{ "day": "2026-10-13", "boundary": "UTC calendar day", "published_count": 2291, "by_severity": { "CRITICAL": 140, "HIGH": 1297, "MEDIUM": 705, "LOW": 41 }, "kev_count": 2, "exploit_reference_count": 0, "awaiting_enrichment_count": 108, "ranking": "Sort: (1) KEV membership, descending. (2) EPSS score, descending. (3) CVSS base score, descending. (4) CVE ID, ascending. CVEs lacking EPSS or CVSS data sort below those that have it within their KEV tier and are labeled AWAITING ENRICHMENT. Missing scores are never imputed.", "results": [ { "rank": 1, "cve_id": "CVE-2026-96951", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": true, "kev_due_at": "2026-10-16", "vendor": "Microsoft", "product": "Outlook.com", "cwe": "CWE-77", "title": "Windows Shell Security Feature Bypass Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96951" }, { "rank": 2, "cve_id": "CVE-2026-104935", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": true, "kev_due_at": "2026-10-16", "vendor": "Ivanti", "product": "Connect Secure", "cwe": "CWE-290", "title": "Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. This does not impact ICS version 22.7R2.14 or prior.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-104935" }, { "rank": 3, "cve_id": "CVE-2026-109108", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": 0.02265, "epss_percentile": 0.82573, "kev": false, "kev_due_at": null, "vendor": "Wavlink", "product": "WL-WN530BE1-A", "cwe": "CWE-77", "title": "Wavlink WL-WN530BE1-A uploadVpn.cgi popen os command injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109108" }, { "rank": 4, "cve_id": "CVE-2026-109110", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.02028, "epss_percentile": 0.8052, "kev": false, "kev_due_at": null, "vendor": "Wavlink", "product": "WL-WN592AX6", "cwe": "CWE-77", "title": "Wavlink WL-WN592AX6 wmapd system os command injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109110" }, { "rank": 5, "cve_id": "CVE-2026-75826", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": 0.00939, "epss_percentile": 0.59891, "kev": false, "kev_due_at": null, "vendor": "Teltonika Networks", "product": "RUT", "cwe": "CWE-78", "title": "Teltonika Command Injection in Backup function", "url": "https://www.cve.org/CVERecord?id=CVE-2026-75826" }, { "rank": 6, "cve_id": "CVE-2026-108972", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00657, "epss_percentile": 0.50119, "kev": false, "kev_due_at": null, "vendor": "SourceCodester", "product": "Human Resource Management System", "cwe": "CWE-287", "title": "SourceCodester Human Resource Management System Employee Endpoint employee.php session_start improper authentication", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108972" }, { "rank": 7, "cve_id": "CVE-2026-109109", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.00584, "epss_percentile": 0.4644, "kev": false, "kev_due_at": null, "vendor": "Wavlink", "product": "WL-WN530BE1-A", "cwe": "CWE-119", "title": "Wavlink WL-WN530BE1-A Settings Export CGI ExportAllSettings.cgi strcpy stack-based overflow", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109109" }, { "rank": 8, "cve_id": "CVE-2026-97229", "cvss_base": 10, "cvss_severity": "CRITICAL", "epss_score": 0.00559, "epss_percentile": 0.45008, "kev": false, "kev_due_at": null, "vendor": "GitLab", "product": "GitLab", "cwe": "CWE-190", "title": "Integer Overflow or Wraparound in GitLab", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97229" }, { "rank": 9, "cve_id": "CVE-2026-96893", "cvss_base": 7.3, "cvss_severity": "HIGH", "epss_score": 0.00545, "epss_percentile": 0.44188, "kev": false, "kev_due_at": null, "vendor": "GitLab", "product": "GitLab", "cwe": "CWE-1427", "title": "Improper Neutralization of Input Used for LLM Prompting in GitLab", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96893" }, { "rank": 10, "cve_id": "CVE-2026-109107", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00527, "epss_percentile": 0.4309, "kev": false, "kev_due_at": null, "vendor": "Wavlink", "product": "WL-WN592AX6", "cwe": "CWE-404", "title": "Wavlink WL-WN592AX6 upload.cgi main null pointer dereference", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109107" }, { "rank": 11, "cve_id": "CVE-2026-109758", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.00526, "epss_percentile": 0.42981, "kev": false, "kev_due_at": null, "vendor": "Perforce", "product": "Helix Authentication Service", "cwe": "CWE-798", "title": "Perforce Helix Authentication Service (HAS) deployments that retain the shipped default SCIM bearer token are vulnerable to unauthorized access when the SCIM endpoint is reachable by an attacker. In version 25.2, the installation templates contain a default credential which the installer copies into the active configuration; the installer and configuration script do not automatically replace that value with a random token. An attacker who knows the default token can authenticate to the SCIM API and perform user and group operations allowed by the configured provisioning backend. This issue can be chained with CVE-2026-61834 in affected releases of the scim-patch dependency. A crafted SCIM PATCH request can cause server-side prototype pollution, corrupt application state, and disrupt service availability, including health checks and SCIM or SSO requests. In a later test, this primitive was confirmed to enable remote code execution in a Node.js 24/Express deployment through available gadget chains involving child_process, EJS/Pug, or Passport. This vulnerability exists in version 2022.1 - 2025.2 of HAS however the underlying defect was removed in version 2026.1 which was released July 17th 2026. The vulnerability was identified in older versions of HAS after version 2026.1 was released.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109758" }, { "rank": 12, "cve_id": "CVE-2026-109114", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00514, "epss_percentile": 0.42203, "kev": false, "kev_due_at": null, "vendor": "AdithyaYelloju", "product": "Restaurant-Management-System", "cwe": "CWE-287", "title": "AdithyaYelloju Restaurant-Management-System Login Form login.php improper authentication", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109114" }, { "rank": 13, "cve_id": "CVE-2026-108969", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.005, "epss_percentile": 0.41158, "kev": false, "kev_due_at": null, "vendor": "itsmeravitejak", "product": "Online-Examination-System", "cwe": "CWE-697", "title": "itsmeravitejak Online-Examination-System Session session.php checkLogin comparison", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108969" }, { "rank": 14, "cve_id": "CVE-2026-108964", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00412, "epss_percentile": 0.33697, "kev": false, "kev_due_at": null, "vendor": "SourceCodester", "product": "Performance Indicator System", "cwe": "CWE-74", "title": "SourceCodester Performance Indicator System addproduct.php sql injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108964" }, { "rank": 15, "cve_id": "CVE-2026-108966", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00412, "epss_percentile": 0.33696, "kev": false, "kev_due_at": null, "vendor": "SourceCodester", "product": "Performance Indicator System", "cwe": "CWE-74", "title": "SourceCodester Performance Indicator System product.php sql injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108966" }, { "rank": 16, "cve_id": "CVE-2026-108967", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00412, "epss_percentile": 0.33696, "kev": false, "kev_due_at": null, "vendor": "SourceCodester", "product": "Performance Indicator System", "cwe": "CWE-74", "title": "SourceCodester Performance Indicator System edit_credit.php sql injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108967" }, { "rank": 17, "cve_id": "CVE-2026-108968", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00412, "epss_percentile": 0.33695, "kev": false, "kev_due_at": null, "vendor": "SourceCodester", "product": "Performance Indicator System", "cwe": "CWE-74", "title": "SourceCodester Performance Indicator System sales_history.php sql injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108968" }, { "rank": 18, "cve_id": "CVE-2026-108970", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00412, "epss_percentile": 0.33696, "kev": false, "kev_due_at": null, "vendor": "itsmeravitejak", "product": "Online-Examination-System", "cwe": "CWE-74", "title": "itsmeravitejak Online-Examination-System Registration Form database.php addNewUser sql injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108970" }, { "rank": 19, "cve_id": "CVE-2026-14308", "cvss_base": 4.9, "cvss_severity": "MEDIUM", "epss_score": 0.00408, "epss_percentile": 0.33192, "kev": false, "kev_due_at": null, "vendor": "Zohocorp", "product": "ManageEngine Malware Protection Plus", "cwe": "CWE-20", "title": "Insufficient Signature Validation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-14308" }, { "rank": 20, "cve_id": "CVE-2026-108961", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00402, "epss_percentile": 0.32586, "kev": false, "kev_due_at": null, "vendor": "PaddlePaddle", "product": "PaddleX", "cwe": "CWE-74", "title": "PaddlePaddle PaddleX Preprocessor processors.py NormalizeImage.__init__ code injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108961" }, { "rank": 21, "cve_id": "CVE-2026-108962", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00398, "epss_percentile": 0.32155, "kev": false, "kev_due_at": null, "vendor": "storyicon", "product": "comfyui_segment_anything", "cwe": "CWE-74", "title": "storyicon comfyui_segment_anything GroundingDINO Model Loading slconfig.py SLConfig._file2dict code injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108962" }, { "rank": 22, "cve_id": "CVE-2026-89107", "cvss_base": 9.9, "cvss_severity": "CRITICAL", "epss_score": 0.00374, "epss_percentile": 0.29554, "kev": false, "kev_due_at": null, "vendor": "SAP_SE", "product": "SAP S/4HANA (Manage Substitution/Validation Rules)", "cwe": "CWE-94", "title": "Code Injection vulnerability in SAP S/4HANA (Manage Substitution/Validation Rules)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-89107" }, { "rank": 23, "cve_id": "CVE-2026-87689", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00367, "epss_percentile": 0.28736, "kev": false, "kev_due_at": null, "vendor": "Rapid7", "product": "Metasploit Framework", "cwe": "CWE-306", "title": "Metasploit Framework Web Service REST API Missing Authentication on Credential Endpoints", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87689" }, { "rank": 24, "cve_id": "CVE-2026-15399", "cvss_base": 4.9, "cvss_severity": "MEDIUM", "epss_score": 0.00355, "epss_percentile": 0.27434, "kev": false, "kev_due_at": null, "vendor": "wpmart", "product": "Animated Number Counters", "cwe": "CWE-89", "title": "Animated Number Counters <= 3.0 - Authenticated (Editor+) SQL Injection via 'counterid' Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15399" }, { "rank": 25, "cve_id": "CVE-2026-89113", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00347, "epss_percentile": 0.2644, "kev": false, "kev_due_at": null, "vendor": "SAP_SE", "product": "SAP Commerce Cloud (OOTB Code)", "cwe": "CWE-89", "title": "SQL Injection vulnerability in SAP Commerce Cloud (OOTB Code)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-89113" }, { "rank": 26, "cve_id": "CVE-2026-58249", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00322, "epss_percentile": 0.23379, "kev": false, "kev_due_at": null, "vendor": "SAP_SE", "product": "SAP NetWeaver and SAP Web Dispatcher (Internet Communication Manager)", "cwe": "CWE-191", "title": "Memory Corruption vulnerability in SAP NetWeaver and SAP Web Dispatcher (Internet Communication Manager)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58249" }, { "rank": 27, "cve_id": "CVE-2026-109786", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00314, "epss_percentile": 0.2254, "kev": false, "kev_due_at": null, "vendor": "fail2ban", "product": "fail2ban", "cwe": "CWE-117", "title": "In fail2ban 0.10.5 through 1.1.1 before ddd879d, the sshd filter (config/filter.d/sshd.conf) accepts an \"on \" suffix after the host address. Because OpenSSH logs the offered username verbatim, a remote unauthenticated attacker can use a username such as \"x VICTIM-SOURCE-IP-ADDRESS on\" to make fail2ban associate failed login attempts with an arbitrary source IP address and ban it (e.g., to block logins from a legitimate user). The default filter mode is affected.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109786" }, { "rank": 28, "cve_id": "CVE-2026-89110", "cvss_base": 9.9, "cvss_severity": "CRITICAL", "epss_score": 0.00312, "epss_percentile": 0.2231, "kev": false, "kev_due_at": null, "vendor": "SAP_SE", "product": "SAP NetWeaver Visual Composer", "cwe": "CWE-749", "title": "Broken Access Control in SAP NetWeaver Visual Composer", "url": "https://www.cve.org/CVERecord?id=CVE-2026-89110" }, { "rank": 29, "cve_id": "CVE-2026-109116", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00302, "epss_percentile": 0.21295, "kev": false, "kev_due_at": null, "vendor": "AdithyaYelloju", "product": "Restaurant-Management-System", "cwe": "CWE-285", "title": "AdithyaYelloju Restaurant-Management-System Order Management mysqli_query authorization", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109116" }, { "rank": 30, "cve_id": "CVE-2026-89108", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": 0.00301, "epss_percentile": 0.21114, "kev": false, "kev_due_at": null, "vendor": "SAP_SE", "product": "SAP Manufacturing Integration and Intelligence (Configuration Service)", "cwe": "CWE-862", "title": "Missing Authorization check in SAP Manufacturing Integration and Intelligence (Configuration Service)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-89108" }, { "rank": 31, "cve_id": "CVE-2026-108973", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00288, "epss_percentile": 0.198, "kev": false, "kev_due_at": null, "vendor": "SourceCodester", "product": "Contact Tracing System", "cwe": "CWE-284", "title": "SourceCodester Contact Tracing System Users.php move_uploaded_file unrestricted upload", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108973" }, { "rank": 32, "cve_id": "CVE-2026-108974", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00288, "epss_percentile": 0.19802, "kev": false, "kev_due_at": null, "vendor": "SourceCodester", "product": "E-Learning System", "cwe": "CWE-284", "title": "SourceCodester E-Learning System Users.php save_users unrestricted upload", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108974" }, { "rank": 33, "cve_id": "CVE-2026-108975", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00288, "epss_percentile": 0.19802, "kev": false, "kev_due_at": null, "vendor": "SourceCodester", "product": "Library Management System", "cwe": "CWE-284", "title": "SourceCodester Library Management System add_admin.php move_uploaded_file unrestricted upload", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108975" }, { "rank": 34, "cve_id": "CVE-2026-92883", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00275, "epss_percentile": 0.18459, "kev": false, "kev_due_at": null, "vendor": "GitLab", "product": "GitLab", "cwe": "CWE-79", "title": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92883" }, { "rank": 35, "cve_id": "CVE-2026-108947", "cvss_base": 1.9, "cvss_severity": "LOW", "epss_score": 0.00275, "epss_percentile": 0.185, "kev": false, "kev_due_at": null, "vendor": "yoshitomo-matsubara", "product": "torchdistill", "cwe": "CWE-20", "title": "yoshitomo-matsubara torchdistill main_util.py load_ckpt deserialization", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108947" }, { "rank": 36, "cve_id": "CVE-2026-89111", "cvss_base": 10, "cvss_severity": "CRITICAL", "epss_score": 0.00274, "epss_percentile": 0.18386, "kev": false, "kev_due_at": null, "vendor": "SAP_SE", "product": "SAP Cloud", "cwe": "CWE-918", "title": "OAuth2 SSRF vulnerability in SAP Cloud SDK for Python", "url": "https://www.cve.org/CVERecord?id=CVE-2026-89111" }, { "rank": 37, "cve_id": "CVE-2026-108948", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": 0.0027, "epss_percentile": 0.17844, "kev": false, "kev_due_at": null, "vendor": "code-projects", "product": "Online Reviewer System", "cwe": "CWE-913", "title": "code-projects Online Reviewer System User Profile Update btn_functions.php dynamically-determined object attributes", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108948" }, { "rank": 38, "cve_id": "CVE-2026-108954", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": 0.00267, "epss_percentile": 0.17462, "kev": false, "kev_due_at": null, "vendor": "k2-fsa", "product": "sherpa-onnx", "cwe": "CWE-119", "title": "k2-fsa sherpa-onnx Offline Transducer Greedy Search Decoder offline-transducer-greedy-search-decoder.cc Decode buffer overflow", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108954" }, { "rank": 39, "cve_id": "CVE-2026-108965", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00266, "epss_percentile": 0.17115, "kev": false, "kev_due_at": null, "vendor": "SourceCodester", "product": "Performance Indicator System", "cwe": "CWE-74", "title": "SourceCodester Performance Indicator System edit_quantity.php sql injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108965" }, { "rank": 40, "cve_id": "CVE-2026-108956", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00263, "epss_percentile": 0.16814, "kev": false, "kev_due_at": null, "vendor": "code-projects", "product": "Online Reviewer System", "cwe": "CWE-74", "title": "code-projects Online Reviewer System User Update btn_functions.php sql injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108956" }, { "rank": 41, "cve_id": "CVE-2026-109115", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00263, "epss_percentile": 0.16818, "kev": false, "kev_due_at": null, "vendor": "AdithyaYelloju", "product": "Restaurant-Management-System", "cwe": "CWE-74", "title": "AdithyaYelloju Restaurant-Management-System Password Reset forgot3.php sql injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109115" }, { "rank": 42, "cve_id": "CVE-2026-108958", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": 0.00259, "epss_percentile": 0.16266, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "TensorLayer", "cwe": "CWE-20", "title": "TensorLayer HDF5 Loading utils.py load_hdf5_graph deserialization", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108958" }, { "rank": 43, "cve_id": "CVE-2026-102562", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": 0.00247, "epss_percentile": 0.14767, "kev": false, "kev_due_at": null, "vendor": "acyba", "product": "AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress", "cwe": "CWE-79", "title": "AcyMailing <= 11.1.0 - Unauthenticated Stored Cross-Site Scripting via 'customField[]' Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102562" }, { "rank": 44, "cve_id": "CVE-2026-14814", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.00244, "epss_percentile": 0.14427, "kev": false, "kev_due_at": null, "vendor": "GitLab", "product": "GitLab", "cwe": "CWE-625", "title": "Permissive Regular Expression in GitLab", "url": "https://www.cve.org/CVERecord?id=CVE-2026-14814" }, { "rank": 45, "cve_id": "CVE-2026-108957", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": 0.00242, "epss_percentile": 0.14259, "kev": false, "kev_due_at": null, "vendor": "TinyLLaVA", "product": "TinyLLaVA_Factory", "cwe": "CWE-74", "title": "TinyLLaVA TinyLLaVA_Factory TinyLlavaConfig configuration_tinyllava.py _load_text_config code injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108957" }, { "rank": 46, "cve_id": "CVE-2026-102007", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": 0.00241, "epss_percentile": 0.14114, "kev": false, "kev_due_at": null, "vendor": "bitpressadmin", "product": "Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation", "cwe": "CWE-79", "title": "Bit integrations <= 2.10.6 - Unauthenticated Stored Cross-Site Scripting via 'notification_content' Field via Public Bit Assist Webhook Callback", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102007" }, { "rank": 47, "cve_id": "CVE-2026-89120", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00237, "epss_percentile": 0.13651, "kev": false, "kev_due_at": null, "vendor": "SAP_SE", "product": "SAP ABAP Platform", "cwe": "CWE-1188", "title": "Missing authorization check in SAP ABAP Platform", "url": "https://www.cve.org/CVERecord?id=CVE-2026-89120" }, { "rank": 48, "cve_id": "CVE-2026-89097", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": 0.00237, "epss_percentile": 0.1368, "kev": false, "kev_due_at": null, "vendor": "spacetime", "product": "Ad Inserter – Ad Manager & AdSense Ads", "cwe": "CWE-200", "title": "Ad Inserter <= 2.8.18 - Authenticated (Subscriber+) Sensitive Information Disclosure in 'ai-debug-processing-fe' & 'ai-debug-meta' URL Parameters", "url": "https://www.cve.org/CVERecord?id=CVE-2026-89097" }, { "rank": 49, "cve_id": "CVE-2026-13138", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": 0.00236, "epss_percentile": 0.13523, "kev": false, "kev_due_at": null, "vendor": "Divasoft Software and E-Commerce Inc.", "product": "Biletiva Ticketing Platform", "cwe": "CWE-602", "title": "Improper Authorization in Divasoft Software's Biletiva Ticketing Platform", "url": "https://www.cve.org/CVERecord?id=CVE-2026-13138" }, { "rank": 50, "cve_id": "CVE-2026-108179", "cvss_base": 7.6, "cvss_severity": "HIGH", "epss_score": 0.00236, "epss_percentile": 0.13517, "kev": false, "kev_due_at": null, "vendor": "PluginUs.Net", "product": "WOLF", "cwe": "CWE-89", "title": "WordPress WOLF plugin <= 1.1.1 - SQL Injection vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108179" }, { "rank": 51, "cve_id": "CVE-2026-7767", "cvss_base": 5.8, "cvss_severity": "MEDIUM", "epss_score": 0.00234, "epss_percentile": 0.13196, "kev": false, "kev_due_at": null, "vendor": "GitLab", "product": "GitLab", "cwe": "CWE-601", "title": "URL Redirection to Untrusted Site ('Open Redirect') in GitLab", "url": "https://www.cve.org/CVERecord?id=CVE-2026-7767" }, { "rank": 52, "cve_id": "CVE-2026-96535", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": 0.00234, "epss_percentile": 0.13221, "kev": false, "kev_due_at": null, "vendor": "YouMind", "product": "YouMind web application", "cwe": "CWE-79", "title": "Cross-Site Scripting in the YouMind web application", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96535" }, { "rank": 53, "cve_id": "CVE-2026-81839", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": 0.00231, "epss_percentile": 0.12879, "kev": false, "kev_due_at": null, "vendor": "GitLab", "product": "GitLab", "cwe": "CWE-863", "title": "Incorrect Authorization in GitLab", "url": "https://www.cve.org/CVERecord?id=CVE-2026-81839" }, { "rank": 54, "cve_id": "CVE-2026-16275", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00231, "epss_percentile": 0.12919, "kev": false, "kev_due_at": null, "vendor": "GitLab", "product": "GitLab", "cwe": "CWE-863", "title": "Incorrect Authorization in GitLab", "url": "https://www.cve.org/CVERecord?id=CVE-2026-16275" }, { "rank": 55, "cve_id": "CVE-2026-84284", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00231, "epss_percentile": 0.12919, "kev": false, "kev_due_at": null, "vendor": "GitLab", "product": "GitLab", "cwe": "CWE-863", "title": "Incorrect Authorization in GitLab", "url": "https://www.cve.org/CVERecord?id=CVE-2026-84284" }, { "rank": 56, "cve_id": "CVE-2026-85529", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00231, "epss_percentile": 0.1292, "kev": false, "kev_due_at": null, "vendor": "GitLab", "product": "GitLab", "cwe": "CWE-863", "title": "Incorrect Authorization in GitLab", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85529" }, { "rank": 57, "cve_id": "CVE-2026-109687", "cvss_base": 7.6, "cvss_severity": "HIGH", "epss_score": 0.00226, "epss_percentile": 0.12344, "kev": false, "kev_due_at": null, "vendor": "Link Whisper INC", "product": "Link Whisper Free", "cwe": "CWE-89", "title": "WordPress Link Whisper Free plugin <= 0.9.7 - SQL Injection vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109687" }, { "rank": 58, "cve_id": "CVE-2026-108971", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": 0.00225, "epss_percentile": 0.12231, "kev": false, "kev_due_at": null, "vendor": "D-Link", "product": "DCS-930L", "cwe": "CWE-345", "title": "D-Link DCS-930L Emergency HTTP Recovery Server bootloader_region.bin mpfd_decode signature verification", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108971" }, { "rank": 59, "cve_id": "CVE-2026-16301", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": 0.00225, "epss_percentile": 0.12243, "kev": false, "kev_due_at": null, "vendor": "GitLab", "product": "GitLab", "cwe": "CWE-863", "title": "Incorrect Authorization in GitLab", "url": "https://www.cve.org/CVERecord?id=CVE-2026-16301" }, { "rank": 60, "cve_id": "CVE-2026-103549", "cvss_base": 2.7, "cvss_severity": "LOW", "epss_score": 0.00222, "epss_percentile": 0.11867, "kev": false, "kev_due_at": null, "vendor": "GitLab", "product": "GitLab", "cwe": "CWE-863", "title": "Incorrect Authorization in GitLab", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103549" }, { "rank": 61, "cve_id": "CVE-2026-109143", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": 0.00221, "epss_percentile": 0.11688, "kev": false, "kev_due_at": null, "vendor": "calcom", "product": "cal.com", "cwe": "CWE-266", "title": "calcom cal.com/cal.diy Credentials delete credentials.delete privileges management", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109143" }, { "rank": 62, "cve_id": "CVE-2026-89118", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00214, "epss_percentile": 0.1092, "kev": false, "kev_due_at": null, "vendor": "SAP_SE", "product": "SAP NetWeaver Enterprise Portal", "cwe": "CWE-552", "title": "Information Disclosure vulnerability in SAP NetWeaver Enterprise Portal", "url": "https://www.cve.org/CVERecord?id=CVE-2026-89118" }, { "rank": 63, "cve_id": "CVE-2026-9268", "cvss_base": 2.7, "cvss_severity": "LOW", "epss_score": 0.0021, "epss_percentile": 0.10418, "kev": false, "kev_due_at": null, "vendor": "GitLab", "product": "GitLab", "cwe": "CWE-863", "title": "Incorrect Authorization in GitLab", "url": "https://www.cve.org/CVERecord?id=CVE-2026-9268" }, { "rank": 64, "cve_id": "CVE-2026-89112", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00209, "epss_percentile": 0.10202, "kev": false, "kev_due_at": null, "vendor": "SAP_SE", "product": "CLA-Assistant", "cwe": "CWE-862", "title": "Broken Access Control in CLA-Assistant � CLA Signature PII Disclosure", "url": "https://www.cve.org/CVERecord?id=CVE-2026-89112" }, { "rank": 65, "cve_id": "CVE-2026-108489", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00206, "epss_percentile": 0.09892, "kev": false, "kev_due_at": null, "vendor": "PluginUs.Net", "product": "Active Products Tables for WooCommerce", "cwe": "CWE-201", "title": "WordPress Active Products Tables for WooCommerce plugin <= 2.1.3 - Sensitive Data Exposure vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108489" }, { "rank": 66, "cve_id": "CVE-2026-35001", "cvss_base": 8.4, "cvss_severity": "HIGH", "epss_score": 0.00204, "epss_percentile": 0.09668, "kev": false, "kev_due_at": null, "vendor": "OpenS100 Project", "product": "OpenS100", "cwe": "CWE-122", "title": "OpenS100 S-102 Parser Integer Overflow Heap Buffer Overflow", "url": "https://www.cve.org/CVERecord?id=CVE-2026-35001" }, { "rank": 67, "cve_id": "CVE-2026-108959", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": 0.002, "epss_percentile": 0.09188, "kev": false, "kev_due_at": null, "vendor": "itsourcecode", "product": "Online Cake Ordering System", "cwe": "CWE-74", "title": "itsourcecode Online Cake Ordering System addtransacdetail.php sql injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108959" }, { "rank": 68, "cve_id": "CVE-2026-108942", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": 0.00199, "epss_percentile": 0.08974, "kev": false, "kev_due_at": null, "vendor": "philz1337x", "product": "clarity-upscaler", "cwe": "CWE-79", "title": "philz1337x clarity-upscaler Extra Networks Card Rendering ui_extra_networks.py create_html_for_item cross site scripting", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108942" }, { "rank": 69, "cve_id": "CVE-2026-106597", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00195, "epss_percentile": 0.08557, "kev": false, "kev_due_at": null, "vendor": "ThemeGrill", "product": "User Registration", "cwe": "CWE-862", "title": "WordPress User Registration plugin <= 5.2.8 - Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106597" }, { "rank": 70, "cve_id": "CVE-2026-108496", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00195, "epss_percentile": 0.08556, "kev": false, "kev_due_at": null, "vendor": "WP User Manager", "product": "WP User Manager", "cwe": "CWE-862", "title": "WordPress WP User Manager plugin <= 2.9.23 - Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108496" }, { "rank": 71, "cve_id": "CVE-2026-6567", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": 0.00193, "epss_percentile": 0.08311, "kev": false, "kev_due_at": null, "vendor": "GitLab", "product": "GitLab", "cwe": "CWE-863", "title": "Incorrect Authorization in GitLab", "url": "https://www.cve.org/CVERecord?id=CVE-2026-6567" }, { "rank": 72, "cve_id": "CVE-2026-14552", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": 0.00193, "epss_percentile": 0.0831, "kev": false, "kev_due_at": null, "vendor": "GitLab", "product": "GitLab", "cwe": "CWE-863", "title": "Incorrect Authorization in GitLab", "url": "https://www.cve.org/CVERecord?id=CVE-2026-14552" }, { "rank": 73, "cve_id": "CVE-2026-105458", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": 0.00193, "epss_percentile": 0.08294, "kev": false, "kev_due_at": null, "vendor": "GitLab", "product": "GitLab", "cwe": "CWE-807", "title": "Reliance on Untrusted Inputs in a Security Decision in GitLab", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105458" }, { "rank": 74, "cve_id": "CVE-2026-104661", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": 0.00192, "epss_percentile": 0.08253, "kev": false, "kev_due_at": null, "vendor": "GitLab", "product": "GitLab", "cwe": "CWE-266", "title": "Incorrect Privilege Assignment in GitLab", "url": "https://www.cve.org/CVERecord?id=CVE-2026-104661" }, { "rank": 75, "cve_id": "CVE-2026-14210", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": 0.0019, "epss_percentile": 0.07983, "kev": false, "kev_due_at": null, "vendor": "GitLab", "product": "GitLab", "cwe": "CWE-1220", "title": "Insufficient Granularity of Access Control in GitLab", "url": "https://www.cve.org/CVERecord?id=CVE-2026-14210" }, { "rank": 76, "cve_id": "CVE-2026-100104", "cvss_base": 3.5, "cvss_severity": "LOW", "epss_score": 0.00188, "epss_percentile": 0.07787, "kev": false, "kev_due_at": null, "vendor": "GitLab", "product": "GitLab", "cwe": "CWE-918", "title": "Server-Side Request Forgery (SSRF) in GitLab", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100104" }, { "rank": 77, "cve_id": "CVE-2026-106598", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00187, "epss_percentile": 0.07708, "kev": false, "kev_due_at": null, "vendor": "ThemeGrill", "product": "User Registration", "cwe": "CWE-862", "title": "WordPress User Registration plugin <= 5.2.8 - Sensitive Data Exposure vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106598" }, { "rank": 78, "cve_id": "CVE-2026-109703", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00187, "epss_percentile": 0.07708, "kev": false, "kev_due_at": null, "vendor": "WPGraphQL", "product": "WPGraphQL", "cwe": "CWE-862", "title": "WordPress WPGraphQL plugin <= 2.23.1 - Sensitive Data Exposure vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109703" }, { "rank": 79, "cve_id": "CVE-2026-108174", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00184, "epss_percentile": 0.07381, "kev": false, "kev_due_at": null, "vendor": "PluginUs.Net", "product": "FOX", "cwe": "CWE-862", "title": "WordPress FOX plugin <= 1.5.4 - Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108174" }, { "rank": 80, "cve_id": "CVE-2026-108492", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00184, "epss_percentile": 0.07382, "kev": false, "kev_due_at": null, "vendor": "Fullworks Plugins", "product": "Quick Paypal Payments", "cwe": "CWE-862", "title": "WordPress Quick Paypal Payments plugin <= 6.0.3 - Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108492" }, { "rank": 81, "cve_id": "CVE-2026-108493", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00184, "epss_percentile": 0.07381, "kev": false, "kev_due_at": null, "vendor": "Karolína Vyskočilová", "product": "Pay for Payment for WooCommerce", "cwe": "CWE-862", "title": "WordPress Pay for Payment for WooCommerce plugin <= 3.0.1 - Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108493" }, { "rank": 82, "cve_id": "CVE-2026-109684", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00184, "epss_percentile": 0.07382, "kev": false, "kev_due_at": null, "vendor": "TMS", "product": "Amelia", "cwe": "CWE-862", "title": "WordPress Amelia plugin <= 2.4.10 - Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109684" }, { "rank": 83, "cve_id": "CVE-2026-82632", "cvss_base": 3.1, "cvss_severity": "LOW", "epss_score": 0.00179, "epss_percentile": 0.06917, "kev": false, "kev_due_at": null, "vendor": "GitLab", "product": "GitLab", "cwe": "CWE-863", "title": "Incorrect Authorization in GitLab", "url": "https://www.cve.org/CVERecord?id=CVE-2026-82632" }, { "rank": 84, "cve_id": "CVE-2026-89269", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": 0.00178, "epss_percentile": 0.06886, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "WP Testimonials", "cwe": "CWE-79", "title": "WP Testimonials <= 1.4.13 - Author+ Stored XSS via wp-testimonials Shortcode", "url": "https://www.cve.org/CVERecord?id=CVE-2026-89269" }, { "rank": 85, "cve_id": "CVE-2026-89116", "cvss_base": 5.9, "cvss_severity": "MEDIUM", "epss_score": 0.00174, "epss_percentile": 0.06395, "kev": false, "kev_due_at": null, "vendor": "SAP_SE", "product": "SAP yeoman-ui", "cwe": "CWE-78", "title": "OS Command Injection in Yeoman-UI / Application Wizard Extension for VS Code", "url": "https://www.cve.org/CVERecord?id=CVE-2026-89116" }, { "rank": 86, "cve_id": "CVE-2026-109699", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": 0.0017, "epss_percentile": 0.05845, "kev": false, "kev_due_at": null, "vendor": "ThemeGrill", "product": "User Registration", "cwe": "CWE-862", "title": "WordPress User Registration plugin <= 5.2.8 - Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109699" }, { "rank": 87, "cve_id": "CVE-2026-76975", "cvss_base": 6.1, "cvss_severity": "MEDIUM", "epss_score": 0.00168, "epss_percentile": 0.05695, "kev": false, "kev_due_at": null, "vendor": "SAP_SE", "product": "SAPUI5 (Support Assistant Overlay)", "cwe": "CWE-79", "title": "Cross-Site Scripting (XSS) vulnerability in SAPUI5 (Support Assistant Overlay)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76975" }, { "rank": 88, "cve_id": "CVE-2026-89117", "cvss_base": 6.1, "cvss_severity": "MEDIUM", "epss_score": 0.00168, "epss_percentile": 0.05694, "kev": false, "kev_due_at": null, "vendor": "SAP_SE", "product": "SAP NetWeaver Enterprise Portal", "cwe": "CWE-79", "title": "Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal", "url": "https://www.cve.org/CVERecord?id=CVE-2026-89117" }, { "rank": 89, "cve_id": "CVE-2026-89124", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": 0.00168, "epss_percentile": 0.05662, "kev": false, "kev_due_at": null, "vendor": "SAP_SE", "product": "SAP HANA (Display Product Catalog Based on Customs Declaration)", "cwe": "CWE-863", "title": "Missing Authorization Check in SAP Global Trade Services, edition for SAP HANA (Display Product Catalog Based on Customs Declaration)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-89124" }, { "rank": 90, "cve_id": "CVE-2026-109106", "cvss_base": 1.9, "cvss_severity": "LOW", "epss_score": 0.00165, "epss_percentile": 0.05278, "kev": false, "kev_due_at": null, "vendor": "Polaris", "product": "Office App", "cwe": "CWE-22", "title": "Polaris Office App Document Intake com.infraware.service.m.n.a path traversal", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109106" }, { "rank": 91, "cve_id": "CVE-2026-101168", "cvss_base": 6.2, "cvss_severity": "MEDIUM", "epss_score": 0.00164, "epss_percentile": 0.05206, "kev": false, "kev_due_at": null, "vendor": "GitLab", "product": "GitLab", "cwe": "CWE-532", "title": "Insertion of Sensitive Information into Log File in GitLab", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101168" }, { "rank": 92, "cve_id": "CVE-2026-89271", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00162, "epss_percentile": 0.04842, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "WP-BusinessDirectory", "cwe": "CWE-434", "title": "WP-BusinessDirectory <= 4.0.2 - Unauthenticated Arbitrary File Write via uploadFile", "url": "https://www.cve.org/CVERecord?id=CVE-2026-89271" }, { "rank": 93, "cve_id": "CVE-2026-5954", "cvss_base": 4.2, "cvss_severity": "MEDIUM", "epss_score": 0.00162, "epss_percentile": 0.04845, "kev": false, "kev_due_at": null, "vendor": "GitLab", "product": "GitLab", "cwe": "CWE-863", "title": "Incorrect Authorization in GitLab", "url": "https://www.cve.org/CVERecord?id=CVE-2026-5954" }, { "rank": 94, "cve_id": "CVE-2026-78335", "cvss_base": 4.2, "cvss_severity": "MEDIUM", "epss_score": 0.00162, "epss_percentile": 0.04845, "kev": false, "kev_due_at": null, "vendor": "GitLab", "product": "GitLab", "cwe": "CWE-863", "title": "Incorrect Authorization in GitLab", "url": "https://www.cve.org/CVERecord?id=CVE-2026-78335" }, { "rank": 95, "cve_id": "CVE-2026-76972", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.0016, "epss_percentile": 0.04698, "kev": false, "kev_due_at": null, "vendor": "SAP_SE", "product": "SAP Manufacturing Integration and Intelligence", "cwe": "CWE-79", "title": "Cross-Site Scripting (XSS) vulnerability in SAP Manufacturing Integration and Intelligence", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76972" }, { "rank": 96, "cve_id": "CVE-2026-58242", "cvss_base": 3.5, "cvss_severity": "LOW", "epss_score": 0.00157, "epss_percentile": 0.04374, "kev": false, "kev_due_at": null, "vendor": "SAP_SE", "product": "SAP Cloud Connector", "cwe": "CWE-191", "title": "Improper Authorization check in SAP Cloud Connector", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58242" }, { "rank": 97, "cve_id": "CVE-2026-103418", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00154, "epss_percentile": 0.04057, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox for iOS", "cwe": "CWE-79", "title": "Universal XSS via the HTML language attribute in Translation Services", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103418" }, { "rank": 98, "cve_id": "CVE-2026-67165", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": 0.00152, "epss_percentile": 0.03838, "kev": false, "kev_due_at": null, "vendor": "HCLSoftware", "product": "Connections", "cwe": "CWE-79", "title": "HCL Connections is vulnerable to cross-site scripting (XSS)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-67165" }, { "rank": 99, "cve_id": "CVE-2026-108960", "cvss_base": 1.9, "cvss_severity": "LOW", "epss_score": 0.00152, "epss_percentile": 0.03864, "kev": false, "kev_due_at": null, "vendor": "Tiiny-AI", "product": "PowerInfer", "cwe": "CWE-119", "title": "Tiiny-AI PowerInfer FFN GPU-split Loader ggml-cuda.cu create_striped_mat_to_gpu out-of-bounds", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108960" }, { "rank": 100, "cve_id": "CVE-2026-89122", "cvss_base": 6.1, "cvss_severity": "MEDIUM", "epss_score": 0.00147, "epss_percentile": 0.03471, "kev": false, "kev_due_at": null, "vendor": "SAP_SE", "product": "SAP NetWeaver Enterprise Portal", "cwe": "CWE-601", "title": "Open Redirect Vulnerability in SAP NetWeaver Enterprise Portal", "url": "https://www.cve.org/CVERecord?id=CVE-2026-89122" }, { "rank": 101, "cve_id": "CVE-2026-109696", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": 0.00144, "epss_percentile": 0.03235, "kev": false, "kev_due_at": null, "vendor": "WP ManageNinja LLC", "product": "FluentBoards", "cwe": "CWE-862", "title": "WordPress FluentBoards plugin <= 2.1.0 - Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109696" }, { "rank": 102, "cve_id": "CVE-2026-89105", "cvss_base": 4.2, "cvss_severity": "MEDIUM", "epss_score": 0.00143, "epss_percentile": 0.03202, "kev": false, "kev_due_at": null, "vendor": "SAP_SE", "product": "SAP/cloud-security-services-integration-library", "cwe": "CWE-1188", "title": "Improper Authentication in HybridTokenAuthenticator of SAP/cloud-security-services-integration-library", "url": "https://www.cve.org/CVERecord?id=CVE-2026-89105" }, { "rank": 103, "cve_id": "CVE-2026-108943", "cvss_base": 1.9, "cvss_severity": "LOW", "epss_score": 0.0014, "epss_percentile": 0.02913, "kev": false, "kev_due_at": null, "vendor": "ModelTC", "product": "LightX2V", "cwe": "CWE-74", "title": "ModelTC LightX2V Tokenizer cosmos3_runner.py AutoTokenizer.from_pretrained code injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108943" }, { "rank": 104, "cve_id": "CVE-2026-89309", "cvss_base": 10, "cvss_severity": "CRITICAL", "epss_score": 0.00139, "epss_percentile": 0.02883, "kev": false, "kev_due_at": null, "vendor": "JTL SW GmbH", "product": "JTL-WMS", "cwe": "CWE-306", "title": "Missing Authentication Vulnerability in JTL-WMS", "url": "https://www.cve.org/CVERecord?id=CVE-2026-89309" }, { "rank": 105, "cve_id": "CVE-2026-105881", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00139, "epss_percentile": 0.02833, "kev": false, "kev_due_at": null, "vendor": "ThemeGrill", "product": "User Registration", "cwe": "CWE-79", "title": "WordPress User Registration plugin <= 5.2.8 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105881" }, { "rank": 106, "cve_id": "CVE-2026-108488", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00139, "epss_percentile": 0.02832, "kev": false, "kev_due_at": null, "vendor": "IdeaBox Creations", "product": "PowerPack Addons for Elementor", "cwe": "CWE-79", "title": "WordPress PowerPack Addons for Elementor plugin <= 3.1.0 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108488" }, { "rank": 107, "cve_id": "CVE-2026-108490", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00139, "epss_percentile": 0.02833, "kev": false, "kev_due_at": null, "vendor": "LeapWorx", "product": "Premium Addons for Elementor", "cwe": "CWE-79", "title": "WordPress Premium Addons for Elementor plugin <= 4.11.110 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108490" }, { "rank": 108, "cve_id": "CVE-2026-108495", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00139, "epss_percentile": 0.02832, "kev": false, "kev_due_at": null, "vendor": "Brainstorm Force", "product": "SureForms", "cwe": "CWE-79", "title": "WordPress SureForms plugin <= 2.12.7 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108495" }, { "rank": 109, "cve_id": "CVE-2026-109691", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00139, "epss_percentile": 0.02832, "kev": false, "kev_due_at": null, "vendor": "BdThemes", "product": "Prime Slider – Addons For Elementor", "cwe": "CWE-79", "title": "WordPress Prime Slider – Addons For Elementor plugin <= 4.7.1 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109691" }, { "rank": 110, "cve_id": "CVE-2026-109697", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00139, "epss_percentile": 0.02833, "kev": false, "kev_due_at": null, "vendor": "Brainstorm Force", "product": "SureCart", "cwe": "CWE-79", "title": "WordPress SureCart plugin <= 4.9.4 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109697" }, { "rank": 111, "cve_id": "CVE-2026-76976", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": 0.00138, "epss_percentile": 0.02802, "kev": false, "kev_due_at": null, "vendor": "SAP_SE", "product": "SAP NetWeaver Application Server ABAP (Applications based on SAP GUI for HTML)", "cwe": "CWE-79", "title": "Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (Applications based on SAP GUI for HTML)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76976" }, { "rank": 112, "cve_id": "CVE-2026-108945", "cvss_base": 4.8, "cvss_severity": "MEDIUM", "epss_score": 0.00138, "epss_percentile": 0.02827, "kev": false, "kev_due_at": null, "vendor": "iMoonLab", "product": "yolov13", "cwe": "CWE-74", "title": "iMoonLab yolov13 AutoBackend Model Loading autobackend.py eval code injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108945" }, { "rank": 113, "cve_id": "CVE-2026-54868", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00133, "epss_percentile": 0.02482, "kev": false, "kev_due_at": null, "vendor": "FolioVision", "product": "FV Simpler SEO", "cwe": "CWE-79", "title": "WordPress FV Simpler SEO plugin <= 1.9.7 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54868" }, { "rank": 114, "cve_id": "CVE-2026-54869", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00133, "epss_percentile": 0.02482, "kev": false, "kev_due_at": null, "vendor": "IDX Broker", "product": "IMPress for IDX Broker", "cwe": "CWE-79", "title": "WordPress IMPress for IDX Broker plugin <= 3.3.1 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54869" }, { "rank": 115, "cve_id": "CVE-2026-103417", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00133, "epss_percentile": 0.02465, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox for iOS", "cwe": "CWE-346", "title": "Saved credentials can be autofilled after cross-origin navigation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103417" }, { "rank": 116, "cve_id": "CVE-2026-92528", "cvss_base": 4.2, "cvss_severity": "MEDIUM", "epss_score": 0.00131, "epss_percentile": 0.02393, "kev": false, "kev_due_at": null, "vendor": "GitLab", "product": "GitLab", "cwe": "CWE-863", "title": "Incorrect Authorization in GitLab", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92528" }, { "rank": 117, "cve_id": "CVE-2026-54867", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.0013, "epss_percentile": 0.02326, "kev": false, "kev_due_at": null, "vendor": "Griden", "product": "Responsive Slider", "cwe": "CWE-79", "title": "WordPress Responsive Slider plugin <= 0.1.9 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54867" }, { "rank": 118, "cve_id": "CVE-2026-54870", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.0013, "epss_percentile": 0.02329, "kev": false, "kev_due_at": null, "vendor": "wpweaver", "product": "Weaver Xtreme Theme Support", "cwe": "CWE-79", "title": "WordPress Weaver Xtreme theme Support plugin <= 7.0.1 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54870" }, { "rank": 119, "cve_id": "CVE-2026-108487", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.0013, "epss_percentile": 0.02322, "kev": false, "kev_due_at": null, "vendor": "Hossni Mubarak", "product": "Books Gallery", "cwe": "CWE-79", "title": "WordPress Books Gallery plugin <= 4.8.4 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108487" }, { "rank": 120, "cve_id": "CVE-2026-89106", "cvss_base": 4.4, "cvss_severity": "MEDIUM", "epss_score": 0.00127, "epss_percentile": 0.02081, "kev": false, "kev_due_at": null, "vendor": "SAP_SE", "product": "SAPUI5", "cwe": "CWE-183", "title": "Cross Site Scripting (XSS) vulnerability in SAPUI5", "url": "https://www.cve.org/CVERecord?id=CVE-2026-89106" }, { "rank": 121, "cve_id": "CVE-2026-108944", "cvss_base": 2.4, "cvss_severity": "LOW", "epss_score": 0.00123, "epss_percentile": 0.01879, "kev": false, "kev_due_at": null, "vendor": "repository", "product": "RAE", "cwe": "CWE-74", "title": "repository RAE Config-Driven Model Instantiation model_utils.py get_obj_from_str code injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108944" }, { "rank": 122, "cve_id": "CVE-2026-103316", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00112, "epss_percentile": 0.01299, "kev": false, "kev_due_at": null, "vendor": "Logius", "product": "DigiD for macOS", "cwe": null, "title": "The macOS version of the DigiD app is not signed with Hardened Runtime", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103316" }, { "rank": 123, "cve_id": "CVE-2026-108955", "cvss_base": 1.9, "cvss_severity": "LOW", "epss_score": 0.00112, "epss_percentile": 0.01302, "kev": false, "kev_due_at": null, "vendor": "Tiiny-AI", "product": "PowerInfer", "cwe": "CWE-119", "title": "Tiiny-AI PowerInfer GGUF ggml.c gguf_init_from_file out-of-bounds", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108955" }, { "rank": 124, "cve_id": "CVE-2026-101020", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": 0.00104, "epss_percentile": 0.00977, "kev": false, "kev_due_at": null, "vendor": "Hammock Corporation", "product": "AssetView", "cwe": "CWE-732", "title": "An incorrect permission assignment for critical resource issue exists in AssetView, AssetView CLOUD, and AssetView Cloud +. If this vulnerability is exploited, a local authenticated attacker who can log in to the Windows system where Management Console or Client Terminal for the product is running may gain SYSTEM privileges.