation of Privilege Vulnerability |
| CVE-2026-83791 | 7.8 | — | Microsoft | Windows 10 Version 1809 | CWE-283 | Windows Virtual Input Elevation of Privilege Vulnerability |
| CVE-2026-83792 | 7.8 | — | Microsoft | Windows 10 Version 21H2 | CWE-863 | Windows Device Install Service Elevation of Privilege Vulnerability |
| CVE-2026-83796 | 7.8 | — | Microsoft | Windows 11 version 23H2 | CWE-416 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-83826 | 7.8 | — | Microsoft | Windows 11 version 23H2 | CWE-822 | Windows Error Reporting Elevation of Privilege Vulnerability |
| CVE-2026-83828 | 7.8 | — | Microsoft | Windows 11 Version 24H2 | CWE-122 | Windows MIDI Service Module Elevation of Privileges Vulnerability |
| CVE-2026-83829 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Microsoft Windows Search Component Elevation of Privilege Vulnerability |
| CVE-2026-83830 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows COM+ Event System Service Elevation of Privilege Vulnerability |
| CVE-2026-83832 | 7.8 | — | Microsoft | Windows 10 Version 1809 | CWE-125 | Windows Spaceport.sys Elevation of Privilege Vulnerability |
| CVE-2026-83833 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-83836 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Event Tracing Remote Code Execution Vulnerability |
| CVE-2026-83837 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-441 | Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability |
| CVE-2026-83840 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-1390 | Windows Error Reporting Elevation of Privilege Vulnerability |
| CVE-2026-83847 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Microsoft Account Elevation of Privilege Vulnerability |
| CVE-2026-83848 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-822 | Windows COM+ Event System Service Elevation of Privilege Vulnerability |
| CVE-2026-83850 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Microsoft Windows Search Component Elevation of Privilege Vulnerability |
| CVE-2026-83857 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-121 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privileg… |
| CVE-2026-83859 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2026-83861 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Remote Desktop Protocol Elevation of Privilege Vulnerability |
| CVE-2026-83863 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Servicing Stack Updates Elevation of Privilege Vulnerability |
| CVE-2026-83867 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Push Notifications Elevation of Privilege Vulnerability |
| CVE-2026-83872 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-681 | Windows TCP/IP Local Elevation of Privilege Vulnerability |
| CVE-2026-83873 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-23 | Windows Shell Elevation of Privilege Vulnerability |
| CVE-2026-83876 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Shell Elevation of Privilege Vulnerability |
| CVE-2026-83877 | 7.8 | — | Microsoft | Windows 10 Version 1809 | CWE-190 | Windows Devices Human Interface Elevation of Privilege Vulnerability |
| CVE-2026-83881 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows exFAT File System Elevation of Privilege Vulnerability |
| CVE-2026-83882 | 7.8 | — | Microsoft | Windows 10 Version 1809 | CWE-122 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-83883 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-83896 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Direct Composition Elevation of Privilege Vulnerability |
| CVE-2026-83902 | 7.8 | — | Microsoft | Windows 10 Version 1809 | CWE-122 | Windows Direct Composition Elevation of Privilege Vulnerability |
| CVE-2026-83903 | 7.8 | — | Microsoft | Windows 11 Version 24H2 | CWE-122 | Windows Direct Composition Elevation of Privilege Vulnerability |
| CVE-2026-83912 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Direct Composition Elevation of Privilege Vulnerability |
| CVE-2026-83913 | 7.8 | — | Microsoft | Windows 10 Version 21H2 | CWE-416 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-83918 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-190 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-83919 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Microsoft Internet Messaging API Remote Code Execution Vulnerability |
| CVE-2026-83920 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Search Service Elevation of Privilege Vulnerability |
| CVE-2026-83922 | 7.8 | — | Microsoft | Windows 10 Version 21H2 | CWE-416 | Windows Direct Composition Elevation of Privilege Vulnerability |
