Security Box Score — October 13, 2026 — page 3
Edition of October 13, 2026, continued — page 3 of 5. Back to page 1 · page 2 · page 4
| CVE | CVSS | EPSS %ile | Vendor | Product | CWE | Title |
|---|---|---|---|---|---|---|
| CVE-2026-103821 | 7.8 | — | Adobe | Substance 3D Designer | CWE-787 | Substance3D - Designer | Out-of-bounds Write (CWE-787) |
| CVE-2026-103830 | 7.8 | — | Adobe | Adobe Substance 3D Stager | CWE-121 | Substance3D - Stager | Stack-based Buffer Overflow (CWE-121) |
| CVE-2026-103832 | 7.8 | — | Adobe | Adobe Substance 3D Stager | CWE-787 | Substance3D - Stager | Out-of-bounds Write (CWE-787) |
| CVE-2026-103833 | 7.8 | — | Adobe | Adobe Substance 3D Stager | CWE-787 | Substance3D - Stager | Out-of-bounds Write (CWE-787) |
| CVE-2026-103834 | 7.8 | — | Adobe | Adobe Substance 3D Stager | CWE-787 | Substance3D - Stager | Out-of-bounds Write (CWE-787) |
| CVE-2026-103835 | 7.8 | — | Adobe | Adobe Substance 3D Stager | CWE-787 | Substance3D - Stager | Out-of-bounds Write (CWE-787) |
| CVE-2026-103836 | 7.8 | — | Adobe | Adobe Substance 3D Stager | CWE-787 | Substance3D - Stager | Out-of-bounds Write (CWE-787) |
| CVE-2026-103837 | 7.8 | — | Adobe | Adobe Substance 3D Stager | CWE-787 | Substance3D - Stager | Out-of-bounds Write (CWE-787) |
| CVE-2026-103838 | 7.8 | — | Adobe | Adobe Substance 3D Stager | CWE-787 | Substance3D - Stager | Out-of-bounds Write (CWE-787) |
| CVE-2026-103839 | 7.8 | — | Adobe | Adobe Substance 3D Stager | CWE-787 | Substance3D - Stager | Out-of-bounds Write (CWE-787) |
| CVE-2026-103840 | 7.8 | — | Adobe | Adobe Substance 3D Stager | CWE-125 | Substance3D - Stager | Out-of-bounds Read (CWE-125) |
| CVE-2026-103841 | 7.8 | — | Adobe | Adobe Substance 3D Stager | CWE-125 | Substance3D - Stager | Out-of-bounds Read (CWE-125) |
| CVE-2026-103842 | 7.8 | — | Adobe | Adobe Substance 3D Stager | CWE-125 | Substance3D - Stager | Out-of-bounds Read (CWE-125) |
| CVE-2026-103843 | 7.8 | — | Adobe | Adobe Substance 3D Stager | CWE-416 | Substance3D - Stager | Use After Free (CWE-416) |
| CVE-2026-103844 | 7.8 | — | Adobe | Adobe Dimension | CWE-787 | Dimension | Out-of-bounds Write (CWE-787) |
| CVE-2026-103851 | 7.8 | — | Adobe | Adobe Substance 3D Stager | CWE-121 | Substance3D - Stager | Stack-based Buffer Overflow (CWE-121) |
| CVE-2026-103854 | 7.8 | — | Adobe | Adobe Dimension | CWE-121 | Dimension | Stack-based Buffer Overflow (CWE-121) |
| CVE-2026-103966 | 7.8 | — | Adobe | Adobe FrameMaker 2026 | CWE-122 | Adobe Framemaker | Heap-based Buffer Overflow (CWE-122) |
| CVE-2026-103967 | 7.8 | — | Adobe | Adobe FrameMaker 2026 | CWE-787 | Adobe Framemaker | Out-of-bounds Write (CWE-787) |
| CVE-2026-104340 | 7.8 | — | Adobe | Adobe FrameMaker 2026 | CWE-122 | Adobe Framemaker | Heap-based Buffer Overflow (CWE-122) |
| CVE-2026-104341 | 7.8 | — | Adobe | Adobe FrameMaker 2026 | CWE-787 | Adobe Framemaker | Out-of-bounds Write (CWE-787) |
| CVE-2026-104342 | 7.8 | — | Adobe | Adobe FrameMaker 2026 | CWE-416 | Adobe Framemaker | Use After Free (CWE-416) |
| CVE-2026-104344 | 7.8 | — | Adobe | Adobe FrameMaker 2026 | CWE-122 | Adobe Framemaker | Heap-based Buffer Overflow (CWE-122) |
| CVE-2026-104346 | 7.8 | — | Adobe | Photoshop | CWE-787 | Photoshop Desktop | Out-of-bounds Write (CWE-787) |
| CVE-2026-104347 | 7.8 | — | Adobe | Photoshop | CWE-787 | Photoshop Desktop | Out-of-bounds Write (CWE-787) |
| CVE-2026-104348 | 7.8 | — | Adobe | Photoshop | CWE-122 | Photoshop Desktop | Heap-based Buffer Overflow (CWE-122) |
| CVE-2026-105003 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | HID Class Driver Elevation of Privilege Vulnerability |
| CVE-2026-105004 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-125 | Windows Overlay Filter Elevation of Privilege Vulnerability |
| CVE-2026-106614 | 7.8 | — | Adobe | ColdFusion 2025 | CWE-863 | ColdFusion | Incorrect Authorization (CWE-863) |
| CVE-2026-106625 | 7.8 | — | Adobe | Adobe FrameMaker 2026 | CWE-787 | Adobe Framemaker | Out-of-bounds Write (CWE-787) |
| CVE-2026-108130 | 7.8 | — | Microsoft | Windows 11 Version 24H2 | CWE-122 | Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vu… |
| CVE-2026-108133 | 7.8 | — | Microsoft | Windows Server 2022 | CWE-763 | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability |
| CVE-2026-108136 | 7.8 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Microsoft Windows Search Component Elevation of Privilege Vulnerability |
| CVE-2026-34633 | 7.7 | — | Adobe | ColdFusion 2025 | CWE-918 | ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918) |
| CVE-2026-54641 | 7.7 | — | openremote | openremote | CWE-639 | OpenRemote: Cross-Realm User Information Disclosure in UserResourceImpl |
| CVE-2026-61642 | 7.7 | — | squid-cache | squid | CWE-444 | Squid Request Smuggling in HTTP Transfer-Encoding |
| CVE-2026-77096 | 7.7 | — | Commvault | Commvault Cloud | — | CVFS Missing Authentication |
| CVE-2026-78557 | 7.7 | — | Siemens | Industrial Edge App Publisher | CWE-79 | A vulnerability has been identified in Industrial Edge App Publisher (All ver… |
| CVE-2026-82416 | 7.7 | — | php | frankenphp | CWE-362 | FrankenPHP: Cross-request PHP session ID leak in worker mode when the session… |
| CVE-2026-85888 | 7.7 | — | Microsoft | Microsoft SQL Server 2017 (GDR) | CWE-125 | Microsoft SQL Server Information Disclosure Vulnerability |
| CVE-2026-88081 | 7.7 | — | Microsoft | Microsoft SQL Server 2017 (GDR) | CWE-125 | Microsoft SQL Server Information Disclosure Vulnerability |
| CVE-2026-89201 | 7.7 | — | Siemens | RUGGEDCOM CROSSBOW | CWE-89 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.… |
| CVE-2026-102231 | 7.7 | — | Microsoft | Visual Studio Code | CWE-41 | Visual Studio Code Security Feature Bypass Vulnerability |
| CVE-2026-105994 | 7.7 | — | Adobe | ColdFusion 2025 | CWE-863 | ColdFusion | Incorrect Authorization (CWE-863) |
| CVE-2026-106047 | 7.7 | — | Ivanti | Xtraction | CWE-22 | A Path Traversal vulnerability in the template export functionality of Ivanti… |
| CVE-2026-106634 | 7.7 | — | Adobe | Adobe Experience Manager 6.5 LTS | CWE-22 | Adobe Experience Manager | Improper Limitation of a Pathname to a Restricted … |
| CVE-2026-110102 | 7.7 | — | romkatv | powerlevel10k | CWE-494 | powerlevel10k through 1.20.0 Download of Code Without Integrity Check in gits… |
| CVE-2026-110111 | 7.7 | — | vatesfr | xen-orchestra | CWE-1321 | Xen Orchestra before 6.9.0 Privilege Escalation via Prototype Pollution in vm… |
| CVE-2026-110202 | 7.7 | — | RooCodeInc | Roo-Code | CWE-436 | Roo-Code through 3.54.0 Auto-Approve Bypass via Redirect Operator Stripping |
| CVE-2026-110203 | 7.7 | — | RooCodeInc | Roo-Code | CWE-436 | Roo-Code through 3.54.0 Auto-Approve Bypass via Quote Masking Desynchronization |
| CVE-2026-110204 | 7.7 | — | RooCodeInc | Roo-Code | CWE-436 | Roo-Code through 3.54.0 Auto-Approve Bypass via Funsub Command Substitution |
| CVE-2026-110205 | 7.7 | — | RooCodeInc | Roo-Code | CWE-184 | Roo-Code through 3.54.0 Auto-Approve Bypass via Glob Token Discarding Command… |
| CVE-2026-110206 | 7.7 | — | RooCodeInc | Roo-Code | CWE-436 | Roo-Code through 3.54.0 Auto-Approve Bypass via Command Substitution at Comma… |
| CVE-2026-54640 | 7.6 | — | openremote | openremote | CWE-611 | OpenRemote: XXE in KNXProtocol.startAssetImport() allows arbitrary file read … |
| CVE-2026-75748 | 7.6 | — | Adobe | ColdFusion 2025 | CWE-918 | ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918) |
| CVE-2026-78556 | 7.6 | — | Siemens | Industrial Edge App Publisher | CWE-295 | A vulnerability has been identified in Industrial Edge App Publisher (All ver… |
| CVE-2026-84790 | 7.6 | — | OpenVPN | OpenVPN | CWE-158 | OpenVPN 2.7_alpha1 through 2.7.7 allows remote authenticated users to imperso… |
| CVE-2026-58280 | 7.5 | — | Microsoft | .NET 10.0 | CWE-674 | .NET Denial of Service Vulnerability |
| CVE-2026-65161 | 7.5 | — | NVIDIA | AIStore framework | CWE-22 | NVIDIA AIStore for Linux contains a vulnerability in the Promote API where an… |
| CVE-2026-69454 | 7.5 | — | Microsoft | Windows Server 2019 | CWE-125 | Microsoft Azure Attestation service and Device Health Attestation Service Inf… |
| CVE-2026-69577 | 7.5 | — | Microsoft | Windows Server 2019 | CWE-125 | Microsoft Azure Attestation service and Device Health Attestation Service Inf… |
| CVE-2026-69651 | 7.5 | — | Microsoft | .NET 10.0 | CWE-407 | .NET Denial of Service Vulnerability |
| CVE-2026-69789 | 7.5 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vu… |
| CVE-2026-69976 | 7.5 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Remote Desktop Client Remote Code Execution Vulnerability |
| CVE-2026-69984 | 7.5 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Remote Desktop Client Remote Code Execution Vulnerability |
| CVE-2026-69986 | 7.5 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Remote Desktop Client Remote Code Execution Vulnerability |
| CVE-2026-69987 | 7.5 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Remote Desktop Client Remote Code Execution Vulnerability |
| CVE-2026-69988 | 7.5 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Remote Desktop Client Remote Code Execution Vulnerability |
| CVE-2026-69991 | 7.5 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Remote Desktop Client Remote Code Execution Vulnerability |
| CVE-2026-69992 | 7.5 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Remote Desktop Services Remote Code Execution Vulnerability |
| CVE-2026-69994 | 7.5 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Remote Desktop Client Remote Code Execution Vulnerability |
| CVE-2026-69995 | 7.5 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Remote Desktop Client Remote Code Execution Vulnerability |
| CVE-2026-69996 | 7.5 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Remote Desktop Client Remote Code Execution Vulnerability |