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101020" }, { "rank": 125, "cve_id": "CVE-2026-103076", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": 0.00101, "epss_percentile": 0.00856, "kev": false, "kev_due_at": null, "vendor": "ThemeGrill", "product": "User Registration", "cwe": "CWE-352", "title": "WordPress User Registration plugin <= 5.2.8 - Cross Site Request Forgery (CSRF) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103076" }, { "rank": 126, "cve_id": "CVE-2026-89121", "cvss_base": 4.7, "cvss_severity": "MEDIUM", "epss_score": 0.00092, "epss_percentile": 0.00479, "kev": false, "kev_due_at": null, "vendor": "SAP_SE", "product": "SAP S/4HANA (Linear Asset Management RAP Business Object)", "cwe": "CWE-862", "title": "Missing Authorization Check in SAP S/4HANA (Linear Asset Management RAP Business Object)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-89121" }, { "rank": 127, "cve_id": "CVE-2026-100755", "cvss_base": 4.6, "cvss_severity": "MEDIUM", "epss_score": 0.00085, "epss_percentile": 0.00282, "kev": false, "kev_due_at": null, "vendor": "GitLab", "product": "GitLab", "cwe": "CWE-349", "title": "Acceptance of Extraneous Untrusted Data With Trusted Data in GitLab", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100755" }, { "rank": 128, "cve_id": "CVE-2024-34323", "cvss_base": 10, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": "CWE-639", "title": "ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an Insecure Direct Object Reference (IDOR) via the usrLogin$hdnPFID parameter. This vulnerability allows attackers to access sensitive information via a crafted HTTP request.", "url": "https://www.cve.org/CVERecord?id=CVE-2024-34323" }, { "rank": 129, "cve_id": "CVE-2026-48382", "cvss_base": 10, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Experience Manager as a Cloud Service", "cwe": "CWE-863", "title": "Adobe Experience Manager | Incorrect Authorization (CWE-863)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48382" }, { "rank": 130, "cve_id": "CVE-2026-48383", "cvss_base": 10, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Experience Manager as a Cloud Service", "cwe": "CWE-863", "title": "Adobe Experience Manager | Incorrect Authorization (CWE-863)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48383" }, { "rank": 131, "cve_id": "CVE-2026-55675", "cvss_base": 10, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "saltyorg", "product": "docs", "cwe": "CWE-94", "title": "Salty documentation workflow executes fork-controlled Python build hooks with deployment secrets", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55675" }, { "rank": 132, "cve_id": "CVE-2026-65162", "cvss_base": 10, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "NVIDIA", "product": "AIStore framework", "cwe": "CWE-250", "title": "NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initialization API where a remote attacker may supply Kubernetes host-namespace and container-security settings. A successful exploit may lead to code execution, privilege escalation, information disclosure, data tampering, and denial of service.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65162" }, { "rank": 133, "cve_id": "CVE-2026-90532", "cvss_base": 10, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Experience Manager as a Cloud Service", "cwe": "CWE-863", "title": "Adobe Experience Manager | Incorrect Authorization (CWE-863)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-90532" }, { "rank": 134, "cve_id": "CVE-2026-94603", "cvss_base": 10, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "podman-container-tools", "product": "podman", "cwe": "CWE-693", "title": "Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-94603" }, { "rank": 135, "cve_id": "CVE-2026-103849", "cvss_base": 10, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Commerce", "cwe": "CWE-1336", "title": "Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103849" }, { "rank": 136, "cve_id": "CVE-2026-105899", "cvss_base": 10, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "ColdFusion 2025", "cwe": "CWE-434", "title": "ColdFusion | Unrestricted Upload of File with Dangerous Type (CWE-434)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105899" }, { "rank": 137, "cve_id": "CVE-2026-106622", "cvss_base": 10, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "ColdFusion 2025", "cwe": "CWE-918", "title": "ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106622" }, { "rank": 138, "cve_id": "CVE-2026-106624", "cvss_base": 10, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "ColdFusion 2025", "cwe": "CWE-94", "title": "ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106624" }, { "rank": 139, "cve_id": "CVE-2026-110130", "cvss_base": 10, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Finsys", "product": "dockhand", "cwe": "CWE-288", "title": "Dockhand before 1.0.45 Authentication Bypass via Static-Asset Check", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110130" }, { "rank": 140, "cve_id": "CVE-2026-75732", "cvss_base": 9.9, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Experience Manager 6.5 LTS", "cwe": "CWE-863", "title": "Adobe Experience Manager | Incorrect Authorization (CWE-863)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-75732" }, { "rank": 141, "cve_id": "CVE-2026-77459", "cvss_base": 9.9, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "argoproj", "product": "argo-cd", "cwe": "CWE-863", "title": "Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks", "url": "https://www.cve.org/CVERecord?id=CVE-2026-77459" }, { "rank": 142, "cve_id": "CVE-2026-97381", "cvss_base": 9.9, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "LegacyUpdate", "product": "LegacyUpdate", "cwe": "CWE-346", "title": "Legacy Update ActiveX control accepts unauthorized hosting origins", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97381" }, { "rank": 143, "cve_id": "CVE-2026-103848", "cvss_base": 9.9, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Experience Manager 6.5 LTS", "cwe": "CWE-78", "title": "Adobe Experience Manager | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103848" }, { "rank": 144, "cve_id": "CVE-2026-105895", "cvss_base": 9.9, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Experience Manager 6.5", "cwe": "CWE-20", "title": "Adobe Experience Manager | Improper Input Validation (CWE-20)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105895" }, { "rank": 145, "cve_id": "CVE-2026-105903", "cvss_base": 9.9, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "ColdFusion 2025", "cwe": "CWE-94", "title": "ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105903" }, { "rank": 146, "cve_id": "CVE-2026-106042", "cvss_base": 9.9, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Ivanti", "product": "Xtraction", "cwe": "CWE-73", "title": "An External Control of File Name or Path vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to redirect application-generated requests to an attacker-controlled endpoint and obtain EPMM connector credentials transmitted by the application.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106042" }, { "rank": 147, "cve_id": "CVE-2026-106612", "cvss_base": 9.9, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "ColdFusion 2025", "cwe": "CWE-863", "title": "ColdFusion | Incorrect Authorization (CWE-863)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106612" }, { "rank": 148, "cve_id": "CVE-2026-109412", "cvss_base": 9.9, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Ivanti", "product": "Neurons Patch for Intune", "cwe": "CWE-749", "title": "An exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows a remote authenticated attacker to leak sensitive authentication information.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109412" }, { "rank": 149, "cve_id": "CVE-2026-53709", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "mcp-context-forge", "cwe": "CWE-287", "title": "MCP Context Forge: Hardcoded default JWT_SECRET_KEY shipped in source and .env.example enables pre-authentication platform admin token forgery", "url": "https://www.cve.org/CVERecord?id=CVE-2026-53709" }, { "rank": 150, "cve_id": "CVE-2026-69227", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Esri", "product": "Portal for ArcGIS", "cwe": "CWE-306", "title": "BUG-000187331 Portal for ArcGIS has a security vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69227" }, { "rank": 151, "cve_id": "CVE-2026-69634", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows iSCSI Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69634" }, { "rank": 152, "cve_id": "CVE-2026-69639", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-122", "title": "Windows libarchive Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69639" }, { "rank": 153, "cve_id": "CVE-2026-69705", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-787", "title": "Windows iSCSI Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69705" }, { "rank": 154, "cve_id": "CVE-2026-69883", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows iSCSI Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69883" }, { "rank": 155, "cve_id": "CVE-2026-69886", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Imaging Component Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69886" }, { "rank": 156, "cve_id": "CVE-2026-70024", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-20", "title": "Windows Internet Information Services Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70024" }, { "rank": 157, "cve_id": "CVE-2026-70096", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Windows Rich Text Edit Control Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70096" }, { "rank": 158, "cve_id": "CVE-2026-70147", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Microsoft PostScript Printer Driver Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70147" }, { "rank": 159, "cve_id": "CVE-2026-70153", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Microsoft PostScript Printer Driver Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70153" }, { "rank": 160, "cve_id": "CVE-2026-70157", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows System Information Console Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70157" }, { "rank": 161, "cve_id": "CVE-2026-70242", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Outlook Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70242" }, { "rank": 162, "cve_id": "CVE-2026-70291", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Outlook Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70291" }, { "rank": 163, "cve_id": "CVE-2026-70300", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-822", "title": "Microsoft Office Word Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70300" }, { "rank": 164, "cve_id": "CVE-2026-83517", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Microsoft Windows Media Foundation Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83517" }, { "rank": 165, "cve_id": "CVE-2026-83519", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Error Reporting Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83519" }, { "rank": 166, "cve_id": "CVE-2026-83578", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Microsoft PowerShell Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83578" }, { "rank": 167, "cve_id": "CVE-2026-83693", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Error Reporting Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83693" }, { "rank": 168, "cve_id": "CVE-2026-83748", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Error Reporting Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83748" }, { "rank": 169, "cve_id": "CVE-2026-83770", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Text Shaping Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83770" }, { "rank": 170, "cve_id": "CVE-2026-83780", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows CCFFilter Driver Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83780" }, { "rank": 171, "cve_id": "CVE-2026-83782", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Shell Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83782" }, { "rank": 172, "cve_id": "CVE-2026-83862", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Network Load Balancing Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83862" }, { "rank": 173, "cve_id": "CVE-2026-83869", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-191", "title": "Windows Domain Name Service Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83869" }, { "rank": 174, "cve_id": "CVE-2026-83910", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-787", "title": "RPC Runtime Library Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83910" }, { "rank": 175, "cve_id": "CVE-2026-83935", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Microsoft XML Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83935" }, { "rank": 176, "cve_id": "CVE-2026-84015", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Remote Access Point-to-Point Protocol (PPP) EAP-TLS Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-84015" }, { "rank": 177, "cve_id": "CVE-2026-85792", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85792" }, { "rank": 178, "cve_id": "CVE-2026-85806", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-121", "title": "Network Policy Server (NPS) Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85806" }, { "rank": 179, "cve_id": "CVE-2026-85809", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85809" }, { "rank": 180, "cve_id": "CVE-2026-85814", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Microsoft Windows Media Foundation Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85814" }, { "rank": 181, "cve_id": "CVE-2026-85928", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Volume Manager Extension Driver Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85928" }, { "rank": 182, "cve_id": "CVE-2026-88102", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows Server 2019", "cwe": "CWE-416", "title": "Microsoft Failover Cluster Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88102" }, { "rank": 183, "cve_id": "CVE-2026-88156", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-121", "title": "Microsoft Office Outlook Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88156" }, { "rank": 184, "cve_id": "CVE-2026-88178", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-416", "title": "Microsoft Office PowerPoint Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88178" }, { "rank": 185, "cve_id": "CVE-2026-92909", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Commerce", "cwe": "CWE-863", "title": "Adobe Commerce | Incorrect Authorization (CWE-863)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92909" }, { "rank": 186, "cve_id": "CVE-2026-96096", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Media Player Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96096" }, { "rank": 187, "cve_id": "CVE-2026-96113", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Domain Name Service Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96113" }, { "rank": 188, "cve_id": "CVE-2026-96219", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-787", "title": "Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96219" }, { "rank": 189, "cve_id": "CVE-2026-96320", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows DHCP Server Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96320" }, { "rank": 190, "cve_id": "CVE-2026-96864", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-415", "title": "Microsoft Failover Cluster Virtual Driver Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96864" }, { "rank": 191, "cve_id": "CVE-2026-96909", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-122", "title": "Windows BitLocker Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96909" }, { "rank": 192, "cve_id": "CVE-2026-96924", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-822", "title": "Windows OLE Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96924" }, { "rank": 193, "cve_id": "CVE-2026-96934", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows DHCP Server Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96934" }, { "rank": 194, "cve_id": "CVE-2026-97016", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Outlook Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97016" }, { "rank": 195, "cve_id": "CVE-2026-97749", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-415", "title": "Microsoft Office Outlook Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97749" }, { "rank": 196, "cve_id": "CVE-2026-97805", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-20", "title": "Windows Partition Management Driver Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97805" }, { "rank": 197, "cve_id": "CVE-2026-97814", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Text Shaping Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97814" }, { "rank": 198, "cve_id": "CVE-2026-97815", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Error Reporting Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97815" }, { "rank": 199, "cve_id": "CVE-2026-97816", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-416", "title": "Microsoft OpenSSH for Windows Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97816" }, { "rank": 200, "cve_id": "CVE-2026-100202", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Message Queuing Queue Manager Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100202" }, { "rank": 201, "cve_id": "CVE-2026-100219", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-416", "title": "Microsoft QUIC Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100219" }, { "rank": 202, "cve_id": "CVE-2026-100222", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Network Policy Server (NPS) Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100222" }, { "rank": 203, "cve_id": "CVE-2026-102210", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-122", "title": "Windows Text Shaping Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102210" }, { "rank": 204, "cve_id": "CVE-2026-104252", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "vitessio", "product": "vitess", "cwe": "CWE-79", "title": "Vitess vttablet /twopcz reflected XSS", "url": "https://www.cve.org/CVERecord?id=CVE-2026-104252" }, { "rank": 205, "cve_id": "CVE-2026-105010", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Microsoft Windows Search Component Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105010" }, { "rank": 206, "cve_id": "CVE-2026-105016", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": ".NET 10.0", "cwe": "CWE-122", "title": "Microsoft QUIC Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105016" }, { "rank": 207, "cve_id": "CVE-2026-106173", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Fortinet", "product": "FortiSIEM", "cwe": "CWE-22", "title": "A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via specially crafted packets.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106173" }, { "rank": 208, "cve_id": "CVE-2026-55183", "cvss_base": 9.6, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Zarestia-Dev", "product": "rclone-manager", "cwe": "CWE-306", "title": "RClone Manager: Unauthenticated RClone Daemon Enables Remote Attack via Malicious Web Page", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55183" }, { "rank": 209, "cve_id": "CVE-2026-75994", "cvss_base": 9.6, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "ColdFusion 2025", "cwe": "CWE-863", "title": "ColdFusion | Incorrect Authorization (CWE-863)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-75994" }, { "rank": 210, "cve_id": "CVE-2026-90531", "cvss_base": 9.6, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Experience Manager as a Cloud Service", "cwe": "CWE-611", "title": "Adobe Experience Manager | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-90531" }, { "rank": 211, "cve_id": "CVE-2026-102238", "cvss_base": 9.6, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Visual Studio Code", "cwe": "CWE-22", "title": "Visual Studio Code Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102238" }, { "rank": 212, "cve_id": "CVE-2026-104192", "cvss_base": 9.6, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "dragonflydb", "product": "dragonfly", "cwe": "CWE-415", "title": "DragonflyDB stream RDB deserialization double-free", "url": "https://www.cve.org/CVERecord?id=CVE-2026-104192" }, { "rank": 213, "cve_id": "CVE-2026-106620", "cvss_base": 9.6, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "ColdFusion 2025", "cwe": "CWE-863", "title": "ColdFusion | Incorrect Authorization (CWE-863)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106620" }, { "rank": 214, "cve_id": "CVE-2026-109705", "cvss_base": 9.6, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": "CWE-416", "title": "Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109705" }, { "rank": 215, "cve_id": "CVE-2026-109707", "cvss_base": 9.6, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": "CWE-416", "title": "Sandbox escape due to use-after-free in the Networking component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109707" }, { "rank": 216, "cve_id": "CVE-2026-63350", "cvss_base": 9.4, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Siemens", "product": "SIMATIC Drive Controller CPU 1504D TF", "cwe": "CWE-95", "title": "Affected devices do not properly restrict executable content contained in imported trace files. This could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” into importing a specially crafted trace file. Successful exploitation could allow attacker-controlled JavaScript to execute in the user’s browser session and perform PLC operations through the web server within the scope of the user’s authorization.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-63350" }, { "rank": 217, "cve_id": "CVE-2026-63353", "cvss_base": 9.4, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Siemens", "product": "SIMATIC Drive Controller CPU 1504D TF", "cwe": "CWE-79", "title": "Affected devices do not properly sanitize comment fields contained in imported trace files before rendering them on the Trace page. This could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” into importing a specially crafted trace file. Successful exploitation could allow attacker-controlled JavaScript to execute in the user’s browser session and perform PLC operations through the web server within the scope of the user’s authorization.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-63353" }, { "rank": 218, "cve_id": "CVE-2026-63354", "cvss_base": 9.4, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Siemens", "product": "SIMATIC Drive Controller CPU 1504D TF", "cwe": "CWE-79", "title": "Affected devices do not properly validate and sanitize visual marker data contained in imported CSV trace files before rendering it on the Trace page. This could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” into importing a specially crafted trace file. Successful exploitation could allow attacker-controlled JavaScript to execute in the user’s browser session and perform PLC operations through the web server within the scope of the user’s authorization.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-63354" }, { "rank": 219, "cve_id": "CVE-2026-74040", "cvss_base": 9.4, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Wazuh", "product": "wazuh-manager", "cwe": "CWE-862", "title": "Wazuh 3.9.0 before 4.14.8 Arbitrary File Overwrite RCE via process_files_from_worker", "url": "https://www.cve.org/CVERecord?id=CVE-2026-74040" }, { "rank": 220, "cve_id": "CVE-2026-74041", "cvss_base": 9.4, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Wazuh", "product": "wazuh-manager", "cwe": "CWE-178", "title": "Wazuh 4.14.3 before 4.14.8 Remote Command Validation Bypass via Case Mismatch", "url": "https://www.cve.org/CVERecord?id=CVE-2026-74041" }, { "rank": 221, "cve_id": "CVE-2026-88092", "cvss_base": 9.4, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "ASP.NET Core 10.0", "cwe": "CWE-444", "title": "ASP.NET Core Tampering Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88092" }, { "rank": 222, "cve_id": "CVE-2026-105445", "cvss_base": 9.4, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Docker", "product": "Docker Hub", "cwe": "CWE-266", "title": "Docker Hub account conversion could reassign an active personal access token to another user", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105445" }, { "rank": 223, "cve_id": "CVE-2026-49950", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "xorbitsai", "product": "xoscar", "cwe": "CWE-502", "title": "Xorbits Xoscar 0.11.2 Unauthenticated Deserialization RCE via Actor Pool", "url": "https://www.cve.org/CVERecord?id=CVE-2026-49950" }, { "rank": 224, "cve_id": "CVE-2026-63146", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Omnispace", "product": "Agora Project", "cwe": "CWE-94", "title": "Omnispace Agora Project < 26.10.0 PHP Code Injection via config.inc.php", "url": "https://www.cve.org/CVERecord?id=CVE-2026-63146" }, { "rank": 225, "cve_id": "CVE-2026-70279", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft Exchange Server 2016 Cumulative Update 23", "cwe": "CWE-79", "title": "Microsoft Exchange Server Spoofing Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70279" }, { "rank": 226, "cve_id": "CVE-2026-75120", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "OpenText", "product": "Endpoint Investigator", "cwe": "CWE-290", "title": "Remote Code Execution (RCE) vulnerability identified in the OpenText™ EnCase SAFE Agents", "url": "https://www.cve.org/CVERecord?id=CVE-2026-75120" }, { "rank": 227, "cve_id": "CVE-2026-77099", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Commvault", "product": "Commvault Cloud", "cwe": "CWE-78", "title": "CVFS Command Execution", "url": "https://www.cve.org/CVERecord?id=CVE-2026-77099" }, { "rank": 228, "cve_id": "CVE-2026-83662", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Experience Manager as a Cloud Service", "cwe": "CWE-79", "title": "Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83662" }, { "rank": 229, "cve_id": "CVE-2026-90530", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "ColdFusion 2025", "cwe": "CWE-22", "title": "ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-90530" }, { "rank": 230, "cve_id": "CVE-2026-91013", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Commerce", "cwe": "CWE-79", "title": "Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91013" }, { "rank": 231, "cve_id": "CVE-2026-100133", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Commerce", "cwe": "CWE-79", "title": "Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100133" }, { "rank": 232, "cve_id": "CVE-2026-102989", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "TanStack", "product": "router", "cwe": "CWE-79", "title": "TanStack Router: Unauthenticated reflected XSS in TanStack Start server-function responses", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102989" }, { "rank": 233, "cve_id": "CVE-2026-103928", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "metabase", "product": "metabase", "cwe": "CWE-73", "title": "Metabase: Arbitrary File Read/Write via Unsafe H2 Built-in Functions", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103928" }, { "rank": 234, "cve_id": "CVE-2026-106629", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Experience Manager 6.5 LTS", "cwe": "CWE-79", "title": "Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106629" }, { "rank": 235, "cve_id": "CVE-2026-106630", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Experience Manager 6.5 LTS", "cwe": "CWE-79", "title": "Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106630" }, { "rank": 236, "cve_id": "CVE-2026-109520", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Colorful", "product": "iGameCenter", "cwe": "CWE-266", "title": "Colorful iGameCenter Dispatch AMDRyzenMasterDriver.sys MmMapIoSpace privilege defined with unsafe actions", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109520" }, { "rank": 237, "cve_id": "CVE-2026-110112", "cvss_base": 9.2, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Finsys", "product": "dockhand", "cwe": "CWE-863", "title": "Dockhand before 1.0.50 OIDC Privilege Escalation via Missing Token Claim Validation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110112" }, { "rank": 238, "cve_id": "CVE-2026-52394", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": "CWE-201", "title": "DeepSeek V4 is vulnerable to Incorrect Access Control via a crafted input.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-52394" }, { "rank": 239, "cve_id": "CVE-2026-54454", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "opencats", "product": "OpenCATS", "cwe": "CWE-434", "title": "OpenCATS: Authenticated RCE in the Import module", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54454" }, { "rank": 240, "cve_id": "CVE-2026-55695", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "fearlessgeekmedia", "product": "FearlessCMS", "cwe": "CWE-94", "title": "FearlessCMS: Remote Code Execution via Unvalidated Update Repository URL in System Updater", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55695" }, { "rank": 241, "cve_id": "CVE-2026-63149", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Omnispace", "product": "Agora Project", "cwe": "CWE-330", "title": "Omnispace Agora Project < 26.10.0 Predictable Default Password via uniqid()", "url": "https://www.cve.org/CVERecord?id=CVE-2026-63149" }, { "rank": 242, "cve_id": "CVE-2026-63158", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Omnispace", "product": "Agora Project", "cwe": "CWE-836", "title": "Omnispace Agora Project < 26.10.0 Pass-the-Hash Authentication Bypass via Cookies", "url": "https://www.cve.org/CVERecord?id=CVE-2026-63158" }, { "rank": 243, "cve_id": "CVE-2026-63159", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Omnispace", "product": "Agora Project", "cwe": "CWE-640", "title": "Omnispace Agora Project < 26.10.0 Predictable Password-Reset Token Account Takeover", "url": "https://www.cve.org/CVERecord?id=CVE-2026-63159" }, { "rank": 244, "cve_id": "CVE-2026-63160", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Omnispace", "product": "Agora Project", "cwe": "CWE-522", "title": "Omnispace Agora Project < 26.10.0 Insecure Remember-Me Token Storage", "url": "https://www.cve.org/CVERecord?id=CVE-2026-63160" }, { "rank": 245, "cve_id": "CVE-2026-65173", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "NVIDIA", "product": "AIStore framework", "cwe": "CWE-306", "title": "NVIDIA AIStore for Linux contains a missing authentication vulnerability in the token-revocation endpoint where an unauthenticated remote attacker may submit crafted token-revocation lists. A successful exploit may lead to data tampering and denial of service.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65173" }, { "rank": 246, "cve_id": "CVE-2026-70188", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "ASP.NET Core 10.0", "cwe": "CWE-444", "title": "ASP.NET Core Security Feature Bypass Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70188" }, { "rank": 247, "cve_id": "CVE-2026-92464", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Commerce", "cwe": "CWE-20", "title": "Adobe Commerce | Improper Input Validation (CWE-20)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92464" }, { "rank": 248, "cve_id": "CVE-2026-93895", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "WebSphere Application Server - Liberty", "cwe": "CWE-284", "title": "IBM WebSphere Application Server Liberty Improper Access Control", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93895" }, { "rank": 249, "cve_id": "CVE-2026-93909", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "WebSphere Application Server - Liberty", "cwe": "CWE-384", "title": "IBM WebSphere Application Server Liberty is affected by an authentication bypass", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93909" }, { "rank": 250, "cve_id": "CVE-2026-96252", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-347", "title": "Active Directory Federation Services (AD FS) Spoofing Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96252" }, { "rank": 251, "cve_id": "CVE-2026-106621", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "ColdFusion 2025", "cwe": "CWE-94", "title": "ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106621" }, { "rank": 252, "cve_id": "CVE-2026-106626", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Experience Manager as a Cloud Service", "cwe": "CWE-20", "title": "Adobe Experience Manager | Improper Input Validation (CWE-20)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106626" }, { "rank": 253, "cve_id": "CVE-2026-55562", "cvss_base": 9, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "jhuckaby", "product": "Cronicle", "cwe": "CWE-79", "title": "Cronicle: Stored XSS in admin Activity Log via account full_name field", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55562" }, { "rank": 254, "cve_id": "CVE-2026-85818", "cvss_base": 9, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-347", "title": "Windows Schannel Spoofing Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85818" }, { "rank": 255, "cve_id": "CVE-2026-92892", "cvss_base": 9, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "jfrog", "product": "jfrog-cli", "cwe": "CWE-88", "title": "Potential command execution on the host running JFrog CLI.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92892" }, { "rank": 256, "cve_id": "CVE-2026-105008", "cvss_base": 9, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-290", "title": "Windows Schannel Spoofing Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105008" }, { "rank": 257, "cve_id": "CVE-2026-106619", "cvss_base": 9, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "ColdFusion 2025", "cwe": "CWE-20", "title": "ColdFusion | Improper Input Validation (CWE-20)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106619" }, { "rank": 258, "cve_id": "CVE-2026-44415", "cvss_base": 8.9, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Siemens", "product": "Industrial Edge Device Kit - arm64 V1.10", "cwe": "CWE-35", "title": "Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be leveraged to facilitate unauthorized access to the system or result in the deletion of data.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-44415" }, { "rank": 259, "cve_id": "CVE-2025-46773", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Fortinet", "product": "FortiAnalyzer Cloud", "cwe": "CWE-89", "title": "An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiAnalyzer Cloud 7.6.2 through 7.6.4, FortiAnalyzer Cloud 7.4.1 through 7.4.7, FortiAnalyzer Cloud 7.2.1 through 7.2.11 may allow a low privileged user to execute arbitrary commands via crafted requests.", "url": "https://www.cve.org/CVERecord?id=CVE-2025-46773" }, { "rank": 260, "cve_id": "CVE-2025-57739", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Fortinet", "product": "FortiMail", "cwe": "CWE-89", "title": "An improper neutralization of special elements used in an SQL Command (\"SQL Injection\") vulnerability [CWE-89] vulnerability in Fortinet FortiMail 7.6.0 through 7.6.3, FortiMail 7.4.0 through 7.4.5, FortiMail 7.2.0 through 7.2.8 allows an authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP or HTTPS requests.", "url": "https://www.cve.org/CVERecord?id=CVE-2025-57739" }, { "rank": 261, "cve_id": "CVE-2026-12655", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Rockwell Automation", "product": "1732E ArmorBlock® I/O", "cwe": "CWE-294", "title": "1732E ArmorBlock® - Multiple Vulnerabilities", "url": "https://www.cve.org/CVERecord?id=CVE-2026-12655" }, { "rank": 262, "cve_id": "CVE-2026-55376", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "heymrun", "product": "heym", "cwe": "CWE-78", "title": "heym Python Tool Sandbox Escape", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55376" }, { "rank": 263, "cve_id": "CVE-2026-65674", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SQL Server 2019 (GDR)", "cwe": "CWE-502", "title": "Microsoft SQL Server Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65674" }, { "rank": 264, "cve_id": "CVE-2026-69326", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Graphic Fonts Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69326" }, { "rank": 265, "cve_id": "CVE-2026-69370", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Visual Studio Code", "cwe": "CWE-77", "title": "Visual Studio Code Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69370" }, { "rank": 266, "cve_id": "CVE-2026-69521", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-190", "title": "Windows iSCSI Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69521" }, { "rank": 267, "cve_id": "CVE-2026-69765", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows Server 2025", "cwe": "CWE-416", "title": "Windows Storport Miniport Driver Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69765" }, { "rank": 268, "cve_id": "CVE-2026-69918", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Core Messaging Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69918" }, { "rank": 269, "cve_id": "CVE-2026-69943", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SharePoint Enterprise Server 2016", "cwe": "CWE-22", "title": "Microsoft Office SharePoint Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69943" }, { "rank": 270, "cve_id": "CVE-2026-69945", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-862", "title": "Windows AppX Deployment Extensions Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69945" }, { "rank": 271, "cve_id": "CVE-2026-69985", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-122", "title": "Windows libarchive Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69985" }, { "rank": 272, "cve_id": "CVE-2026-70007", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": ".NET 10.0", "cwe": "CWE-787", "title": ".NET Framework Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70007" }, { "rank": 273, "cve_id": "CVE-2026-70035", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": ".NET 10.0", "cwe": "CWE-502", "title": ".NET Framework Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70035" }, { "rank": 274, "cve_id": "CVE-2026-70068", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70068" }, { "rank": 275, "cve_id": "CVE-2026-70069", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-121", "title": "Windows DHCP Server Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70069" }, { "rank": 276, "cve_id": "CVE-2026-70089", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows GDI Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70089" }, { "rank": 277, "cve_id": "CVE-2026-70098", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Visual Studio Code", "cwe": "CWE-862", "title": "Visual Studio Code Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70098" }, { "rank": 278, "cve_id": "CVE-2026-70149", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Client Side Caching driver (csc.sys) Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70149" }, { "rank": 279, "cve_id": "CVE-2026-70158", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-415", "title": "Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70158" }, { "rank": 280, "cve_id": "CVE-2026-70167", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows Server 2022", "cwe": "CWE-822", "title": "Windows Domain Name Service Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70167" }, { "rank": 281, "cve_id": "CVE-2026-70174", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": ".NET 10.0", "cwe": "CWE-358", "title": ".NET Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70174" }, { "rank": 282, "cve_id": "CVE-2026-70185", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-639", "title": "Microsoft PowerShell Security Feature Bypass Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70185" }, { "rank": 283, "cve_id": "CVE-2026-70210", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows OLE DB Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70210" }, { "rank": 284, "cve_id": "CVE-2026-70215", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-416", "title": "Microsoft Office PowerPoint Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70215" }, { "rank": 285, "cve_id": "CVE-2026-70246", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SharePoint Server Subscription Edition", "cwe": "CWE-863", "title": "Microsoft Office SharePoint Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70246" }, { "rank": 286, "cve_id": "CVE-2026-70250", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows Server 2012", "cwe": "CWE-362", "title": "Windows DHCP Client Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70250" }, { "rank": 287, "cve_id": "CVE-2026-70254", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-125", "title": "Microsoft Office Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70254" }, { "rank": 288, "cve_id": "CVE-2026-70256", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Outlook Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70256" }, { "rank": 289, "cve_id": "CVE-2026-70257", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Outlook Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70257" }, { "rank": 290, "cve_id": "CVE-2026-70258", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Microsoft Windows Media Foundation Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70258" }, { "rank": 291, "cve_id": "CVE-2026-70262", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "WebDAV Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70262" }, { "rank": 292, "cve_id": "CVE-2026-70266", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SharePoint Server Subscription Edition", "cwe": "CWE-89", "title": "Microsoft Office SharePoint Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70266" }, { "rank": 293, "cve_id": "CVE-2026-70268", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Word Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70268" }, { "rank": 294, "cve_id": "CVE-2026-70275", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-822", "title": "Windows CD-ROM File System Driver Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70275" }, { "rank": 295, "cve_id": "CVE-2026-70282", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Outlook Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70282" }, { "rank": 296, "cve_id": "CVE-2026-70287", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Word Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70287" }, { "rank": 