| CVE-2026-83927 | 7.8 | — | Microsoft | Windows 10 Version 21H2 | CWE-59 | Windows Registry Elevation of Privilege Vulnerability |
| CVE-2026-83931 | 7.8 | — | Microsoft | Windows 11 version 23H2 | CWE-122 | Windows Hyper-V Remote Code Execution Vulnerability |
| CVE-2026-83932 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Group Policy Elevation of Privilege Vulnerability |
| CVE-2026-83965 | 7.8 | — | Adobe | Substance 3D Sampler | CWE-121 | Substance3D - Sampler | Stack-based Buffer Overflow (CWE-121) |
| CVE-2026-83966 | 7.8 | — | Adobe | Substance 3D Sampler | CWE-787 | Substance3D - Sampler | Out-of-bounds Write (CWE-787) |
| CVE-2026-84013 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Telephony Server Elevation of Privilege Vulnerability |
| CVE-2026-84016 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-787 | Windows EAPHost Service Elevation of Privilege Vulnerability |
| CVE-2026-85318 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Servicing Stack Updates Elevation of Privilege Vulnerability |
| CVE-2026-85327 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Print Spooler Components Elevation of Privilege Vulnerability |
| CVE-2026-85332 | 7.8 | — | Microsoft | Windows 10 Version 1809 | CWE-416 | Windows Device Association Service Elevation of Privilege Vulnerability |
| CVE-2026-85338 | 7.8 | — | Microsoft | Windows 10 Version 1809 | CWE-125 | Microsoft Graphics Component Elevation of Privilege Vulnerability |
| CVE-2026-85340 | 7.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-416 | Microsoft Office Click-To-Run Elevation of Privilege Vulnerability |
| CVE-2026-85341 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows USB Video Driver Elevation of Privilege Vulnerability |
| CVE-2026-85343 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-59 | Windows Hyper-V Elevation of Privilege Vulnerability |
| CVE-2026-85356 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-125 | Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability |
| CVE-2026-85358 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-85359 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-94 | Windows Performance Monitor Elevation of Privilege Vulnerability |
| CVE-2026-85366 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-85368 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows TCP/IP Elevation of Privilege Vulnerability |
| CVE-2026-85373 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vul… |
| CVE-2026-85375 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vul… |
| CVE-2026-85376 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-1390 | Windows Print Spooler Components Elevation of Privilege Vulnerability |
| CVE-2026-85377 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-843 | Windows CD-ROM Driver Elevation of Privilege Vulnerability |
| CVE-2026-85795 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Text Services Framework Elevation of Privilege Vulnerability |
| CVE-2026-85796 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-121 | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-85800 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Error Reporting Elevation of Privilege Vulnerability |
| CVE-2026-85804 | 7.8 | — | Microsoft | Windows 11 version 23H2 | CWE-416 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability |
| CVE-2026-85807 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-190 | Windows USB Video Driver Elevation of Privilege Vulnerability |
| CVE-2026-85820 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privileg… |
| CVE-2026-85822 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows exFAT File System Elevation of Privilege Vulnerability |
| CVE-2026-85829 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-415 | Windows Wired AutoConfig Service Elevation of Privilege Vulnerability |
| CVE-2026-85832 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege… |
| CVE-2026-85833 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability |
| CVE-2026-85836 | 7.8 | — | Microsoft | Windows 11 Version 24H2 | CWE-416 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-85837 | 7.8 | — | Microsoft | Windows 11 Version 24H2 | CWE-125 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-85842 | 7.8 | — | Microsoft | Windows 10 Version 21H2 | CWE-134 | Windows Image Acquisition Elevation of Privilege Vulnerability |
| CVE-2026-85843 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-908 | Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege… |