| CVE-2026-69997 | 7.5 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Remote Desktop Client Remote Code Execution Vulnerability |
| CVE-2026-69998 | 7.5 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Remote Desktop Client Remote Code Execution Vulnerability |
| CVE-2026-70004 | 7.5 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Remote Desktop Client Remote Code Execution Vulnerability |
| CVE-2026-70006 | 7.5 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Remote Desktop Client Remote Code Execution Vulnerability |
| CVE-2026-70012 | 7.5 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Remote Desktop Client Remote Code Execution Vulnerability |
| CVE-2026-70014 | 7.5 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Cryptographic Services Remote Code Execution Vulnerability |
| CVE-2026-70031 | 7.5 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows iSCSI Denial of Service Vulnerability |
| CVE-2026-70033 | 7.5 | — | Microsoft | Windows 10 Version 1607 | CWE-401 | Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability |
| CVE-2026-70058 | 7.5 | — | Microsoft | Windows 10 Version 1607 | CWE-787 | Windows DHCP Server Remote Code Execution Vulnerability |
| CVE-2026-70079 | 7.5 | — | Microsoft | Windows 10 Version 1607 | CWE-841 | Windows DNS Denial of Service Vulnerability |
| CVE-2026-70082 | 7.5 | — | Microsoft | Windows Server 2012 | CWE-248 | Windows DNS Denial of Service Vulnerability |
| CVE-2026-70095 | 7.5 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows iSCSI Remote Code Execution Vulnerability |
| CVE-2026-70133 | 7.5 | — | Microsoft | Windows 10 Version 1607 | CWE-770 | Windows SMB Server Denial of Service Vulnerability |
| CVE-2026-70155 | 7.5 | — | Microsoft | Windows 10 Version 1607 | CWE-401 | Windows DNS Denial of Service Vulnerability |
| CVE-2026-70159 | 7.5 | — | Microsoft | Microsoft Visual Studio 2022 version 17.14 | CWE-770 | ASP.NET Core Denial of Service Vulnerability |
| CVE-2026-70163 | 7.5 | — | Microsoft | Windows 10 Version 1809 | CWE-770 | Microsoft OpenSSH for Windows Denial of Service Vulnerability |
| CVE-2026-70179 | 7.5 | — | Microsoft | Microsoft Visual Studio 2022 version 17.14 | CWE-290 | ASP.NET Core Elevation of Privilege Vulnerability |
| CVE-2026-70181 | 7.5 | — | Microsoft | ASP.NET Core 10.0 | CWE-770 | ASP.NET Core Denial of Service Vulnerability |
| CVE-2026-70183 | 7.5 | — | Microsoft | ASP.NET Core 10.0 | CWE-362 | ASP.NET Core Elevation of Privilege Vulnerability |
| CVE-2026-70186 | 7.5 | — | Microsoft | ASP.NET Core 10.0 | CWE-833 | ASP.NET Core Denial of Service Vulnerability |
| CVE-2026-70202 | 7.5 | — | Microsoft | Microsoft SharePoint Server Subscription Edition | CWE-918 | Microsoft Office SharePoint Elevation of Privilege Vulnerability |
| CVE-2026-70207 | 7.5 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Network Policy Server (NPS) Remote Code Execution Vulnerability |
| CVE-2026-70251 | 7.5 | — | Microsoft | Microsoft SharePoint Server Subscription Edition | CWE-918 | Microsoft Office SharePoint Elevation of Privilege Vulnerability |
| CVE-2026-70281 | 7.5 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-125 | Microsoft Office Outlook Information Disclosure Vulnerability |
| CVE-2026-75996 | 7.5 | — | Adobe | ColdFusion 2025 | CWE-400 | ColdFusion | Uncontrolled Resource Consumption (CWE-400) |
| CVE-2026-77206 | 7.5 | — | The Libreswan Project | libreswan | CWE-476 | IKEv2 pre-authentication Null Pointer Dereference in EAP code |
| CVE-2026-77207 | 7.5 | — | The Libreswan Project | libreswan | CWE-252 | Null Pointer Dereference in PKCS#7 bundle with no certificates |
| CVE-2026-83516 | 7.5 | — | Microsoft | Windows 10 Version 1809 | CWE-125 | Windows Local Security Authority Subsystem Service (LSASS) Denial of Service … |
| CVE-2026-83635 | 7.5 | — | Microsoft | Windows Server 2012 | CWE-125 | Role: DNS Server Denial of Service Vulnerability |
| CVE-2026-83645 | 7.5 | — | Microsoft | Windows 10 Version 1607 | CWE-770 | Active Directory Federation Services (AD FS) Denial of Service Vulnerability |
| CVE-2026-83647 | 7.5 | — | Microsoft | Windows 10 Version 1607 | CWE-125 | Windows Active Directory Domain Services Denial of Service Vulnerability |
| CVE-2026-83655 | 7.5 | — | Microsoft | Windows 10 Version 1607 | CWE-125 | Network Policy Server (NPS) Denial of Service Vulnerability |
| CVE-2026-83665 | 7.5 | — | Microsoft | Windows 10 Version 1607 | CWE-476 | Windows DHCP Server Denial of Service Vulnerability |
| CVE-2026-83670 | 7.5 | — | Microsoft | Windows 10 Version 1607 | CWE-125 | Function Discovery Service (fdwsd.dll) Information Disclosure Vulnerability |
| CVE-2026-83677 | 7.5 | — | Microsoft | Windows 11 Version 24H2 | CWE-401 | Windows DHCP Client Denial of Service Vulnerability |
| CVE-2026-83739 | 7.5 | — | Microsoft | Windows 10 Version 1809 | CWE-416 | Windows Bluetooth Service Remote Code Execution Vulnerability |
| CVE-2026-83754 | 7.5 | — | Microsoft | Windows 10 Version 1809 | CWE-122 | Microsoft OpenSSH for Windows Remote Code Execution Vulnerability |
| CVE-2026-83795 | 7.5 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability |
| CVE-2026-83843 | 7.5 | — | Microsoft | Windows 10 Version 1607 | CWE-125 | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability |
| CVE-2026-83855 | 7.5 | — | Microsoft | Windows 11 version 23H2 | CWE-191 | Windows WLAN Service Denial of Service Vulnerability |
| CVE-2026-83856 | 7.5 | — | Microsoft | Windows 11 version 23H2 | CWE-125 | Windows Event Logging Service Remote Code Execution Vulnerability |
| CVE-2026-83860 | 7.5 | — | Microsoft | Windows 10 Version 1607 | CWE-121 | Windows GDI Denial of Service Vulnerability |
| CVE-2026-84008 | 7.5 | — | Microsoft | Microsoft .NET Framework 3.5 | CWE-407 | .NET Denial of Service Vulnerability |
| CVE-2026-84017 | 7.5 | — | Microsoft | Windows 10 Version 1607 | CWE-476 | Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability |
| CVE-2026-85319 | 7.5 | — | Microsoft | Windows 10 Version 1607 | CWE-770 | Active Directory Federation Services (AD FS) Denial of Service Vulnerability |
| CVE-2026-85321 | 7.5 | — | Microsoft | Windows Server 2012 R2 | CWE-770 | Active Directory Federation Services (AD FS) Denial of Service Vulnerability |
| CVE-2026-85322 | 7.5 | — | Microsoft | Windows 10 Version 1607 | CWE-908 | Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulne… |
| CVE-2026-85324 | 7.5 | — | Microsoft | Windows 10 Version 1607 | CWE-789 | Active Directory Federation Services (AD FS) Denial of Service Vulnerability |
| CVE-2026-85334 | 7.5 | — | Microsoft | Windows 10 Version 1607 | CWE-125 | Windows Message Queuing Queue Manager Information Disclosure Vulnerability |
| CVE-2026-85353 | 7.5 | — | Microsoft | Windows 10 Version 1607 | CWE-125 | Windows Print Spooler Components Information Disclosure Vulnerability |
| CVE-2026-85808 | 7.5 | — | Microsoft | Windows 10 Version 1607 | CWE-125 | Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability |
| CVE-2026-85811 | 7.5 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Network Policy Server (NPS) Remote Code Execution Vulnerability |
| CVE-2026-85891 | 7.5 | — | Microsoft | Azure HDInsight | CWE-200 | Azure HDInsight Information Disclosure Vulnerability |
| CVE-2026-86063 | 7.5 | — | anthropics | claude-code | CWE-494 | Claude Code: Plugin Hash Pin Bypass Allows Bypass of Hash Pinning |
| CVE-2026-87696 | 7.5 | — | Microsoft | Microsoft Exchange Server 2016 Cumulative Update 23 | CWE-347 | Microsoft Exchange Server Elevation of Privilege Vulnerability |
| CVE-2026-87713 | 7.5 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Bluetooth Port Driver Remote Code Execution |
| CVE-2026-87716 | 7.5 | — | Microsoft | Windows 10 Version 1809 | CWE-122 | Windows Storage Spaces Controller Denial of Service Vulnerability |
| CVE-2026-88083 | 7.5 | — | Microsoft | Microsoft SQL Server 2022 (CU 26) | CWE-121 | Microsoft SQL Server Remote Code Execution Vulnerability |
| CVE-2026-88206 | 7.5 | — | Microsoft | Microsoft SharePoint Server Subscription Edition | CWE-918 | Microsoft Office SharePoint Elevation of Privilege Vulnerability |
| CVE-2026-88207 | 7.5 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-122 | Microsoft Office PowerPoint Remote Code Execution Vulnerability |
| CVE-2026-94453 | 7.5 | — | The Libreswan Project | libreswan | CWE-416 | IKEv2 Use-After-Free bug when using IKE-over-TCP |
| CVE-2026-95114 | 7.5 | — | n/a | n/a | CWE-125 | libwebsockets contains an out-of-bounds read vulnerability in the LEJP increm… |
| CVE-2026-95122 | 7.5 | — | n/a | n/a | CWE-476 | mp4v2 2.0.0 contains a NULL pointer dereference vulnerability in MP4File::Gen… |
| CVE-2026-95632 | 7.5 | — | Adobe | Content Credentials Rust SDK | CWE-347 | CAI Content Credentials | Improper Verification of Cryptographic Signature (C… |
| CVE-2026-95633 | 7.5 | — | Adobe | Content Credentials Rust SDK | CWE-347 | CAI Content Credentials | Improper Verification of Cryptographic Signature (C… |
| CVE-2026-96071 | 7.5 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Media Remote Code Execution Vulnerability |
| CVE-2026-96232 | 7.5 | — | Microsoft | .NET 10.0 | CWE-125 | .NET Information Disclosure Vulnerability |
| CVE-2026-96233 | 7.5 | — | Microsoft | .NET 10.0 | CWE-787 | ASP.NET Core Denial of Service Vulnerability |
| CVE-2026-96236 | 7.5 | — | Microsoft | ASP.NET Core 10.0 | CWE-770 | ASP.NET Core Denial of Service Vulnerability |
| CVE-2026-96237 | 7.5 | — | Microsoft | .NET 10.0 | CWE-829 | .NET Remote Code Execution Vulnerability |
| CVE-2026-96245 | 7.5 | — | Microsoft | Windows 10 Version 1607 | CWE-125 | Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulne… |
| CVE-2026-96246 | 7.5 | — | Microsoft | Windows 10 Version 1607 | CWE-125 | Network Policy Server (NPS) Information Disclosure Vulnerability |