297, "cve_id": "CVE-2026-70297", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Skype for Business Server 2015 CU13", "cwe": "CWE-36", "title": "Skype for Business Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70297" }, { "rank": 298, "cve_id": "CVE-2026-70299", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-863", "title": "Windows Bind Filter Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70299" }, { "rank": 299, "cve_id": "CVE-2026-70301", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Word Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70301" }, { "rank": 300, "cve_id": "CVE-2026-70302", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Word Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70302" }, { "rank": 301, "cve_id": "CVE-2026-70343", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "MPEG-2 Video Extension", "cwe": "CWE-122", "title": "Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70343" }, { "rank": 302, "cve_id": "CVE-2026-70580", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-306", "title": "Windows Credential Guard Spoofing Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70580" }, { "rank": 303, "cve_id": "CVE-2026-77496", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Imaging Component Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-77496" }, { "rank": 304, "cve_id": "CVE-2026-77902", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-77902" }, { "rank": 305, "cve_id": "CVE-2026-77910", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft Exchange Server 2016 Cumulative Update 23", "cwe": "CWE-863", "title": "Microsoft Exchange Server Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-77910" }, { "rank": 306, "cve_id": "CVE-2026-83520", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": ".NET 10.0", "cwe": "CWE-502", "title": ".NET Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83520" }, { "rank": 307, "cve_id": "CVE-2026-83523", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-122", "title": "Windows Image Acquisition Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83523" }, { "rank": 308, "cve_id": "CVE-2026-83642", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-843", "title": "Windows Domain Name Service Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83642" }, { "rank": 309, "cve_id": "CVE-2026-83643", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-121", "title": "Windows Error Reporting Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83643" }, { "rank": 310, "cve_id": "CVE-2026-83688", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Remote Desktop Client Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83688" }, { "rank": 311, "cve_id": "CVE-2026-83716", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Hyper-V Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83716" }, { "rank": 312, "cve_id": "CVE-2026-83725", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Microsoft Windows Search Component Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83725" }, { "rank": 313, "cve_id": "CVE-2026-83728", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-1286", "title": "Windows Hyper-V Spoofing Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83728" }, { "rank": 314, "cve_id": "CVE-2026-83759", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-94", "title": "Windows Encrypting File System (EFS) Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83759" }, { "rank": 315, "cve_id": "CVE-2026-83771", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-416", "title": "Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83771" }, { "rank": 316, "cve_id": "CVE-2026-83777", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Bluetooth Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83777" }, { "rank": 317, "cve_id": "CVE-2026-83778", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Microsoft Internet Messaging API Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83778" }, { "rank": 318, "cve_id": "CVE-2026-83784", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-36", "title": "Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83784" }, { "rank": 319, "cve_id": "CVE-2026-83789", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows SMB Client Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83789" }, { "rank": 320, "cve_id": "CVE-2026-83797", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-125", "title": "Windows Partition Management Driver Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83797" }, { "rank": 321, "cve_id": "CVE-2026-83851", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-122", "title": "Windows Partition Management Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83851" }, { "rank": 322, "cve_id": "CVE-2026-83874", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Event Tracing Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83874" }, { "rank": 323, "cve_id": "CVE-2026-83889", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-763", "title": "Windows DNS Server Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83889" }, { "rank": 324, "cve_id": "CVE-2026-83891", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-20", "title": "Microsoft Office Word Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83891" }, { "rank": 325, "cve_id": "CVE-2026-83923", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-23", "title": "Microsoft OpenSSH for Windows Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83923" }, { "rank": 326, "cve_id": "CVE-2026-83928", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-306", "title": "Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83928" }, { "rank": 327, "cve_id": "CVE-2026-83929", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-787", "title": "Windows GDI Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83929" }, { "rank": 328, "cve_id": "CVE-2026-83934", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-121", "title": "Windows GDI+ Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83934" }, { "rank": 329, "cve_id": "CVE-2026-85339", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85339" }, { "rank": 330, "cve_id": "CVE-2026-85363", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": ".NET 10.0", "cwe": "CWE-190", "title": ".NET Framework Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85363" }, { "rank": 331, "cve_id": "CVE-2026-85817", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-807", "title": "Microsoft PowerShell Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85817" }, { "rank": 332, "cve_id": "CVE-2026-85900", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SharePoint Server Subscription Edition", "cwe": "CWE-502", "title": "Microsoft Office SharePoint Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85900" }, { "rank": 333, "cve_id": "CVE-2026-85903", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-822", "title": "Windows Domain Name Service Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85903" }, { "rank": 334, "cve_id": "CVE-2026-85905", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows UI Immersive Server API Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85905" }, { "rank": 335, "cve_id": "CVE-2026-85931", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Distributed File System (DFS) Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85931" }, { "rank": 336, "cve_id": "CVE-2026-85936", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Shell Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85936" }, { "rank": 337, "cve_id": "CVE-2026-85990", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Leantime", "product": "leantime", "cwe": "CWE-269", "title": "Leantime: Any Authenticated User Can Self-Escalate to Admin via Unauthorized JSON-RPC Methods", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85990" }, { "rank": 338, "cve_id": "CVE-2026-87697", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": ".NET 10.0", "cwe": "CWE-502", "title": ".NET Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87697" }, { "rank": 339, "cve_id": "CVE-2026-88073", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-416", "title": "Windows Graphics Kernel Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88073" }, { "rank": 340, "cve_id": "CVE-2026-88075", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft Configuration Manager", "cwe": "CWE-89", "title": "Configuration Manager Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88075" }, { "rank": 341, "cve_id": "CVE-2026-88112", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-822", "title": "Windows Domain Name Service Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88112" }, { "rank": 342, "cve_id": "CVE-2026-88114", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-822", "title": "Windows Domain Name Service Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88114" }, { "rank": 343, "cve_id": "CVE-2026-88115", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Server for NFS Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88115" }, { "rank": 344, "cve_id": "CVE-2026-88116", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-822", "title": "Windows Domain Name Service Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88116" }, { "rank": 345, "cve_id": "CVE-2026-88136", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-41", "title": "Web Distributed Authoring and Versioning (WEBDAV) Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88136" }, { "rank": 346, "cve_id": "CVE-2026-88142", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88142" }, { "rank": 347, "cve_id": "CVE-2026-88144", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-416", "title": "Microsoft Office PowerPoint Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88144" }, { "rank": 348, "cve_id": "CVE-2026-88145", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88145" }, { "rank": 349, "cve_id": "CVE-2026-88150", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-908", "title": "Microsoft Office Word Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88150" }, { "rank": 350, "cve_id": "CVE-2026-88155", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SharePoint Server Subscription Edition", "cwe": "CWE-122", "title": "Microsoft Office SharePoint Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88155" }, { "rank": 351, "cve_id": "CVE-2026-88157", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-122", "title": "Microsoft OpenSSH for Windows Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88157" }, { "rank": 352, "cve_id": "CVE-2026-88159", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88159" }, { "rank": 353, "cve_id": "CVE-2026-88163", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SharePoint Server Subscription Edition", "cwe": "CWE-122", "title": "Microsoft Office SharePoint Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88163" }, { "rank": 354, "cve_id": "CVE-2026-88165", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-787", "title": "Windows Active Directory Domain Services Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88165" }, { "rank": 355, "cve_id": "CVE-2026-88166", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SharePoint Server Subscription Edition", "cwe": "CWE-121", "title": "Microsoft Office SharePoint Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88166" }, { "rank": 356, "cve_id": "CVE-2026-88186", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Word Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88186" }, { "rank": 357, "cve_id": "CVE-2026-88196", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88196" }, { "rank": 358, "cve_id": "CVE-2026-88197", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88197" }, { "rank": 359, "cve_id": "CVE-2026-88198", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SharePoint Server Subscription Edition", "cwe": "CWE-862", "title": "Microsoft Office SharePoint Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88198" }, { "rank": 360, "cve_id": "CVE-2026-88200", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SharePoint Server Subscription Edition", "cwe": "CWE-270", "title": "Microsoft Office SharePoint Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88200" }, { "rank": 361, "cve_id": "CVE-2026-88202", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Word Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88202" }, { "rank": 362, "cve_id": "CVE-2026-88219", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-822", "title": "RPC Runtime Library Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88219" }, { "rank": 363, "cve_id": "CVE-2026-94512", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SQL Server 2017 (GDR)", "cwe": "CWE-122", "title": "SQL Server Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-94512" }, { "rank": 364, "cve_id": "CVE-2026-96044", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SharePoint Server Subscription Edition", "cwe": "CWE-269", "title": "Microsoft Office SharePoint Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96044" }, { "rank": 365, "cve_id": "CVE-2026-96202", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Raw Image Extension", "cwe": "CWE-122", "title": "Windows Raw Image Extension Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96202" }, { "rank": 366, "cve_id": "CVE-2026-96224", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": ".NET 10.0", "cwe": "CWE-787", "title": ".NET Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96224" }, { "rank": 367, "cve_id": "CVE-2026-96230", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft Visual Studio 2022 version 17.14", "cwe": "CWE-79", "title": "ASP.NET Core Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96230" }, { "rank": 368, "cve_id": "CVE-2026-96235", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": ".NET 10.0", "cwe": "CWE-787", "title": ".NET Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96235" }, { "rank": 369, "cve_id": "CVE-2026-96251", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "PowerShell 7.4", "cwe": "CWE-807", "title": "Microsoft PowerShell Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96251" }, { "rank": 370, "cve_id": "CVE-2026-96913", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-122", "title": "Windows Kernel Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96913" }, { "rank": 371, "cve_id": "CVE-2026-96914", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96914" }, { "rank": 372, "cve_id": "CVE-2026-96917", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-122", "title": "Windows PCI Bus Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96917" }, { "rank": 373, "cve_id": "CVE-2026-96943", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Raw Image Extension", "cwe": "CWE-122", "title": "Windows Raw Image Extension Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96943" }, { "rank": 374, "cve_id": "CVE-2026-96952", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-122", "title": "Microsoft Windows Media Foundation Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96952" }, { "rank": 375, "cve_id": "CVE-2026-96957", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": ".NET 10.0", "cwe": "CWE-347", "title": ".NET Security Feature Bypass Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96957" }, { "rank": 376, "cve_id": "CVE-2026-97003", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97003" }, { "rank": 377, "cve_id": "CVE-2026-97004", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97004" }, { "rank": 378, "cve_id": "CVE-2026-97007", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97007" }, { "rank": 379, "cve_id": "CVE-2026-97008", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-124", "title": "Microsoft Office Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97008" }, { "rank": 380, "cve_id": "CVE-2026-97010", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-416", "title": "Microsoft Office Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97010" }, { "rank": 381, "cve_id": "CVE-2026-97011", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-763", "title": "Microsoft Office Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97011" }, { "rank": 382, "cve_id": "CVE-2026-97012", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-121", "title": "Microsoft Office Outlook Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97012" }, { "rank": 383, "cve_id": "CVE-2026-97017", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-416", "title": "Microsoft Office Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97017" }, { "rank": 384, "cve_id": "CVE-2026-97738", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-416", "title": "Microsoft Office Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97738" }, { "rank": 385, "cve_id": "CVE-2026-97739", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97739" }, { "rank": 386, "cve_id": "CVE-2026-97741", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97741" }, { "rank": 387, "cve_id": "CVE-2026-97742", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-121", "title": "Microsoft Office Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97742" }, { "rank": 388, "cve_id": "CVE-2026-97745", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-416", "title": "Microsoft Office Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97745" }, { "rank": 389, "cve_id": "CVE-2026-97746", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-191", "title": "Microsoft Office Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97746" }, { "rank": 390, "cve_id": "CVE-2026-97747", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-416", "title": "Microsoft Office Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97747" }, { "rank": 391, "cve_id": "CVE-2026-97748", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97748" }, { "rank": 392, "cve_id": "CVE-2026-97750", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-121", "title": "Microsoft Office Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97750" }, { "rank": 393, "cve_id": "CVE-2026-97751", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97751" }, { "rank": 394, "cve_id": "CVE-2026-97752", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-416", "title": "Microsoft Office Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97752" }, { "rank": 395, "cve_id": "CVE-2026-97753", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97753" }, { "rank": 396, "cve_id": "CVE-2026-97754", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97754" }, { "rank": 397, "cve_id": "CVE-2026-97755", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-125", "title": "Microsoft Office Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97755" }, { "rank": 398, "cve_id": "CVE-2026-97756", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97756" }, { "rank": 399, "cve_id": "CVE-2026-97757", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97757" }, { "rank": 400, "cve_id": "CVE-2026-97758", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97758" }, { "rank": 401, "cve_id": "CVE-2026-97759", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-416", "title": "Microsoft Office Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97759" }, { "rank": 402, "cve_id": "CVE-2026-97761", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-121", "title": "Microsoft Office Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97761" }, { "rank": 403, "cve_id": "CVE-2026-97762", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-787", "title": "Microsoft Office Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97762" }, { "rank": 404, "cve_id": "CVE-2026-97763", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97763" }, { "rank": 405, "cve_id": "CVE-2026-97765", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97765" }, { "rank": 406, "cve_id": "CVE-2026-97766", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97766" }, { "rank": 407, "cve_id": "CVE-2026-97767", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-415", "title": "Microsoft Office Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97767" }, { "rank": 408, "cve_id": "CVE-2026-97768", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97768" }, { "rank": 409, "cve_id": "CVE-2026-97769", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-20", "title": "Microsoft Office Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97769" }, { "rank": 410, "cve_id": "CVE-2026-97770", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-121", "title": "Microsoft Office Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97770" }, { "rank": 411, "cve_id": "CVE-2026-97771", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-416", "title": "Microsoft Office Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97771" }, { "rank": 412, "cve_id": "CVE-2026-97772", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-415", "title": "Microsoft Office Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97772" }, { "rank": 413, "cve_id": "CVE-2026-97773", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97773" }, { "rank": 414, "cve_id": "CVE-2026-97775", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-400", "title": "Microsoft Office Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97775" }, { "rank": 415, "cve_id": "CVE-2026-97776", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97776" }, { "rank": 416, "cve_id": "CVE-2026-97777", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97777" }, { "rank": 417, "cve_id": "CVE-2026-97778", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-190", "title": "Microsoft Office Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97778" }, { "rank": 418, "cve_id": "CVE-2026-97780", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97780" }, { "rank": 419, "cve_id": "CVE-2026-97781", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-77", "title": "Microsoft Office OneNote Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97781" }, { "rank": 420, "cve_id": "CVE-2026-100209", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-416", "title": "Microsoft Office Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100209" }, { "rank": 421, "cve_id": "CVE-2026-100210", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100210" }, { "rank": 422, "cve_id": "CVE-2026-100211", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-416", "title": "Microsoft Office Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100211" }, { "rank": 423, "cve_id": "CVE-2026-100212", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-416", "title": "Microsoft Office Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100212" }, { "rank": 424, "cve_id": "CVE-2026-100214", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft Dynamics NAV 2017", "cwe": "CWE-502", "title": "Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100214" }, { "rank": 425, "cve_id": "CVE-2026-100220", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Media Video Decoder Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100220" }, { "rank": 426, "cve_id": "CVE-2026-102073", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Siemens", "product": "APOGEE MBC (PPC) (BACnet)", "cwe": "CWE-191", "title": "A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.7), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.21), APOGEE PXC Modular (BACnet) (All versions < V3.5.7), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.21), TALON TC Compact (BACnet) (All versions < V3.5.7), TALON TC Modular (BACnet) (All versions < V3.5.7). The affected product web service does not properly validate the length of user-controllable input. This could allow an unauthenticated remote attacker to read portions of device memory or to cause a denial-of-service condition.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102073" }, { "rank": 427, "cve_id": "CVE-2026-102203", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-843", "title": "RPC Runtime Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102203" }, { "rank": 428, "cve_id": "CVE-2026-102214", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Hyper-V Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102214" }, { "rank": 429, "cve_id": "CVE-2026-102217", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-41", "title": "WebDAV Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102217" }, { "rank": 430, "cve_id": "CVE-2026-102225", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Text Shaping Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102225" }, { "rank": 431, "cve_id": "CVE-2026-102226", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft Dynamics NAV 2018", "cwe": "CWE-22", "title": "Dynamics Business Central Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102226" }, { "rank": 432, "cve_id": "CVE-2026-102235", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Visual Studio Code", "cwe": "CWE-116", "title": "Visual Studio Code Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102235" }, { "rank": 433, "cve_id": "CVE-2026-102849", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Access Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102849" }, { "rank": 434, "cve_id": "CVE-2026-102850", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Access Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102850" }, { "rank": 435, "cve_id": "CVE-2026-102855", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Visio Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102855" }, { "rank": 436, "cve_id": "CVE-2026-102856", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Visio Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102856" }, { "rank": 437, "cve_id": "CVE-2026-102857", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Visio Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102857" }, { "rank": 438, "cve_id": "CVE-2026-102858", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft Office 365 for Mac", "cwe": "CWE-122", "title": "Microsoft Office OneNote Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102858" }, { "rank": 439, "cve_id": "CVE-2026-102860", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SharePoint Server Subscription Edition", "cwe": "CWE-284", "title": "Microsoft Office SharePoint Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102860" }, { "rank": 440, "cve_id": "CVE-2026-102861", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SharePoint Server Subscription Edition", "cwe": "CWE-862", "title": "Microsoft Office SharePoint Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102861" }, { "rank": 441, "cve_id": "CVE-2026-102862", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SharePoint Server Subscription Edition", "cwe": "CWE-863", "title": "Microsoft Office SharePoint Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102862" }, { "rank": 442, "cve_id": "CVE-2026-102863", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SharePoint Server Subscription Edition", "cwe": "CWE-94", "title": "Microsoft Office SharePoint Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102863" }, { "rank": 443, "cve_id": "CVE-2026-102869", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2", "cwe": "CWE-843", "title": ".NET and Visual Studio Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102869" }, { "rank": 444, "cve_id": "CVE-2026-102870", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft Visual Studio 2022 version 17.14", "cwe": "CWE-94", "title": "ASP.NET Core Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102870" }, { "rank": 445, "cve_id": "CVE-2026-103572", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft Visual Studio 2022 version 17.14", "cwe": "CWE-94", "title": "Visual Studio Tools for Applications and SQL Server Management Studio Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103572" }, { "rank": 446, "cve_id": "CVE-2026-103575", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Remote Desktop Client Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103575" }, { "rank": 447, "cve_id": "CVE-2026-105007", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows NDIS Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105007" }, { "rank": 448, "cve_id": "CVE-2026-105591", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Access Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105591" }, { "rank": 449, "cve_id": "CVE-2026-105593", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Access Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105593" }, { "rank": 450, "cve_id": "CVE-2026-105595", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-125", "title": "Microsoft Office Access Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105595" }, { "rank": 451, "cve_id": "CVE-2026-105596", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Access Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105596" }, { "rank": 452, "cve_id": "CVE-2026-105597", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Access Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105597" }, { "rank": 453, "cve_id": "CVE-2026-105598", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Access Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105598" }, { "rank": 454, "cve_id": "CVE-2026-105716", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Access Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105716" }, { "rank": 455, "cve_id": "CVE-2026-105717", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-20", "title": "Microsoft Office Access Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105717" }, { "rank": 456, "cve_id": "CVE-2026-105718", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-20", "title": "Microsoft Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105718" }, { "rank": 457, "cve_id": "CVE-2026-105727", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft Dynamics NAV 2018", "cwe": "CWE-22", "title": "Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105727" }, { "rank": 458, "cve_id": "CVE-2026-105733", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-1419", "title": "Windows Hyper-V Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105733" }, { "rank": 459, "cve_id": "CVE-2026-105901", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "ColdFusion 2025", "cwe": "CWE-863", "title": "ColdFusion | Incorrect Authorization (CWE-863)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105901" }, { "rank": 460, "cve_id": "CVE-2026-106089", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "ColdFusion 2025", "cwe": "CWE-863", "title": "ColdFusion | Incorrect Authorization (CWE-863)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106089" }, { "rank": 461, "cve_id": "CVE-2026-106090", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "ColdFusion 2025", "cwe": "CWE-863", "title": "ColdFusion | Incorrect Authorization (CWE-863)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106090" }, { "rank": 462, "cve_id": "CVE-2026-106613", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "ColdFusion 2025", "cwe": "CWE-20", "title": "ColdFusion | Improper Input Validation (CWE-20)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106613" }, { "rank": 463, "cve_id": "CVE-2026-106615", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "ColdFusion 2025", "cwe": "CWE-863", "title": "ColdFusion | Incorrect Authorization (CWE-863)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106615" }, { "rank": 464, "cve_id": "CVE-2026-106617", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "ColdFusion 2025", "cwe": "CWE-863", "title": "ColdFusion | Incorrect Authorization (CWE-863)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106617" }, { "rank": 465, "cve_id": "CVE-2026-106618", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "ColdFusion 2025", "cwe": "CWE-863", "title": "ColdFusion | Incorrect Authorization (CWE-863)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106618" }, { "rank": 466, "cve_id": "CVE-2026-108375", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "marcosschroh", "product": "dataclasses-avroschema", "cwe": "CWE-94", "title": "dataclasses-avroschema allows code injection through generated field-default literals", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108375" }, { "rank": 467, "cve_id": "CVE-2026-108376", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "marcosschroh", "product": "dataclasses-avroschema", "cwe": "CWE-94", "title": "dataclasses-avroschema allows code injection through record names in generated default factories", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108376" }, { "rank": 468, "cve_id": "CVE-2026-108377", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "marcosschroh", "product": "dataclasses-avroschema", "cwe": "CWE-94", "title": "dataclasses-avroschema allows code injection through generated Meta.schema_name", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108377" }, { "rank": 469, "cve_id": "CVE-2026-108378", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "marcosschroh", "product": "dataclasses-avroschema", "cwe": "CWE-94", "title": "dataclasses-avroschema record documentation can terminate generated class docstrings", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108378" }, { "rank": 470, "cve_id": "CVE-2026-108379", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "marcosschroh", "product": "dataclasses-avroschema", "cwe": "CWE-94", "title": "dataclasses-avroschema fixed namespaces allow code injection in generated annotations", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108379" }, { "rank": 471, "cve_id": "CVE-2026-108380", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "marcosschroh", "product": "dataclasses-avroschema", "cwe": "CWE-94", "title": "dataclasses-avroschema field documentation allows code injection in generated Pydantic descriptions", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108380" }, { "rank": 472, "cve_id": "CVE-2026-108381", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "marcosschroh", "product": "dataclasses-avroschema", "cwe": "CWE-94", "title": "dataclasses-avroschema pydantic-class metadata allows code injection in generated annotations", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108381" }, { "rank": 473, "cve_id": "CVE-2026-108382", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "marcosschroh", "product": "dataclasses-avroschema", "cwe": "CWE-94", "title": "dataclasses-avroschema allows code injection through generated enum-symbol string literals", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108382" }, { "rank": 474, "cve_id": "CVE-2026-108383", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "marcosschroh", "product": "dataclasses-avroschema", "cwe": "CWE-94", "title": "dataclasses-avroschema enum field defaults can inject statements into generated modules", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108383" }, { "rank": 475, "cve_id": "CVE-2026-108384", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "marcosschroh", "product": "dataclasses-avroschema", "cwe": "CWE-94", "title": "dataclasses-avroschema allows code injection through fixed-type aliases supplied as a bare string", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108384" }, { "rank": 476, "cve_id": "CVE-2026-108385", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "marcosschroh", "product": "dataclasses-avroschema", "cwe": "CWE-94", "title": "dataclasses-avroschema enum symbols can inject statements through generated member names", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108385" }, { "rank": 477, "cve_id": "CVE-2026-108398", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2", "cwe": "CWE-426", "title": ".NET Framework Security Feature Bypass Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108398" }, { "rank": 478, "cve_id": "CVE-2026-108400", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "HEVC Video Extensions", "cwe": "CWE-190", "title": "HEVC Video Extensions Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108400" }, { "rank": 479, "cve_id": "CVE-2026-108458", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Remote Desktop Client Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108458" }, { "rank": 480, "cve_id": "CVE-2026-108463", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-41", "title": "Windows SmartScreen Security Feature Bypass Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108463" }, { "rank": 481, "cve_id": "CVE-2026-108467", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Microsoft PostScript Printer Driver Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108467" }, { "rank": 482, "cve_id": "CVE-2026-108471", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-822", "title": "Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108471" }, { "rank": 483, "cve_id": "CVE-2026-109709", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": "CWE-200", "title": "Information disclosure, privilege escalation in the Security: Process Sandboxing component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109709" }, { "rank": 484, "cve_id": "CVE-2026-109756", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": "CWE-269", "title": "Privilege escalation in the DOM: Navigation component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109756" }, { "rank": 485, "cve_id": "CVE-2026-109778", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": "CWE-269", "title": "Privilege escalation in the WebExtensions component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109778" }, { "rank": 486, "cve_id": "CVE-2026-110116", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "risesoft-y9", "product": "Digital-Infrastructure", "cwe": "CWE-22", "title": "Digital-Infrastructure 9.6.5 through 9.6.11 Path Traversal via fileManager storeFile", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110116" }, { "rank": 487, "cve_id": "CVE-2026-12656", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Rockwell Automation", "product": "1732E ArmorBlock® I/O", "cwe": "CWE-770", "title": "1732E ArmorBlock® - Multiple Vulnerabilities", "url": "https://www.cve.org/CVERecord?id=CVE-2026-12656" }, { "rank": 488, "cve_id": "CVE-2026-55823", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "frappe", "product": "frappe", "cwe": "CWE-89", "title": "Frappe: Possibility of SQL injection in reportview", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55823" }, { "rank": 489, "cve_id": "CVE-2026-59241", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Siemens", "product": "SIMATIC WinCC V7.5", "cwe": "CWE-266", "title": "A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions < V8.0 Update 11), SIMATIC WinCC V8.1 (All versions < V8.1 Update 7). The affected application does not sufficiently restrict the permissions assigned to a database role. This could allow an authenticated remote attacker with database access to escalate privileges and execute arbitrary commands on the host system where SIMATIC WinCC is installed, potentially leading to a compromise of the system.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59241" }, { "rank": 490, "cve_id": "CVE-2026-63154", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Omnispace", "product": "Agora Project", "cwe": "CWE-89", "title": "Omnispace Agora Project < 26.10.0 SQL Identifier Injection via agoraFields[]", "url": "https://www.cve.org/CVERecord?id=CVE-2026-63154" }, { "rank": 491, "cve_id": "CVE-2026-63162", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Omnispace", "product": "Agora Project", "cwe": "CWE-22", "title": "Omnispace Agora Project < 26.10.0 Path Traversal via tmpFolderName Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-63162" }, { "rank": 492, "cve_id": "CVE-2026-63163", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Omnispace", "product": "Agora Project", "cwe": "CWE-639", "title": "Omnispace Agora Project < 26.10.0 Broken Access Control via MobileFileDownload", "url": "https://www.cve.org/CVERecord?id=CVE-2026-63163" }, { "rank": 493, "cve_id": "CVE-2026-63316", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Payload", "product": "Payload CMS", "cwe": "CWE-89", "title": "SQL Injection in Payload CMS", "url": "https://www.cve.org/CVERecord?id=CVE-2026-63316" }, { "rank": 494, "cve_id": "CVE-2026-74034", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Wazuh", "product": "wazuh-manager", "cwe": "CWE-862", "title": "Wazuh 4.1.0 before 4.14.8 Arbitrary File Read via upgrade_custom Command", "url": "https://www.cve.org/CVERecord?id=CVE-2026-74034" }, { "rank": 495, "cve_id": "CVE-2026-77090", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Commvault", "product": "Commvault Cloud", "cwe": null, "title": "CVFS Information Disclosure", "url": "https://www.cve.org/CVERecord?id=CVE-2026-77090" }, { "rank": 496, "cve_id": "CVE-2026-77100", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Commvault", "product": "Commvault Cloud", "cwe": "CWE-122", "title": "MediaAgent Denial of Service", "url": "https://www.cve.org/CVERecord?id=CVE-2026-77100" }, { "rank": 497, "cve_id": "CVE-2026-84994", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "QwikDev", "product": "qwik", "cwe": "CWE-248", "title": "Qwik: Crashing any Qwik Server via Resource thenable", "url": "https://www.cve.org/CVERecord?id=CVE-2026-84994" }, { "rank": 498, "cve_id": "CVE-2026-85114", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Siemens", "product": ".NET Client Library for SIMATIC S7 Webserver API", "cwe": "CWE-22", "title": "A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.61). Affected applications do not properly validate filenames received from remote servers during ticket downloads. This could allow an attacker who can manipulate the ticket response to write arbitrary files outside the intended download directory and, when overwriting is enabled, replace existing files accessible to the application.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85114" }, { "rank": 499, "cve_id": "CVE-2026-89196", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Siemens", "product": "RUGGEDCOM CROSSBOW", "cwe": "CWE-89", "title": "A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in facility names processed during the Bulk Import/Export workflow. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-89196" }, { "rank": 500, "cve_id": "CVE-2026-89197", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Siemens", "product": "RUGGEDCOM CROSSBOW", "cwe": "CWE-89", "title": "A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in the Value field of notification conditions processed during the Notification Profile configuration. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-89197" }, { "rank": 501, "cve_id": "CVE-2026-89198", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Siemens", "product": "RUGGEDCOM CROSSBOW", "cwe": "CWE-89", "title": "A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize the filename of firmware files uploaded to the system. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-89198" }, { "rank": 502, "cve_id": "CVE-2026-89199", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Siemens", "product": "RUGGEDCOM CROSSBOW", "cwe": "CWE-639", "title": "A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to sensitive configuration items via specific database queries. This could allow an authenticated attacker to retrieve administrative credentials for various internal systems, leading to unauthorized information disclosure and privilege escalation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-89199" }, { "rank": 503, "cve_id": "CVE-2026-92817", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Inductive Automation", "product": "Ignition", "cwe": "CWE-863", "title": "Inductive Automation Ignition Software Incorrect Authorization", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92817" }, { "rank": 504, "cve_id": "CVE-2026-92911", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Commerce", "cwe": "CWE-79", "title": "Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92911" }, { "rank": 505, "cve_id": "CVE-2026-95631", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Commerce", "cwe": "CWE-20", "title": "Adobe Commerce | Improper Input Validation (CWE-20)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-95631" }, { "rank": 506, "cve_id": "CVE-2026-97334", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Commvault", "product": "Commvault Cloud", "cwe": "CWE-409", "title": "Network messaging layer decompression resource exhaustion", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97334" }, { "rank": 507, "cve_id": "CVE-2026-101294", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "WebSphere Application Server - Liberty", "cwe": "CWE-325", "title": "IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a missing cryptographic step", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101294" }, { "rank": 508, "cve_id": "CVE-2026-102074", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Siemens", "product": "APOGEE MBC (PPC) (BACnet)", "cwe": "CWE-121", "title": "A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.7), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.21), APOGEE PXC Modular (BACnet) (All versions < V3.5.7), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.21), TALON TC Compact (BACnet) (All versions < V3.5.7), TALON TC Modular (BACnet) (All versions < V3.5.7). The affected product FTP service does not properly validate the length of user-controllable input. This could allow an unauthenticated remote attacker to cause a denial of service.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102074" }, { "rank": 509, "cve_id": "CVE-2026-102075", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Siemens", "product": "APOGEE MBC (PPC) (BACnet)", "cwe": "CWE-121", "title": "A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.7), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.21), APOGEE PXC Modular (BACnet) (All versions < V3.5.7), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.21), TALON TC Compact (BACnet) (All versions < V3.5.7), TALON TC Modular (BACnet) (All versions < V3.5.7). The affected product web service does not properly validate user input in multipart handling. This could allow an unauthenticated remote attacker to cause a denial of service.