| CVE-2026-85848 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege… |
| CVE-2026-85849 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-59 | Windows AppX Deployment Service Elevation of Privilege Vulnerability |
| CVE-2026-85850 | 7.8 | — | Microsoft | Windows 11 version 26H1 | CWE-763 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-85851 | 7.8 | — | Microsoft | Windows 11 version 23H2 | CWE-416 | Windows SmartScreen Elevation of Privilege Vulnerability |
| CVE-2026-85858 | 7.8 | — | Microsoft | Windows 11 version 23H2 | CWE-125 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability |
| CVE-2026-85860 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Message Queuing Queue Manager Elevation of Privilege Vulnerability |
| CVE-2026-85861 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Clipboard User Service Elevation of Privilege Vulnerability |
| CVE-2026-85863 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Clipboard User Service Elevation of Privilege Vulnerability |
| CVE-2026-85864 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-641 | Python Elevation of Privilege Vulnerability |
| CVE-2026-85867 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability |
| CVE-2026-85869 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Microsoft Windows Search Component Elevation of Privilege Vulnerability |
| CVE-2026-85871 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability |
| CVE-2026-85872 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Storage VSP Driver Elevation of Privilege Vulnerability |
| CVE-2026-85874 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Message Queuing Queue Manager Remote Code Execution Vulnerability |
| CVE-2026-85884 | 7.8 | — | Microsoft | Windows 11 Version 24H2 | CWE-306 | Windows Health and Optimized Experiences Service Elevation of Privilege Vulne… |
| CVE-2026-85901 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Graphics Component Elevation of Privilege Vulnerability |
| CVE-2026-85902 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Direct Composition Elevation of Privilege Vulnerability |
| CVE-2026-85906 | 7.8 | — | Microsoft | Windows 10 Version 21H2 | CWE-416 | Windows Direct Composition Elevation of Privilege Vulnerability |
| CVE-2026-85908 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Graphics Component Elevation of Privilege Vulnerability |
| CVE-2026-85911 | 7.8 | — | Microsoft | Windows 10 Version 1809 | CWE-416 | Windows StateRepository API Elevation of Privilege Vulnerability |
| CVE-2026-85915 | 7.8 | — | Microsoft | Windows 10 Version 1809 | CWE-122 | Windows PCI Bus Driver Elevation of Privilege Vulnerability |
| CVE-2026-85927 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vul… |
| CVE-2026-85933 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Print Spooler Components Elevation of Privilege Vulnerability |
| CVE-2026-85945 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-87691 | 7.8 | — | Microsoft | Windows 11 version 23H2 | CWE-416 | Windows Management Services Elevation of Privilege Vulnerability |
| CVE-2026-87692 | 7.8 | — | Microsoft | Microsoft Exchange Server 2016 Cumulative Update 23 | CWE-502 | Microsoft Exchange Server Elevation of Privilege Vulnerability |
| CVE-2026-87694 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-87695 | 7.8 | — | Microsoft | Microsoft Exchange Server 2016 Cumulative Update 23 | CWE-829 | Microsoft Exchange Server Elevation of Privilege Vulnerability |
| CVE-2026-87699 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Winlogon Elevation of Privilege Vulnerability |
| CVE-2026-87700 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-87702 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-190 | Windows Resource Management (MRM) Elevation of Privilege Vulnerability |
| CVE-2026-87706 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Storage Spaces Controller Elevation of Privilege Vulnerability |
| CVE-2026-87707 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Fax and Scan Service Elevation of Privilege Vulnerability |
| CVE-2026-87711 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-121 | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-87712 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Microsoft Windows QoS Scheduler Driver Elevation of Privilege Vulnerability |
| CVE-2026-88070 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-125 | Windows BitLocker Elevation of Privilege Vulnerability |
| CVE-2026-88071 | 7.8 | — | Microsoft | Windows 11 version 23H2 | CWE-415 | Windows Hyper-V Elevation of Privilege Vulnerability |