| CVE-2026-96248 | 7.5 | — | Microsoft | Windows 10 Version 1607 | CWE-121 | Windows Host Guardian Service Denial of Service Vulnerability |
| CVE-2026-96325 | 7.5 | — | Microsoft | Windows 10 Version 1607 | CWE-771 | Windows SMB Server Denial of Service Vulnerability |
| CVE-2026-96861 | 7.5 | — | Microsoft | Windows 10 Version 1607 | CWE-125 | Network Device Enrollment Service (NDES) Denial of Service Vulnerability |
| CVE-2026-96866 | 7.5 | — | Microsoft | Windows 10 Version 1607 | CWE-125 | Network Device Enrollment Service (NDES) Denial of Service Vulnerability |
| CVE-2026-96945 | 7.5 | — | Microsoft | Windows Server 2019 | CWE-248 | Windows Failover Cluster Denial of Service Vulnerability |
| CVE-2026-96958 | 7.5 | — | Microsoft | Microsoft .NET Framework 3.5 | CWE-407 | .NET Denial of Service Vulnerability |
| CVE-2026-96959 | 7.5 | — | Microsoft | Microsoft .NET Framework 3.5 | CWE-770 | .NET Denial of Service Vulnerability |
| CVE-2026-96960 | 7.5 | — | Microsoft | Microsoft .NET Framework 3.5 | CWE-405 | .NET Denial of Service Vulnerability |
| CVE-2026-97788 | 7.5 | — | Microsoft | Microsoft .NET Framework 3.5 | CWE-203 | Active Directory Federation Services (AD FS) Information Disclosure Vulnerabi… |
| CVE-2026-97789 | 7.5 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Remote Desktop Client Remote Code Execution Vulnerability |
| CVE-2026-97801 | 7.5 | — | Microsoft | Microsoft .NET Framework 3.5 | CWE-1287 | .NET Framework Tampering Vulnerability |
| CVE-2026-97830 | 7.5 | — | Microsoft | Windows 11 version 23H2 | CWE-415 | Windows Internet Information Services Denial of Service Vulnerability |
| CVE-2026-100113 | 7.5 | — | Adobe | Content Credentials Rust SDK | CWE-20 | CAI Content Credentials | Improper Input Validation (CWE-20) |
| CVE-2026-100114 | 7.5 | — | Adobe | Content Credentials Rust SDK | CWE-284 | CAI Content Credentials | Improper Access Control (CWE-284) |
| CVE-2026-100115 | 7.5 | — | Adobe | Content Credentials Rust SDK | CWE-284 | CAI Content Credentials | Improper Access Control (CWE-284) |
| CVE-2026-100117 | 7.5 | — | Adobe | Content Credentials Rust SDK | CWE-20 | CAI Content Credentials | Improper Input Validation (CWE-20) |
| CVE-2026-100118 | 7.5 | — | Adobe | Content Credentials Rust SDK | CWE-295 | CAI Content Credentials | Improper Certificate Validation (CWE-295) |
| CVE-2026-100119 | 7.5 | — | Adobe | Content Credentials Rust SDK | CWE-20 | CAI Content Credentials | Improper Input Validation (CWE-20) |
| CVE-2026-100120 | 7.5 | — | Adobe | Content Credentials Rust SDK | CWE-20 | CAI Content Credentials | Improper Input Validation (CWE-20) |
| CVE-2026-100121 | 7.5 | — | Adobe | Content Credentials Rust SDK | CWE-295 | CAI Content Credentials | Improper Certificate Validation (CWE-295) |
| CVE-2026-100122 | 7.5 | — | Adobe | Content Credentials Rust SDK | CWE-295 | CAI Content Credentials | Improper Certificate Validation (CWE-295) |
| CVE-2026-100123 | 7.5 | — | Adobe | Content Credentials Rust SDK | CWE-295 | CAI Content Credentials | Improper Certificate Validation (CWE-295) |
| CVE-2026-100124 | 7.5 | — | Adobe | Content Credentials Rust SDK | CWE-20 | CAI Content Credentials | Improper Input Validation (CWE-20) |
| CVE-2026-100135 | 7.5 | — | Adobe | Content Credentials Rust SDK | CWE-20 | CAI Content Credentials | Improper Input Validation (CWE-20) |
| CVE-2026-100136 | 7.5 | — | Adobe | Content Credentials Rust SDK | CWE-190 | CAI Content Credentials | Integer Overflow or Wraparound (CWE-190) |
| CVE-2026-100137 | 7.5 | — | Adobe | Content Credentials Rust SDK | CWE-400 | CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) |
| CVE-2026-100138 | 7.5 | — | Adobe | Content Credentials Rust SDK | CWE-400 | CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) |
| CVE-2026-100139 | 7.5 | — | Adobe | Content Credentials Rust SDK | CWE-400 | CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) |
| CVE-2026-102192 | 7.5 | — | Microsoft | Windows Server 2019 | CWE-191 | Windows Failover Cluster Denial of Service Vulnerability |
| CVE-2026-102599 | 7.5 | — | socketio | socket.io | CWE-248 | Socket.IO: Engine.IO Protocol Revision Mismatch DoS |
| CVE-2026-103030 | 7.5 | — | cfug | dio | CWE-200 | Dio: Cross-origin redirect leaks sensitive request headers in `dio_http2_adap… |
| CVE-2026-103296 | 7.5 | — | Adobe | Content Credentials Rust SDK | CWE-347 | CAI Content Credentials | Improper Verification of Cryptographic Signature (C… |
| CVE-2026-103297 | 7.5 | — | Adobe | Content Credentials Rust SDK | CWE-347 | CAI Content Credentials | Improper Verification of Cryptographic Signature (C… |
| CVE-2026-103499 | 7.5 | — | IBM | WebSphere Application Server - Liberty | CWE-400 | IBM WebSphere Application Server and WebSphere Application Server Liberty are… |
| CVE-2026-103558 | 7.5 | — | Microsoft | Windows 10 Version 1607 | CWE-833 | Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability |
| CVE-2026-103569 | 7.5 | — | Microsoft | Windows 10 Version 1607 | CWE-125 | Windows IKE Extension Information Disclosure Vulnerability |
| CVE-2026-103577 | 7.5 | — | Microsoft | Windows 11 version 23H2 | CWE-453 | Microsoft QUIC Security Feature Bypass Vulnerability |
| CVE-2026-104345 | 7.5 | — | Adobe | Content Credentials Rust SDK | CWE-20 | CAI Content Credentials | Improper Input Validation (CWE-20) |
| CVE-2026-105009 | 7.5 | — | Microsoft | Windows Server 2012 | CWE-276 | Windows Server Update Service Elevation of Privilege Vulnerability |
| CVE-2026-105442 | 7.5 | — | IBM | WebSphere Application Server | CWE-502 | IBM WebSphere Application Server and WebSphere Application Server Liberty are… |
| CVE-2026-105592 | 7.5 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-122 | Microsoft Office Access Remote Code Execution Vulnerability |
| CVE-2026-105599 | 7.5 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-122 | Microsoft Office PowerPoint Remote Code Execution Vulnerability |
| CVE-2026-105714 | 7.5 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-122 | Microsoft Office Access Remote Code Execution Vulnerability |
| CVE-2026-105715 | 7.5 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-190 | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-105723 | 7.5 | — | Microsoft | Windows 10 Version 1607 | CWE-822 | Windows Distributed File System (DFS) Elevation of Privilege Vulnerability |
| CVE-2026-105728 | 7.5 | — | Microsoft | Microsoft Dynamics NAV 2018 | CWE-306 | Dynamics Business Central Information Disclosure Vulnerability |
| CVE-2026-105900 | 7.5 | — | Adobe | ColdFusion 2025 | CWE-20 | ColdFusion | Improper Input Validation (CWE-20) |
| CVE-2026-105902 | 7.5 | — | Adobe | Content Credentials Rust SDK | CWE-400 | CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) |
| CVE-2026-106043 | 7.5 | — | Ivanti | Xtraction | CWE-306 | A Missing Authentication for Critical Function vulnerability in Ivanti Xtract… |
| CVE-2026-106623 | 7.5 | — | Adobe | ColdFusion 2025 | CWE-863 | ColdFusion | Incorrect Authorization (CWE-863) |
| CVE-2026-106627 | 7.5 | — | Adobe | Content Credentials Rust SDK | CWE-400 | CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) |
| CVE-2026-108131 | 7.5 | — | Microsoft | Windows 10 Version 1607 | CWE-290 | Active Directory Federation Services (AD FS) Spoofing Vulnerability |
| CVE-2026-109832 | 7.5 | — | Red Hat | Red Hat Enterprise Linux 10 | CWE-835 | Gnome-remote-desktop: busy-wait dos in vnc tls i/o handlers (gnutls_e_again /… |
| CVE-2026-83511 | 7.4 | — | Microsoft | Windows 10 Version 1607 | CWE-1390 | Active Directory Federation Services (AD FS) Spoofing Vulnerability |
| CVE-2026-85922 | 7.4 | — | Microsoft | azure_security_keyvault_certificates | CWE-1390 | Azure Key Vault Security Feature Bypass Vulnerability |
| CVE-2026-87705 | 7.4 | — | Microsoft | Windows 10 Version 1607 | CWE-940 | Windows Hyper-V Security Feature Bypass Vulnerability |
| CVE-2026-95695 | 7.4 | — | IBM | WebSphere Application Server - Liberty | CWE-863 | IBM WebSphere Application Server Liberty Incorrect Authorization |
| CVE-2026-96222 | 7.4 | — | Microsoft | Microsoft .NET Framework 3.5 | CWE-295 | Active Directory Federation Services (AD FS) Spoofing Vulnerability |
| CVE-2026-102234 | 7.4 | — | Microsoft | Visual Studio Code | CWE-807 | Visual Studio Code Security Feature Bypass Vulnerability |
| CVE-2026-105013 | 7.4 | — | Microsoft | Microsoft SharePoint Server Subscription Edition | CWE-502 | Microsoft Office SharePoint Remote Code Execution Vulnerability |
| CVE-2026-108184 | 7.4 | — | Zoom Communications | Zoom Clients | CWE-295 | Improper certificate validation in certain Zoom Clients for Windows may allow… |
| CVE-2026-108185 | 7.4 | — | Zoom Communications | Zoom Clients | CWE-295 | Improper certificate validation in the My Notes feature of certain Zoom Clien… |
| CVE-2026-55601 | 7.3 | — | folkertvanheusden | multitail | CWE-78 | MultiTail: Shell injection in execute-on-match command handling |
| CVE-2026-65147 | 7.3 | — | NVIDIA | DALI | CWE-125 | NVIDIA DALI contains a vulnerability where an attacker could cause an uncontr… |
| CVE-2026-65148 | 7.3 | — | NVIDIA | DALI | CWE-121 | NVIDIA DALI contains a vulnerability where an attacker could cause a stack-ba… |
| CVE-2026-65149 | 7.3 | — | NVIDIA | DALI | CWE-787 | NVIDIA DALI contains a vulnerability where an attacker could cause an uncontr… |
| CVE-2026-65150 | 7.3 | — | NVIDIA | DALI | CWE-125 | NVIDIA DALI contains a vulnerability where an attacker could cause an uncontr… |
| CVE-2026-70161 | 7.3 | — | Microsoft | .NET 10.0 | CWE-22 | .NET Elevation of Privilege Vulnerability |
| CVE-2026-70190 | 7.3 | — | Microsoft | .NET 10.0 | CWE-59 | .NET Elevation of Privilege Vulnerability |
| CVE-2026-88204 | 7.3 | — | Microsoft | Microsoft SharePoint Server Subscription Edition | CWE-79 | Microsoft Office SharePoint Spoofing Vulnerability |