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102075" }, { "rank": 510, "cve_id": "CVE-2026-102076", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Siemens", "product": "APOGEE MBC (PPC) (BACnet)", "cwe": "CWE-121", "title": "A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.7), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.21), APOGEE PXC Modular (BACnet) (All versions < V3.5.7), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.21), TALON TC Compact (BACnet) (All versions < V3.5.7), TALON TC Modular (BACnet) (All versions < V3.5.7). The affected product web service does not properly validate user-supplied input in upload code. This could allow an unauthenticated remote attacker to cause a denial of service.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102076" }, { "rank": 511, "cve_id": "CVE-2026-103937", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "misskey-dev", "product": "misskey", "cwe": "CWE-459", "title": "Misskey: Denial of service resulting from insufficient cleanup processing during file uploads", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103937" }, { "rank": 512, "cve_id": "CVE-2026-104085", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "odt2spip", "product": "odt2spip", "cwe": "CWE-78", "title": "odt2spip < 4.4.0 OS Command Injection via Document Filename", "url": "https://www.cve.org/CVERecord?id=CVE-2026-104085" }, { "rank": 513, "cve_id": "CVE-2026-104817", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "misskey-dev", "product": "misskey", "cwe": "CWE-405", "title": "Misskey: Lack of rate limiting and size restrictions in RSS fetching API", "url": "https://www.cve.org/CVERecord?id=CVE-2026-104817" }, { "rank": 514, "cve_id": "CVE-2026-109428", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "mistralai", "product": "mistral-vibe", "cwe": "CWE-436", "title": "Mistral Vibe < 2.25.5 Permission Bypass via Bash Line Continuation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109428" }, { "rank": 515, "cve_id": "CVE-2026-109429", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "mistralai", "product": "mistral-vibe", "cwe": "CWE-436", "title": "Mistral Vibe < 2.25.4 Bash Permission Bypass via ${var@P} Prompt-Transform", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109429" }, { "rank": 516, "cve_id": "CVE-2026-109676", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "FreeRDP", "product": "FreeRDP", "cwe": "CWE-416", "title": "FreeRDP 3.0.0-beta1 before 3.32.0 Use-After-Free via Smartcard Connect", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109676" }, { "rank": 517, "cve_id": "CVE-2026-109960", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "froxlor", "product": "froxlor", "cwe": "CWE-79", "title": "Froxlor 2.0.0 before 2.3.14 Stored XSS via Customer Theme Value", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109960" }, { "rank": 518, "cve_id": "CVE-2026-109967", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "marcopiovanello", "product": "yt-dlp-web-ui", "cwe": "CWE-476", "title": "yt-dlp-web-ui through 4.0.0 NULL Pointer Dereference DoS via Service.Formats", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109967" }, { "rank": 519, "cve_id": "CVE-2026-110115", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "risesoft-y9", "product": "Digital-Infrastructure", "cwe": "CWE-22", "title": "Digital-Infrastructure 9.6.5 through 9.6.11 Path Traversal via fileManager retrieveFileStream", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110115" }, { "rank": 520, "cve_id": "CVE-2026-110128", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "fushengqian", "product": "fuint", "cwe": "CWE-306", "title": "fuint through commit 4c4bc8a Missing Authentication via /clientApi/order/detail", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110128" }, { "rank": 521, "cve_id": "CVE-2026-110207", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "WuKongOpenSource", "product": "Wukong AICRM", "cwe": "CWE-862", "title": "Wukong AICRM through 20260610 Missing Authorization in User and Role Management APIs", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110207" }, { "rank": 522, "cve_id": "CVE-2026-110215", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "youlaitech", "product": "youlai-boot", "cwe": "CWE-862", "title": "youlai-boot through 2.21.1 Missing Authorization in Role Menu Assignment Allows Privilege Escalation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110215" }, { "rank": 523, "cve_id": "CVE-2026-110238", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "zofe", "product": "rapyd-admin", "cwe": "CWE-639", "title": "Rapyd Admin 9.0.0 before 9.20.0 Authorization Bypass via UsersModalEditEmbed Component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110238" }, { "rank": 524, "cve_id": "CVE-2026-34634", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "ColdFusion 2025", "cwe": "CWE-918", "title": "ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-34634" }, { "rank": 525, "cve_id": "CVE-2026-63152", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Omnispace", "product": "Agora Project", "cwe": "CWE-89", "title": "Omnispace Agora Project < 26.10.0 Second-Order SQL Injection via _idCategoryFilter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-63152" }, { "rank": 526, "cve_id": "CVE-2026-63153", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Omnispace", "product": "Agora Project", "cwe": "CWE-639", "title": "Omnispace Agora Project < 26.10.0 Broken Access Control via setAffectations()", "url": "https://www.cve.org/CVERecord?id=CVE-2026-63153" }, { "rank": 527, "cve_id": "CVE-2026-63161", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Omnispace", "product": "Agora Project", "cwe": "CWE-384", "title": "Omnispace Agora Project < 26.10.0 Session Fixation via Authentication", "url": "https://www.cve.org/CVERecord?id=CVE-2026-63161" }, { "rank": 528, "cve_id": "CVE-2026-63165", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Omnispace", "product": "Agora Project", "cwe": "CWE-89", "title": "Omnispace Agora Project < 26.10.0 SQL Injection via sortEvents Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-63165" }, { "rank": 529, "cve_id": "CVE-2026-63174", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Omnispace", "product": "Agora Project", "cwe": "CWE-862", "title": "Omnispace Agora Project < 26.10.0 Broken Access Control via spaceAffectList", "url": "https://www.cve.org/CVERecord?id=CVE-2026-63174" }, { "rank": 530, "cve_id": "CVE-2026-65101", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "NVIDIA", "product": "AIStore framework", "cwe": "CWE-918", "title": "NVIDIA AIStore for Linux contains a vulnerability in the distributed sort component where an attacker could cause server-side request forgery by supplying a crafted external key map URL. A successful exploit of this vulnerability might lead to information disclosure.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65101" }, { "rank": 531, "cve_id": "CVE-2026-65170", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "NVIDIA", "product": "AIStore framework", "cwe": "CWE-918", "title": "NVIDIA AIStore for Linux contains a vulnerability in the experimental HT backend where an unauthenticated remote attacker may cause server-side request forgery by supplying a crafted original URL. A successful exploit of this vulnerability may lead to information disclosure.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65170" }, { "rank": 532, "cve_id": "CVE-2026-65172", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "NVIDIA", "product": "AIStore framework", "cwe": "CWE-862", "title": "NVIDIA AIStore for Linux and Kubernetes contains a missing authorization vulnerability in the ETL management API where an unauthenticated remote attacker may access ETL information or control existing ETL jobs by sending crafted GET or POST requests to an AIStore proxy. A successful exploit may lead to information disclosure and unauthorized start or stop operations that affect the integrity and availability of ETL data-processing pipelines.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65172" }, { "rank": 533, "cve_id": "CVE-2026-65198", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Huawei", "product": "openUBMC", "cwe": "CWE-321", "title": "Huawei Default SNMPv3 USM key", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65198" }, { "rank": 534, "cve_id": "CVE-2026-74035", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Wazuh", "product": "wazuh-manager", "cwe": "CWE-863", "title": "Wazuh 4.6.0 before 4.14.8 Authentication Bypass via Empty Password in update_user", "url": "https://www.cve.org/CVERecord?id=CVE-2026-74035" }, { "rank": 535, "cve_id": "CVE-2026-74036", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Wazuh", "product": "wazuh-agent", "cwe": "CWE-863", "title": "Wazuh 4.3.0 before 4.14.8 Remote Code Execution via SCA Command Policies", "url": "https://www.cve.org/CVERecord?id=CVE-2026-74036" }, { "rank": 536, "cve_id": "CVE-2026-74037", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Wazuh", "product": "wazuh-manager", "cwe": "CWE-613", "title": "Wazuh 4.0.0 before 4.14.8 Session Invalidation Bypass in check_token", "url": "https://www.cve.org/CVERecord?id=CVE-2026-74037" }, { "rank": 537, "cve_id": "CVE-2026-92088", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "upKeeper Solutions", "product": "upKeeper Instant Privilege Access", "cwe": "CWE-232", "title": "Improper handling of undefined values vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege Escalation. This issue affects upKeeper Instant Privilege Access: through 1.7.1.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92088" }, { "rank": 538, "cve_id": "CVE-2026-95634", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Content Credentials Rust SDK", "cwe": "CWE-918", "title": "CAI Content Credentials | Server-Side Request Forgery (SSRF) (CWE-918)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-95634" }, { "rank": 539, "cve_id": "CVE-2026-95639", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Photoshop", "cwe": "CWE-863", "title": "Photoshop Desktop | Incorrect Authorization (CWE-863)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-95639" }, { "rank": 540, "cve_id": "CVE-2026-102250", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Schneider Electric", "product": "Sage RTU 1410", "cwe": "CWE-345", "title": "CWE-345: Insufficient Verification of Data Authenticity vulnerability exists that could allow modified firmware to be uploaded when an authorized admin user begins a firmware update procedure which could result in control over the device.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102250" }, { "rank": 541, "cve_id": "CVE-2026-103845", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Dimension", "cwe": "CWE-427", "title": "Dimension | Uncontrolled Search Path Element (CWE-427)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103845" }, { "rank": 542, "cve_id": "CVE-2026-103846", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Dimension", "cwe": "CWE-79", "title": "Dimension | Improper Neutralization of Input During Web Page Generation (Cross-Site Scripting) (CWE-79)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103846" }, { "rank": 543, "cve_id": "CVE-2026-103847", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Dimension", "cwe": "CWE-426", "title": "Dimension | Untrusted Search Path (CWE-426)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103847" }, { "rank": 544, "cve_id": "CVE-2026-105897", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "ColdFusion 2025", "cwe": "CWE-918", "title": "ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105897" }, { "rank": 545, "cve_id": "CVE-2026-106616", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "ColdFusion 2025", "cwe": "CWE-611", "title": "ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106616" }, { "rank": 546, "cve_id": "CVE-2026-109157", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "TRENDnet", "product": "TEW-432BRP", "cwe": "CWE-119", "title": "TRENDnet TEW-432BRP formTcpipSetup stack-based overflow", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109157" }, { "rank": 547, "cve_id": "CVE-2026-110097", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "ikaros-dev", "product": "ikaros", "cwe": "CWE-287", "title": "Ikaros 1.2.0 through 1.2.5 TOTP Authentication Bypass via Temp Token", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110097" }, { "rank": 548, "cve_id": "CVE-2026-110108", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "mateaix", "product": "MateCloud", "cwe": "CWE-862", "title": "MateCloud through 5.0.8 Missing Authorization via /api/v1/admin/storage API", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110108" }, { "rank": 549, "cve_id": "CVE-2026-110124", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "kerwincui", "product": "FastBee", "cwe": "CWE-639", "title": "FastBee through 2.1.0 IDOR via DeviceController /iot/device Endpoints", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110124" }, { "rank": 550, "cve_id": "CVE-2026-53562", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Citrix", "product": "UniconOS", "cwe": "CWE-59", "title": "Local Privilege Escalation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-53562" }, { "rank": 551, "cve_id": "CVE-2026-67625", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SQL Server 2017 (GDR)", "cwe": "CWE-122", "title": "Microsoft SQL Server Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-67625" }, { "rank": 552, "cve_id": "CVE-2026-68883", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SQL Server 2017 (GDR)", "cwe": "CWE-122", "title": "Microsoft SQL Server Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-68883" }, { "rank": 553, "cve_id": "CVE-2026-74043", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Wazuh", "product": "wazuh-manager", "cwe": "CWE-22", "title": "Wazuh 4.1.1 before 4.14.8 Path Traversal via Cluster Upload Functions", "url": "https://www.cve.org/CVERecord?id=CVE-2026-74043" }, { "rank": 554, "cve_id": "CVE-2026-85886", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SQL Server 2017 (GDR)", "cwe": "CWE-122", "title": "Microsoft SQL Server Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85886" }, { "rank": 555, "cve_id": "CVE-2026-102982", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "makeplane", "product": "plane", "cwe": "CWE-79", "title": "Plane: XSS in work item comments", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102982" }, { "rank": 556, "cve_id": "CVE-2026-104816", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "misskey-dev", "product": "misskey", "cwe": "CWE-79", "title": "Misskey: Cross-site scripting in RSS feed item links", "url": "https://www.cve.org/CVERecord?id=CVE-2026-104816" }, { "rank": 557, "cve_id": "CVE-2026-71385", "cvss_base": 8.4, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "ColdFusion 2025", "cwe": "CWE-863", "title": "ColdFusion | Incorrect Authorization (CWE-863)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-71385" }, { "rank": 558, "cve_id": "CVE-2026-72895", "cvss_base": 8.4, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Siemens", "product": "SIMATIC IPC BX-21A", "cwe": "CWE-1394", "title": "A vulnerability has been identified in SIMATIC IPC BX-21A (All versions < V31.01.13), SIMATIC IPC RW-543A (All versions < V1.1.4), SIMATIC IPC227G / IPC277G / IPC277G PRO / IPC327G / IPC377G (All versions < V28.01.15). A BIOS vendor test key is present in the UEFI Secure Boot key database. This could allow a local attacker with physical or administrative access to the device to boot an operating system or UEFI application signed with that test key, bypassing UEFI Secure Boot protections even when Secure Boot is enabled, potentially leading to a full loss of confidentiality, integrity, and availability of the device.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-72895" }, { "rank": 559, "cve_id": "CVE-2026-74033", "cvss_base": 8.4, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Wazuh", "product": "wazuh-manager", "cwe": "CWE-22", "title": "Wazuh from 4.1.1 before 4.14.8 Path Traversal in CDB List Cluster Handlers", "url": "https://www.cve.org/CVERecord?id=CVE-2026-74033" }, { "rank": 560, "cve_id": "CVE-2026-75995", "cvss_base": 8.4, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "ColdFusion 2025", "cwe": "CWE-20", "title": "ColdFusion | Improper Input Validation (CWE-20)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-75995" }, { "rank": 561, "cve_id": "CVE-2026-83845", "cvss_base": 8.4, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-290", "title": "Windows Internet (wininet.dll) Spoofing Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83845" }, { "rank": 562, "cve_id": "CVE-2026-89200", "cvss_base": 8.4, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Siemens", "product": "RUGGEDCOM CROSSBOW", "cwe": "CWE-89", "title": "A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in the Name and Value fields for custom file labels. This could allow an authenticated attacker with administrative privileges to execute arbitrary SQL commands on the underlying database.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-89200" }, { "rank": 563, "cve_id": "CVE-2026-109961", "cvss_base": 8.4, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "froxlor", "product": "froxlor", "cwe": "CWE-74", "title": "Froxlor 0.10.0 before 2.3.14 Newline Injection via Ftps.add additional_members", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109961" }, { "rank": 564, "cve_id": "CVE-2026-109965", "cvss_base": 8.4, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "oraios", "product": "serena", "cwe": "CWE-59", "title": "Serena before 2.0.0 Symlink Following in File Tools Allows Access Outside Project Root", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109965" }, { "rank": 565, "cve_id": "CVE-2026-110233", "cvss_base": 8.4, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "NSPC911", "product": "rovr", "cwe": "CWE-78", "title": "rovr through 0.10.3 OS Command Injection via Unquoted Path to cmd.exe", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110233" }, { "rank": 566, "cve_id": "CVE-2026-110255", "cvss_base": 8.4, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Finsys", "product": "dockhand", "cwe": "CWE-918", "title": "Dockhand before 1.0.43 SSRF via /api/templates/compose Endpoint", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110255" }, { "rank": 567, "cve_id": "CVE-2025-58774", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "AMI", "product": "AptioV", "cwe": "CWE-805", "title": "UEFI OOB Write and Buffer Overflow Vulnerabilities", "url": "https://www.cve.org/CVERecord?id=CVE-2025-58774" }, { "rank": 568, "cve_id": "CVE-2026-92908", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Commerce", "cwe": "CWE-863", "title": "Adobe Commerce | Incorrect Authorization (CWE-863)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92908" }, { "rank": 569, "cve_id": "CVE-2026-109954", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "parse-community", "product": "parse-server", "cwe": "CWE-362", "title": "Parse Server 9.0.0 before 9.10.2-alpha.5 Transactional Batch Request Write Interference", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109954" }, { "rank": 570, "cve_id": "CVE-2026-109956", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "nltk", "product": "nltk", "cwe": "CWE-22", "title": "NLTK through 3.10.3 Path Traversal via WekaClassifier Model Path", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109956" }, { "rank": 571, "cve_id": "CVE-2025-58772", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "AMI", "product": "AptioV", "cwe": "CWE-120", "title": "UEFI OOB Write and Buffer Overflow Vulnerabilities", "url": "https://www.cve.org/CVERecord?id=CVE-2025-58772" }, { "rank": 572, "cve_id": "CVE-2026-85369", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-125", "title": "Windows Hyper-V Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85369" }, { "rank": 573, "cve_id": "CVE-2026-85925", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "azure-keyvault-administration", "cwe": "CWE-923", "title": "Azure Key Vault Client SDK Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85925" }, { "rank": 574, "cve_id": "CVE-2026-86016", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "vnotex", "product": "vnote", "cwe": "CWE-79", "title": "VNote: Stored XSS via YAML Frontmatter Leading to Local File Read and Remote Exfiltration", "url": "https://www.cve.org/CVERecord?id=CVE-2026-86016" }, { "rank": 575, "cve_id": "CVE-2026-93905", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "WebSphere Application Server - Liberty", "cwe": "CWE-502", "title": "IBM WebSphere Application Server Liberty is affected by a deserialization of untrusted data", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93905" }, { "rank": 576, "cve_id": "CVE-2026-105443", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "WebSphere Application Server - Liberty", "cwe": "CWE-284", "title": "IBM WebSphere Application Server Liberty is affected by an improper access control", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105443" }, { "rank": 577, "cve_id": "CVE-2026-105898", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "ColdFusion 2025", "cwe": "CWE-863", "title": "ColdFusion | Incorrect Authorization (CWE-863)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105898" }, { "rank": 578, "cve_id": "CVE-2026-110104", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "xxyopen", "product": "novel", "cwe": "CWE-916", "title": "novel through 3.5.0 Unsalted MD5 Password Storage", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110104" }, { "rank": 579, "cve_id": "CVE-2026-53418", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Zoom Communications", "product": "Zoom Workplace", "cwe": "CWE-939", "title": "Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace for Android before version 7.2.1 may allow an unauthenticated user to conduct an escalation of privilege via network access.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-53418" }, { "rank": 580, "cve_id": "CVE-2026-65103", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "NVIDIA", "product": "AIStore framework", "cwe": "CWE-22", "title": "NVIDIA AIStore for Linux contains a path traversal vulnerability in the target-side object rename handler, where an unauthenticated remote attacker could cause an improper limitation of a pathname to a restricted directory by submitting a crafted rename destination directly to an AIStore target, resulting in the arbitrary creation or overwrite of a file. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, data tampering, and denial of service.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65103" }, { "rank": 581, "cve_id": "CVE-2026-65164", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "NVIDIA", "product": "AIStore framework", "cwe": "CWE-22", "title": "NVIDIA AIStore for Linux contains a path traversal vulnerability in the dSort archive extraction component where a remote attacker may cause an improper limitation of a pathname to a restricted directory by supplying crafted archive member names to a dSort job. A successful exploit may lead to arbitrary file creation or overwrite, code execution, information disclosure, data tampering, and denial of service.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65164" }, { "rank": 582, "cve_id": "CVE-2026-69802", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows Server 2012", "cwe": "CWE-1390", "title": "Network Device Enrollment Service (NDES) Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69802" }, { "rank": 583, "cve_id": "CVE-2026-69830", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-362", "title": "Windows DHCP Server Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69830" }, { "rank": 584, "cve_id": "CVE-2026-69913", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows TCP/IP Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69913" }, { "rank": 585, "cve_id": "CVE-2026-70013", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows iSCSI Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70013" }, { "rank": 586, "cve_id": "CVE-2026-70038", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows iSCSI Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70038" }, { "rank": 587, "cve_id": "CVE-2026-70062", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-415", "title": "Windows libarchive Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70062" }, { "rank": 588, "cve_id": "CVE-2026-70111", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-822", "title": "Windows Kernel Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70111" }, { "rank": 589, "cve_id": "CVE-2026-70127", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Domain Name Service Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70127" }, { "rank": 590, "cve_id": "CVE-2026-70175", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "ASP.NET Core 10.0", "cwe": "CWE-640", "title": "ASP.NET Core Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70175" }, { "rank": 591, "cve_id": "CVE-2026-70187", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows Server 2012", "cwe": "CWE-416", "title": "Windows Remote Desktop Services Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70187" }, { "rank": 592, "cve_id": "CVE-2026-70197", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": ".NET 10.0", "cwe": "CWE-787", "title": ".NET Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70197" }, { "rank": 593, "cve_id": "CVE-2026-70229", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-863", "title": "Windows Active Directory Domain Services Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70229" }, { "rank": 594, "cve_id": "CVE-2026-70269", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Word Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70269" }, { "rank": 595, "cve_id": "CVE-2026-70571", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft Exchange Server 2016 Cumulative Update 23", "cwe": "CWE-121", "title": "Microsoft Exchange Server Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70571" }, { "rank": 596, "cve_id": "CVE-2026-83522", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-807", "title": "Windows IKE Extension Spoofing Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83522" }, { "rank": 597, "cve_id": "CVE-2026-83674", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-1390", "title": "Active Directory Federation Services (AD FS) Spoofing Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83674" }, { "rank": 598, "cve_id": "CVE-2026-83746", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Skype for Business Server 2015 CU13", "cwe": "CWE-36", "title": "Skype for Business Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83746" }, { "rank": 599, "cve_id": "CVE-2026-83844", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft Paint", "cwe": "CWE-125", "title": "Windows Paint Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83844" }, { "rank": 600, "cve_id": "CVE-2026-83914", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Microsoft XML Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83914" }, { "rank": 601, "cve_id": "CVE-2026-84012", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-415", "title": "Windows Remote Desktop Services Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-84012" }, { "rank": 602, "cve_id": "CVE-2026-85371", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Network Policy Server (NPS) Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85371" }, { "rank": 603, "cve_id": "CVE-2026-85799", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Network Policy Server (NPS) Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85799" }, { "rank": 604, "cve_id": "CVE-2026-85926", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85926" }, { "rank": 605, "cve_id": "CVE-2026-88094", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Azure Storage Blobs client library for Java", "cwe": "CWE-74", "title": "Azure Storage Library Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88094" }, { "rank": 606, "cve_id": "CVE-2026-88117", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows Server 2012", "cwe": "CWE-416", "title": "Windows DHCP Server Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88117" }, { "rank": 607, "cve_id": "CVE-2026-88119", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows Server 2012", "cwe": "CWE-416", "title": "Windows DHCP Server Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88119" }, { "rank": 608, "cve_id": "CVE-2026-88120", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows Server 2012", "cwe": "CWE-416", "title": "Windows DHCP Server Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88120" }, { "rank": 609, "cve_id": "CVE-2026-88171", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-415", "title": "Windows DHCP Server Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88171" }, { "rank": 610, "cve_id": "CVE-2026-88173", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-367", "title": "Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88173" }, { "rank": 611, "cve_id": "CVE-2026-88174", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-362", "title": "Windows Deployment Services Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88174" }, { "rank": 612, "cve_id": "CVE-2026-88185", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Word Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88185" }, { "rank": 613, "cve_id": "CVE-2026-92922", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Commerce", "cwe": "CWE-79", "title": "Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92922" }, { "rank": 614, "cve_id": "CVE-2026-93907", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "WebSphere Application Server", "cwe": "CWE-287", "title": "IBM WebSphere Application Server is affected by a bypass authentication vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93907" }, { "rank": 615, "cve_id": "CVE-2026-97783", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SharePoint Server 2019", "cwe": "CWE-79", "title": "Microsoft Office SharePoint Spoofing Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97783" }, { "rank": 616, "cve_id": "CVE-2026-100218", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Remote Desktop Gateway Service Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100218" }, { "rank": 617, "cve_id": "CVE-2026-102866", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SharePoint Server Subscription Edition", "cwe": "CWE-347", "title": "Microsoft Office SharePoint Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102866" }, { "rank": 618, "cve_id": "CVE-2026-105005", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 26H1", "cwe": "CWE-787", "title": "Windows Schannel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105005" }, { "rank": 619, "cve_id": "CVE-2026-108457", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-787", "title": "Microsoft Windows PDF Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108457" }, { "rank": 620, "cve_id": "CVE-2026-108460", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Message Queuing Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108460" }, { "rank": 621, "cve_id": "CVE-2026-53420", "cvss_base": 8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Zoom Communications", "product": "Zoom Workplace", "cwe": "CWE-120", "title": "Buffer overflow in a Zoom Phone feature of Zoom Workplace Clients may allow an unauthenticated user to conduct a escalation of privilege via network access.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-53420" }, { "rank": 622, "cve_id": "CVE-2026-69363", "cvss_base": 8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Error Reporting Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69363" }, { "rank": 623, "cve_id": "CVE-2026-70049", "cvss_base": 8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft Configuration Manager", "cwe": "CWE-89", "title": "Microsoft Configuration Manager Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70049" }, { "rank": 624, "cve_id": "CVE-2026-70213", "cvss_base": 8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft Power Apps", "cwe": "CWE-346", "title": "Microsoft Power Apps Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70213" }, { "rank": 625, "cve_id": "CVE-2026-83838", "cvss_base": 8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-191", "title": "Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83838" }, { "rank": 626, "cve_id": "CVE-2026-85881", "cvss_base": 8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft Office for Android", "cwe": "CWE-121", "title": "Microsoft Office Graphics Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85881" }, { "rank": 627, "cve_id": "CVE-2026-88121", "cvss_base": 8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88121" }, { "rank": 628, "cve_id": "CVE-2026-95680", "cvss_base": 8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "WebSphere Application Server", "cwe": "CWE-287", "title": "IBM WebSphere Application Server is affected by an authorization bypass", "url": "https://www.cve.org/CVERecord?id=CVE-2026-95680" }, { "rank": 629, "cve_id": "CVE-2026-96844", "cvss_base": 8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-191", "title": "Microsoft Bluetooth Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96844" }, { "rank": 630, "cve_id": "CVE-2026-96956", "cvss_base": 8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SQL Server 2017 (GDR)", "cwe": "CWE-121", "title": "SQL Server Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96956" }, { "rank": 631, "cve_id": "CVE-2026-49785", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-404", "title": "UEFI Secure Boot Security Feature Bypass Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-49785" }, { "rank": 632, "cve_id": "CVE-2026-61931", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-416", "title": "Windows Perception Simulation Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-61931" }, { "rank": 633, "cve_id": "CVE-2026-65110", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "NVIDIA", "product": "Megatron-LM", "cwe": "CWE-502", "title": "NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where, an attacker could cause an RCE by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65110" }, { "rank": 634, "cve_id": "CVE-2026-65141", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "NVIDIA", "product": "Isaac Lab", "cwe": "CWE-95", "title": "NVIDIA Isaac Lab contains a vulnerability where an attacker could cause an eval injection. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, and denial of service.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65141" }, { "rank": 635, "cve_id": "CVE-2026-65180", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "NVIDIA", "product": "Megatron-LM", "cwe": "CWE-502", "title": "NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65180" }, { "rank": 636, "cve_id": "CVE-2026-68836", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows kernel32.dll Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-68836" }, { "rank": 637, "cve_id": "CVE-2026-69354", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Error Reporting Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69354" }, { "rank": 638, "cve_id": "CVE-2026-69471", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Installer Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69471" }, { "rank": 639, "cve_id": "CVE-2026-69633", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Update Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69633" }, { "rank": 640, "cve_id": "CVE-2026-69650", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-347", "title": "Windows Key Distribution Center Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69650" }, { "rank": 641, "cve_id": "CVE-2026-69673", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-59", "title": "Windows Update Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69673" }, { "rank": 642, "cve_id": "CVE-2026-69718", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-77", "title": "Windows Update Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69718" }, { "rank": 643, "cve_id": "CVE-2026-69733", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-426", "title": "Windows Update Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69733" }, { "rank": 644, "cve_id": "CVE-2026-69783", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-73", "title": "Windows Update Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69783" }, { "rank": 645, "cve_id": "CVE-2026-69798", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Wired AutoConfig Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69798" }, { "rank": 646, "cve_id": "CVE-2026-69850", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-822", "title": "Windows Certificates Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69850" }, { "rank": 647, "cve_id": "CVE-2026-69867", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "SQLite Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69867" }, { "rank": 648, "cve_id": "CVE-2026-69880", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-843", "title": "Desktop Window Manager Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69880" }, { "rank": 649, "cve_id": "CVE-2026-69882", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-426", "title": "Windows Update Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69882" }, { "rank": 650, "cve_id": "CVE-2026-69884", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-126", "title": "Windows GDI Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69884" }, { "rank": 651, "cve_id": "CVE-2026-69898", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-122", "title": "Windows Kernel Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69898" }, { "rank": 652, "cve_id": "CVE-2026-69909", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Microsoft COM for Windows Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69909" }, { "rank": 653, "cve_id": "CVE-2026-69916", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-190", "title": "Windows NTFS Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69916" }, { "rank": 654, "cve_id": "CVE-2026-69923", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-427", "title": "Windows AI Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69923" }, { "rank": 655, "cve_id": "CVE-2026-69926", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-843", "title": "Desktop Window Manager Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69926" }, { "rank": 656, "cve_id": "CVE-2026-69934", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-20", "title": "Windows Spaceport.sys Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69934" }, { "rank": 657, "cve_id": "CVE-2026-69942", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-126", "title": "Windows Overlay Filter Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69942" }, { "rank": 658, "cve_id": "CVE-2026-69949", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Client for NFS Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69949" }, { "rank": 659, "cve_id": "CVE-2026-69950", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-126", "title": "Windows Overlay Filter Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69950" }, { "rank": 660, "cve_id": "CVE-2026-69952", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Overlay Filter Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69952" }, { "rank": 661, "cve_id": "CVE-2026-69953", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-126", "title": "Windows Overlay Filter Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69953" }, { "rank": 662, "cve_id": "CVE-2026-69957", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-126", "title": "Windows Overlay Filter Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69957" }, { "rank": 663, "cve_id": "CVE-2026-69959", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Overlay Filter Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69959" }, { "rank": 664, "cve_id": "CVE-2026-69963", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Kernel Streaming Service Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69963" }, { "rank": 665, "cve_id": "CVE-2026-69966", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-190", "title": "Kernel Streaming Service Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69966" }, { "rank": 666, "cve_id": "CVE-2026-70008", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-190", "title": "Windows IP Over USB Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70008" }, { "rank": 667, "cve_id": "CVE-2026-70010", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows NTFS Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70010" }, { "rank": 668, "cve_id": "CVE-2026-70015", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70015" }, { "rank": 669, "cve_id": "CVE-2026-70023", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-416", "title": "Windows Hyper-V Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70023" }, { "rank": 670, "cve_id": "CVE-2026-70027", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-122", "title": "Windows Subsystem for Linux Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70027" }, { "rank": 671, "cve_id": "CVE-2026-70048", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70048" }, { "rank": 672, "cve_id": "CVE-2026-70051", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-843", "title": "Windows SmartScreen Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70051" }, { "rank": 673, "cve_id": "CVE-2026-70052", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-122", "title": "Microsoft PowerShell Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70052" }, { "rank": 674, "cve_id": "CVE-2026-70054", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows NetBIOS Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70054" }, { "rank": 675, "cve_id": "CVE-2026-70059", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows OLE Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70059" }, { "rank": 676, "cve_id": "CVE-2026-70060", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Win32k Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70060" }, { "rank": 677, "cve_id": "CVE-2026-70064", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-191", "title": "Windows Kerberos Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70064" }, { "rank": 678, "cve_id": "CVE-2026-70092", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70092" }, { "rank": 679, "cve_id": "CVE-2026-70093", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Rich Text Edit Control Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70093" }, { "rank": 680, "cve_id": "CVE-2026-70102", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-416", "title": "Windows Spaceport.sys Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70102" }, { "rank": 681, "cve_id": "CVE-2026-70103", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Error Reporting Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70103" }, { "rank": 682, "cve_id": "CVE-2026-70104", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-822", "title": "Windows Win32k Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70104" }, { "rank": 683, "cve_id": "CVE-2026-70106", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Kernel Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70106" }, { "rank": 684, "cve_id": "CVE-2026-70108", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Win32k Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70108" }, { "rank": 685, "cve_id": "CVE-2026-70109", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70109" }, { "rank": 686, "cve_id": "CVE-2026-70110", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-121", "title": "Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70110" }, { "rank": 687, "cve_id": "CVE-2026-70112", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-122", "title": "Windows Spaceport.sys Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70112" }, { "rank": 688, "cve_id": "CVE-2026-70113", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-190", "title": "Windows Client for NFS Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70113" }, { "rank": 689, "cve_id": "CVE-2026-70114", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-122", "title": "Windows Kernel Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70114" }, { "rank": 690, "cve_id": "CVE-2026-70117", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Win32k Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70117" }, { "rank": 691, "cve_id": "CVE-2026-70121", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-122", "title": "Windows Kernel Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70121" }, { "rank": 692, "cve_id": "CVE-2026-70123", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Microsoft Graphics Component Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70123" }, { "rank": 693, "cve_id": "CVE-2026-70131", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Microsoft Windows Media Foundation Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70131" }, { "rank": 694, "cve_id": "CVE-2026-70132", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Portable Device File System Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70132" }, { "rank": 695, "cve_id": "CVE-2026-70138", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows OLE Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70138" }, { "rank": 696, "cve_id": "CVE-2026-70139", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Update Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70139" }, { "rank": 