| CVE-2026-88072 | 7.8 | — | Microsoft | Windows 10 Version 1809 | CWE-59 | Windows Host Guardian Service Elevation of Privilege Vulnerability |
| CVE-2026-88074 | 7.8 | — | Microsoft | Windows 11 version 23H2 | CWE-190 | Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vu… |
| CVE-2026-88080 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-88091 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-502 | Windows Management Instrumentation Elevation of Privilege Vulnerability |
| CVE-2026-88093 | 7.8 | — | Microsoft | Windows 10 Version 1809 | CWE-122 | Desktop Window Manager Elevation of Privilege Vulnerability |
| CVE-2026-88100 | 7.8 | — | Microsoft | Windows 11 Version 24H2 | CWE-416 | Windows Storage Spaces Controller Elevation of Privilege Vulnerability |
| CVE-2026-88101 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-1390 | Microsoft Input Method Editor (IME) Elevation of Privilege Vulnerability |
| CVE-2026-88105 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability |
| CVE-2026-88109 | 7.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-416 | Microsoft Office Click-To-Run Elevation of Privilege Vulnerability |
| CVE-2026-88118 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege… |
| CVE-2026-88126 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-822 | WebDAV Elevation of Privilege Vulnerability |
| CVE-2026-88128 | 7.8 | — | Microsoft | Windows 10 Version 1809 | CWE-122 | Windows DWM Core Library Elevation of Privilege Vulnerability |
| CVE-2026-88133 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-59 | Windows Portable Device Enumerator Service Elevation of Privilege Vulnerability |
| CVE-2026-88134 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-88135 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-862 | WebDAV Elevation of Privilege Vulnerability |
| CVE-2026-88147 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulner… |
| CVE-2026-88152 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege… |
| CVE-2026-88168 | 7.8 | — | Microsoft | Windows 10 Version 1809 | CWE-122 | Windows Bind Filter Driver Elevation of Privilege Vulnerability |
| CVE-2026-88177 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-125 | Windows DWM Core Library Elevation of Privilege Vulnerability |
| CVE-2026-88179 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-125 | Windows DWM Core Library Elevation of Privilege Vulnerability |
| CVE-2026-88180 | 7.8 | — | Microsoft | Windows 10 Version 1809 | CWE-125 | Windows DWM Core Library Elevation of Privilege Vulnerability |
| CVE-2026-88181 | 7.8 | — | Microsoft | Windows 10 Version 1809 | CWE-125 | Windows DWM Core Library Elevation of Privilege Vulnerability |
| CVE-2026-88182 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Microsoft Windows Search Component Elevation of Privilege Vulnerability |
| CVE-2026-88188 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-125 | Windows DWM Core Library Elevation of Privilege Vulnerability |
| CVE-2026-88189 | 7.8 | — | Microsoft | Windows 10 Version 1809 | CWE-125 | Windows DWM Core Library Elevation of Privilege Vulnerability |
| CVE-2026-88191 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-59 | Microsoft Windows Search Component Elevation of Privilege Vulnerability |
| CVE-2026-88193 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Microsoft Scripting Engine Elevation of Privilege Vulnerability |
| CVE-2026-88194 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-125 | Windows DWM Core Library Elevation of Privilege Vulnerability |
| CVE-2026-88210 | 7.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-807 | Microsoft Office Word Security Feature Bypass Vulnerability |
| CVE-2026-95635 | 7.8 | — | Adobe | Photoshop | CWE-415 | Photoshop Desktop | Double Free (CWE-415) |
| CVE-2026-95636 | 7.8 | — | Adobe | Photoshop | CWE-190 | Photoshop Desktop | Integer Overflow or Wraparound (CWE-190) |
| CVE-2026-95637 | 7.8 | — | Adobe | Photoshop | CWE-787 | Photoshop Desktop | Out-of-bounds Write (CWE-787) |
| CVE-2026-95638 | 7.8 | — | Adobe | Photoshop | CWE-122 | Photoshop Desktop | Heap-based Buffer Overflow (CWE-122) |
| CVE-2026-95641 | 7.8 | — | Adobe | Photoshop | CWE-787 | Photoshop Desktop | Out-of-bounds Write (CWE-787) |
| CVE-2026-96108 | 7.8 | — | Microsoft | Windows 10 Version 1809 | CWE-416 | Desktop Window Manager Elevation of Privilege Vulnerability |
| CVE-2026-96118 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-125 | Windows Graphics Kernel Elevation of Privilege Vulnerability |