| CVE-2026-96188 | 7.3 | — | Microsoft | Microsoft PowerToys | CWE-15 | Microsoft PowerToys Elevation of Privilege Vulnerability |
| CVE-2026-100207 | 7.3 | — | Microsoft | Azure CycleCloud 8.9.1 | CWE-78 | Azure CycleCloud Remote Code Execution Vulnerability |
| CVE-2026-105732 | 7.3 | — | Microsoft | Sysinternals Suite | CWE-121 | SysInternals Elevation of Privilege Vulnerability |
| CVE-2026-23705 | 7.2 | — | Fortinet | FortiAnalyzer | CWE-89 | An Improper Neutralization of Special Elements used in an SQL Command ('SQL I… |
| CVE-2026-23707 | 7.2 | — | Fortinet | FortiManager Cloud | CWE-89 | An Improper Neutralization of Special Elements used in an SQL Command ('SQL I… |
| CVE-2026-70267 | 7.2 | — | Microsoft | Microsoft SharePoint Server Subscription Edition | CWE-829 | Microsoft Office SharePoint Remote Code Execution Vulnerability |
| CVE-2026-85798 | 7.2 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Distributed File System (DFS) Remote Code Execution Vulnerability |
| CVE-2026-92910 | 7.2 | — | Adobe | Adobe Commerce | CWE-863 | Adobe Commerce | Incorrect Authorization (CWE-863) |
| CVE-2026-108399 | 7.2 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Hyper-V Elevation of Privilege Vulnerability |
| CVE-2026-110211 | 7.2 | — | iflytek | skillhub | CWE-862 | SkillHub through 0.2.22 Missing Authorization in CLI Skill Delete Endpoint |
| CVE-2025-58771 | 7.1 | — | AMI | AptioV | CWE-190 | UEFI OOB Write and Buffer Overflow Vulnerabilities |
| CVE-2025-58773 | 7.1 | — | AMI | AptioV | CWE-787 | UEFI OOB Write and Buffer Overflow Vulnerabilities |
| CVE-2026-18228 | 7.1 | — | Commvault | Commvault Cloud | — | Hyperscale Path Traversal |
| CVE-2026-63172 | 7.1 | — | Omnispace | Agora Project | CWE-862 | Omnispace Agora Project < 26.10.0 Broken Function-Level Authorization via Use… |
| CVE-2026-65104 | 7.1 | — | NVIDIA | Megatron-LM | CWE-328 | NVIDIA Megatron-LM for all platforms contains a vulnerability in inference, w… |
| CVE-2026-69452 | 7.1 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Enterprise App Management Elevation of Privilege Vulnerability |
| CVE-2026-70126 | 7.1 | — | Microsoft | Windows 10 Version 1607 | CWE-20 | Windows Bluetooth Port Driver Remote Code Execution |
| CVE-2026-74045 | 7.1 | — | Wazuh | wazuh-manager | CWE-122 | Wazuh 3.12.0 before 4.14.8 Heap Buffer Overflow in wazuh-analysisd FIM Decoder |
| CVE-2026-74047 | 7.1 | — | Wazuh | wazuh-manager | CWE-200 | Wazuh 4.0.0 before 4.14.8 authd.pass Disclosure via Agent 000 Config Endpoint |
| CVE-2026-76001 | 7.1 | — | Adobe | ColdFusion 2025 | CWE-918 | ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918) |
| CVE-2026-77093 | 7.1 | — | Commvault | Commvault Cloud | — | CvFWD Denial of Service |
| CVE-2026-77094 | 7.1 | — | Commvault | Commvault Cloud | — | CvFWD Out-of-Bounds Write |
| CVE-2026-77095 | 7.1 | — | Commvault | Commvault Cloud | — | CvFWD Null Pointer Dereference |
| CVE-2026-83715 | 7.1 | — | Microsoft | Windows 10 Version 1607 | CWE-306 | Windows Error Reporting Tampering Vulnerability |
| CVE-2026-85856 | 7.1 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Internet Connection Sharing (ICS) Remote Code Execution Vulnerability |
| CVE-2026-88964 | 7.1 | — | OpenVPN | OpenVPN | CWE-125 | An integer underflow in OpenVPN version 2.7_alpha3 through 2.7.7 on Windows a… |
| CVE-2026-89202 | 7.1 | — | Siemens | RUGGEDCOM CROSSBOW | CWE-639 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.… |
| CVE-2026-96299 | 7.1 | — | MongoDB | MongoDB Server | CWE-617 | Missing Authorization Check on Internal Aggregation Stage in MongoDB Server m… |
| CVE-2026-97333 | 7.1 | — | Commvault | Commvault Cloud | CWE-121 | QAPI stack-based buffer overflow |
| CVE-2026-100205 | 7.1 | — | Microsoft | Windows Sysinternals Process Monitor | CWE-822 | SysInternals Elevation of Privilege Vulnerability |
| CVE-2026-104004 | 7.1 | — | MongoDB | MongoDB Server | CWE-476 | Collection validators using collation-accepting expressions can crash MongoDB… |
| CVE-2026-104005 | 7.1 | — | MongoDB | MongoDB Server | CWE-617 | Incorrect authorization in MongoDB Server router for bulk writes to system na… |
| CVE-2026-104875 | 7.1 | — | ente | ente | CWE-639 | Ente: Accepted emergency contact can bypass the recovery notice period |
| CVE-2026-105729 | 7.1 | — | Microsoft | Windows Sysinternals Process Monitor | CWE-822 | SysInternals Elevation of Privilege Vulnerability |
| CVE-2026-109677 | 7.1 | — | FreeRDP | FreeRDP | CWE-125 | FreeRDP 2.0.0-beta1 before 3.28.0 Out-of-Bounds Read via LocateCardsByATRA Ha… |
| CVE-2026-109678 | 7.1 | — | FreeRDP | FreeRDP | CWE-617 | FreeRDP 3.0.0-beta1 before 3.32.0 Reachable Assertion via Emulated SCardStatusA |
| CVE-2026-109938 | 7.1 | — | FreeRDP | FreeRDP | CWE-190 | FreeRDP 3.11.0 before 3.32.0 Integer Overflow via Mapped Video Geometry Update |
| CVE-2026-109939 | 7.1 | — | FreeRDP | FreeRDP | CWE-476 | FreeRDP 3.27.1 before 3.32.0 NULL Pointer Dereference via Cache Bitmap V3 Order |
| CVE-2026-109941 | 7.1 | — | FreeRDP | FreeRDP | CWE-835 | FreeRDP 2.3.0 before 3.32.0 Infinite Loop via RD Gateway Chunked Response |
| CVE-2026-109942 | 7.1 | — | FreeRDP | FreeRDP | CWE-476 | FreeRDP 2.3.0 before 3.32.0 NULL Pointer Dereference via RD Gateway Close Cha… |
| CVE-2026-109943 | 7.1 | — | FreeRDP | FreeRDP | CWE-415 | FreeRDP 3.29.0 before 3.32.0 Double Free via Async-Update Polygon Order |
| CVE-2026-109944 | 7.1 | — | FreeRDP | FreeRDP | CWE-617 | FreeRDP 3.0.0 before 3.32.0 Reachable Assertion via Stale Smartcard Handle |
| CVE-2026-109946 | 7.1 | — | FreeRDP | FreeRDP | CWE-617 | FreeRDP 3.11.0 before 3.32.0 Reachable Assertion via AVC444 Odd Region Width |
| CVE-2026-109947 | 7.1 | — | FreeRDP | FreeRDP | CWE-770 | FreeRDP 3.20.1 before 3.32.0 Unbounded Allocation via drive_process_irp_read |
| CVE-2026-109949 | 7.1 | — | FreeRDP | FreeRDP | CWE-307 | FreeRDP 3.0.0 before 3.32.0 PIN Brute-Force via Virtual Smartcard |
| CVE-2026-110083 | 7.1 | — | Adobe | Adobe Experience Manager 6.5 | CWE-89 | Adobe Experience Manager | Improper Neutralization of Special Elements used i… |
| CVE-2026-110084 | 7.1 | — | Adobe | Adobe Experience Manager 6.5 | CWE-91 | Adobe Experience Manager | XML Injection (aka Blind XPath Injection) (CWE-91) |
| CVE-2026-110109 | 7.1 | — | jetlinks | JetLinks Community | CWE-862 | JetLinks Community through 2.10.0 Missing Authorization via Product-Level Tra… |
| CVE-2026-110117 | 7.1 | — | 1024-lab | SmartAdmin | CWE-862 | SmartAdmin through 3.30.0 Missing Authorization via AdminProtectController |
| CVE-2026-110118 | 7.1 | — | risesoft-y9 | WorkFlow-Engine | CWE-639 | WorkFlow-Engine through 9.6.11 Missing Authorization via flowableui buttonOpe… |
| CVE-2026-110119 | 7.1 | — | guchengwuyue | yshopmall | CWE-639 | yshopmall through 2.0.0 IDOR via Member Address API in UserAddressController |
| CVE-2026-110121 | 7.1 | — | PickMall | lilishop | CWE-639 | PickMall lilishop through 4.4 IDOR via Goods Edit Endpoint |
| CVE-2026-110123 | 7.1 | — | makunet | maku-boot | CWE-862 | Makunet maku-boot 4.3.0 through 5.0.0 Missing Authorization via Mail and SMS … |
| CVE-2026-110129 | 7.1 | — | fushengqian | fuintCatering | CWE-639 | fuintCatering through commit 122c9e6 IDOR via /clientApi/refund/detail |
| CVE-2026-110208 | 7.1 | — | WuKongOpenSource | Wukong AICRM | CWE-862 | Wukong AICRM through 20260610 Missing Authorization in System Configuration A… |
| CVE-2026-110209 | 7.1 | — | Stonewuu | ai-fusion-video | CWE-862 | ai-fusion-video through 1.2.0 Missing Authorization in Configuration Read End… |
| CVE-2026-110216 | 7.1 | — | youlaitech | youlai-boot | CWE-862 | youlai-boot through 2.21.1 Missing Authorization in User Status Update Endpoint |
| CVE-2026-110217 | 7.1 | — | lenve | vhr | CWE-200 | vhr through commit 03abbd3 Information Disclosure of Operator Password Hashes… |
| CVE-2026-110220 | 7.1 | — | Kubeflow | Model Registry | CWE-918 | Kubeflow Model Registry through 0.3.17 SSRF via InferenceService Controller U… |
| CVE-2026-110236 | 7.1 | — | KDE | Dolphin | CWE-78 | KDE Dolphin 24.08.0 through 26.08.2 OS Command Injection via Crafted Folder Name |
| CVE-2026-62840 | 7.0 | — | Microsoft | Linux 3P (Third Party) Distros | CWE-367 | Linux Kernel Elevation of Privilege Vulnerability |
| CVE-2026-69387 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Error Reporting Elevation of Privilege Vulnerability |
| CVE-2026-69596 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Program Compatibility Assistant Service Elevation of Privilege Vulner… |
| CVE-2026-69736 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-362 | Windows Credential Manager Elevation of Privilege Vulnerability |
| CVE-2026-69743 | 7.0 | — | Microsoft | Windows 11 version 23H2 | CWE-416 | Windows Program Compatibility Assistant Service Elevation of Privilege Vulner… |
| CVE-2026-69763 | 7.0 | — | Microsoft | Windows 10 Version 1809 | CWE-362 | Windows Storage Elevation of Privilege Vulnerability |
| CVE-2026-69766 | 7.0 | — | Microsoft | Windows 10 Version 1809 | CWE-362 | Windows Storage Elevation of Privilege Vulnerability |
| CVE-2026-69795 | 7.0 | — | Microsoft | Windows 10 Version 1809 | CWE-476 | Windows Clipboard Server Elevation of Privilege Vulnerability |
| CVE-2026-69840 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Certificates Elevation of Privilege Vulnerability |
| CVE-2026-69856 | 7.0 | — | Microsoft | Windows 10 Version 1809 | CWE-362 | Windows Storage Elevation of Privilege Vulnerability |
| CVE-2026-69915 | 7.0 | — | Microsoft | Windows 10 Version 1809 | CWE-416 | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2026-69931 | 7.0 | — | Microsoft | Windows 10 Version 1809 | CWE-362 | Windows Storage Elevation of Privilege Vulnerability |
| CVE-2026-69935 | 7.0 | — | Microsoft | Windows 10 Version 1809 | CWE-362 | Windows Storage Elevation of Privilege Vulnerability |