697, "cve_id": "CVE-2026-70142", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-426", "title": "Windows Update Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70142" }, { "rank": 698, "cve_id": "CVE-2026-70143", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Network File System Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70143" }, { "rank": 699, "cve_id": "CVE-2026-70151", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-416", "title": "Windows Direct Composition Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70151" }, { "rank": 700, "cve_id": "CVE-2026-70172", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-822", "title": "Windows NTFS Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70172" }, { "rank": 701, "cve_id": "CVE-2026-70177", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-20", "title": "Microsoft Windows Search Component Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70177" }, { "rank": 702, "cve_id": "CVE-2026-70184", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-41", "title": "Windows Backup Engine Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70184" }, { "rank": 703, "cve_id": "CVE-2026-70218", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-285", "title": "Windows StateRepository API Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70218" }, { "rank": 704, "cve_id": "CVE-2026-70220", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Word Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70220" }, { "rank": 705, "cve_id": "CVE-2026-70222", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-23", "title": "Windows Shell Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70222" }, { "rank": 706, "cve_id": "CVE-2026-70225", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-843", "title": "Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70225" }, { "rank": 707, "cve_id": "CVE-2026-70228", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-125", "title": "Desktop Window Manager Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70228" }, { "rank": 708, "cve_id": "CVE-2026-70233", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Common Log File System Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70233" }, { "rank": 709, "cve_id": "CVE-2026-70238", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Storage Spaces Controller Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70238" }, { "rank": 710, "cve_id": "CVE-2026-70245", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-843", "title": "Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70245" }, { "rank": 711, "cve_id": "CVE-2026-70247", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "HTTP.sys Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70247" }, { "rank": 712, "cve_id": "CVE-2026-70255", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-122", "title": "Desktop Window Manager Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70255" }, { "rank": 713, "cve_id": "CVE-2026-70274", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-416", "title": "Windows Bind Filter Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70274" }, { "rank": 714, "cve_id": "CVE-2026-70278", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Microsoft Windows Media Foundation Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70278" }, { "rank": 715, "cve_id": "CVE-2026-70285", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Win32k Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70285" }, { "rank": 716, "cve_id": "CVE-2026-70286", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Graphics Component Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70286" }, { "rank": 717, "cve_id": "CVE-2026-70303", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-787", "title": "Windows Kernel Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70303" }, { "rank": 718, "cve_id": "CVE-2026-70566", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-476", "title": "Windows Schannel Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70566" }, { "rank": 719, "cve_id": "CVE-2026-73027", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-15", "title": "Windows Setup Files Cleanup Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73027" }, { "rank": 720, "cve_id": "CVE-2026-78459", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Microsoft Internet Information Services Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-78459" }, { "rank": 721, "cve_id": "CVE-2026-81969", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-1220", "title": "Windows Server Update Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-81969" }, { "rank": 722, "cve_id": "CVE-2026-83499", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-1220", "title": "Windows Server Update Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83499" }, { "rank": 723, "cve_id": "CVE-2026-83506", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-426", "title": "Servicing Stack Updates Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83506" }, { "rank": 724, "cve_id": "CVE-2026-83508", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows NTFS Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83508" }, { "rank": 725, "cve_id": "CVE-2026-83513", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83513" }, { "rank": 726, "cve_id": "CVE-2026-83514", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Partition Management Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83514" }, { "rank": 727, "cve_id": "CVE-2026-83518", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-122", "title": "RPC Runtime Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83518" }, { "rank": 728, "cve_id": "CVE-2026-83567", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows NTFS Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83567" }, { "rank": 729, "cve_id": "CVE-2026-83568", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-862", "title": "Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83568" }, { "rank": 730, "cve_id": "CVE-2026-83569", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-122", "title": "HID Parser Library Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83569" }, { "rank": 731, "cve_id": "CVE-2026-83570", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Search Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83570" }, { "rank": 732, "cve_id": "CVE-2026-83579", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Smart Card Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83579" }, { "rank": 733, "cve_id": "CVE-2026-83583", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-862", "title": "Windows Geotag Broker Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83583" }, { "rank": 734, "cve_id": "CVE-2026-83585", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-134", "title": "Windows NTFS Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83585" }, { "rank": 735, "cve_id": "CVE-2026-83586", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-1390", "title": "Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83586" }, { "rank": 736, "cve_id": "CVE-2026-83587", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-822", "title": "Windows Core Messaging Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83587" }, { "rank": 737, "cve_id": "CVE-2026-83588", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows USB Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83588" }, { "rank": 738, "cve_id": "CVE-2026-83634", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-415", "title": "Windows BitLocker Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83634" }, { "rank": 739, "cve_id": "CVE-2026-83637", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83637" }, { "rank": 740, "cve_id": "CVE-2026-83638", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows USB Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83638" }, { "rank": 741, "cve_id": "CVE-2026-83639", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Sensor Data Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83639" }, { "rank": 742, "cve_id": "CVE-2026-83640", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows NTFS Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83640" }, { "rank": 743, "cve_id": "CVE-2026-83641", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Media Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83641" }, { "rank": 744, "cve_id": "CVE-2026-83650", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Media Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83650" }, { "rank": 745, "cve_id": "CVE-2026-83652", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows NTFS Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83652" }, { "rank": 746, "cve_id": "CVE-2026-83654", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-306", "title": "Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83654" }, { "rank": 747, "cve_id": "CVE-2026-83659", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-59", "title": "Windows User Profile Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83659" }, { "rank": 748, "cve_id": "CVE-2026-83661", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Photoshop", "cwe": "CWE-190", "title": "Photoshop Desktop | Integer Overflow or Wraparound (CWE-190)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83661" }, { "rank": 749, "cve_id": "CVE-2026-83669", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-908", "title": "Windows Error Reporting Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83669" }, { "rank": 750, "cve_id": "CVE-2026-83678", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows TCP/IP Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83678" }, { "rank": 751, "cve_id": "CVE-2026-83679", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-416", "title": "Windows Defender Firewall Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83679" }, { "rank": 752, "cve_id": "CVE-2026-83690", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-416", "title": "Windows Kernel Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83690" }, { "rank": 753, "cve_id": "CVE-2026-83691", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows DHCP Server Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83691" }, { "rank": 754, "cve_id": "CVE-2026-83692", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-122", "title": "Windows Bind Filter Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83692" }, { "rank": 755, "cve_id": "CVE-2026-83698", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83698" }, { "rank": 756, "cve_id": "CVE-2026-83699", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-121", "title": "Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83699" }, { "rank": 757, "cve_id": "CVE-2026-83700", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-416", "title": "Windows Now Playing Session Manager Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83700" }, { "rank": 758, "cve_id": "CVE-2026-83704", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-59", "title": "Microsoft Windows Search Component Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83704" }, { "rank": 759, "cve_id": "CVE-2026-83709", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows NTLM Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83709" }, { "rank": 760, "cve_id": "CVE-2026-83712", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-787", "title": "Windows NTFS Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83712" }, { "rank": 761, "cve_id": "CVE-2026-83721", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-416", "title": "Win32k Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83721" }, { "rank": 762, "cve_id": "CVE-2026-83726", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows DWM Core Library Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83726" }, { "rank": 763, "cve_id": "CVE-2026-83727", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-126", "title": "Windows Overlay Filter Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83727" }, { "rank": 764, "cve_id": "CVE-2026-83732", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Win32k Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83732" }, { "rank": 765, "cve_id": "CVE-2026-83735", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-763", "title": "Windows Kernel Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83735" }, { "rank": 766, "cve_id": "CVE-2026-83741", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-416", "title": "Internet Explorer Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83741" }, { "rank": 767, "cve_id": "CVE-2026-83753", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-122", "title": "Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83753" }, { "rank": 768, "cve_id": "CVE-2026-83756", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-416", "title": "Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83756" }, { "rank": 769, "cve_id": "CVE-2026-83757", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-122", "title": "Win32k Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83757" }, { "rank": 770, "cve_id": "CVE-2026-83758", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Error Reporting Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83758" }, { "rank": 771, "cve_id": "CVE-2026-83761", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-416", "title": "Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83761" }, { "rank": 772, "cve_id": "CVE-2026-83762", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-416", "title": "Win32k Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83762" }, { "rank": 773, "cve_id": "CVE-2026-83763", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-843", "title": "Windows Input System Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83763" }, { "rank": 774, "cve_id": "CVE-2026-83767", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-121", "title": "Windows Installer Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83767" }, { "rank": 775, "cve_id": "CVE-2026-83768", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-122", "title": "Windows Kernel Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83768" }, { "rank": 776, "cve_id": "CVE-2026-83769", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-416", "title": "Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83769" }, { "rank": 777, "cve_id": "CVE-2026-83779", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Installer Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83779" }, { "rank": 778, "cve_id": "CVE-2026-83781", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-170", "title": "Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83781" }, { "rank": 779, "cve_id": "CVE-2026-83783", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Management Instrumentation Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83783" }, { "rank": 780, "cve_id": "CVE-2026-83791", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-283", "title": "Windows Virtual Input Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83791" }, { "rank": 781, "cve_id": "CVE-2026-83792", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-863", "title": "Windows Device Install Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83792" }, { "rank": 782, "cve_id": "CVE-2026-83796", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-416", "title": "Windows Kernel Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83796" }, { "rank": 783, "cve_id": "CVE-2026-83826", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-822", "title": "Windows Error Reporting Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83826" }, { "rank": 784, "cve_id": "CVE-2026-83828", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-122", "title": "Windows MIDI Service Module Elevation of Privileges Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83828" }, { "rank": 785, "cve_id": "CVE-2026-83829", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Microsoft Windows Search Component Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83829" }, { "rank": 786, "cve_id": "CVE-2026-83830", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows COM+ Event System Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83830" }, { "rank": 787, "cve_id": "CVE-2026-83832", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-125", "title": "Windows Spaceport.sys Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83832" }, { "rank": 788, "cve_id": "CVE-2026-83833", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Kernel Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83833" }, { "rank": 789, "cve_id": "CVE-2026-83836", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Event Tracing Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83836" }, { "rank": 790, "cve_id": "CVE-2026-83837", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-441", "title": "Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83837" }, { "rank": 791, "cve_id": "CVE-2026-83840", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-1390", "title": "Windows Error Reporting Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83840" }, { "rank": 792, "cve_id": "CVE-2026-83847", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Microsoft Account Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83847" }, { "rank": 793, "cve_id": "CVE-2026-83848", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-822", "title": "Windows COM+ Event System Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83848" }, { "rank": 794, "cve_id": "CVE-2026-83850", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Microsoft Windows Search Component Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83850" }, { "rank": 795, "cve_id": "CVE-2026-83857", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-121", "title": "Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83857" }, { "rank": 796, "cve_id": "CVE-2026-83859", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows NTFS Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83859" }, { "rank": 797, "cve_id": "CVE-2026-83861", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Remote Desktop Protocol Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83861" }, { "rank": 798, "cve_id": "CVE-2026-83863", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Servicing Stack Updates Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83863" }, { "rank": 799, "cve_id": "CVE-2026-83867", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Push Notifications Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83867" }, { "rank": 800, "cve_id": "CVE-2026-83872", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-681", "title": "Windows TCP/IP Local Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83872" }, { "rank": 801, "cve_id": "CVE-2026-83873", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-23", "title": "Windows Shell Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83873" }, { "rank": 802, "cve_id": "CVE-2026-83876", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Shell Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83876" }, { "rank": 803, "cve_id": "CVE-2026-83877", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-190", "title": "Windows Devices Human Interface Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83877" }, { "rank": 804, "cve_id": "CVE-2026-83881", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows exFAT File System Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83881" }, { "rank": 805, "cve_id": "CVE-2026-83882", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-122", "title": "Windows Kernel Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83882" }, { "rank": 806, "cve_id": "CVE-2026-83883", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Win32k Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83883" }, { "rank": 807, "cve_id": "CVE-2026-83896", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Direct Composition Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83896" }, { "rank": 808, "cve_id": "CVE-2026-83902", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-122", "title": "Windows Direct Composition Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83902" }, { "rank": 809, "cve_id": "CVE-2026-83903", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-122", "title": "Windows Direct Composition Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83903" }, { "rank": 810, "cve_id": "CVE-2026-83912", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Direct Composition Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83912" }, { "rank": 811, "cve_id": "CVE-2026-83913", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-416", "title": "Windows Kernel Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83913" }, { "rank": 812, "cve_id": "CVE-2026-83918", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-190", "title": "Windows Kernel Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83918" }, { "rank": 813, "cve_id": "CVE-2026-83919", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Microsoft Internet Messaging API Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83919" }, { "rank": 814, "cve_id": "CVE-2026-83920", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Search Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83920" }, { "rank": 815, "cve_id": "CVE-2026-83922", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-416", "title": "Windows Direct Composition Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83922" }, { "rank": 816, "cve_id": "CVE-2026-83927", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-59", "title": "Windows Registry Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83927" }, { "rank": 817, "cve_id": "CVE-2026-83931", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-122", "title": "Windows Hyper-V Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83931" }, { "rank": 818, "cve_id": "CVE-2026-83932", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Group Policy Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83932" }, { "rank": 819, "cve_id": "CVE-2026-83965", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Substance 3D Sampler", "cwe": "CWE-121", "title": "Substance3D - Sampler | Stack-based Buffer Overflow (CWE-121)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83965" }, { "rank": 820, "cve_id": "CVE-2026-83966", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Substance 3D Sampler", "cwe": "CWE-787", "title": "Substance3D - Sampler | Out-of-bounds Write (CWE-787)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83966" }, { "rank": 821, "cve_id": "CVE-2026-84013", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Telephony Server Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-84013" }, { "rank": 822, "cve_id": "CVE-2026-84016", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-787", "title": "Windows EAPHost Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-84016" }, { "rank": 823, "cve_id": "CVE-2026-85318", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Servicing Stack Updates Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85318" }, { "rank": 824, "cve_id": "CVE-2026-85327", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Print Spooler Components Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85327" }, { "rank": 825, "cve_id": "CVE-2026-85332", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-416", "title": "Windows Device Association Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85332" }, { "rank": 826, "cve_id": "CVE-2026-85338", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-125", "title": "Microsoft Graphics Component Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85338" }, { "rank": 827, "cve_id": "CVE-2026-85340", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-416", "title": "Microsoft Office Click-To-Run Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85340" }, { "rank": 828, "cve_id": "CVE-2026-85341", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows USB Video Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85341" }, { "rank": 829, "cve_id": "CVE-2026-85343", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-59", "title": "Windows Hyper-V Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85343" }, { "rank": 830, "cve_id": "CVE-2026-85356", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85356" }, { "rank": 831, "cve_id": "CVE-2026-85358", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Installer Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85358" }, { "rank": 832, "cve_id": "CVE-2026-85359", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-94", "title": "Windows Performance Monitor Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85359" }, { "rank": 833, "cve_id": "CVE-2026-85366", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Installer Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85366" }, { "rank": 834, "cve_id": "CVE-2026-85368", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows TCP/IP Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85368" }, { "rank": 835, "cve_id": "CVE-2026-85373", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85373" }, { "rank": 836, "cve_id": "CVE-2026-85375", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85375" }, { "rank": 837, "cve_id": "CVE-2026-85376", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-1390", "title": "Windows Print Spooler Components Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85376" }, { "rank": 838, "cve_id": "CVE-2026-85377", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-843", "title": "Windows CD-ROM Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85377" }, { "rank": 839, "cve_id": "CVE-2026-85795", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Text Services Framework Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85795" }, { "rank": 840, "cve_id": "CVE-2026-85796", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-121", "title": "Windows Installer Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85796" }, { "rank": 841, "cve_id": "CVE-2026-85800", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Error Reporting Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85800" }, { "rank": 842, "cve_id": "CVE-2026-85804", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-416", "title": "Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85804" }, { "rank": 843, "cve_id": "CVE-2026-85807", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-190", "title": "Windows USB Video Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85807" }, { "rank": 844, "cve_id": "CVE-2026-85820", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85820" }, { "rank": 845, "cve_id": "CVE-2026-85822", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows exFAT File System Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85822" }, { "rank": 846, "cve_id": "CVE-2026-85829", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-415", "title": "Windows Wired AutoConfig Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85829" }, { "rank": 847, "cve_id": "CVE-2026-85832", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85832" }, { "rank": 848, "cve_id": "CVE-2026-85833", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85833" }, { "rank": 849, "cve_id": "CVE-2026-85836", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-416", "title": "Windows Kernel Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85836" }, { "rank": 850, "cve_id": "CVE-2026-85837", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-125", "title": "Windows Kernel Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85837" }, { "rank": 851, "cve_id": "CVE-2026-85842", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-134", "title": "Windows Image Acquisition Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85842" }, { "rank": 852, "cve_id": "CVE-2026-85843", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-908", "title": "Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85843" }, { "rank": 853, "cve_id": "CVE-2026-85848", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85848" }, { "rank": 854, "cve_id": "CVE-2026-85849", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-59", "title": "Windows AppX Deployment Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85849" }, { "rank": 855, "cve_id": "CVE-2026-85850", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 26H1", "cwe": "CWE-763", "title": "Windows Kernel Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85850" }, { "rank": 856, "cve_id": "CVE-2026-85851", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-416", "title": "Windows SmartScreen Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85851" }, { "rank": 857, "cve_id": "CVE-2026-85858", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-125", "title": "Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85858" }, { "rank": 858, "cve_id": "CVE-2026-85860", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Message Queuing Queue Manager Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85860" }, { "rank": 859, "cve_id": "CVE-2026-85861", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Clipboard User Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85861" }, { "rank": 860, "cve_id": "CVE-2026-85863", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Clipboard User Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85863" }, { "rank": 861, "cve_id": "CVE-2026-85864", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-641", "title": "Python Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85864" }, { "rank": 862, "cve_id": "CVE-2026-85867", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Remote Access Connection Manager Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85867" }, { "rank": 863, "cve_id": "CVE-2026-85869", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Microsoft Windows Search Component Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85869" }, { "rank": 864, "cve_id": "CVE-2026-85871", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85871" }, { "rank": 865, "cve_id": "CVE-2026-85872", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Storage VSP Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85872" }, { "rank": 866, "cve_id": "CVE-2026-85874", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Message Queuing Queue Manager Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85874" }, { "rank": 867, "cve_id": "CVE-2026-85884", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-306", "title": "Windows Health and Optimized Experiences Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85884" }, { "rank": 868, "cve_id": "CVE-2026-85901", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Graphics Component Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85901" }, { "rank": 869, "cve_id": "CVE-2026-85902", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Direct Composition Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85902" }, { "rank": 870, "cve_id": "CVE-2026-85906", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-416", "title": "Windows Direct Composition Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85906" }, { "rank": 871, "cve_id": "CVE-2026-85908", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Graphics Component Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85908" }, { "rank": 872, "cve_id": "CVE-2026-85911", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-416", "title": "Windows StateRepository API Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85911" }, { "rank": 873, "cve_id": "CVE-2026-85915", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-122", "title": "Windows PCI Bus Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85915" }, { "rank": 874, "cve_id": "CVE-2026-85927", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85927" }, { "rank": 875, "cve_id": "CVE-2026-85933", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Print Spooler Components Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85933" }, { "rank": 876, "cve_id": "CVE-2026-85945", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Kernel Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85945" }, { "rank": 877, "cve_id": "CVE-2026-87691", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-416", "title": "Windows Management Services Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87691" }, { "rank": 878, "cve_id": "CVE-2026-87692", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft Exchange Server 2016 Cumulative Update 23", "cwe": "CWE-502", "title": "Microsoft Exchange Server Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87692" }, { "rank": 879, "cve_id": "CVE-2026-87694", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Installer Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87694" }, { "rank": 880, "cve_id": "CVE-2026-87695", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft Exchange Server 2016 Cumulative Update 23", "cwe": "CWE-829", "title": "Microsoft Exchange Server Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87695" }, { "rank": 881, "cve_id": "CVE-2026-87699", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Winlogon Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87699" }, { "rank": 882, "cve_id": "CVE-2026-87700", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Installer Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87700" }, { "rank": 883, "cve_id": "CVE-2026-87702", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-190", "title": "Windows Resource Management (MRM) Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87702" }, { "rank": 884, "cve_id": "CVE-2026-87706", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Storage Spaces Controller Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87706" }, { "rank": 885, "cve_id": "CVE-2026-87707", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Fax and Scan Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87707" }, { "rank": 886, "cve_id": "CVE-2026-87711", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-121", "title": "Windows Installer Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87711" }, { "rank": 887, "cve_id": "CVE-2026-87712", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Microsoft Windows QoS Scheduler Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87712" }, { "rank": 888, "cve_id": "CVE-2026-88070", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows BitLocker Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88070" }, { "rank": 889, "cve_id": "CVE-2026-88071", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-415", "title": "Windows Hyper-V Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88071" }, { "rank": 890, "cve_id": "CVE-2026-88072", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-59", "title": "Windows Host Guardian Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88072" }, { "rank": 891, "cve_id": "CVE-2026-88074", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-190", "title": "Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88074" }, { "rank": 892, "cve_id": "CVE-2026-88080", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Installer Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88080" }, { "rank": 893, "cve_id": "CVE-2026-88091", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-502", "title": "Windows Management Instrumentation Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88091" }, { "rank": 894, "cve_id": "CVE-2026-88093", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-122", "title": "Desktop Window Manager Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88093" }, { "rank": 895, "cve_id": "CVE-2026-88100", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-416", "title": "Windows Storage Spaces Controller Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88100" }, { "rank": 896, "cve_id": "CVE-2026-88101", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-1390", "title": "Microsoft Input Method Editor (IME) Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88101" }, { "rank": 897, "cve_id": "CVE-2026-88105", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Broadcast DVR User Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88105" }, { "rank": 898, "cve_id": "CVE-2026-88109", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-416", "title": "Microsoft Office Click-To-Run Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88109" }, { "rank": 899, "cve_id": "CVE-2026-88118", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88118" }, { "rank": 900, "cve_id": "CVE-2026-88126", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-822", "title": "WebDAV Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88126" }, { "rank": 901, "cve_id": "CVE-2026-88128", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-122", "title": "Windows DWM Core Library Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88128" }, { "rank": 902, "cve_id": "CVE-2026-88133", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-59", "title": "Windows Portable Device Enumerator Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88133" }, { "rank": 903, "cve_id": "CVE-2026-88134", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Kernel Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88134" }, { "rank": 904, "cve_id": "CVE-2026-88135", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-862", "title": "WebDAV Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88135" }, { "rank": 905, "cve_id": "CVE-2026-88147", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88147" }, { "rank": 906, "cve_id": "CVE-2026-88152", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88152" }, { "rank": 907, "cve_id": "CVE-2026-88168", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-122", "title": "Windows Bind Filter Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88168" }, { "rank": 908, "cve_id": "CVE-2026-88177", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows DWM Core Library Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88177" }, { "rank": 909, "cve_id": "CVE-2026-88179", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows DWM Core Library Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88179" }, { "rank": 910, "cve_id": "CVE-2026-88180", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-125", "title": "Windows DWM Core Library Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88180" }, { "rank": 911, "cve_id": "CVE-2026-88181", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-125", "title": "Windows DWM Core Library Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88181" }, { "rank": 912, "cve_id": "CVE-2026-88182", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Microsoft Windows Search Component Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88182" }, { "rank": 913, "cve_id": "CVE-2026-88188", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows DWM Core Library Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88188" }, { "rank": 914, "cve_id": "CVE-2026-88189", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-125", "title": "Windows DWM Core Library Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88189" }, { "rank": 915, "cve_id": "CVE-2026-88191", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-59", "title": "Microsoft Windows Search Component Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88191" }, { "rank": 916, "cve_id": "CVE-2026-88193", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Microsoft Scripting Engine Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88193" }, { "rank": 917, "cve_id": "CVE-2026-88194", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows DWM Core Library Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88194" }, { "rank": 918, "cve_id": "CVE-2026-88210", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-807", "title": "Microsoft Office Word Security Feature Bypass Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88210" }, { "rank": 919, "cve_id": "CVE-2026-95635", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Photoshop", "cwe": "CWE-415", "title": "Photoshop Desktop | Double Free (CWE-415)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-95635" }, { "rank": 920, "cve_id": "CVE-2026-95636", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Photoshop", "cwe": "CWE-190", "title": "Photoshop Desktop | Integer Overflow or Wraparound (CWE-190)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-95636" }, { "rank": 921, "cve_id": "CVE-2026-95637", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Photoshop", "cwe": "CWE-787", "title": "Photoshop Desktop | Out-of-bounds Write (CWE-787)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-95637" }, { "rank": 922, "cve_id": "CVE-2026-95638", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Photoshop", "cwe": "CWE-122", "title": "Photoshop Desktop | Heap-based Buffer Overflow (CWE-122)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-95638" }, { "rank": 923, "cve_id": "CVE-2026-95641", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Photoshop", "cwe": "CWE-787", "title": "Photoshop Desktop | Out-of-bounds Write (CWE-787)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-95641" }, { "rank": 924, "cve_id": "CVE-2026-96108", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-416", "title": "Desktop Window Manager Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96108" }, { "rank": 925, "cve_id": "CVE-2026-96118", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Graphics Kernel Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96118" }, { "rank": 926, "cve_id": "CVE-2026-96186", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-502", "title": "Microsoft Windows Media Foundation Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96186" }, { "rank": 927, "cve_id": "CVE-2026-96217", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows NTFS Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96217" }, { "rank": 928, "cve_id": "CVE-2026-96220", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-94", "title": "Windows Assigned Access Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96220" }, { "rank": 929, "cve_id": "CVE-2026-96223", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-416", "title": "Windows Hyper-V Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96223" }, { "rank": 930, "cve_id": "CVE-2026-96225", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": ".NET 10.0", "cwe": "CWE-59", "title": ".NET Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96225" }, { "rank": 931, "cve_id": "CVE-2026-96231", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": ".NET 10.0", "cwe": "CWE-59", "title": ".NET Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96231" }, { "rank": 932, "cve_id": "CVE-2026-96243", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-59", "title": "Windows WalletService Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96243" }, { "rank": 933, "cve_id": "CVE-2026-96244", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Internal System User Profile Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96244" }, { "rank": 934, "cve_id": "CVE-2026-96249", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-416", "title": "Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96249" }, { "rank": 935, "cve_id": "CVE-2026-96306", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Sysmain Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96306" }, { "rank": 936, "cve_id": "CVE-2026-96308", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Installer Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96308" }, { "rank": 937, "cve_id": "CVE-2026-96309", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-416", "title": "Windows Subsystem for Linux Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96309" }, { "rank": 938, "cve_id": "CVE-2026-96312", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Kernel Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96312" }, { "rank": 939, "cve_id": "CVE-2026-96317", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-416", "title": "Windows Kernel Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96317" }, { "rank": 940, "cve_id": "CVE-2026-96318", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Resume Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96318" }, { "rank": 941, "cve_id": "CVE-2026-96324", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Microsoft Windows Search Component Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96324" }, { "rank": 942, "cve_id": "CVE-2026-96521", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Photoshop", "cwe": "CWE-787", "title": "Photoshop Desktop | Out-of-bounds Write (CWE-787)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96521" }, { "rank": 943, "cve_id": "CVE-2026-96522", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Photoshop", "cwe": "CWE-787", "title": "Photoshop Desktop | Out-of-bounds Write (CWE-787)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96522" }, { "rank": 944, "cve_id": "CVE-2026-96523", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Photoshop", "cwe": "CWE-787", "title": "Photoshop Desktop | Out-of-bounds Write (CWE-787)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96523" }, { "rank": 945, "cve_id": "CVE-2026-96843", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "WebDAV Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96843" }, { "rank": 946, "cve_id": "CVE-2026-96847", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-822", "title": "WebDAV Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96847" }, { "rank": 947, "cve_id": "CVE-2026-96856", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Management Instrumentation Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96856" }, { "rank": 