| CVE-2026-96186 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-502 | Microsoft Windows Media Foundation Elevation of Privilege Vulnerability |
| CVE-2026-96217 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2026-96220 | 7.8 | — | Microsoft | Windows 10 Version 1809 | CWE-94 | Windows Assigned Access Elevation of Privilege Vulnerability |
| CVE-2026-96223 | 7.8 | — | Microsoft | Windows 11 Version 24H2 | CWE-416 | Windows Hyper-V Elevation of Privilege Vulnerability |
| CVE-2026-96225 | 7.8 | — | Microsoft | .NET 10.0 | CWE-59 | .NET Elevation of Privilege Vulnerability |
| CVE-2026-96231 | 7.8 | — | Microsoft | .NET 10.0 | CWE-59 | .NET Elevation of Privilege Vulnerability |
| CVE-2026-96243 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-59 | Windows WalletService Elevation of Privilege Vulnerability |
| CVE-2026-96244 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Internal System User Profile Elevation of Privilege Vulnerability |
| CVE-2026-96249 | 7.8 | — | Microsoft | Windows 11 Version 24H2 | CWE-416 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability |
| CVE-2026-96306 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-125 | Windows Sysmain Service Elevation of Privilege Vulnerability |
| CVE-2026-96308 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-96309 | 7.8 | — | Microsoft | Windows 10 Version 21H2 | CWE-416 | Windows Subsystem for Linux Elevation of Privilege Vulnerability |
| CVE-2026-96312 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-96317 | 7.8 | — | Microsoft | Windows 10 Version 1809 | CWE-416 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-96318 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Resume Elevation of Privilege Vulnerability |
| CVE-2026-96324 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Microsoft Windows Search Component Elevation of Privilege Vulnerability |
| CVE-2026-96521 | 7.8 | — | Adobe | Photoshop | CWE-787 | Photoshop Desktop | Out-of-bounds Write (CWE-787) |
| CVE-2026-96522 | 7.8 | — | Adobe | Photoshop | CWE-787 | Photoshop Desktop | Out-of-bounds Write (CWE-787) |
| CVE-2026-96523 | 7.8 | — | Adobe | Photoshop | CWE-787 | Photoshop Desktop | Out-of-bounds Write (CWE-787) |
| CVE-2026-96843 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | WebDAV Elevation of Privilege Vulnerability |
| CVE-2026-96847 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-822 | WebDAV Elevation of Privilege Vulnerability |
| CVE-2026-96856 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Management Instrumentation Elevation of Privilege Vulnerability |
| CVE-2026-96862 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-125 | Windows Spaceport.sys Elevation of Privilege Vulnerability |
| CVE-2026-96867 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-125 | Windows NTFS Remote Code Execution Vulnerability |
| CVE-2026-96911 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-59 | Microsoft Windows Search Component Elevation of Privilege Vulnerability |
| CVE-2026-96912 | 7.8 | — | Microsoft | Windows 10 Version 1809 | CWE-416 | Windows Client License Service Elevation of Privilege Vulnerability |
| CVE-2026-96915 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-190 | Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability |
| CVE-2026-96916 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2026-96918 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-863 | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2026-96920 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Program Compatibility Assistant Service Elevation of Privilege Vulner… |
| CVE-2026-96928 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-125 | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2026-96929 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-96931 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-822 | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2026-96933 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-822 | Windows COM+ Event System Service Elevation of Privilege Vulnerability |
| CVE-2026-96946 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privileg… |
| CVE-2026-96947 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privileg… |
| CVE-2026-96950 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privileg… |
| CVE-2026-96953 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-476 | Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution… |
| CVE-2026-96995 | 7.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-121 | Microsoft Office Word Elevation of Privilege Vulnerability |