| CVE-2026-69964 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Kernel Streaming Service Driver Elevation of Privilege Vulnerability |
| CVE-2026-69970 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Kernel Streaming Service Driver Elevation of Privilege Vulnerability |
| CVE-2026-69977 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege… |
| CVE-2026-70021 | 7.0 | — | Microsoft | Windows 11 Version 24H2 | CWE-416 | Windows Direct Composition Elevation of Privilege Vulnerability |
| CVE-2026-70026 | 7.0 | — | Microsoft | Windows 10 Version 1809 | CWE-416 | Windows Secure Kernel Mode Elevation of Privilege Vulnerability |
| CVE-2026-70045 | 7.0 | — | Microsoft | Windows 10 Version 1809 | CWE-416 | Windows Work Folders Elevation of Privilege Vulnerability |
| CVE-2026-70056 | 7.0 | — | Microsoft | Windows 10 Version 1809 | CWE-416 | Windows Update Service Elevation of Privilege Vulnerability |
| CVE-2026-70066 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows DHCP Server Elevation of Privilege Vulnerability |
| CVE-2026-70067 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-70076 | 7.0 | — | Microsoft | Windows 11 Version 24H2 | CWE-416 | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-70086 | 7.0 | — | Microsoft | Windows 10 Version 1809 | CWE-416 | Microsoft Windows Search Component Elevation of Privilege Vulnerability |
| CVE-2026-70115 | 7.0 | — | Microsoft | Windows 11 Version 24H2 | CWE-416 | Microsoft Windows Search Component Elevation of Privilege Vulnerability |
| CVE-2026-70118 | 7.0 | — | Microsoft | Windows 11 Version 24H2 | CWE-416 | Windows Audio Service Elevation of Privilege Vulnerability |
| CVE-2026-70134 | 7.0 | — | Microsoft | Windows 10 Version 1809 | CWE-416 | Windows Event Tracing Elevation of Privilege Vulnerability |
| CVE-2026-70136 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Microsoft Windows Search Component Elevation of Privilege Vulnerability |
| CVE-2026-70140 | 7.0 | — | Microsoft | Windows 10 Version 1809 | CWE-416 | Windows Audio Service Elevation of Privilege Vulnerability |
| CVE-2026-70144 | 7.0 | — | Microsoft | Windows 11 version 23H2 | CWE-416 | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-70150 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Microsoft Windows Search Component Elevation of Privilege Vulnerability |
| CVE-2026-70156 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Microsoft Windows Search Component Elevation of Privilege Vulnerability |
| CVE-2026-70160 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-70164 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows TCP/IP Elevation of Privilege Vulnerability |
| CVE-2026-70168 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerab… |
| CVE-2026-70169 | 7.0 | — | Microsoft | Windows 10 Version 1809 | CWE-362 | Windows Connected Devices Platform Service Elevation of Privilege Vulnerability |
| CVE-2026-70176 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-70198 | 7.0 | — | Microsoft | Windows 10 Version 1809 | CWE-416 | Windows Push Notifications Elevation of Privilege Vulnerability |
| CVE-2026-70205 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-843 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerab… |
| CVE-2026-70209 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-70212 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-923 | Windows Security Center Elevation of Privilege Vulnerability |
| CVE-2026-70223 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Console Driver Elevation of Privilege Vulnerability |
| CVE-2026-70230 | 7.0 | — | Microsoft | Windows 10 Version 1809 | CWE-416 | Windows Audio Service Elevation of Privilege Vulnerability |
| CVE-2026-70236 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-70237 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerab… |
| CVE-2026-70241 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Kerberos Elevation of Privilege Vulnerability |
| CVE-2026-70243 | 7.0 | — | Microsoft | Windows 11 version 23H2 | CWE-416 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-70249 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-70252 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability |
| CVE-2026-70253 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-70271 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-70272 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-70273 | 7.0 | — | Microsoft | Windows 11 Version 24H2 | CWE-416 | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-70276 | 7.0 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-416 | Microsoft Office Click-To-Run Elevation of Privilege Vulnerability |
| CVE-2026-72934 | 7.0 | — | Microsoft | Windows 11 version 23H2 | CWE-416 | Windows Program Compatibility Assistant Service Elevation of Privilege Vulner… |
| CVE-2026-72955 | 7.0 | — | Microsoft | Windows 11 version 23H2 | CWE-416 | Windows Application Compatibility Cache Elevation of Privilege Vulnerability |
| CVE-2026-72968 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Program Compatibility Assistant Service Elevation of Privilege Vulner… |
| CVE-2026-72969 | 7.0 | — | Microsoft | Windows 11 version 23H2 | CWE-416 | Windows Program Compatibility Assistant Service Elevation of Privilege Vulner… |
| CVE-2026-74031 | 7.0 | — | Wazuh | wazuh-manager | CWE-22 | Wazuh 4.1.1 before 4.14.8 Path Traversal File Deletion via Rule/Decoder Delet… |
| CVE-2026-81971 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-362 | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2026-83505 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-367 | Windows Setup Files Cleanup Elevation of Privilege Vulnerability |
| CVE-2026-83509 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-426 | Windows Setup Files Cleanup Elevation of Privilege Vulnerability |
| CVE-2026-83510 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-367 | Windows Setup Files Cleanup Elevation of Privilege Vulnerability |
| CVE-2026-83564 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Search Service Elevation of Privilege Vulnerability |
| CVE-2026-83566 | 7.0 | — | Microsoft | Windows 11 Version 24H2 | CWE-416 | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-83574 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Search Service Elevation of Privilege Vulnerability |
| CVE-2026-83575 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Search Service Elevation of Privilege Vulnerability |
| CVE-2026-83580 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability |
| CVE-2026-83584 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Smart Card Elevation of Privilege Vulnerability |
| CVE-2026-83644 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Audio Service Elevation of Privilege Vulnerability |
| CVE-2026-83666 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-362 | Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerab… |
| CVE-2026-83675 | 7.0 | — | Microsoft | Windows 11 Version 24H2 | CWE-416 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-83676 | 7.0 | — | Microsoft | Windows 10 Version 21H2 | CWE-122 | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-83680 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-83682 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows TCP/IP Elevation of Privilege Vulnerability |
| CVE-2026-83687 | 7.0 | — | Microsoft | Windows 11 version 23H2 | CWE-416 | Windows Connected User Experiences and Telemetry Elevation of Privilege Vulne… |
| CVE-2026-83689 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Error Reporting Elevation of Privilege Vulnerability |
| CVE-2026-83694 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-125 | Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability |
| CVE-2026-83696 | 7.0 | — | Microsoft | Windows 10 Version 1809 | CWE-416 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
| CVE-2026-83701 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Now Playing Session Manager Elevation of Privilege Vulnerability |
| CVE-2026-83702 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-83707 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Event Tracing Elevation of Privilege Vulnerability |
| CVE-2026-83708 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-121 | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-83710 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Device Association Service Elevation of Privilege Vulnerability |
| CVE-2026-83717 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-83718 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-83720 | 7.0 | — | Microsoft | Windows 11 version 26H1 | CWE-416 | Windows Kerberos Elevation of Privilege Vulnerability |
| CVE-2026-83722 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-362 | Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulner… |
| CVE-2026-83724 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Management Instrumentation Elevation of Privilege Vulnerability |
| CVE-2026-83738 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-362 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerab… |
| CVE-2026-83740 | 7.0 | — | Microsoft | Windows 10 Version 1809 | CWE-416 | Windows Hello Elevation of Privilege Vulnerability |
| CVE-2026-83749 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Overlay Filter Elevation of Privilege Vulnerability |
| CVE-2026-83750 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Error Reporting Elevation of Privilege Vulnerability |
| CVE-2026-83751 | 7.0 | — | Microsoft | Windows 11 Version 24H2 | CWE-416 | Windows MIDI Service Module Elevation of Privileges Vulnerability |
| CVE-2026-83752 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-83775 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-83785 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows COM+ Event System Service Elevation of Privilege Vulnerability |