948, "cve_id": "CVE-2026-96862", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Spaceport.sys Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96862" }, { "rank": 949, "cve_id": "CVE-2026-96867", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows NTFS Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96867" }, { "rank": 950, "cve_id": "CVE-2026-96911", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-59", "title": "Microsoft Windows Search Component Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96911" }, { "rank": 951, "cve_id": "CVE-2026-96912", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-416", "title": "Windows Client License Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96912" }, { "rank": 952, "cve_id": "CVE-2026-96915", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-190", "title": "Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96915" }, { "rank": 953, "cve_id": "CVE-2026-96916", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows NTFS Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96916" }, { "rank": 954, "cve_id": "CVE-2026-96918", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-863", "title": "Windows NTFS Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96918" }, { "rank": 955, "cve_id": "CVE-2026-96920", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96920" }, { "rank": 956, "cve_id": "CVE-2026-96928", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows NTFS Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96928" }, { "rank": 957, "cve_id": "CVE-2026-96929", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Kernel Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96929" }, { "rank": 958, "cve_id": "CVE-2026-96931", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-822", "title": "Windows NTFS Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96931" }, { "rank": 959, "cve_id": "CVE-2026-96933", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-822", "title": "Windows COM+ Event System Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96933" }, { "rank": 960, "cve_id": "CVE-2026-96946", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96946" }, { "rank": 961, "cve_id": "CVE-2026-96947", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96947" }, { "rank": 962, "cve_id": "CVE-2026-96950", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96950" }, { "rank": 963, "cve_id": "CVE-2026-96953", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-476", "title": "Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96953" }, { "rank": 964, "cve_id": "CVE-2026-96995", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-121", "title": "Microsoft Office Word Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96995" }, { "rank": 965, "cve_id": "CVE-2026-96996", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Word Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96996" }, { "rank": 966, "cve_id": "CVE-2026-96997", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-416", "title": "Microsoft Office OneNote Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96997" }, { "rank": 967, "cve_id": "CVE-2026-97001", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Word Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97001" }, { "rank": 968, "cve_id": "CVE-2026-97009", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97009" }, { "rank": 969, "cve_id": "CVE-2026-97312", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Photoshop", "cwe": "CWE-787", "title": "Photoshop Desktop | Out-of-bounds Write (CWE-787)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97312" }, { "rank": 970, "cve_id": "CVE-2026-97792", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-732", "title": "Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97792" }, { "rank": 971, "cve_id": "CVE-2026-97794", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-122", "title": "Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97794" }, { "rank": 972, "cve_id": "CVE-2026-97798", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-88", "title": "Windows Error Reporting Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97798" }, { "rank": 973, "cve_id": "CVE-2026-97799", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-347", "title": "Windows Audio Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97799" }, { "rank": 974, "cve_id": "CVE-2026-97800", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-732", "title": "Windows Mobile Broadband Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97800" }, { "rank": 975, "cve_id": "CVE-2026-97803", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 26H1", "cwe": "CWE-122", "title": "Windows Kernel Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97803" }, { "rank": 976, "cve_id": "CVE-2026-97804", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "HID Class Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97804" }, { "rank": 977, "cve_id": "CVE-2026-97806", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-416", "title": "Windows Broadcast DVR User Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97806" }, { "rank": 978, "cve_id": "CVE-2026-97807", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-416", "title": "Windows Broadcast DVR User Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97807" }, { "rank": 979, "cve_id": "CVE-2026-97809", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-416", "title": "Windows Broadcast DVR User Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97809" }, { "rank": 980, "cve_id": "CVE-2026-97811", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-400", "title": "Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97811" }, { "rank": 981, "cve_id": "CVE-2026-100111", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Photoshop", "cwe": "CWE-787", "title": "Photoshop Desktop | Out-of-bounds Write (CWE-787)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100111" }, { "rank": 982, "cve_id": "CVE-2026-100112", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Photoshop", "cwe": "CWE-787", "title": "Photoshop Desktop | Out-of-bounds Write (CWE-787)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100112" }, { "rank": 983, "cve_id": "CVE-2026-100127", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Bridge", "cwe": "CWE-787", "title": "Bridge | Out-of-bounds Write (CWE-787)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100127" }, { "rank": 984, "cve_id": "CVE-2026-100128", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Bridge", "cwe": "CWE-787", "title": "Bridge | Out-of-bounds Write (CWE-787)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100128" }, { "rank": 985, "cve_id": "CVE-2026-100129", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Bridge", "cwe": "CWE-787", "title": "Bridge | Out-of-bounds Write (CWE-787)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100129" }, { "rank": 986, "cve_id": "CVE-2026-100215", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Microsoft Graphics Component Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100215" }, { "rank": 987, "cve_id": "CVE-2026-100217", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-862", "title": "Windows Group Policy Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100217" }, { "rank": 988, "cve_id": "CVE-2026-102196", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-416", "title": "Windows Broadcast DVR User Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102196" }, { "rank": 989, "cve_id": "CVE-2026-102201", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-416", "title": "Microsoft Windows Media Foundation Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102201" }, { "rank": 990, "cve_id": "CVE-2026-102202", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-59", "title": "Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102202" }, { "rank": 991, "cve_id": "CVE-2026-102204", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft Defender for Endpoint for Linux", "cwe": "CWE-59", "title": "Microsoft Microsoft Defender for Endpoint Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102204" }, { "rank": 992, "cve_id": "CVE-2026-102205", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102205" }, { "rank": 993, "cve_id": "CVE-2026-102215", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102215" }, { "rank": 994, "cve_id": "CVE-2026-102216", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-843", "title": "Windows StateRepository API Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102216" }, { "rank": 995, "cve_id": "CVE-2026-102218", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102218" }, { "rank": 996, "cve_id": "CVE-2026-102220", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows VHD miniport driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102220" }, { "rank": 997, "cve_id": "CVE-2026-102227", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Resilient File System (ReFS) Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102227" }, { "rank": 998, "cve_id": "CVE-2026-102233", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Visual Studio Code", "cwe": "CWE-862", "title": "Visual Studio Code Security Feature Bypass Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102233" }, { "rank": 999, "cve_id": "CVE-2026-103553", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Partition Management Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103553" }, { "rank": 1000, "cve_id": "CVE-2026-103568", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Credential Providers Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103568" }, { "rank": 1001, "cve_id": "CVE-2026-103821", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Substance 3D Designer", "cwe": "CWE-787", "title": "Substance3D - Designer | Out-of-bounds Write (CWE-787)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103821" }, { "rank": 1002, "cve_id": "CVE-2026-103830", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Substance 3D Stager", "cwe": "CWE-121", "title": "Substance3D - Stager | Stack-based Buffer Overflow (CWE-121)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103830" }, { "rank": 1003, "cve_id": "CVE-2026-103832", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Substance 3D Stager", "cwe": "CWE-787", "title": "Substance3D - Stager | Out-of-bounds Write (CWE-787)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103832" }, { "rank": 1004, "cve_id": "CVE-2026-103833", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Substance 3D Stager", "cwe": "CWE-787", "title": "Substance3D - Stager | Out-of-bounds Write (CWE-787)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103833" }, { "rank": 1005, "cve_id": "CVE-2026-103834", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Substance 3D Stager", "cwe": "CWE-787", "title": "Substance3D - Stager | Out-of-bounds Write (CWE-787)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103834" }, { "rank": 1006, "cve_id": "CVE-2026-103835", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Substance 3D Stager", "cwe": "CWE-787", "title": "Substance3D - Stager | Out-of-bounds Write (CWE-787)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103835" }, { "rank": 1007, "cve_id": "CVE-2026-103836", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Substance 3D Stager", "cwe": "CWE-787", "title": "Substance3D - Stager | Out-of-bounds Write (CWE-787)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103836" }, { "rank": 1008, "cve_id": "CVE-2026-103837", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Substance 3D Stager", "cwe": "CWE-787", "title": "Substance3D - Stager | Out-of-bounds Write (CWE-787)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103837" }, { "rank": 1009, "cve_id": "CVE-2026-103838", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Substance 3D Stager", "cwe": "CWE-787", "title": "Substance3D - Stager | Out-of-bounds Write (CWE-787)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103838" }, { "rank": 1010, "cve_id": "CVE-2026-103839", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Substance 3D Stager", "cwe": "CWE-787", "title": "Substance3D - Stager | Out-of-bounds Write (CWE-787)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103839" }, { "rank": 1011, "cve_id": "CVE-2026-103840", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Substance 3D Stager", "cwe": "CWE-125", "title": "Substance3D - Stager | Out-of-bounds Read (CWE-125)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103840" }, { "rank": 1012, "cve_id": "CVE-2026-103841", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Substance 3D Stager", "cwe": "CWE-125", "title": "Substance3D - Stager | Out-of-bounds Read (CWE-125)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103841" }, { "rank": 1013, "cve_id": "CVE-2026-103842", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Substance 3D Stager", "cwe": "CWE-125", "title": "Substance3D - Stager | Out-of-bounds Read (CWE-125)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103842" }, { "rank": 1014, "cve_id": "CVE-2026-103843", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Substance 3D Stager", "cwe": "CWE-416", "title": "Substance3D - Stager | Use After Free (CWE-416)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103843" }, { "rank": 1015, "cve_id": "CVE-2026-103844", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Dimension", "cwe": "CWE-787", "title": "Dimension | Out-of-bounds Write (CWE-787)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103844" }, { "rank": 1016, "cve_id": "CVE-2026-103851", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Substance 3D Stager", "cwe": "CWE-121", "title": "Substance3D - Stager | Stack-based Buffer Overflow (CWE-121)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103851" }, { "rank": 1017, "cve_id": "CVE-2026-103854", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Dimension", "cwe": "CWE-121", "title": "Dimension | Stack-based Buffer Overflow (CWE-121)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103854" }, { "rank": 1018, "cve_id": "CVE-2026-103966", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe FrameMaker 2026", "cwe": "CWE-122", "title": "Adobe Framemaker | Heap-based Buffer Overflow (CWE-122)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103966" }, { "rank": 1019, "cve_id": "CVE-2026-103967", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe FrameMaker 2026", "cwe": "CWE-787", "title": "Adobe Framemaker | Out-of-bounds Write (CWE-787)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103967" }, { "rank": 1020, "cve_id": "CVE-2026-104340", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe FrameMaker 2026", "cwe": "CWE-122", "title": "Adobe Framemaker | Heap-based Buffer Overflow (CWE-122)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-104340" }, { "rank": 1021, "cve_id": "CVE-2026-104341", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe FrameMaker 2026", "cwe": "CWE-787", "title": "Adobe Framemaker | Out-of-bounds Write (CWE-787)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-104341" }, { "rank": 1022, "cve_id": "CVE-2026-104342", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe FrameMaker 2026", "cwe": "CWE-416", "title": "Adobe Framemaker | Use After Free (CWE-416)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-104342" }, { "rank": 1023, "cve_id": "CVE-2026-104344", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe FrameMaker 2026", "cwe": "CWE-122", "title": "Adobe Framemaker | Heap-based Buffer Overflow (CWE-122)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-104344" }, { "rank": 1024, "cve_id": "CVE-2026-104346", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Photoshop", "cwe": "CWE-787", "title": "Photoshop Desktop | Out-of-bounds Write (CWE-787)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-104346" }, { "rank": 1025, "cve_id": "CVE-2026-104347", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Photoshop", "cwe": "CWE-787", "title": "Photoshop Desktop | Out-of-bounds Write (CWE-787)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-104347" }, { "rank": 1026, "cve_id": "CVE-2026-104348", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Photoshop", "cwe": "CWE-122", "title": "Photoshop Desktop | Heap-based Buffer Overflow (CWE-122)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-104348" }, { "rank": 1027, "cve_id": "CVE-2026-105003", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "HID Class Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105003" }, { "rank": 1028, "cve_id": "CVE-2026-105004", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Overlay Filter Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105004" }, { "rank": 1029, "cve_id": "CVE-2026-106614", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "ColdFusion 2025", "cwe": "CWE-863", "title": "ColdFusion | Incorrect Authorization (CWE-863)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106614" }, { "rank": 1030, "cve_id": "CVE-2026-106625", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe FrameMaker 2026", "cwe": "CWE-787", "title": "Adobe Framemaker | Out-of-bounds Write (CWE-787)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106625" }, { "rank": 1031, "cve_id": "CVE-2026-108130", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-122", "title": "Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108130" }, { "rank": 1032, "cve_id": "CVE-2026-108133", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows Server 2022", "cwe": "CWE-763", "title": "Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108133" }, { "rank": 1033, "cve_id": "CVE-2026-108136", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Microsoft Windows Search Component Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108136" }, { "rank": 1034, "cve_id": "CVE-2026-34633", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "ColdFusion 2025", "cwe": "CWE-918", "title": "ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-34633" }, { "rank": 1035, "cve_id": "CVE-2026-54641", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "openremote", "product": "openremote", "cwe": "CWE-639", "title": "OpenRemote: Cross-Realm User Information Disclosure in UserResourceImpl", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54641" }, { "rank": 1036, "cve_id": "CVE-2026-61642", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "squid-cache", "product": "squid", "cwe": "CWE-444", "title": "Squid Request Smuggling in HTTP Transfer-Encoding", "url": "https://www.cve.org/CVERecord?id=CVE-2026-61642" }, { "rank": 1037, "cve_id": "CVE-2026-77096", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Commvault", "product": "Commvault Cloud", "cwe": null, "title": "CVFS Missing Authentication", "url": "https://www.cve.org/CVERecord?id=CVE-2026-77096" }, { "rank": 1038, "cve_id": "CVE-2026-78557", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Siemens", "product": "Industrial Edge App Publisher", "cwe": "CWE-79", "title": "A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9). The application fails to properly sanitize or escape data received from the backend before rendering it in the user interface. Because the front end is integrated with Node.js, this vulnerability allows for the execution of arbitrary JavaScript, which can be leveraged to achieve remote code execution (RCE) on the victim's machine", "url": "https://www.cve.org/CVERecord?id=CVE-2026-78557" }, { "rank": 1039, "cve_id": "CVE-2026-82416", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "php", "product": "frankenphp", "cwe": "CWE-362", "title": "FrankenPHP: Cross-request PHP session ID leak in worker mode when the session extension is a shared module", "url": "https://www.cve.org/CVERecord?id=CVE-2026-82416" }, { "rank": 1040, "cve_id": "CVE-2026-85888", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SQL Server 2017 (GDR)", "cwe": "CWE-125", "title": "Microsoft SQL Server Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85888" }, { "rank": 1041, "cve_id": "CVE-2026-88081", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SQL Server 2017 (GDR)", "cwe": "CWE-125", "title": "Microsoft SQL Server Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88081" }, { "rank": 1042, "cve_id": "CVE-2026-89201", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Siemens", "product": "RUGGEDCOM CROSSBOW", "cwe": "CWE-89", "title": "A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in device group or facility names processed during the Bulk Export workflow. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-89201" }, { "rank": 1043, "cve_id": "CVE-2026-102231", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Visual Studio Code", "cwe": "CWE-41", "title": "Visual Studio Code Security Feature Bypass Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102231" }, { "rank": 1044, "cve_id": "CVE-2026-105994", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "ColdFusion 2025", "cwe": "CWE-863", "title": "ColdFusion | Incorrect Authorization (CWE-863)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105994" }, { "rank": 1045, "cve_id": "CVE-2026-106047", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Ivanti", "product": "Xtraction", "cwe": "CWE-22", "title": "A Path Traversal vulnerability in the template export functionality of Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to read arbitrary files.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106047" }, { "rank": 1046, "cve_id": "CVE-2026-106634", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Experience Manager 6.5 LTS", "cwe": "CWE-22", "title": "Adobe Experience Manager | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106634" }, { "rank": 1047, "cve_id": "CVE-2026-110102", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "romkatv", "product": "powerlevel10k", "cwe": "CWE-494", "title": "powerlevel10k through 1.20.0 Download of Code Without Integrity Check in gitstatus Installer", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110102" }, { "rank": 1048, "cve_id": "CVE-2026-110111", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "vatesfr", "product": "xen-orchestra", "cwe": "CWE-1321", "title": "Xen Orchestra before 6.9.0 Privilege Escalation via Prototype Pollution in vm.importFromEsxi", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110111" }, { "rank": 1049, "cve_id": "CVE-2026-110202", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "RooCodeInc", "product": "Roo-Code", "cwe": "CWE-436", "title": "Roo-Code through 3.54.0 Auto-Approve Bypass via Redirect Operator Stripping", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110202" }, { "rank": 1050, "cve_id": "CVE-2026-110203", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "RooCodeInc", "product": "Roo-Code", "cwe": "CWE-436", "title": "Roo-Code through 3.54.0 Auto-Approve Bypass via Quote Masking Desynchronization", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110203" }, { "rank": 1051, "cve_id": "CVE-2026-110204", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "RooCodeInc", "product": "Roo-Code", "cwe": "CWE-436", "title": "Roo-Code through 3.54.0 Auto-Approve Bypass via Funsub Command Substitution", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110204" }, { "rank": 1052, "cve_id": "CVE-2026-110205", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "RooCodeInc", "product": "Roo-Code", "cwe": "CWE-184", "title": "Roo-Code through 3.54.0 Auto-Approve Bypass via Glob Token Discarding Command Substitution", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110205" }, { "rank": 1053, "cve_id": "CVE-2026-110206", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "RooCodeInc", "product": "Roo-Code", "cwe": "CWE-436", "title": "Roo-Code through 3.54.0 Auto-Approve Bypass via Command Substitution at Command Position", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110206" }, { "rank": 1054, "cve_id": "CVE-2026-54640", "cvss_base": 7.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "openremote", "product": "openremote", "cwe": "CWE-611", "title": "OpenRemote: XXE in KNXProtocol.startAssetImport() allows arbitrary file read via unprotected XMLInputFactory", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54640" }, { "rank": 1055, "cve_id": "CVE-2026-75748", "cvss_base": 7.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "ColdFusion 2025", "cwe": "CWE-918", "title": "ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-75748" }, { "rank": 1056, "cve_id": "CVE-2026-78556", "cvss_base": 7.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Siemens", "product": "Industrial Edge App Publisher", "cwe": "CWE-295", "title": "A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9). The affected software does not properly validate the server certificate when initiating a TLS connection. This allows an attacker to intercept and relay communication (Man-in-the-Middle attack) and to spoof a trusted entity by interfering in the communication path between the client and the intended server.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-78556" }, { "rank": 1057, "cve_id": "CVE-2026-84790", "cvss_base": 7.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "OpenVPN", "product": "OpenVPN", "cwe": "CWE-158", "title": "OpenVPN 2.7_alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a crafted certificate subject field", "url": "https://www.cve.org/CVERecord?id=CVE-2026-84790" }, { "rank": 1058, "cve_id": "CVE-2026-58280", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": ".NET 10.0", "cwe": "CWE-674", "title": ".NET Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58280" }, { "rank": 1059, "cve_id": "CVE-2026-65161", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "NVIDIA", "product": "AIStore framework", "cwe": "CWE-22", "title": "NVIDIA AIStore for Linux contains a vulnerability in the Promote API where an unauthenticated remote attacker may read files accessible to the target process by supplying a crafted absolute source path. A successful exploit may lead to information disclosure.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65161" }, { "rank": 1060, "cve_id": "CVE-2026-69454", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows Server 2019", "cwe": "CWE-125", "title": "Microsoft Azure Attestation service and Device Health Attestation Service Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69454" }, { "rank": 1061, "cve_id": "CVE-2026-69577", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows Server 2019", "cwe": "CWE-125", "title": "Microsoft Azure Attestation service and Device Health Attestation Service Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69577" }, { "rank": 1062, "cve_id": "CVE-2026-69651", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": ".NET 10.0", "cwe": "CWE-407", "title": ".NET Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69651" }, { "rank": 1063, "cve_id": "CVE-2026-69789", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69789" }, { "rank": 1064, "cve_id": "CVE-2026-69976", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Remote Desktop Client Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69976" }, { "rank": 1065, "cve_id": "CVE-2026-69984", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Remote Desktop Client Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69984" }, { "rank": 1066, "cve_id": "CVE-2026-69986", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Remote Desktop Client Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69986" }, { "rank": 1067, "cve_id": "CVE-2026-69987", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Remote Desktop Client Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69987" }, { "rank": 1068, "cve_id": "CVE-2026-69988", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Remote Desktop Client Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69988" }, { "rank": 1069, "cve_id": "CVE-2026-69991", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Remote Desktop Client Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69991" }, { "rank": 1070, "cve_id": "CVE-2026-69992", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Remote Desktop Services Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69992" }, { "rank": 1071, "cve_id": "CVE-2026-69994", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Remote Desktop Client Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69994" }, { "rank": 1072, "cve_id": "CVE-2026-69995", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Remote Desktop Client Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69995" }, { "rank": 1073, "cve_id": "CVE-2026-69996", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Remote Desktop Client Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69996" }, { "rank": 1074, "cve_id": "CVE-2026-69997", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Remote Desktop Client Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69997" }, { "rank": 1075, "cve_id": "CVE-2026-69998", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Remote Desktop Client Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69998" }, { "rank": 1076, "cve_id": "CVE-2026-70004", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Remote Desktop Client Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70004" }, { "rank": 1077, "cve_id": "CVE-2026-70006", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Remote Desktop Client Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70006" }, { "rank": 1078, "cve_id": "CVE-2026-70012", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Remote Desktop Client Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70012" }, { "rank": 1079, "cve_id": "CVE-2026-70014", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Cryptographic Services Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70014" }, { "rank": 1080, "cve_id": "CVE-2026-70031", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows iSCSI Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70031" }, { "rank": 1081, "cve_id": "CVE-2026-70033", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-401", "title": "Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70033" }, { "rank": 1082, "cve_id": "CVE-2026-70058", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-787", "title": "Windows DHCP Server Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70058" }, { "rank": 1083, "cve_id": "CVE-2026-70079", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-841", "title": "Windows DNS Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70079" }, { "rank": 1084, "cve_id": "CVE-2026-70082", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows Server 2012", "cwe": "CWE-248", "title": "Windows DNS Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70082" }, { "rank": 1085, "cve_id": "CVE-2026-70095", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows iSCSI Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70095" }, { "rank": 1086, "cve_id": "CVE-2026-70133", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-770", "title": "Windows SMB Server Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70133" }, { "rank": 1087, "cve_id": "CVE-2026-70155", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-401", "title": "Windows DNS Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70155" }, { "rank": 1088, "cve_id": "CVE-2026-70159", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft Visual Studio 2022 version 17.14", "cwe": "CWE-770", "title": "ASP.NET Core Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70159" }, { "rank": 1089, "cve_id": "CVE-2026-70163", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-770", "title": "Microsoft OpenSSH for Windows Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70163" }, { "rank": 1090, "cve_id": "CVE-2026-70179", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft Visual Studio 2022 version 17.14", "cwe": "CWE-290", "title": "ASP.NET Core Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70179" }, { "rank": 1091, "cve_id": "CVE-2026-70181", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "ASP.NET Core 10.0", "cwe": "CWE-770", "title": "ASP.NET Core Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70181" }, { "rank": 1092, "cve_id": "CVE-2026-70183", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "ASP.NET Core 10.0", "cwe": "CWE-362", "title": "ASP.NET Core Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70183" }, { "rank": 1093, "cve_id": "CVE-2026-70186", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "ASP.NET Core 10.0", "cwe": "CWE-833", "title": "ASP.NET Core Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70186" }, { "rank": 1094, "cve_id": "CVE-2026-70202", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SharePoint Server Subscription Edition", "cwe": "CWE-918", "title": "Microsoft Office SharePoint Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70202" }, { "rank": 1095, "cve_id": "CVE-2026-70207", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Network Policy Server (NPS) Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70207" }, { "rank": 1096, "cve_id": "CVE-2026-70251", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SharePoint Server Subscription Edition", "cwe": "CWE-918", "title": "Microsoft Office SharePoint Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70251" }, { "rank": 1097, "cve_id": "CVE-2026-70281", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-125", "title": "Microsoft Office Outlook Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70281" }, { "rank": 1098, "cve_id": "CVE-2026-75996", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "ColdFusion 2025", "cwe": "CWE-400", "title": "ColdFusion | Uncontrolled Resource Consumption (CWE-400)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-75996" }, { "rank": 1099, "cve_id": "CVE-2026-77206", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "The Libreswan Project", "product": "libreswan", "cwe": "CWE-476", "title": "IKEv2 pre-authentication Null Pointer Dereference in EAP code", "url": "https://www.cve.org/CVERecord?id=CVE-2026-77206" }, { "rank": 1100, "cve_id": "CVE-2026-77207", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "The Libreswan Project", "product": "libreswan", "cwe": "CWE-252", "title": "Null Pointer Dereference in PKCS#7 bundle with no certificates", "url": "https://www.cve.org/CVERecord?id=CVE-2026-77207" }, { "rank": 1101, "cve_id": "CVE-2026-83516", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-125", "title": "Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83516" }, { "rank": 1102, "cve_id": "CVE-2026-83635", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows Server 2012", "cwe": "CWE-125", "title": "Role: DNS Server Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83635" }, { "rank": 1103, "cve_id": "CVE-2026-83645", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-770", "title": "Active Directory Federation Services (AD FS) Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83645" }, { "rank": 1104, "cve_id": "CVE-2026-83647", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Active Directory Domain Services Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83647" }, { "rank": 1105, "cve_id": "CVE-2026-83655", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Network Policy Server (NPS) Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83655" }, { "rank": 1106, "cve_id": "CVE-2026-83665", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-476", "title": "Windows DHCP Server Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83665" }, { "rank": 1107, "cve_id": "CVE-2026-83670", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Function Discovery Service (fdwsd.dll) Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83670" }, { "rank": 1108, "cve_id": "CVE-2026-83677", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-401", "title": "Windows DHCP Client Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83677" }, { "rank": 1109, "cve_id": "CVE-2026-83739", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-416", "title": "Windows Bluetooth Service Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83739" }, { "rank": 1110, "cve_id": "CVE-2026-83754", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-122", "title": "Microsoft OpenSSH for Windows Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83754" }, { "rank": 1111, "cve_id": "CVE-2026-83795", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83795" }, { "rank": 1112, "cve_id": "CVE-2026-83843", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83843" }, { "rank": 1113, "cve_id": "CVE-2026-83855", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-191", "title": "Windows WLAN Service Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83855" }, { "rank": 1114, "cve_id": "CVE-2026-83856", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-125", "title": "Windows Event Logging Service Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83856" }, { "rank": 1115, "cve_id": "CVE-2026-83860", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-121", "title": "Windows GDI Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83860" }, { "rank": 1116, "cve_id": "CVE-2026-84008", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft .NET Framework 3.5", "cwe": "CWE-407", "title": ".NET Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-84008" }, { "rank": 1117, "cve_id": "CVE-2026-84017", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-476", "title": "Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-84017" }, { "rank": 1118, "cve_id": "CVE-2026-85319", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-770", "title": "Active Directory Federation Services (AD FS) Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85319" }, { "rank": 1119, "cve_id": "CVE-2026-85321", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows Server 2012 R2", "cwe": "CWE-770", "title": "Active Directory Federation Services (AD FS) Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85321" }, { "rank": 1120, "cve_id": "CVE-2026-85322", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-908", "title": "Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85322" }, { "rank": 1121, "cve_id": "CVE-2026-85324", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-789", "title": "Active Directory Federation Services (AD FS) Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85324" }, { "rank": 1122, "cve_id": "CVE-2026-85334", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Message Queuing Queue Manager Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85334" }, { "rank": 1123, "cve_id": "CVE-2026-85353", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Print Spooler Components Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85353" }, { "rank": 1124, "cve_id": "CVE-2026-85808", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85808" }, { "rank": 1125, "cve_id": "CVE-2026-85811", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Network Policy Server (NPS) Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85811" }, { "rank": 1126, "cve_id": "CVE-2026-85891", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Azure HDInsight", "cwe": "CWE-200", "title": "Azure HDInsight Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85891" }, { "rank": 1127, "cve_id": "CVE-2026-86063", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "anthropics", "product": "claude-code", "cwe": "CWE-494", "title": "Claude Code: Plugin Hash Pin Bypass Allows Bypass of Hash Pinning", "url": "https://www.cve.org/CVERecord?id=CVE-2026-86063" }, { "rank": 1128, "cve_id": "CVE-2026-87696", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft Exchange Server 2016 Cumulative Update 23", "cwe": "CWE-347", "title": "Microsoft Exchange Server Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87696" }, { "rank": 1129, "cve_id": "CVE-2026-87713", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Bluetooth Port Driver Remote Code Execution", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87713" }, { "rank": 1130, "cve_id": "CVE-2026-87716", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-122", "title": "Windows Storage Spaces Controller Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87716" }, { "rank": 1131, "cve_id": "CVE-2026-88083", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SQL Server 2022 (CU 26)", "cwe": "CWE-121", "title": "Microsoft SQL Server Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88083" }, { "rank": 1132, "cve_id": "CVE-2026-88206", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SharePoint Server Subscription Edition", "cwe": "CWE-918", "title": "Microsoft Office SharePoint Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88206" }, { "rank": 1133, "cve_id": "CVE-2026-88207", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office PowerPoint Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88207" }, { "rank": 1134, "cve_id": "CVE-2026-94453", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "The Libreswan Project", "product": "libreswan", "cwe": "CWE-416", "title": "IKEv2 Use-After-Free bug when using IKE-over-TCP", "url": "https://www.cve.org/CVERecord?id=CVE-2026-94453" }, { "rank": 1135, "cve_id": "CVE-2026-95114", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": "CWE-125", "title": "libwebsockets contains an out-of-bounds read vulnerability in the LEJP incremental parser in lib/misc/lejp.c. This allows a remote attacker to cause a denial of service", "url": "https://www.cve.org/CVERecord?id=CVE-2026-95114" }, { "rank": 1136, "cve_id": "CVE-2026-95122", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": "CWE-476", "title": "mp4v2 2.0.0 contains a NULL pointer dereference vulnerability in MP4File::GenerateTracks() in src/mp4file.cpp. This allows a remote attacker to cause a denial of service", "url": "https://www.cve.org/CVERecord?id=CVE-2026-95122" }, { "rank": 1137, "cve_id": "CVE-2026-95632", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Content Credentials Rust SDK", "cwe": "CWE-347", "title": "CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-95632" }, { "rank": 1138, "cve_id": "CVE-2026-95633", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Content Credentials Rust SDK", "cwe": "CWE-347", "title": "CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-95633" }, { "rank": 1139, "cve_id": "CVE-2026-96071", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Media Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96071" }, { "rank": 1140, "cve_id": "CVE-2026-96232", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": ".NET 10.0", "cwe": "CWE-125", "title": ".NET Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96232" }, { "rank": 1141, "cve_id": "CVE-2026-96233", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": ".NET 10.0", "cwe": "CWE-787", "title": "ASP.NET Core Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96233" }, { "rank": 1142, "cve_id": "CVE-2026-96236", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "ASP.NET Core 10.0", "cwe": "CWE-770", "title": "ASP.NET Core Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96236" }, { "rank": 1143, "cve_id": "CVE-2026-96237", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": ".NET 10.0", "cwe": "CWE-829", "title": ".NET Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96237" }, { "rank": 1144, "cve_id": "CVE-2026-96245", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96245" }, { "rank": 1145, "cve_id": "CVE-2026-96246", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Network Policy Server (NPS) Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96246" }, { "rank": 1146, "cve_id": "CVE-2026-96248", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-121", "title": "Windows Host Guardian Service Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96248" }, { "rank": 1147, "cve_id": "CVE-2026-96325", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-771", "title": "Windows SMB Server Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96325" }, { "rank": 1148, "cve_id": "CVE-2026-96861", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Network Device Enrollment Service (NDES) Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96861" }, { "rank": 1149, "cve_id": "CVE-2026-96866", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Network Device Enrollment Service (NDES) Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96866" }, { "rank": 1150, "cve_id": "CVE-2026-96945", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows Server 2019", "cwe": "CWE-248", "title": "Windows Failover Cluster Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96945" }, { "rank": 1151, "cve_id": "CVE-2026-96958", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft .NET Framework 3.5", "cwe": "CWE-407", "title": ".NET Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96958" }, { "rank": 1152, "cve_id": "CVE-2026-96959", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft .NET Framework 3.5", "cwe": "CWE-770", "title": ".NET Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96959" }, { "rank": 1153, "cve_id": "CVE-2026-96960", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft .NET Framework 3.5", "cwe": "CWE-405", "title": ".NET Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96960" }, { "rank": 1154, "cve_id": "CVE-2026-97788", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft .NET Framework 3.5", "cwe": "CWE-203", "title": "Active Directory Federation Services (AD FS) Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97788" }, { "rank": 1155, "cve_id": "CVE-2026-97789", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Remote Desktop Client Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97789" }, { "rank": 1156, "cve_id": "CVE-2026-97801", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft .NET Framework 3.5", "cwe": "CWE-1287", "title": ".NET Framework Tampering Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97801" }, { "rank": 1157, "cve_id": "CVE-2026-97830", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-415", "title": "Windows