| CVE-2026-96996 | 7.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-122 | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-96997 | 7.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-416 | Microsoft Office OneNote Elevation of Privilege Vulnerability |
| CVE-2026-97001 | 7.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-122 | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-97009 | 7.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-122 | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-97312 | 7.8 | — | Adobe | Photoshop | CWE-787 | Photoshop Desktop | Out-of-bounds Write (CWE-787) |
| CVE-2026-97792 | 7.8 | — | Microsoft | Windows 11 version 23H2 | CWE-732 | Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privi… |
| CVE-2026-97794 | 7.8 | — | Microsoft | Windows 11 version 23H2 | CWE-122 | Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privi… |
| CVE-2026-97798 | 7.8 | — | Microsoft | Windows 10 Version 21H2 | CWE-88 | Windows Error Reporting Service Elevation of Privilege Vulnerability |
| CVE-2026-97799 | 7.8 | — | Microsoft | Windows 11 Version 24H2 | CWE-347 | Windows Audio Service Elevation of Privilege Vulnerability |
| CVE-2026-97800 | 7.8 | — | Microsoft | Windows 11 Version 24H2 | CWE-732 | Windows Mobile Broadband Elevation of Privilege Vulnerability |
| CVE-2026-97803 | 7.8 | — | Microsoft | Windows 11 version 26H1 | CWE-122 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-97804 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | HID Class Driver Elevation of Privilege Vulnerability |
| CVE-2026-97806 | 7.8 | — | Microsoft | Windows 10 Version 1809 | CWE-416 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability |
| CVE-2026-97807 | 7.8 | — | Microsoft | Windows 10 Version 1809 | CWE-416 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability |
| CVE-2026-97809 | 7.8 | — | Microsoft | Windows 10 Version 1809 | CWE-416 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability |
| CVE-2026-97811 | 7.8 | — | Microsoft | Windows 10 Version 1809 | CWE-400 | Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability |
| CVE-2026-100111 | 7.8 | — | Adobe | Photoshop | CWE-787 | Photoshop Desktop | Out-of-bounds Write (CWE-787) |
| CVE-2026-100112 | 7.8 | — | Adobe | Photoshop | CWE-787 | Photoshop Desktop | Out-of-bounds Write (CWE-787) |
| CVE-2026-100127 | 7.8 | — | Adobe | Adobe Bridge | CWE-787 | Bridge | Out-of-bounds Write (CWE-787) |
| CVE-2026-100128 | 7.8 | — | Adobe | Adobe Bridge | CWE-787 | Bridge | Out-of-bounds Write (CWE-787) |
| CVE-2026-100129 | 7.8 | — | Adobe | Adobe Bridge | CWE-787 | Bridge | Out-of-bounds Write (CWE-787) |
| CVE-2026-100215 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Microsoft Graphics Component Remote Code Execution Vulnerability |
| CVE-2026-100217 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-862 | Windows Group Policy Elevation of Privilege Vulnerability |
| CVE-2026-102196 | 7.8 | — | Microsoft | Windows 10 Version 1809 | CWE-416 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability |
| CVE-2026-102201 | 7.8 | — | Microsoft | Windows 10 Version 1809 | CWE-416 | Microsoft Windows Media Foundation Elevation of Privilege Vulnerability |
| CVE-2026-102202 | 7.8 | — | Microsoft | Windows 11 version 23H2 | CWE-59 | Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privi… |
| CVE-2026-102204 | 7.8 | — | Microsoft | Microsoft Defender for Endpoint for Linux | CWE-59 | Microsoft Microsoft Defender for Endpoint Elevation of Privilege Vulnerability |
| CVE-2026-102205 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privileg… |
| CVE-2026-102215 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privileg… |
| CVE-2026-102216 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-843 | Windows StateRepository API Elevation of Privilege Vulnerability |
| CVE-2026-102218 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privileg… |
| CVE-2026-102220 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows VHD miniport driver Elevation of Privilege Vulnerability |
| CVE-2026-102227 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability |
| CVE-2026-102233 | 7.8 | — | Microsoft | Visual Studio Code | CWE-862 | Visual Studio Code Security Feature Bypass Vulnerability |
| CVE-2026-103553 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-125 | Windows Partition Management Driver Elevation of Privilege Vulnerability |
| CVE-2026-103568 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Credential Providers Elevation of Privilege Vulnerability |