| CVE-2026-83790 | 7.0 | — | Microsoft | Windows 10 Version 21H2 | CWE-416 | Windows Hello Elevation of Privilege Vulnerability |
| CVE-2026-83793 | 7.0 | — | Microsoft | Windows 10 Version 21H2 | CWE-59 | Windows Update Orchestrator Service Elevation of Privilege Vulnerability |
| CVE-2026-83827 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Bluetooth Port Driver Elevation of Privilege Vulnerability |
| CVE-2026-83834 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-367 | Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability |
| CVE-2026-83839 | 7.0 | — | Microsoft | Windows 10 Version 1809 | CWE-367 | Windows Hyper-V Elevation of Privilege Vulnerability |
| CVE-2026-83841 | 7.0 | — | Microsoft | Windows 10 Version 1809 | CWE-362 | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-83842 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-415 | Windows TCP/IP Elevation of Privilege Vulnerability |
| CVE-2026-83846 | 7.0 | — | Microsoft | Windows 10 Version 1809 | CWE-416 | Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability |
| CVE-2026-83852 | 7.0 | — | Microsoft | Windows 11 Version 24H2 | CWE-416 | Windows Bind Filter Driver Elevation of Privilege Vulnerability |
| CVE-2026-83853 | 7.0 | — | Microsoft | Windows 10 Version 21H2 | CWE-416 | Windows Hello Elevation of Privilege Vulnerability |
| CVE-2026-83866 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2026-83868 | 7.0 | — | Microsoft | Windows 10 Version 1809 | CWE-362 | Microsoft Bluetooth Driver Elevation of Privilege Vulnerability |
| CVE-2026-83871 | 7.0 | — | Microsoft | Windows 10 Version 1809 | CWE-122 | Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability |
| CVE-2026-83879 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-362 | Windows Overlay Filter Elevation of Privilege Vulnerability |
| CVE-2026-83886 | 7.0 | — | Microsoft | Windows 11 version 23H2 | CWE-416 | Windows Update Orchestrator Service Elevation of Privilege Vulnerability |
| CVE-2026-83899 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-362 | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-83900 | 7.0 | — | Microsoft | Windows 11 version 23H2 | CWE-416 | Windows Bind Filter Driver Elevation of Privilege Vulnerability |
| CVE-2026-83901 | 7.0 | — | Microsoft | Windows 10 Version 1809 | CWE-416 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability |
| CVE-2026-83908 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-763 | RPC Runtime Elevation of Privilege Vulnerability |
| CVE-2026-83911 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Storage Elevation of Privilege Vulnerability |
| CVE-2026-83915 | 7.0 | — | Microsoft | Windows 10 Version 1809 | CWE-416 | Windows Diagnostic Policy Service Elevation of Privilege Vulnerability |
| CVE-2026-83916 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-415 | Windows Error Reporting Remote Code Execution Vulnerability |
| CVE-2026-83917 | 7.0 | — | Microsoft | Windows 10 Version 1809 | CWE-416 | Windows ALPC Elevation of Privilege Vulnerability |
| CVE-2026-83921 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Search Service Elevation of Privilege Vulnerability |
| CVE-2026-83924 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-83930 | 7.0 | — | Microsoft | Windows 11 version 23H2 | CWE-416 | Windows Update Orchestrator Service Elevation of Privilege Vulnerability |
| CVE-2026-84014 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Device Association Service Elevation of Privilege Vulnerability |
| CVE-2026-84018 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-367 | Windows Print Spooler Components Elevation of Privilege Vulnerability |
| CVE-2026-84019 | 7.0 | — | Microsoft | Windows 10 Version 1809 | CWE-416 | Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability |
| CVE-2026-84020 | 7.0 | — | Microsoft | Windows 10 Version 21H2 | CWE-416 | Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulne… |
| CVE-2026-85328 | 7.0 | — | Microsoft | Windows 10 Version 1809 | CWE-1390 | Windows Projected File System Elevation of Privilege Vulnerability |
| CVE-2026-85329 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-362 | Microsoft Account Elevation of Privilege Vulnerability |
| CVE-2026-85342 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Device Association Service Elevation of Privilege Vulnerability |
| CVE-2026-85352 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Device Association Service Elevation of Privilege Vulnerability |
| CVE-2026-85354 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Error Reporting Elevation of Privilege Vulnerability |
| CVE-2026-85355 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-829 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
| CVE-2026-85357 | 7.0 | — | Microsoft | Windows 11 version 23H2 | CWE-362 | Windows Phone Service Elevation of Privilege Vulnerability |
| CVE-2026-85361 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-85362 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-763 | Windows Management Instrumentation Elevation of Privilege Vulnerability |
| CVE-2026-85364 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-85365 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Servicing Stack Updates Elevation of Privilege Vulnerability |
| CVE-2026-85367 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Cash Drawer Protocol Provider Elevation of Privilege Vulnerability |
| CVE-2026-85370 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | WebDAV Elevation of Privilege Vulnerability |
| CVE-2026-85372 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-85791 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability |
| CVE-2026-85802 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability |
| CVE-2026-85803 | 7.0 | — | Microsoft | Windows 11 version 23H2 | CWE-416 | Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability |
| CVE-2026-85810 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Telephony Server Elevation of Privilege Vulnerability |
| CVE-2026-85823 | 7.0 | — | Microsoft | Windows 11 Version 24H2 | CWE-416 | Windows Composite Image File System Elevation of Privilege Vulnerability |
| CVE-2026-85824 | 7.0 | — | Microsoft | Windows 10 Version 21H2 | CWE-362 | Windows Composite Image File System Elevation of Privilege Vulnerability |
| CVE-2026-85825 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-362 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privileg… |
| CVE-2026-85826 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-787 | Windows Fast FAT Driver Elevation of Privilege Vulnerability |
| CVE-2026-85827 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | WebDAV Elevation of Privilege Vulnerability |
| CVE-2026-85828 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | WebDAV Elevation of Privilege Vulnerability |
| CVE-2026-85834 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows TCP/IP Elevation of Privilege Vulnerability |
| CVE-2026-85846 | 7.0 | — | Microsoft | Windows 10 Version 1809 | CWE-416 | Web Account Manager Elevation of Privilege Vulnerability |
| CVE-2026-85853 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-125 | Windows DWM Core Library Elevation of Privilege Vulnerability |
| CVE-2026-85854 | 7.0 | — | Microsoft | Windows 10 Version 1809 | CWE-416 | Windows DWM Core Library Elevation of Privilege Vulnerability |
| CVE-2026-85855 | 7.0 | — | Microsoft | Windows 11 Version 24H2 | CWE-416 | Windows DWM Core Library Elevation of Privilege Vulnerability |
| CVE-2026-85868 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
| CVE-2026-85870 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
| CVE-2026-85876 | 7.0 | — | Microsoft | Microsoft SQL Server 2019 (GDR) | CWE-416 | Microsoft SQL Server Elevation of Privilege Vulnerability |
| CVE-2026-85879 | 7.0 | — | Microsoft | Windows Subsystem for Linux (WSL2) | CWE-367 | Windows Subsystem for Linux Elevation of Privilege Vulnerability |
| CVE-2026-85904 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-362 | Windows Device Association Service Elevation of Privilege Vulnerability |
| CVE-2026-85912 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-362 | Clipboard User Service Elevation of Privilege Vulnerability |
| CVE-2026-85914 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Embedded Mode Service Elevation of Privilege Vulnerability |
| CVE-2026-85918 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vul… |
| CVE-2026-85919 | 7.0 | — | Microsoft | Microsoft SQL Server 2019 (GDR) | CWE-122 | Microsoft SQL Server Elevation of Privilege Vulnerability |
| CVE-2026-85920 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-367 | Windows BitLocker Elevation of Privilege Vulnerability |
| CVE-2026-85930 | 7.0 | — | Microsoft | Windows 10 Version 21H2 | CWE-416 | Windows Image Acquisition Elevation of Privilege Vulnerability |
| CVE-2026-85934 | 7.0 | — | Microsoft | Windows 10 Version 1809 | CWE-416 | Windows AppX Deployment Service Elevation of Privilege Vulnerability |
| CVE-2026-85941 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-362 | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-85943 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Reliable Multicast Transport Driver (RMCAST) Elevation of Privilege Vulnerabi… |
| CVE-2026-86022 | 7.0 | — | vnotex | vnote | CWE-78 | VNote: Argument injection to arbitrary command execution via crafted note fil… |
| CVE-2026-87693 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-87704 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-87708 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-87710 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-362 | Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulner… |