Internet Information Services Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97830" }, { "rank": 1158, "cve_id": "CVE-2026-100113", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Content Credentials Rust SDK", "cwe": "CWE-20", "title": "CAI Content Credentials | Improper Input Validation (CWE-20)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100113" }, { "rank": 1159, "cve_id": "CVE-2026-100114", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Content Credentials Rust SDK", "cwe": "CWE-284", "title": "CAI Content Credentials | Improper Access Control (CWE-284)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100114" }, { "rank": 1160, "cve_id": "CVE-2026-100115", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Content Credentials Rust SDK", "cwe": "CWE-284", "title": "CAI Content Credentials | Improper Access Control (CWE-284)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100115" }, { "rank": 1161, "cve_id": "CVE-2026-100117", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Content Credentials Rust SDK", "cwe": "CWE-20", "title": "CAI Content Credentials | Improper Input Validation (CWE-20)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100117" }, { "rank": 1162, "cve_id": "CVE-2026-100118", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Content Credentials Rust SDK", "cwe": "CWE-295", "title": "CAI Content Credentials | Improper Certificate Validation (CWE-295)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100118" }, { "rank": 1163, "cve_id": "CVE-2026-100119", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Content Credentials Rust SDK", "cwe": "CWE-20", "title": "CAI Content Credentials | Improper Input Validation (CWE-20)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100119" }, { "rank": 1164, "cve_id": "CVE-2026-100120", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Content Credentials Rust SDK", "cwe": "CWE-20", "title": "CAI Content Credentials | Improper Input Validation (CWE-20)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100120" }, { "rank": 1165, "cve_id": "CVE-2026-100121", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Content Credentials Rust SDK", "cwe": "CWE-295", "title": "CAI Content Credentials | Improper Certificate Validation (CWE-295)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100121" }, { "rank": 1166, "cve_id": "CVE-2026-100122", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Content Credentials Rust SDK", "cwe": "CWE-295", "title": "CAI Content Credentials | Improper Certificate Validation (CWE-295)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100122" }, { "rank": 1167, "cve_id": "CVE-2026-100123", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Content Credentials Rust SDK", "cwe": "CWE-295", "title": "CAI Content Credentials | Improper Certificate Validation (CWE-295)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100123" }, { "rank": 1168, "cve_id": "CVE-2026-100124", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Content Credentials Rust SDK", "cwe": "CWE-20", "title": "CAI Content Credentials | Improper Input Validation (CWE-20)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100124" }, { "rank": 1169, "cve_id": "CVE-2026-100135", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Content Credentials Rust SDK", "cwe": "CWE-20", "title": "CAI Content Credentials | Improper Input Validation (CWE-20)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100135" }, { "rank": 1170, "cve_id": "CVE-2026-100136", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Content Credentials Rust SDK", "cwe": "CWE-190", "title": "CAI Content Credentials | Integer Overflow or Wraparound (CWE-190)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100136" }, { "rank": 1171, "cve_id": "CVE-2026-100137", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Content Credentials Rust SDK", "cwe": "CWE-400", "title": "CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100137" }, { "rank": 1172, "cve_id": "CVE-2026-100138", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Content Credentials Rust SDK", "cwe": "CWE-400", "title": "CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100138" }, { "rank": 1173, "cve_id": "CVE-2026-100139", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Content Credentials Rust SDK", "cwe": "CWE-400", "title": "CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100139" }, { "rank": 1174, "cve_id": "CVE-2026-102192", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows Server 2019", "cwe": "CWE-191", "title": "Windows Failover Cluster Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102192" }, { "rank": 1175, "cve_id": "CVE-2026-102599", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "socketio", "product": "socket.io", "cwe": "CWE-248", "title": "Socket.IO: Engine.IO Protocol Revision Mismatch DoS", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102599" }, { "rank": 1176, "cve_id": "CVE-2026-103030", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "cfug", "product": "dio", "cwe": "CWE-200", "title": "Dio: Cross-origin redirect leaks sensitive request headers in `dio_http2_adapter`", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103030" }, { "rank": 1177, "cve_id": "CVE-2026-103296", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Content Credentials Rust SDK", "cwe": "CWE-347", "title": "CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103296" }, { "rank": 1178, "cve_id": "CVE-2026-103297", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Content Credentials Rust SDK", "cwe": "CWE-347", "title": "CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103297" }, { "rank": 1179, "cve_id": "CVE-2026-103499", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "WebSphere Application Server - Liberty", "cwe": "CWE-400", "title": "IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103499" }, { "rank": 1180, "cve_id": "CVE-2026-103558", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-833", "title": "Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103558" }, { "rank": 1181, "cve_id": "CVE-2026-103569", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows IKE Extension Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103569" }, { "rank": 1182, "cve_id": "CVE-2026-103577", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-453", "title": "Microsoft QUIC Security Feature Bypass Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103577" }, { "rank": 1183, "cve_id": "CVE-2026-104345", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Content Credentials Rust SDK", "cwe": "CWE-20", "title": "CAI Content Credentials | Improper Input Validation (CWE-20)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-104345" }, { "rank": 1184, "cve_id": "CVE-2026-105009", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows Server 2012", "cwe": "CWE-276", "title": "Windows Server Update Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105009" }, { "rank": 1185, "cve_id": "CVE-2026-105442", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "WebSphere Application Server", "cwe": "CWE-502", "title": "IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a deserialization of untrusted data", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105442" }, { "rank": 1186, "cve_id": "CVE-2026-105592", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Access Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105592" }, { "rank": 1187, "cve_id": "CVE-2026-105599", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office PowerPoint Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105599" }, { "rank": 1188, "cve_id": "CVE-2026-105714", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Access Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105714" }, { "rank": 1189, "cve_id": "CVE-2026-105715", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-190", "title": "Microsoft Office Word Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105715" }, { "rank": 1190, "cve_id": "CVE-2026-105723", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-822", "title": "Windows Distributed File System (DFS) Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105723" }, { "rank": 1191, "cve_id": "CVE-2026-105728", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft Dynamics NAV 2018", "cwe": "CWE-306", "title": "Dynamics Business Central Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105728" }, { "rank": 1192, "cve_id": "CVE-2026-105900", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "ColdFusion 2025", "cwe": "CWE-20", "title": "ColdFusion | Improper Input Validation (CWE-20)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105900" }, { "rank": 1193, "cve_id": "CVE-2026-105902", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Content Credentials Rust SDK", "cwe": "CWE-400", "title": "CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105902" }, { "rank": 1194, "cve_id": "CVE-2026-106043", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Ivanti", "product": "Xtraction", "cwe": "CWE-306", "title": "A Missing Authentication for Critical Function vulnerability in Ivanti Xtraction before version 2026.4 allows a remote unauthenticated attacker to create, modify, trusted site.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106043" }, { "rank": 1195, "cve_id": "CVE-2026-106623", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "ColdFusion 2025", "cwe": "CWE-863", "title": "ColdFusion | Incorrect Authorization (CWE-863)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106623" }, { "rank": 1196, "cve_id": "CVE-2026-106627", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Content Credentials Rust SDK", "cwe": "CWE-400", "title": "CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106627" }, { "rank": 1197, "cve_id": "CVE-2026-108131", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-290", "title": "Active Directory Federation Services (AD FS) Spoofing Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108131" }, { "rank": 1198, "cve_id": "CVE-2026-109832", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", "cwe": "CWE-835", "title": "Gnome-remote-desktop: busy-wait dos in vnc tls i/o handlers (gnutls_e_again / gnutls_e_interrupted)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109832" }, { "rank": 1199, "cve_id": "CVE-2026-83511", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-1390", "title": "Active Directory Federation Services (AD FS) Spoofing Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83511" }, { "rank": 1200, "cve_id": "CVE-2026-85922", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "azure_security_keyvault_certificates", "cwe": "CWE-1390", "title": "Azure Key Vault Security Feature Bypass Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85922" }, { "rank": 1201, "cve_id": "CVE-2026-87705", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-940", "title": "Windows Hyper-V Security Feature Bypass Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87705" }, { "rank": 1202, "cve_id": "CVE-2026-95695", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "WebSphere Application Server - Liberty", "cwe": "CWE-863", "title": "IBM WebSphere Application Server Liberty Incorrect Authorization", "url": "https://www.cve.org/CVERecord?id=CVE-2026-95695" }, { "rank": 1203, "cve_id": "CVE-2026-96222", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft .NET Framework 3.5", "cwe": "CWE-295", "title": "Active Directory Federation Services (AD FS) Spoofing Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96222" }, { "rank": 1204, "cve_id": "CVE-2026-102234", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Visual Studio Code", "cwe": "CWE-807", "title": "Visual Studio Code Security Feature Bypass Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102234" }, { "rank": 1205, "cve_id": "CVE-2026-105013", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SharePoint Server Subscription Edition", "cwe": "CWE-502", "title": "Microsoft Office SharePoint Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105013" }, { "rank": 1206, "cve_id": "CVE-2026-108184", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Zoom Communications", "product": "Zoom Clients", "cwe": "CWE-295", "title": "Improper certificate validation in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an information disclosure via network access.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108184" }, { "rank": 1207, "cve_id": "CVE-2026-108185", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Zoom Communications", "product": "Zoom Clients", "cwe": "CWE-295", "title": "Improper certificate validation in the My Notes feature of certain Zoom Clients may allow an unauthenticated user to conduct an information disclosure via network access.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108185" }, { "rank": 1208, "cve_id": "CVE-2026-55601", "cvss_base": 7.3, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "folkertvanheusden", "product": "multitail", "cwe": "CWE-78", "title": "MultiTail: Shell injection in execute-on-match command handling", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55601" }, { "rank": 1209, "cve_id": "CVE-2026-65147", "cvss_base": 7.3, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "NVIDIA", "product": "DALI", "cwe": "CWE-125", "title": "NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read. A successful exploit of this vulnerability might lead to information disclosure and denial of service.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65147" }, { "rank": 1210, "cve_id": "CVE-2026-65148", "cvss_base": 7.3, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "NVIDIA", "product": "DALI", "cwe": "CWE-121", "title": "NVIDIA DALI contains a vulnerability where an attacker could cause a stack-based buffer overflow. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, and denial of service.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65148" }, { "rank": 1211, "cve_id": "CVE-2026-65149", "cvss_base": 7.3, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "NVIDIA", "product": "DALI", "cwe": "CWE-787", "title": "NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service, information disclosure, and data tampering.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65149" }, { "rank": 1212, "cve_id": "CVE-2026-65150", "cvss_base": 7.3, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "NVIDIA", "product": "DALI", "cwe": "CWE-125", "title": "NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read. A successful exploit of this vulnerability mighty lead to information disclosure, data tampering, and denial of service.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65150" }, { "rank": 1213, "cve_id": "CVE-2026-70161", "cvss_base": 7.3, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": ".NET 10.0", "cwe": "CWE-22", "title": ".NET Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70161" }, { "rank": 1214, "cve_id": "CVE-2026-70190", "cvss_base": 7.3, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": ".NET 10.0", "cwe": "CWE-59", "title": ".NET Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70190" }, { "rank": 1215, "cve_id": "CVE-2026-88204", "cvss_base": 7.3, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SharePoint Server Subscription Edition", "cwe": "CWE-79", "title": "Microsoft Office SharePoint Spoofing Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88204" }, { "rank": 1216, "cve_id": "CVE-2026-96188", "cvss_base": 7.3, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft PowerToys", "cwe": "CWE-15", "title": "Microsoft PowerToys Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96188" }, { "rank": 1217, "cve_id": "CVE-2026-100207", "cvss_base": 7.3, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Azure CycleCloud 8.9.1", "cwe": "CWE-78", "title": "Azure CycleCloud Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100207" }, { "rank": 1218, "cve_id": "CVE-2026-105732", "cvss_base": 7.3, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Sysinternals Suite", "cwe": "CWE-121", "title": "SysInternals Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105732" }, { "rank": 1219, "cve_id": "CVE-2026-23705", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Fortinet", "product": "FortiAnalyzer", "cwe": "CWE-89", "title": "An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.6, FortiManager 7.2 all versions may allow a low privileged user to execute arbitrary commands via crafted requests.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-23705" }, { "rank": 1220, "cve_id": "CVE-2026-23707", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Fortinet", "product": "FortiManager Cloud", "cwe": "CWE-89", "title": "An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiAnalyzer Cloud 7.6.2 through 7.6.4, FortiAnalyzer Cloud 7.4.1 through 7.4.7, FortiAnalyzer Cloud 7.2.1 through 7.2.11, FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.6, FortiManager 7.2 all versions, FortiManager Cloud 7.6.2 through 7.6.4 may allow a low privileged user to execute arbitrary commands via crafted requests.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-23707" }, { "rank": 1221, "cve_id": "CVE-2026-70267", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SharePoint Server Subscription Edition", "cwe": "CWE-829", "title": "Microsoft Office SharePoint Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70267" }, { "rank": 1222, "cve_id": "CVE-2026-85798", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Distributed File System (DFS) Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85798" }, { "rank": 1223, "cve_id": "CVE-2026-92910", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Commerce", "cwe": "CWE-863", "title": "Adobe Commerce | Incorrect Authorization (CWE-863)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92910" }, { "rank": 1224, "cve_id": "CVE-2026-108399", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Hyper-V Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108399" }, { "rank": 1225, "cve_id": "CVE-2026-110211", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "iflytek", "product": "skillhub", "cwe": "CWE-862", "title": "SkillHub through 0.2.22 Missing Authorization in CLI Skill Delete Endpoint", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110211" }, { "rank": 1226, "cve_id": "CVE-2025-58771", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "AMI", "product": "AptioV", "cwe": "CWE-190", "title": "UEFI OOB Write and Buffer Overflow Vulnerabilities", "url": "https://www.cve.org/CVERecord?id=CVE-2025-58771" }, { "rank": 1227, "cve_id": "CVE-2025-58773", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "AMI", "product": "AptioV", "cwe": "CWE-787", "title": "UEFI OOB Write and Buffer Overflow Vulnerabilities", "url": "https://www.cve.org/CVERecord?id=CVE-2025-58773" }, { "rank": 1228, "cve_id": "CVE-2026-18228", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Commvault", "product": "Commvault Cloud", "cwe": null, "title": "Hyperscale Path Traversal", "url": "https://www.cve.org/CVERecord?id=CVE-2026-18228" }, { "rank": 1229, "cve_id": "CVE-2026-63172", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Omnispace", "product": "Agora Project", "cwe": "CWE-862", "title": "Omnispace Agora Project < 26.10.0 Broken Function-Level Authorization via User-Edit", "url": "https://www.cve.org/CVERecord?id=CVE-2026-63172" }, { "rank": 1230, "cve_id": "CVE-2026-65104", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "NVIDIA", "product": "Megatron-LM", "cwe": "CWE-328", "title": "NVIDIA Megatron-LM for all platforms contains a vulnerability in inference, where an attacker could cause hash collisions in the cache used for inference requests. A successful exploit of this vulnerability might lead to data tampering and partial information disclosure.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65104" }, { "rank": 1231, "cve_id": "CVE-2026-69452", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Enterprise App Management Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69452" }, { "rank": 1232, "cve_id": "CVE-2026-70126", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-20", "title": "Windows Bluetooth Port Driver Remote Code Execution", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70126" }, { "rank": 1233, "cve_id": "CVE-2026-74045", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Wazuh", "product": "wazuh-manager", "cwe": "CWE-122", "title": "Wazuh 3.12.0 before 4.14.8 Heap Buffer Overflow in wazuh-analysisd FIM Decoder", "url": "https://www.cve.org/CVERecord?id=CVE-2026-74045" }, { "rank": 1234, "cve_id": "CVE-2026-74047", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Wazuh", "product": "wazuh-manager", "cwe": "CWE-200", "title": "Wazuh 4.0.0 before 4.14.8 authd.pass Disclosure via Agent 000 Config Endpoint", "url": "https://www.cve.org/CVERecord?id=CVE-2026-74047" }, { "rank": 1235, "cve_id": "CVE-2026-76001", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "ColdFusion 2025", "cwe": "CWE-918", "title": "ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76001" }, { "rank": 1236, "cve_id": "CVE-2026-77093", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Commvault", "product": "Commvault Cloud", "cwe": null, "title": "CvFWD Denial of Service", "url": "https://www.cve.org/CVERecord?id=CVE-2026-77093" }, { "rank": 1237, "cve_id": "CVE-2026-77094", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Commvault", "product": "Commvault Cloud", "cwe": null, "title": "CvFWD Out-of-Bounds Write", "url": "https://www.cve.org/CVERecord?id=CVE-2026-77094" }, { "rank": 1238, "cve_id": "CVE-2026-77095", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Commvault", "product": "Commvault Cloud", "cwe": null, "title": "CvFWD Null Pointer Dereference", "url": "https://www.cve.org/CVERecord?id=CVE-2026-77095" }, { "rank": 1239, "cve_id": "CVE-2026-83715", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-306", "title": "Windows Error Reporting Tampering Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83715" }, { "rank": 1240, "cve_id": "CVE-2026-85856", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Internet Connection Sharing (ICS) Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85856" }, { "rank": 1241, "cve_id": "CVE-2026-88964", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "OpenVPN", "product": "OpenVPN", "cwe": "CWE-125", "title": "An integer underflow in OpenVPN version 2.7_alpha3 through 2.7.7 on Windows and Android allows remote authenticated servers to cause a denial of service or memory disclosure via crafted domain search options", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88964" }, { "rank": 1242, "cve_id": "CVE-2026-89202", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Siemens", "product": "RUGGEDCOM CROSSBOW", "cwe": "CWE-639", "title": "A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform authorization checks for device disconnection requests. This could allow an authenticated attacker with minimal privileges to disconnect active sessions of other users, including administrators, leading to a denial of service.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-89202" }, { "rank": 1243, "cve_id": "CVE-2026-96299", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "MongoDB", "product": "MongoDB Server", "cwe": "CWE-617", "title": "Missing Authorization Check on Internal Aggregation Stage in MongoDB Server mongos Leads to Denial of Service", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96299" }, { "rank": 1244, "cve_id": "CVE-2026-97333", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Commvault", "product": "Commvault Cloud", "cwe": "CWE-121", "title": "QAPI stack-based buffer overflow", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97333" }, { "rank": 1245, "cve_id": "CVE-2026-100205", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows Sysinternals Process Monitor", "cwe": "CWE-822", "title": "SysInternals Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100205" }, { "rank": 1246, "cve_id": "CVE-2026-104004", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "MongoDB", "product": "MongoDB Server", "cwe": "CWE-476", "title": "Collection validators using collation-accepting expressions can crash MongoDB Server on insert", "url": "https://www.cve.org/CVERecord?id=CVE-2026-104004" }, { "rank": 1247, "cve_id": "CVE-2026-104005", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "MongoDB", "product": "MongoDB Server", "cwe": "CWE-617", "title": "Incorrect authorization in MongoDB Server router for bulk writes to system namespaces", "url": "https://www.cve.org/CVERecord?id=CVE-2026-104005" }, { "rank": 1248, "cve_id": "CVE-2026-104875", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "ente", "product": "ente", "cwe": "CWE-639", "title": "Ente: Accepted emergency contact can bypass the recovery notice period", "url": "https://www.cve.org/CVERecord?id=CVE-2026-104875" }, { "rank": 1249, "cve_id": "CVE-2026-105729", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows Sysinternals Process Monitor", "cwe": "CWE-822", "title": "SysInternals Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105729" }, { "rank": 1250, "cve_id": "CVE-2026-109677", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "FreeRDP", "product": "FreeRDP", "cwe": "CWE-125", "title": "FreeRDP 2.0.0-beta1 before 3.28.0 Out-of-Bounds Read via LocateCardsByATRA Handler", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109677" }, { "rank": 1251, "cve_id": "CVE-2026-109678", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "FreeRDP", "product": "FreeRDP", "cwe": "CWE-617", "title": "FreeRDP 3.0.0-beta1 before 3.32.0 Reachable Assertion via Emulated SCardStatusA", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109678" }, { "rank": 1252, "cve_id": "CVE-2026-109938", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "FreeRDP", "product": "FreeRDP", "cwe": "CWE-190", "title": "FreeRDP 3.11.0 before 3.32.0 Integer Overflow via Mapped Video Geometry Update", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109938" }, { "rank": 1253, "cve_id": "CVE-2026-109939", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "FreeRDP", "product": "FreeRDP", "cwe": "CWE-476", "title": "FreeRDP 3.27.1 before 3.32.0 NULL Pointer Dereference via Cache Bitmap V3 Order", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109939" }, { "rank": 1254, "cve_id": "CVE-2026-109941", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "FreeRDP", "product": "FreeRDP", "cwe": "CWE-835", "title": "FreeRDP 2.3.0 before 3.32.0 Infinite Loop via RD Gateway Chunked Response", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109941" }, { "rank": 1255, "cve_id": "CVE-2026-109942", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "FreeRDP", "product": "FreeRDP", "cwe": "CWE-476", "title": "FreeRDP 2.3.0 before 3.32.0 NULL Pointer Dereference via RD Gateway Close Channel Packet", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109942" }, { "rank": 1256, "cve_id": "CVE-2026-109943", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "FreeRDP", "product": "FreeRDP", "cwe": "CWE-415", "title": "FreeRDP 3.29.0 before 3.32.0 Double Free via Async-Update Polygon Order", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109943" }, { "rank": 1257, "cve_id": "CVE-2026-109944", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "FreeRDP", "product": "FreeRDP", "cwe": "CWE-617", "title": "FreeRDP 3.0.0 before 3.32.0 Reachable Assertion via Stale Smartcard Handle", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109944" }, { "rank": 1258, "cve_id": "CVE-2026-109946", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "FreeRDP", "product": "FreeRDP", "cwe": "CWE-617", "title": "FreeRDP 3.11.0 before 3.32.0 Reachable Assertion via AVC444 Odd Region Width", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109946" }, { "rank": 1259, "cve_id": "CVE-2026-109947", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "FreeRDP", "product": "FreeRDP", "cwe": "CWE-770", "title": "FreeRDP 3.20.1 before 3.32.0 Unbounded Allocation via drive_process_irp_read", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109947" }, { "rank": 1260, "cve_id": "CVE-2026-109949", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "FreeRDP", "product": "FreeRDP", "cwe": "CWE-307", "title": "FreeRDP 3.0.0 before 3.32.0 PIN Brute-Force via Virtual Smartcard", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109949" }, { "rank": 1261, "cve_id": "CVE-2026-110083", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Experience Manager 6.5", "cwe": "CWE-89", "title": "Adobe Experience Manager | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110083" }, { "rank": 1262, "cve_id": "CVE-2026-110084", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Experience Manager 6.5", "cwe": "CWE-91", "title": "Adobe Experience Manager | XML Injection (aka Blind XPath Injection) (CWE-91)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110084" }, { "rank": 1263, "cve_id": "CVE-2026-110109", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "jetlinks", "product": "JetLinks Community", "cwe": "CWE-862", "title": "JetLinks Community through 2.10.0 Missing Authorization via Product-Level Transparent Codec Save", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110109" }, { "rank": 1264, "cve_id": "CVE-2026-110117", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "1024-lab", "product": "SmartAdmin", "cwe": "CWE-862", "title": "SmartAdmin through 3.30.0 Missing Authorization via AdminProtectController", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110117" }, { "rank": 1265, "cve_id": "CVE-2026-110118", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "risesoft-y9", "product": "WorkFlow-Engine", "cwe": "CWE-639", "title": "WorkFlow-Engine through 9.6.11 Missing Authorization via flowableui buttonOperation Endpoints", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110118" }, { "rank": 1266, "cve_id": "CVE-2026-110119", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "guchengwuyue", "product": "yshopmall", "cwe": "CWE-639", "title": "yshopmall through 2.0.0 IDOR via Member Address API in UserAddressController", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110119" }, { "rank": 1267, "cve_id": "CVE-2026-110121", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "PickMall", "product": "lilishop", "cwe": "CWE-639", "title": "PickMall lilishop through 4.4 IDOR via Goods Edit Endpoint", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110121" }, { "rank": 1268, "cve_id": "CVE-2026-110123", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "makunet", "product": "maku-boot", "cwe": "CWE-862", "title": "Makunet maku-boot 4.3.0 through 5.0.0 Missing Authorization via Mail and SMS Config Endpoints", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110123" }, { "rank": 1269, "cve_id": "CVE-2026-110129", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "fushengqian", "product": "fuintCatering", "cwe": "CWE-639", "title": "fuintCatering through commit 122c9e6 IDOR via /clientApi/refund/detail", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110129" }, { "rank": 1270, "cve_id": "CVE-2026-110208", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "WuKongOpenSource", "product": "Wukong AICRM", "cwe": "CWE-862", "title": "Wukong AICRM through 20260610 Missing Authorization in System Configuration APIs Exposes Stored AI Provider Keys", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110208" }, { "rank": 1271, "cve_id": "CVE-2026-110209", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Stonewuu", "product": "ai-fusion-video", "cwe": "CWE-862", "title": "ai-fusion-video through 1.2.0 Missing Authorization in Configuration Read Endpoints Exposes Stored Credentials", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110209" }, { "rank": 1272, "cve_id": "CVE-2026-110216", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "youlaitech", "product": "youlai-boot", "cwe": "CWE-862", "title": "youlai-boot through 2.21.1 Missing Authorization in User Status Update Endpoint", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110216" }, { "rank": 1273, "cve_id": "CVE-2026-110217", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "lenve", "product": "vhr", "cwe": "CWE-200", "title": "vhr through commit 03abbd3 Information Disclosure of Operator Password Hashes via GET /chat/hrs", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110217" }, { "rank": 1274, "cve_id": "CVE-2026-110220", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Kubeflow", "product": "Model Registry", "cwe": "CWE-918", "title": "Kubeflow Model Registry through 0.3.17 SSRF via InferenceService Controller URL Annotation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110220" }, { "rank": 1275, "cve_id": "CVE-2026-110236", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "KDE", "product": "Dolphin", "cwe": "CWE-78", "title": "KDE Dolphin 24.08.0 through 26.08.2 OS Command Injection via Crafted Folder Name", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110236" }, { "rank": 1276, "cve_id": "CVE-2026-62840", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Linux 3P (Third Party) Distros", "cwe": "CWE-367", "title": "Linux Kernel Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-62840" }, { "rank": 1277, "cve_id": "CVE-2026-69387", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Error Reporting Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69387" }, { "rank": 1278, "cve_id": "CVE-2026-69596", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69596" }, { "rank": 1279, "cve_id": "CVE-2026-69736", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-362", "title": "Windows Credential Manager Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69736" }, { "rank": 1280, "cve_id": "CVE-2026-69743", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-416", "title": "Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69743" }, { "rank": 1281, "cve_id": "CVE-2026-69763", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-362", "title": "Windows Storage Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69763" }, { "rank": 1282, "cve_id": "CVE-2026-69766", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-362", "title": "Windows Storage Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69766" }, { "rank": 1283, "cve_id": "CVE-2026-69795", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-476", "title": "Windows Clipboard Server Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69795" }, { "rank": 1284, "cve_id": "CVE-2026-69840", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Certificates Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69840" }, { "rank": 1285, "cve_id": "CVE-2026-69856", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-362", "title": "Windows Storage Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69856" }, { "rank": 1286, "cve_id": "CVE-2026-69915", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-416", "title": "Windows NTFS Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69915" }, { "rank": 1287, "cve_id": "CVE-2026-69931", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-362", "title": "Windows Storage Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69931" }, { "rank": 1288, "cve_id": "CVE-2026-69935", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-362", "title": "Windows Storage Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69935" }, { "rank": 1289, "cve_id": "CVE-2026-69964", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Kernel Streaming Service Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69964" }, { "rank": 1290, "cve_id": "CVE-2026-69970", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Kernel Streaming Service Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69970" }, { "rank": 1291, "cve_id": "CVE-2026-69977", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69977" }, { "rank": 1292, "cve_id": "CVE-2026-70021", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-416", "title": "Windows Direct Composition Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70021" }, { "rank": 1293, "cve_id": "CVE-2026-70026", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-416", "title": "Windows Secure Kernel Mode Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70026" }, { "rank": 1294, "cve_id": "CVE-2026-70045", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-416", "title": "Windows Work Folders Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70045" }, { "rank": 1295, "cve_id": "CVE-2026-70056", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-416", "title": "Windows Update Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70056" }, { "rank": 1296, "cve_id": "CVE-2026-70066", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows DHCP Server Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70066" }, { "rank": 1297, "cve_id": "CVE-2026-70067", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Win32k Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70067" }, { "rank": 1298, "cve_id": "CVE-2026-70076", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-416", "title": "Windows Win32k Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70076" }, { "rank": 1299, "cve_id": "CVE-2026-70086", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-416", "title": "Microsoft Windows Search Component Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70086" }, { "rank": 1300, "cve_id": "CVE-2026-70115", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-416", "title": "Microsoft Windows Search Component Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70115" }, { "rank": 1301, "cve_id": "CVE-2026-70118", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-416", "title": "Windows Audio Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70118" }, { "rank": 1302, "cve_id": "CVE-2026-70134", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-416", "title": "Windows Event Tracing Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70134" }, { "rank": 1303, "cve_id": "CVE-2026-70136", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Microsoft Windows Search Component Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70136" }, { "rank": 1304, "cve_id": "CVE-2026-70140", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-416", "title": "Windows Audio Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70140" }, { "rank": 1305, "cve_id": "CVE-2026-70144", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-416", "title": "Windows Win32k Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70144" }, { "rank": 1306, "cve_id": "CVE-2026-70150", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Microsoft Windows Search Component Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70150" }, { "rank": 1307, "cve_id": "CVE-2026-70156", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Microsoft Windows Search Component Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70156" }, { "rank": 1308, "cve_id": "CVE-2026-70160", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Kernel Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70160" }, { "rank": 1309, "cve_id": "CVE-2026-70164", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows TCP/IP Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70164" }, { "rank": 1310, "cve_id": "CVE-2026-70168", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70168" }, { "rank": 1311, "cve_id": "CVE-2026-70169", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-362", "title": "Windows Connected Devices Platform Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70169" }, { "rank": 1312, "cve_id": "CVE-2026-70176", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Win32k Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70176" }, { "rank": 1313, "cve_id": "CVE-2026-70198", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-416", "title": "Windows Push Notifications Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70198" }, { "rank": 1314, "cve_id": "CVE-2026-70205", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-843", "title": "Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70205" }, { "rank": 1315, "cve_id": "CVE-2026-70209", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Win32k Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70209" }, { "rank": 1316, "cve_id": "CVE-2026-70212", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-923", "title": "Windows Security Center Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70212" }, { "rank": 1317, "cve_id": "CVE-2026-70223", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Console Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70223" }, { "rank": 1318, "cve_id": "CVE-2026-70230", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-416", "title": "Windows Audio Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70230" }, { "rank": 1319, "cve_id": "CVE-2026-70236", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Win32k Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70236" }, { "rank": 1320, "cve_id": "CVE-2026-70237", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70237" }, { "rank": 1321, "cve_id": "CVE-2026-70241", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Kerberos Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70241" }, { "rank": 1322, "cve_id": "CVE-2026-70243", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-416", "title": "Windows Kernel Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70243" }, { "rank": 1323, "cve_id": "CVE-2026-70249", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Win32k Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70249" }, { "rank": 1324, "cve_id": "CVE-2026-70252", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70252" }, { "rank": 1325, "cve_id": "CVE-2026-70253", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Win32k Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70253" }, { "rank": 1326, "cve_id": "CVE-2026-70271", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Win32k Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70271" }, { "rank": 1327, "cve_id": "CVE-2026-70272", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Installer Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70272" }, { "rank": 1328, "cve_id": "CVE-2026-70273", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-416", "title": "Windows Win32k Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70273" }, { "rank": 1329, "cve_id": "CVE-2026-70276", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-416", "title": "Microsoft Office Click-To-Run Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70276" }, { "rank": 1330, "cve_id": "CVE-2026-72934", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-416", "title": "Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-72934" }, { "rank": 1331, "cve_id": "CVE-2026-72955", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-416", "title": "Windows Application Compatibility Cache Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-72955" }, { "rank": 1332, "cve_id": "CVE-2026-72968", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-72968" }, { "rank": 1333, "cve_id": "CVE-2026-72969", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-416", "title": "Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-72969" }, { "rank": 1334, "cve_id": "CVE-2026-74031", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Wazuh", "product": "wazuh-manager", "cwe": "CWE-22", "title": "Wazuh 4.1.1 before 4.14.8 Path Traversal File Deletion via Rule/Decoder Delete Helpers", "url": "https://www.cve.org/CVERecord?id=CVE-2026-74031" }, { "rank": 1335, "cve_id": "CVE-2026-81971", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-362", "title": "Windows NTFS Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-81971" }, { "rank": 1336, "cve_id": "CVE-2026-83505", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-367", "title": "Windows Setup Files Cleanup Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83505" }, { "rank": 1337, "cve_id": "CVE-2026-83509", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-426", "title": "Windows Setup Files Cleanup Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83509" }, { "rank": 1338, "cve_id": "CVE-2026-83510", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-367", "title": "Windows Setup Files Cleanup Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83510" }, { "rank": 1339, "cve_id": "CVE-2026-83564", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Search Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83564" }, { "rank": 1340, "cve_id": "CVE-2026-83566", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-416", "title": "Windows Win32k Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83566" }, { "rank": 1341, "cve_id": "CVE-2026-83574", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Search Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83574" }, { "rank": 1342, "cve_id": "CVE-2026-83575", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Search Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83575" }, { "rank": 1343, "cve_id": "CVE-2026-83580", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83580" }, { "rank": 1344, "cve_id": "CVE-2026-83584", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Smart Card Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83584" }, { "rank": 1345, "cve_id": "CVE-2026-83644", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Audio Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83644" }, { "rank": 1346, "cve_id": "CVE-2026-83666", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-362", "title": "Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83666" }, { "rank": 1347, "cve_id": "CVE-2026-83675", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-416", "title": "Windows Kernel Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83675" }, { "rank": 1348, "cve_id": "CVE-2026-83676", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-122", "title": "Windows