| CVE-2026-87715 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-88076 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-476 | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-88079 | 7.0 | — | Microsoft | Windows 11 Version 24H2 | CWE-476 | Windows MIDI Service Module Elevation of Privileges Vulnerability |
| CVE-2026-88082 | 7.0 | — | Microsoft | Microsoft SQL Server 2019 (GDR) | CWE-122 | Microsoft SQL Server Elevation of Privilege Vulnerability |
| CVE-2026-88088 | 7.0 | — | Microsoft | Microsoft SQL Server 2019 (GDR) | CWE-190 | Microsoft SQL Server Elevation of Privilege Vulnerability |
| CVE-2026-88096 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-362 | Windows DCOM Server Elevation of Privilege Vulnerability |
| CVE-2026-88098 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-822 | Windows Security Support Provider Interface Elevation of Privilege Vulnerability |
| CVE-2026-88103 | 7.0 | — | Microsoft | Windows 10 Version 1809 | CWE-416 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability |
| CVE-2026-88106 | 7.0 | — | Microsoft | Windows 10 Version 1809 | CWE-416 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
| CVE-2026-88107 | 7.0 | — | Microsoft | Windows 10 Version 1809 | CWE-362 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
| CVE-2026-88110 | 7.0 | — | Microsoft | Windows 11 Version 24H2 | CWE-122 | Windows Graphics Kernel Elevation of Privilege Vulnerability |
| CVE-2026-88113 | 7.0 | — | Microsoft | Windows 10 Version 1809 | CWE-416 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability |
| CVE-2026-88124 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-88127 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows SMB Server Elevation of Privilege Vulnerability |
| CVE-2026-88139 | 7.0 | — | Microsoft | Windows 11 Version 24H2 | CWE-416 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-88141 | 7.0 | — | Microsoft | Windows 11 version 23H2 | CWE-416 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-88146 | 7.0 | — | Microsoft | Windows 10 Version 1809 | CWE-362 | Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege… |
| CVE-2026-88149 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-415 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerab… |
| CVE-2026-88160 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-362 | Microsoft Windows Search Component Elevation of Privilege Vulnerability |
| CVE-2026-88161 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability |
| CVE-2026-95943 | 7.0 | — | Microsoft | Windows 11 version 23H2 | CWE-415 | Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability |
| CVE-2026-96209 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-125 | Windows Network File System Elevation of Privilege Vulnerability |
| CVE-2026-96215 | 7.0 | — | Microsoft | Windows 11 Version 24H2 | CWE-362 | Windows Autopilot Elevation of Privilege Vulnerability |
| CVE-2026-96216 | 7.0 | — | Microsoft | Windows 10 Version 1809 | CWE-416 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-96250 | 7.0 | — | Microsoft | Windows 10 Version 21H2 | CWE-416 | Windows USB Print Driver Elevation of Privilege Vulnerability |
| CVE-2026-96253 | 7.0 | — | Microsoft | Windows 10 Version 21H2 | CWE-416 | Windows USB Print Driver Elevation of Privilege Vulnerability |
| CVE-2026-96254 | 7.0 | — | Microsoft | Windows 10 Version 21H2 | CWE-416 | Windows USB Print Driver Elevation of Privilege Vulnerability |
| CVE-2026-96301 | 7.0 | — | Microsoft | Windows 10 Version 21H2 | CWE-416 | Windows USB Print Driver Elevation of Privilege Vulnerability |
| CVE-2026-96302 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-96304 | 7.0 | — | Microsoft | Windows 10 Version 21H2 | CWE-416 | Windows USB Print Driver Elevation of Privilege Vulnerability |
| CVE-2026-96305 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-96307 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-96310 | 7.0 | — | Microsoft | Windows 10 Version 21H2 | CWE-416 | Windows USB Print Driver Elevation of Privilege Vulnerability |
| CVE-2026-96313 | 7.0 | — | Microsoft | Windows 10 Version 1809 | CWE-306 | Windows Push Notifications Elevation of Privilege Vulnerability |
| CVE-2026-96319 | 7.0 | — | Microsoft | Windows 10 Version 21H2 | CWE-416 | Windows USB Print Driver Elevation of Privilege Vulnerability |
| CVE-2026-96322 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Remote Desktop Protocol Elevation of Privilege Vulnerability |
| CVE-2026-96323 | 7.0 | — | Microsoft | Windows 10 Version 21H2 | CWE-416 | Windows Update Elevation of Privilege Vulnerability |
| CVE-2026-96852 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows TCP/IP Elevation of Privilege Vulnerability |
| CVE-2026-96868 | 7.0 | — | Microsoft | Windows 11 Version 24H2 | CWE-122 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-96919 | 7.0 | — | Microsoft | Windows 10 Version 1809 | CWE-362 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability |
| CVE-2026-96923 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Workstation Service Elevation of Privilege Vulnerability |
| CVE-2026-96932 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-362 | Windows Embedded Mode Service Elevation of Privilege Vulnerability |
| CVE-2026-96937 | 7.0 | — | Microsoft | Windows 10 Version 21H2 | CWE-416 | Microsoft Windows Search Component Elevation of Privilege Vulnerability |
| CVE-2026-96939 | 7.0 | — | Microsoft | Windows 11 version 23H2 | CWE-367 | Servicing Stack Updates Elevation of Privilege Vulnerability |
| CVE-2026-96949 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-362 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privileg… |
| CVE-2026-97774 | 7.0 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-367 | Microsoft Office Click-To-Run Elevation of Privilege Vulnerability |
| CVE-2026-97787 | 7.0 | — | Microsoft | Windows 11 version 23H2 | CWE-362 | Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privi… |
| CVE-2026-97793 | 7.0 | — | Microsoft | Windows 10 Version 1809 | CWE-306 | Windows Setup and Deployment Elevation of Privilege Vulnerability |
| CVE-2026-97808 | 7.0 | — | Microsoft | Windows 10 Version 1809 | CWE-416 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability |
| CVE-2026-97810 | 7.0 | — | Microsoft | Windows 11 Version 24H2 | CWE-122 | Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privi… |
| CVE-2026-97812 | 7.0 | — | Microsoft | Windows 10 Version 21H2 | CWE-415 | Windows Update Orchestrator Service Elevation of Privilege Vulnerability |
| CVE-2026-100200 | 7.0 | — | Microsoft | Windows 11 version 23H2 | CWE-416 | Windows Update Service Elevation of Privilege Vulnerability |
| CVE-2026-100201 | 7.0 | — | Microsoft | Windows 10 Version 1809 | CWE-122 | Windows Client License Service Elevation of Privilege Vulnerability |
| CVE-2026-100203 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Update Service Elevation of Privilege Vulnerability |
| CVE-2026-100216 | 7.0 | — | Microsoft | Windows 10 Version 1809 | CWE-121 | Windows Storage Elevation of Privilege Vulnerability |
| CVE-2026-100225 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Storage Elevation of Privilege Vulnerability |
| CVE-2026-102189 | 7.0 | — | Microsoft | Windows 11 version 23H2 | CWE-122 | Windows Storage Elevation of Privilege Vulnerability |
| CVE-2026-102191 | 7.0 | — | Microsoft | Windows 11 version 23H2 | CWE-122 | Windows Storage Elevation of Privilege Vulnerability |
| CVE-2026-102193 | 7.0 | — | Microsoft | Windows 10 Version 1809 | CWE-416 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability |
| CVE-2026-102194 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Graphics Kernel Elevation of Privilege Vulnerability |
| CVE-2026-102195 | 7.0 | — | Microsoft | Windows 11 version 23H2 | CWE-416 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability |
| CVE-2026-102197 | 7.0 | — | Microsoft | Windows 10 Version 1809 | CWE-416 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability |
| CVE-2026-102207 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-362 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-102208 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability |
| CVE-2026-102209 | 7.0 | — | Microsoft | Windows 11 version 26H1 | CWE-122 | Microsoft Graphics Component Elevation of Privilege Vulnerability |
| CVE-2026-102211 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-362 | Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vu… |
| CVE-2026-102232 | 7.0 | — | Microsoft | Visual Studio Code | CWE-863 | Visual Studio Code Security Feature Bypass Vulnerability |
| CVE-2026-103554 | 7.0 | — | Microsoft | Windows 10 Version 1809 | CWE-416 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability |
| CVE-2026-103555 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulnerability |
| CVE-2026-103565 | 7.0 | — | Microsoft | Windows 10 Version 1809 | CWE-416 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability |
| CVE-2026-105722 | 7.0 | — | Microsoft | Windows 10 Version 1809 | CWE-416 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability |
| CVE-2026-105725 | 7.0 | — | Microsoft | Windows Security App | CWE-416 | Windows Security App Elevation of Privilege Vulnerability |
| CVE-2026-108132 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-415 | Windows Kerberos Elevation of Privilege Vulnerability |
| CVE-2026-108134 | 7.0 | — | Microsoft | Windows 11 Version 24H2 | CWE-416 | Windows Autopilot Elevation of Privilege Vulnerability |
| CVE-2026-108135 | 7.0 | — | Microsoft | Windows 10 Version 21H2 | CWE-59 | Windows Backup Engine Elevation of Privilege Vulnerability |
| CVE-2026-108396 | 7.0 | — | Microsoft | Windows 10 Version 1809 | CWE-367 | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability |
| CVE-2026-108461 | 7.0 | — | Microsoft | Windows 10 Version 1809 | CWE-416 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability |
| CVE-2026-108464 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Software Protection Platform (SPP) Elevation of Privilege Vulnerability |
| CVE-2026-108465 | 7.0 | — | Microsoft | Windows 10 Version 1809 | CWE-416 | Windows Update Delivery Optimization Elevation of Privilege Vulnerability |
| CVE-2026-108468 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-109453 | 7.0 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulnerability |
| CVE-2026-110237 | 7.0 | — | vifm | vifm | CWE-283 | Vifm 0.8.1-beta through 0.14.4 Unverified IPC FIFO Ownership Allows Cross-Use… |
| CVE-2026-15468 | 6.9 | — | HYPR | Passwordless | CWE-639 | Authorization bypass through User-Controlled key vulnerability in HYPR Passwo… |
| CVE-2026-44414 | 6.9 | — | Siemens | Industrial Edge Cloud Device (IECD) | CWE-35 | A vulnerability has been identified in Industrial Edge Cloud Device (IECD), I… |
| CVE-2026-53563 | 6.9 | — | Citrix | UniconOS | — | Persistent Command Execution |
| CVE-2026-54700 | 6.9 | — | connectbot | cbssh | CWE-20 | ConnectBot SSH: Unbounded SSH field lengths can cause excessive memory alloca… |
| CVE-2026-74030 | 6.9 | — | Wazuh | wazuh-agent | CWE-776 | Wazuh 3.9.0 before 4.14.8 Memory Exhaustion via SCA YAML Alias Expansion |
| CVE-2026-89208 | 6.9 | — | Siemens | Capital Embedded AR Classic 431-422 | CWE-125 | A vulnerability has been identified in Capital Embedded AR Classic 431-422 (A… |
| CVE-2026-93346 | 6.9 | — | Wazuh | wazuh-manager | CWE-307 | Wazuh 4.0.0 before 4.14.8 API Brute-Force Protection Bypass via Race Condition |
| CVE-2026-93347 | 6.9 | — | Wazuh | wazuh-manager | CWE-22 | Wazuh 4.1.1 before 4.14.8 Path Traversal via Cluster get_list_file |
| CVE-2026-101899 | 6.9 | — | axios | axios | CWE-693 | Axios: CIDR-form NO_PROXY entries are ignored, causing proxy exclusion bypass… |
| CVE-2026-105390 | 6.9 | — | OpenVPN | ovpn-dco-win | CWE-413 | Improper synchronization in the OpenVPN ovpn-dco-win for Windows versions 0.6… |
| CVE-2026-107606 | 6.9 | — | Swann Communications | SWIFI-SE2KIC | CWE-306 | Missing authentication for critical function in Swann Communications SWIFI-SE… |
| CVE-2026-107607 | 6.9 | — | Swann Communications | SWIFI-SE2KIC | CWE-306 | Missing authentication for critical function in Swann Communications SWIFI-SE… |
| CVE-2026-109144 | 6.9 | — | wbond | certvalidator | CWE-400 | wbond certvalidator Certificate Path Builder resource consumption |
| CVE-2026-109519 | 6.9 | — | n/a | YouTransfer | CWE-22 | YouTransfer Template Rendering template path traversal |
| CVE-2026-109951 | 6.9 | — | FreeRDP | FreeRDP | CWE-125 | FreeRDP 3.17.1 before 3.32.0 Heap Buffer Over-Read via Proxy DRDYNVC Channel … |
| CVE-2026-109955 | 6.9 | — | honojs | hono | CWE-174 | Hono 4.12.4 before 4.13.11 Middleware Bypass via serveStatic Double Decoding |
| CVE-2026-109966 | 6.9 | — | marcopiovanello | yt-dlp-web-ui | CWE-88 | yt-dlp-web-ui through 4.0.0 Argument Injection via Service.Formats JSON-RPC M… |
| CVE-2026-110025 | 6.9 | — | slackero | phpwcms | CWE-284 | slackero phpwcms Extension Check cnt23.article.inc.php unrestricted upload |
| CVE-2026-110105 | 6.9 | — | b3log | Symphony | CWE-862 | B3log Symphony through 3.6.4 Missing Authorization in Admin Console Routes |
| CVE-2026-110114 | 6.9 | — | FJ-OMS | oms-erp | CWE-306 | oms-erp through PRE Missing Authentication via skyer-goods es-test Endpoints |
| CVE-2026-110131 | 6.9 | — | LiuYuYang01 | ThriveX-Server | CWE-862 | ThriveX-Server through 4.0 Missing Authorization via Article Retrieval Endpoints |
| CVE-2026-110222 | 6.9 | — | Razorpay | IFSC | CWE-918 | Razorpay IFSC Ruby gem through 2.0.62 SSRF via IFSC lookup |
| CVE-2026-49265 | 6.8 | — | oauthlib | oauthlib | CWE-208 | OAuthLib: Timing Attack Vulnerability in PKCE code_verifier Comparison |
| CVE-2026-59116 | 6.8 | — | Microsoft | Windows 10 Version 1607 | CWE-327 | Windows Remote Desktop Security Feature Bypass Vulnerability |
| CVE-2026-69947 | 6.8 | — | Microsoft | Windows 10 Version 21H2 | CWE-122 | Windows Overlay Filter Remote Code Execution Vulnerability |
| CVE-2026-69958 | 6.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Overlay Filter Remote Code Execution Vulnerability |
| CVE-2026-83573 | 6.8 | — | Microsoft | Windows 10 Version 1607 | CWE-190 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
| CVE-2026-83776 | 6.8 | — | Microsoft | Windows 10 Version 1607 | CWE-125 | Windows Bluetooth Driver Elevation of Privilege Vulnerability |
| CVE-2026-83895 | 6.8 | — | Microsoft | Windows 10 Version 1809 | CWE-122 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability |
| CVE-2026-84419 | 6.8 | — | Citrix | Workspace app for Windows | CWE-787 | Out-of-Bounds Write |
| CVE-2026-85115 | 6.8 | — | Siemens | .NET Client Library for SIMATIC S7 Webserver API | CWE-209 | A vulnerability has been identified in .NET Client Library for SIMATIC S7 Web… |
| CVE-2026-85323 | 6.8 | — | Microsoft | Windows 10 Version 1607 | CWE-1390 | Network Device Enrollment Service (NDES) Spoofing Vulnerability |
| CVE-2026-85747 | 6.8 | — | distribution | distribution | CWE-354 | Distribution: Client `manifests.Get()` does not verify returned content again… |
| CVE-2026-96863 | 6.8 | — | Microsoft | Windows 11 version 23H2 | CWE-122 | Windows Storage Port Driver Elevation of Privilege Vulnerability |
| CVE-2026-97782 | 6.8 | — | Microsoft | Microsoft SharePoint Server Subscription Edition | CWE-203 | Microsoft Office SharePoint Tampering Vulnerability |
| CVE-2026-102188 | 6.8 | — | Microsoft | Windows 10 Version 1607 | CWE-822 | Windows Storage Port Driver Elevation of Privilege Vulnerability |
| CVE-2026-102206 | 6.8 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Portable Device MTP Driver Elevation of Privilege Vulnerability |
| CVE-2026-102229 | 6.8 | — | Microsoft | Visual Studio Code | CWE-22 | Visual Studio Code Information Disclosure Vulnerability |
| CVE-2026-103578 | 6.8 | — | Microsoft | Windows 11 version 26H1 | CWE-822 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-54697 | 6.7 | — | connectbot | cbssh | CWE-190 | ConnectBot SSH: Excessive allocation and integer overflow in DER private-key … |
| CVE-2026-69902 | 6.7 | — | Microsoft | Windows 10 Version 1607 | CWE-822 | Windows NTFS Remote Code Execution Vulnerability |
| CVE-2026-70165 | 6.7 | — | Microsoft | .NET 10.0 | CWE-59 | .NET Elevation of Privilege Vulnerability |
| CVE-2026-70189 | 6.7 | — | Microsoft | Microsoft SQL Server 2017 (GDR) | CWE-122 | Microsoft SQL Server Remote Code Execution Vulnerability |
| CVE-2026-83706 | 6.7 | — | Microsoft | Windows 11 Version 24H2 | CWE-416 | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2026-85333 | 6.7 | — | Microsoft | Windows 10 Version 1607 | CWE-362 | Windows Performance Monitor Elevation of Privilege Vulnerability |
| CVE-2026-88089 | 6.7 | — | Microsoft | Microsoft SQL Server 2017 (GDR) | CWE-20 | Microsoft SQL Server Remote Code Execution Vulnerability |
| CVE-2026-88143 | 6.7 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Storage Spaces Controller Elevation of Privilege Vulnerability |
| CVE-2026-96938 | 6.7 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Distributed File System (DFS) Elevation of Privilege Vulnerability |
| CVE-2026-102672 | 6.7 | — | electron | electron | CWE-367 | Electron: Local race condition in Squirrel.Mac update installation on macOS |
| CVE-2026-110235 | 6.7 | — | Abdurazaaq Mohammed | MP Manager | CWE-22 | MP Manager through 1.1.0 Path Traversal via Archive Extraction sanitizeEntryN… |
| CVE-2026-69635 | 6.6 | — | Microsoft | Windows 10 Version 1607 | CWE-122 | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-83945 | 6.6 | — | Microsoft | Microsoft SQL Server 2022 (GDR) | CWE-122 | Microsoft SQL Server Remote Code Execution Vulnerability |
| CVE-2026-85841 | 6.6 | — | Microsoft | Windows 10 Version 1607 | CWE-416 | Windows DHCP Server Remote Code Execution Vulnerability |
| CVE-2026-14909 | 6.5 | — | IBM | WebSphere Application Server - Liberty | CWE-209 | IBM WebSphere Application Server Liberty Information Disclosure |
| CVE-2026-15577 | 6.5 | — | Grafana | Grafana Enterprise | CWE-863 | Git Sync connection configuration can be modified with read-only access |
| CVE-2026-19940 | 6.5 | — | zephyrproject | zephyr | CWE-416 | Bluetooth HFP AG reuses a connection slot while a delayable work item is stil… |
| CVE-2026-23706 | 6.5 | — | Fortinet | FortiAnalyzer Cloud | CWE-89 | An Improper Neutralization of Special Elements used in an SQL Command ('SQL I… |
| CVE-2026-33374 | 6.5 | — | Grafana | Grafana Enterprise | CWE-400 | Unbounded memory allocation in the Prometheus rule conversion API |
| CVE-2026-67626 | 6.5 | — | Microsoft | Microsoft SQL Server 2022 (GDR) | CWE-400 | Microsoft SQL Server Denial of Service Vulnerability |
| CVE-2026-69226 | 6.5 | — | Esri | Portal for ArcGIS | CWE-863 | Portal for ArcGIS has a security vulnerability |
| CVE-2026-69877 | 6.5 | — | Microsoft | Azure CLI | CWE-346 | Azure DevOps Information Disclosure Vulnerability |
| CVE-2026-69922 | 6.5 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-125 | Microsoft Office Excel Information Disclosure Vulnerability |
| CVE-2026-69940 | 6.5 | — | Microsoft | Windows 10 Version 1607 | CWE-125 | Windows Client for NFS Information Disclosure Vulnerability |
| CVE-2026-69955 | 6.5 | — | Microsoft | Windows 10 Version 1607 | CWE-125 | Windows Client for NFS Information Disclosure Vulnerability |
| CVE-2026-69968 | 6.5 | — | Microsoft | Windows 10 Version 1809 | CWE-23 | Windows libarchive Tampering Vulnerability |
| CVE-2026-69973 | 6.5 | — | Microsoft | Windows 10 Version 1809 | CWE-22 | Windows libarchive Tampering Vulnerability |
| CVE-2026-70072 | 6.5 | — | Microsoft | Windows 10 Version 1607 | CWE-770 | Windows Netlogon Denial of Service Vulnerability |
| CVE-2026-70119 | 6.5 | — | Microsoft | Windows Server 2022 | CWE-125 | Windows DNS Remote Code Execution Vulnerability |