Installer Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83676" }, { "rank": 1349, "cve_id": "CVE-2026-83680", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Installer Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83680" }, { "rank": 1350, "cve_id": "CVE-2026-83682", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows TCP/IP Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83682" }, { "rank": 1351, "cve_id": "CVE-2026-83687", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-416", "title": "Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83687" }, { "rank": 1352, "cve_id": "CVE-2026-83689", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Error Reporting Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83689" }, { "rank": 1353, "cve_id": "CVE-2026-83694", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83694" }, { "rank": 1354, "cve_id": "CVE-2026-83696", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-416", "title": "Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83696" }, { "rank": 1355, "cve_id": "CVE-2026-83701", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Now Playing Session Manager Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83701" }, { "rank": 1356, "cve_id": "CVE-2026-83702", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Installer Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83702" }, { "rank": 1357, "cve_id": "CVE-2026-83707", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Event Tracing Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83707" }, { "rank": 1358, "cve_id": "CVE-2026-83708", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-121", "title": "Windows Installer Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83708" }, { "rank": 1359, "cve_id": "CVE-2026-83710", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Device Association Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83710" }, { "rank": 1360, "cve_id": "CVE-2026-83717", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Installer Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83717" }, { "rank": 1361, "cve_id": "CVE-2026-83718", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Installer Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83718" }, { "rank": 1362, "cve_id": "CVE-2026-83720", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 26H1", "cwe": "CWE-416", "title": "Windows Kerberos Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83720" }, { "rank": 1363, "cve_id": "CVE-2026-83722", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-362", "title": "Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83722" }, { "rank": 1364, "cve_id": "CVE-2026-83724", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Management Instrumentation Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83724" }, { "rank": 1365, "cve_id": "CVE-2026-83738", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-362", "title": "Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83738" }, { "rank": 1366, "cve_id": "CVE-2026-83740", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-416", "title": "Windows Hello Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83740" }, { "rank": 1367, "cve_id": "CVE-2026-83749", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Overlay Filter Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83749" }, { "rank": 1368, "cve_id": "CVE-2026-83750", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Error Reporting Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83750" }, { "rank": 1369, "cve_id": "CVE-2026-83751", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-416", "title": "Windows MIDI Service Module Elevation of Privileges Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83751" }, { "rank": 1370, "cve_id": "CVE-2026-83752", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Installer Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83752" }, { "rank": 1371, "cve_id": "CVE-2026-83775", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Installer Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83775" }, { "rank": 1372, "cve_id": "CVE-2026-83785", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows COM+ Event System Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83785" }, { "rank": 1373, "cve_id": "CVE-2026-83790", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-416", "title": "Windows Hello Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83790" }, { "rank": 1374, "cve_id": "CVE-2026-83793", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-59", "title": "Windows Update Orchestrator Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83793" }, { "rank": 1375, "cve_id": "CVE-2026-83827", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Bluetooth Port Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83827" }, { "rank": 1376, "cve_id": "CVE-2026-83834", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-367", "title": "Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83834" }, { "rank": 1377, "cve_id": "CVE-2026-83839", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-367", "title": "Windows Hyper-V Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83839" }, { "rank": 1378, "cve_id": "CVE-2026-83841", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-362", "title": "Windows Win32k Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83841" }, { "rank": 1379, "cve_id": "CVE-2026-83842", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-415", "title": "Windows TCP/IP Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83842" }, { "rank": 1380, "cve_id": "CVE-2026-83846", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-416", "title": "Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83846" }, { "rank": 1381, "cve_id": "CVE-2026-83852", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-416", "title": "Windows Bind Filter Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83852" }, { "rank": 1382, "cve_id": "CVE-2026-83853", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-416", "title": "Windows Hello Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83853" }, { "rank": 1383, "cve_id": "CVE-2026-83866", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Win32k Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83866" }, { "rank": 1384, "cve_id": "CVE-2026-83868", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-362", "title": "Microsoft Bluetooth Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83868" }, { "rank": 1385, "cve_id": "CVE-2026-83871", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-122", "title": "Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83871" }, { "rank": 1386, "cve_id": "CVE-2026-83879", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-362", "title": "Windows Overlay Filter Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83879" }, { "rank": 1387, "cve_id": "CVE-2026-83886", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-416", "title": "Windows Update Orchestrator Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83886" }, { "rank": 1388, "cve_id": "CVE-2026-83899", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-362", "title": "Windows Installer Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83899" }, { "rank": 1389, "cve_id": "CVE-2026-83900", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-416", "title": "Windows Bind Filter Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83900" }, { "rank": 1390, "cve_id": "CVE-2026-83901", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-416", "title": "Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83901" }, { "rank": 1391, "cve_id": "CVE-2026-83908", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-763", "title": "RPC Runtime Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83908" }, { "rank": 1392, "cve_id": "CVE-2026-83911", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Storage Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83911" }, { "rank": 1393, "cve_id": "CVE-2026-83915", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-416", "title": "Windows Diagnostic Policy Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83915" }, { "rank": 1394, "cve_id": "CVE-2026-83916", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-415", "title": "Windows Error Reporting Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83916" }, { "rank": 1395, "cve_id": "CVE-2026-83917", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-416", "title": "Windows ALPC Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83917" }, { "rank": 1396, "cve_id": "CVE-2026-83921", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Search Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83921" }, { "rank": 1397, "cve_id": "CVE-2026-83924", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Kernel Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83924" }, { "rank": 1398, "cve_id": "CVE-2026-83930", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-416", "title": "Windows Update Orchestrator Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83930" }, { "rank": 1399, "cve_id": "CVE-2026-84014", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Device Association Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-84014" }, { "rank": 1400, "cve_id": "CVE-2026-84018", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-367", "title": "Windows Print Spooler Components Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-84018" }, { "rank": 1401, "cve_id": "CVE-2026-84019", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-416", "title": "Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-84019" }, { "rank": 1402, "cve_id": "CVE-2026-84020", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-416", "title": "Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-84020" }, { "rank": 1403, "cve_id": "CVE-2026-85328", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-1390", "title": "Windows Projected File System Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85328" }, { "rank": 1404, "cve_id": "CVE-2026-85329", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-362", "title": "Microsoft Account Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85329" }, { "rank": 1405, "cve_id": "CVE-2026-85342", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Device Association Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85342" }, { "rank": 1406, "cve_id": "CVE-2026-85352", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Device Association Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85352" }, { "rank": 1407, "cve_id": "CVE-2026-85354", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Error Reporting Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85354" }, { "rank": 1408, "cve_id": "CVE-2026-85355", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-829", "title": "Windows Common Log File System Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85355" }, { "rank": 1409, "cve_id": "CVE-2026-85357", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-362", "title": "Windows Phone Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85357" }, { "rank": 1410, "cve_id": "CVE-2026-85361", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Installer Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85361" }, { "rank": 1411, "cve_id": "CVE-2026-85362", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-763", "title": "Windows Management Instrumentation Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85362" }, { "rank": 1412, "cve_id": "CVE-2026-85364", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Installer Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85364" }, { "rank": 1413, "cve_id": "CVE-2026-85365", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Servicing Stack Updates Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85365" }, { "rank": 1414, "cve_id": "CVE-2026-85367", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Cash Drawer Protocol Provider Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85367" }, { "rank": 1415, "cve_id": "CVE-2026-85370", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "WebDAV Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85370" }, { "rank": 1416, "cve_id": "CVE-2026-85372", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Kernel Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85372" }, { "rank": 1417, "cve_id": "CVE-2026-85791", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85791" }, { "rank": 1418, "cve_id": "CVE-2026-85802", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85802" }, { "rank": 1419, "cve_id": "CVE-2026-85803", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-416", "title": "Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85803" }, { "rank": 1420, "cve_id": "CVE-2026-85810", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Telephony Server Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85810" }, { "rank": 1421, "cve_id": "CVE-2026-85823", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-416", "title": "Windows Composite Image File System Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85823" }, { "rank": 1422, "cve_id": "CVE-2026-85824", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-362", "title": "Windows Composite Image File System Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85824" }, { "rank": 1423, "cve_id": "CVE-2026-85825", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-362", "title": "Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85825" }, { "rank": 1424, "cve_id": "CVE-2026-85826", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-787", "title": "Windows Fast FAT Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85826" }, { "rank": 1425, "cve_id": "CVE-2026-85827", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "WebDAV Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85827" }, { "rank": 1426, "cve_id": "CVE-2026-85828", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "WebDAV Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85828" }, { "rank": 1427, "cve_id": "CVE-2026-85834", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows TCP/IP Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85834" }, { "rank": 1428, "cve_id": "CVE-2026-85846", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-416", "title": "Web Account Manager Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85846" }, { "rank": 1429, "cve_id": "CVE-2026-85853", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows DWM Core Library Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85853" }, { "rank": 1430, "cve_id": "CVE-2026-85854", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-416", "title": "Windows DWM Core Library Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85854" }, { "rank": 1431, "cve_id": "CVE-2026-85855", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-416", "title": "Windows DWM Core Library Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85855" }, { "rank": 1432, "cve_id": "CVE-2026-85868", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Common Log File System Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85868" }, { "rank": 1433, "cve_id": "CVE-2026-85870", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Common Log File System Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85870" }, { "rank": 1434, "cve_id": "CVE-2026-85876", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SQL Server 2019 (GDR)", "cwe": "CWE-416", "title": "Microsoft SQL Server Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85876" }, { "rank": 1435, "cve_id": "CVE-2026-85879", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows Subsystem for Linux (WSL2)", "cwe": "CWE-367", "title": "Windows Subsystem for Linux Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85879" }, { "rank": 1436, "cve_id": "CVE-2026-85904", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-362", "title": "Windows Device Association Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85904" }, { "rank": 1437, "cve_id": "CVE-2026-85912", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-362", "title": "Clipboard User Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85912" }, { "rank": 1438, "cve_id": "CVE-2026-85914", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Embedded Mode Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85914" }, { "rank": 1439, "cve_id": "CVE-2026-85918", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85918" }, { "rank": 1440, "cve_id": "CVE-2026-85919", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SQL Server 2019 (GDR)", "cwe": "CWE-122", "title": "Microsoft SQL Server Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85919" }, { "rank": 1441, "cve_id": "CVE-2026-85920", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-367", "title": "Windows BitLocker Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85920" }, { "rank": 1442, "cve_id": "CVE-2026-85930", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-416", "title": "Windows Image Acquisition Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85930" }, { "rank": 1443, "cve_id": "CVE-2026-85934", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-416", "title": "Windows AppX Deployment Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85934" }, { "rank": 1444, "cve_id": "CVE-2026-85941", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-362", "title": "Windows Installer Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85941" }, { "rank": 1445, "cve_id": "CVE-2026-85943", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Reliable Multicast Transport Driver (RMCAST) Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85943" }, { "rank": 1446, "cve_id": "CVE-2026-86022", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "vnotex", "product": "vnote", "cwe": "CWE-78", "title": "VNote: Argument injection to arbitrary command execution via crafted note filename in external-program handling", "url": "https://www.cve.org/CVERecord?id=CVE-2026-86022" }, { "rank": 1447, "cve_id": "CVE-2026-87693", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Installer Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87693" }, { "rank": 1448, "cve_id": "CVE-2026-87704", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Installer Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87704" }, { "rank": 1449, "cve_id": "CVE-2026-87708", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Installer Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87708" }, { "rank": 1450, "cve_id": "CVE-2026-87710", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-362", "title": "Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87710" }, { "rank": 1451, "cve_id": "CVE-2026-87715", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Installer Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87715" }, { "rank": 1452, "cve_id": "CVE-2026-88076", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-476", "title": "Windows Installer Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88076" }, { "rank": 1453, "cve_id": "CVE-2026-88079", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-476", "title": "Windows MIDI Service Module Elevation of Privileges Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88079" }, { "rank": 1454, "cve_id": "CVE-2026-88082", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SQL Server 2019 (GDR)", "cwe": "CWE-122", "title": "Microsoft SQL Server Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88082" }, { "rank": 1455, "cve_id": "CVE-2026-88088", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SQL Server 2019 (GDR)", "cwe": "CWE-190", "title": "Microsoft SQL Server Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88088" }, { "rank": 1456, "cve_id": "CVE-2026-88096", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-362", "title": "Windows DCOM Server Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88096" }, { "rank": 1457, "cve_id": "CVE-2026-88098", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-822", "title": "Windows Security Support Provider Interface Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88098" }, { "rank": 1458, "cve_id": "CVE-2026-88103", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-416", "title": "Windows Broadcast DVR User Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88103" }, { "rank": 1459, "cve_id": "CVE-2026-88106", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-416", "title": "Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88106" }, { "rank": 1460, "cve_id": "CVE-2026-88107", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-362", "title": "Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88107" }, { "rank": 1461, "cve_id": "CVE-2026-88110", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-122", "title": "Windows Graphics Kernel Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88110" }, { "rank": 1462, "cve_id": "CVE-2026-88113", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-416", "title": "Windows Broadcast DVR User Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88113" }, { "rank": 1463, "cve_id": "CVE-2026-88124", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Installer Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88124" }, { "rank": 1464, "cve_id": "CVE-2026-88127", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows SMB Server Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88127" }, { "rank": 1465, "cve_id": "CVE-2026-88139", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-416", "title": "Windows Kernel Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88139" }, { "rank": 1466, "cve_id": "CVE-2026-88141", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-416", "title": "Windows Kernel Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88141" }, { "rank": 1467, "cve_id": "CVE-2026-88146", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-362", "title": "Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88146" }, { "rank": 1468, "cve_id": "CVE-2026-88149", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-415", "title": "Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88149" }, { "rank": 1469, "cve_id": "CVE-2026-88160", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-362", "title": "Microsoft Windows Search Component Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88160" }, { "rank": 1470, "cve_id": "CVE-2026-88161", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88161" }, { "rank": 1471, "cve_id": "CVE-2026-95943", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-415", "title": "Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-95943" }, { "rank": 1472, "cve_id": "CVE-2026-96209", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Network File System Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96209" }, { "rank": 1473, "cve_id": "CVE-2026-96215", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-362", "title": "Windows Autopilot Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96215" }, { "rank": 1474, "cve_id": "CVE-2026-96216", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-416", "title": "Windows Kernel Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96216" }, { "rank": 1475, "cve_id": "CVE-2026-96250", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-416", "title": "Windows USB Print Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96250" }, { "rank": 1476, "cve_id": "CVE-2026-96253", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-416", "title": "Windows USB Print Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96253" }, { "rank": 1477, "cve_id": "CVE-2026-96254", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-416", "title": "Windows USB Print Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96254" }, { "rank": 1478, "cve_id": "CVE-2026-96301", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-416", "title": "Windows USB Print Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96301" }, { "rank": 1479, "cve_id": "CVE-2026-96302", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Installer Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96302" }, { "rank": 1480, "cve_id": "CVE-2026-96304", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-416", "title": "Windows USB Print Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96304" }, { "rank": 1481, "cve_id": "CVE-2026-96305", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Installer Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96305" }, { "rank": 1482, "cve_id": "CVE-2026-96307", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Installer Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96307" }, { "rank": 1483, "cve_id": "CVE-2026-96310", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-416", "title": "Windows USB Print Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96310" }, { "rank": 1484, "cve_id": "CVE-2026-96313", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-306", "title": "Windows Push Notifications Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96313" }, { "rank": 1485, "cve_id": "CVE-2026-96319", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-416", "title": "Windows USB Print Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96319" }, { "rank": 1486, "cve_id": "CVE-2026-96322", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Remote Desktop Protocol Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96322" }, { "rank": 1487, "cve_id": "CVE-2026-96323", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-416", "title": "Windows Update Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96323" }, { "rank": 1488, "cve_id": "CVE-2026-96852", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows TCP/IP Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96852" }, { "rank": 1489, "cve_id": "CVE-2026-96868", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-122", "title": "Windows Kernel Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96868" }, { "rank": 1490, "cve_id": "CVE-2026-96919", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-362", "title": "Windows Broadcast DVR User Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96919" }, { "rank": 1491, "cve_id": "CVE-2026-96923", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Workstation Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96923" }, { "rank": 1492, "cve_id": "CVE-2026-96932", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-362", "title": "Windows Embedded Mode Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96932" }, { "rank": 1493, "cve_id": "CVE-2026-96937", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-416", "title": "Microsoft Windows Search Component Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96937" }, { "rank": 1494, "cve_id": "CVE-2026-96939", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-367", "title": "Servicing Stack Updates Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96939" }, { "rank": 1495, "cve_id": "CVE-2026-96949", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-362", "title": "Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96949" }, { "rank": 1496, "cve_id": "CVE-2026-97774", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-367", "title": "Microsoft Office Click-To-Run Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97774" }, { "rank": 1497, "cve_id": "CVE-2026-97787", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-362", "title": "Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97787" }, { "rank": 1498, "cve_id": "CVE-2026-97793", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-306", "title": "Windows Setup and Deployment Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97793" }, { "rank": 1499, "cve_id": "CVE-2026-97808", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-416", "title": "Windows Broadcast DVR User Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97808" }, { "rank": 1500, "cve_id": "CVE-2026-97810", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-122", "title": "Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97810" }, { "rank": 1501, "cve_id": "CVE-2026-97812", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-415", "title": "Windows Update Orchestrator Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97812" }, { "rank": 1502, "cve_id": "CVE-2026-100200", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-416", "title": "Windows Update Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100200" }, { "rank": 1503, "cve_id": "CVE-2026-100201", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-122", "title": "Windows Client License Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100201" }, { "rank": 1504, "cve_id": "CVE-2026-100203", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Update Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100203" }, { "rank": 1505, "cve_id": "CVE-2026-100216", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-121", "title": "Windows Storage Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100216" }, { "rank": 1506, "cve_id": "CVE-2026-100225", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Storage Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100225" }, { "rank": 1507, "cve_id": "CVE-2026-102189", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-122", "title": "Windows Storage Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102189" }, { "rank": 1508, "cve_id": "CVE-2026-102191", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-122", "title": "Windows Storage Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102191" }, { "rank": 1509, "cve_id": "CVE-2026-102193", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-416", "title": "Windows Broadcast DVR User Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102193" }, { "rank": 1510, "cve_id": "CVE-2026-102194", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Graphics Kernel Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102194" }, { "rank": 1511, "cve_id": "CVE-2026-102195", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-416", "title": "Windows Broadcast DVR User Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102195" }, { "rank": 1512, "cve_id": "CVE-2026-102197", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-416", "title": "Windows Broadcast DVR User Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102197" }, { "rank": 1513, "cve_id": "CVE-2026-102207", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-362", "title": "Windows Kernel Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102207" }, { "rank": 1514, "cve_id": "CVE-2026-102208", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102208" }, { "rank": 1515, "cve_id": "CVE-2026-102209", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 26H1", "cwe": "CWE-122", "title": "Microsoft Graphics Component Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102209" }, { "rank": 1516, "cve_id": "CVE-2026-102211", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-362", "title": "Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102211" }, { "rank": 1517, "cve_id": "CVE-2026-102232", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Visual Studio Code", "cwe": "CWE-863", "title": "Visual Studio Code Security Feature Bypass Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102232" }, { "rank": 1518, "cve_id": "CVE-2026-103554", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-416", "title": "Windows Broadcast DVR User Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103554" }, { "rank": 1519, "cve_id": "CVE-2026-103555", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103555" }, { "rank": 1520, "cve_id": "CVE-2026-103565", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-416", "title": "Windows Broadcast DVR User Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103565" }, { "rank": 1521, "cve_id": "CVE-2026-105722", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-416", "title": "Windows Broadcast DVR User Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105722" }, { "rank": 1522, "cve_id": "CVE-2026-105725", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows Security App", "cwe": "CWE-416", "title": "Windows Security App Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105725" }, { "rank": 1523, "cve_id": "CVE-2026-108132", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-415", "title": "Windows Kerberos Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108132" }, { "rank": 1524, "cve_id": "CVE-2026-108134", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-416", "title": "Windows Autopilot Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108134" }, { "rank": 1525, "cve_id": "CVE-2026-108135", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-59", "title": "Windows Backup Engine Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108135" }, { "rank": 1526, "cve_id": "CVE-2026-108396", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-367", "title": "Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108396" }, { "rank": 1527, "cve_id": "CVE-2026-108461", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-416", "title": "Windows Broadcast DVR User Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108461" }, { "rank": 1528, "cve_id": "CVE-2026-108464", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Software Protection Platform (SPP) Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108464" }, { "rank": 1529, "cve_id": "CVE-2026-108465", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-416", "title": "Windows Update Delivery Optimization Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108465" }, { "rank": 1530, "cve_id": "CVE-2026-108468", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Installer Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108468" }, { "rank": 1531, "cve_id": "CVE-2026-109453", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109453" }, { "rank": 1532, "cve_id": "CVE-2026-110237", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "vifm", "product": "vifm", "cwe": "CWE-283", "title": "Vifm 0.8.1-beta through 0.14.4 Unverified IPC FIFO Ownership Allows Cross-User Command Execution", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110237" }, { "rank": 1533, "cve_id": "CVE-2026-15468", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "HYPR", "product": "Passwordless", "cwe": "CWE-639", "title": "Authorization bypass through User-Controlled key vulnerability in HYPR Passwordless on Windows allows Privilege Escalation. This issue affects HYPR Passwordless: before 11.3.3.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15468" }, { "rank": 1534, "cve_id": "CVE-2026-44414", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Siemens", "product": "Industrial Edge Cloud Device (IECD)", "cwe": "CWE-35", "title": "A vulnerability has been identified in Industrial Edge Cloud Device (IECD), Industrial Edge Device Kit - arm64 V1.10, Industrial Edge Device Kit - arm64 V1.11, Industrial Edge Device Kit - arm64 V1.12, Industrial Edge Device Kit - arm64 V1.13, Industrial Edge Device Kit - arm64 V1.14, Industrial Edge Device Kit - arm64 V1.15, Industrial Edge Device Kit - arm64 V1.16, Industrial Edge Device Kit - arm64 V1.17, Industrial Edge Device Kit - arm64 V1.18, Industrial Edge Device Kit - arm64 V1.19, Industrial Edge Device Kit - arm64 V1.20, Industrial Edge Device Kit - arm64 V1.21, Industrial Edge Device Kit - arm64 V1.22, Industrial Edge Device Kit - arm64 V1.23, Industrial Edge Device Kit - arm64 V1.24, Industrial Edge Device Kit - arm64 V1.25, Industrial Edge Device Kit - arm64 V1.26, Industrial Edge Device Kit - arm64 V1.27, Industrial Edge Device Kit - arm64 V1.28, Industrial Edge Device Kit - arm64 V1.5, Industrial Edge Device Kit - arm64 V1.6, Industrial Edge Device Kit - arm64 V1.7, Industrial Edge Device Kit - arm64 V1.8, Industrial Edge Device Kit - arm64 V1.9, Industrial Edge Device Kit - x86-64 V1.10, Industrial Edge Device Kit - x86-64 V1.11, Industrial Edge Device Kit - x86-64 V1.12, Industrial Edge Device Kit - x86-64 V1.13, Industrial Edge Device Kit - x86-64 V1.14, Industrial Edge Device Kit - x86-64 V1.15, Industrial Edge Device Kit - x86-64 V1.16, Industrial Edge Device Kit - x86-64 V1.17, Industrial Edge Device Kit - x86-64 V1.18, Industrial Edge Device Kit - x86-64 V1.19, Industrial Edge Device Kit - x86-64 V1.20, Industrial Edge Device Kit - x86-64 V1.21, Industrial Edge Device Kit - x86-64 V1.22, Industrial Edge Device Kit - x86-64 V1.23, Industrial Edge Device Kit - x86-64 V1.24, Industrial Edge Device Kit - x86-64 V1.25, Industrial Edge Device Kit - x86-64 V1.26, Industrial Edge Device Kit - x86-64 V1.27, Industrial Edge Device Kit - x86-64 V1.28, Industrial Edge Device Kit - x86-64 V1.5, Industrial Edge Device Kit - x86-64 V1.6, Industrial Edge Device Kit - x86-64 V1.7, Industrial Edge Device Kit - x86-64 V1.8, Industrial Edge Device Kit - x86-64 V1.9, Industrial Edge Own Device (IEOD), Industrial Edge Virtual Device (IEVD), SCALANCE LPE9413 (6GK5998-3GS01-2AC2), SCALANCE LPE9433 (6GK5998-3GS11-2AC2), SIMATIC IoT2050 Advanced IED (6ES7647-0BW00-1YA2), SIMATIC IoT2050 SM IED (6ES7647-0CW00-1AA2), SIMATIC IPC BX-21A Industrial Edge Device, SIMATIC IPC BX-39A Industrial Edge Device, SIMATIC IPC BX-59A Industrial Edge Device, SIMATIC IPC127E Industrial Edge Device, SIMATIC IPC227E Industrial Edge Device, SIMATIC IPC227G Industrial Edge Device, SIMATIC IPC427E Industrial Edge Device, SIMATIC IPC847E Industrial Edge Device. Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be leveraged to facilitate unauthorized access to the system.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-44414" }, { "rank": 1535, "cve_id": "CVE-2026-53563", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Citrix", "product": "UniconOS", "cwe": null, "title": "Persistent Command Execution", "url": "https://www.cve.org/CVERecord?id=CVE-2026-53563" }, { "rank": 1536, "cve_id": "CVE-2026-54700", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "connectbot", "product": "cbssh", "cwe": "CWE-20", "title": "ConnectBot SSH: Unbounded SSH field lengths can cause excessive memory allocation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54700" }, { "rank": 1537, "cve_id": "CVE-2026-74030", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Wazuh", "product": "wazuh-agent", "cwe": "CWE-776", "title": "Wazuh 3.9.0 before 4.14.8 Memory Exhaustion via SCA YAML Alias Expansion", "url": "https://www.cve.org/CVERecord?id=CVE-2026-74030" }, { "rank": 1538, "cve_id": "CVE-2026-89208", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Siemens", "product": "Capital Embedded AR Classic 431-422", "cwe": "CWE-125", "title": "A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), Desigo PXC00-E.D (All versions >= V2.3), Desigo PXC00-U (All versions >= V2.3), Desigo PXC001-E.D (All versions >= V2.3), Desigo PXC100-E.D (All versions >= V2.3), Desigo PXC12-E.D (All versions >= V2.3), Desigo PXC128-U (All versions >= V2.3), Desigo PXC200-E.D (All versions >= V2.3), Desigo PXC22-E.D (All versions >= V2.3), Desigo PXC22.1-E.D (All versions >= V2.3), Desigo PXC36.1-E.D (All versions >= V2.3), Desigo PXC50-E.D (All versions >= V2.3), Desigo PXC64-U (All versions >= V2.3), Desigo PXM20-E (All versions >= V2.3). The affected product does not properly validate input bounds before accessing packet data. This could allow an unauthenticated remote attacker to trigger memory reads outside the intended packet boundaries.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-89208" }, { "rank": 1539, "cve_id": "CVE-2026-93346", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Wazuh", "product": "wazuh-manager", "cwe": "CWE-307", "title": "Wazuh 4.0.0 before 4.14.8 API Brute-Force Protection Bypass via Race Condition", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93346" }, { "rank": 1540, "cve_id": "CVE-2026-93347", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Wazuh", "product": "wazuh-manager", "cwe": "CWE-22", "title": "Wazuh 4.1.1 before 4.14.8 Path Traversal via Cluster get_list_file", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93347" }, { "rank": 1541, "cve_id": "CVE-2026-101899", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "axios", "product": "axios", "cwe": "CWE-693", "title": "Axios: CIDR-form NO_PROXY entries are ignored, causing proxy exclusion bypass for internal IP ranges", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101899" }, { "rank": 1542, "cve_id": "CVE-2026-105390", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "OpenVPN", "product": "ovpn-dco-win", "cwe": "CWE-413", "title": "Improper synchronization in the OpenVPN ovpn-dco-win for Windows versions 0.6.5 through 1.3.5 and 2.4.0 through 2.8.7 allows local attackers to trigger a deadlock via a crafted write to the ovpn-dco device, causing the host to become unresponsive.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105390" }, { "rank": 1543, "cve_id": "CVE-2026-107606", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Swann Communications", "product": "SWIFI-SE2KIC", "cwe": "CWE-306", "title": "Missing authentication for critical function in Swann Communications SWIFI-SE2KIC", "url": "https://www.cve.org/CVERecord?id=CVE-2026-107606" }, { "rank": 1544, "cve_id": "CVE-2026-107607", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Swann Communications", "product": "SWIFI-SE2KIC", "cwe": "CWE-306", "title": "Missing authentication for critical function in Swann Communications SWIFI-SE2KIC", "url": "https://www.cve.org/CVERecord?id=CVE-2026-107607" }, { "rank": 1545, "cve_id": "CVE-2026-109144", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "wbond", "product": "certvalidator", "cwe": "CWE-400", "title": "wbond certvalidator Certificate Path Builder resource consumption", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109144" }, { "rank": 1546, "cve_id": "CVE-2026-109519", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "YouTransfer", "cwe": "CWE-22", "title": "YouTransfer Template Rendering template path traversal", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109519" }, { "rank": 1547, "cve_id": "CVE-2026-109951", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "FreeRDP", "product": "FreeRDP", "cwe": "CWE-125", "title": "FreeRDP 3.17.1 before 3.32.0 Heap Buffer Over-Read via Proxy DRDYNVC Channel Name", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109951" }, { "rank": 1548, "cve_id": "CVE-2026-109955", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "honojs", "product": "hono", "cwe": "CWE-174", "title": "Hono 4.12.4 before 4.13.11 Middleware Bypass via serveStatic Double Decoding", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109955" }, { "rank": 1549, "cve_id": "CVE-2026-109966", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "marcopiovanello", "product": "yt-dlp-web-ui", "cwe": "CWE-88", "title": "yt-dlp-web-ui through 4.0.0 Argument Injection via Service.Formats JSON-RPC Method", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109966" }, { "rank": 1550, "cve_id": "CVE-2026-110025", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "slackero", "product": "phpwcms", "cwe": "CWE-284", "title": "slackero phpwcms Extension Check cnt23.article.inc.php unrestricted upload", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110025" }, { "rank": 1551, "cve_id": "CVE-2026-110105", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "b3log", "product": "Symphony", "cwe": "CWE-862", "title": "B3log Symphony through 3.6.4 Missing Authorization in Admin Console Routes", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110105" }, { "rank": 1552, "cve_id": "CVE-2026-110114", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "FJ-OMS", "product": "oms-erp", "cwe": "CWE-306", "title": "oms-erp through PRE Missing Authentication via skyer-goods es-test Endpoints", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110114" }, { "rank": 1553, "cve_id": "CVE-2026-110131", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "LiuYuYang01", "product": "ThriveX-Server", "cwe": "CWE-862", "title": "ThriveX-Server through 4.0 Missing Authorization via Article Retrieval Endpoints", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110131" }, { "rank": 1554, "cve_id": "CVE-2026-110222", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Razorpay", "product": "IFSC", "cwe": "CWE-918", "title": "Razorpay IFSC Ruby gem through 2.0.62 SSRF via IFSC lookup", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110222" }, { "rank": 1555, "cve_id": "CVE-2026-49265", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "oauthlib", "product": "oauthlib", "cwe": "CWE-208", "title": "OAuthLib: Timing Attack Vulnerability in PKCE code_verifier Comparison", "url": "https://www.cve.org/CVERecord?id=CVE-2026-49265" }, { "rank": 1556, "cve_id": "CVE-2026-59116", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-327", "title": "Windows Remote Desktop Security Feature Bypass Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59116" }, { "rank": 1557, "cve_id": "CVE-2026-69947", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-122", "title": "Windows Overlay Filter Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69947" }, { "rank": 1558, "cve_id": "CVE-2026-69958", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Overlay Filter Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69958" }, { "rank": 1559, "cve_id": "CVE-2026-83573", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-190", "title": "Windows Kernel-Mode Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83573" }, { "rank": 1560, "cve_id": "CVE-2026-83776", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Bluetooth Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83776" }, { "rank": 1561, "cve_id": "CVE-2026-83895", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-122", "title": "Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83895" }, { "rank": 1562, "cve_id": "CVE-2026-84419", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Citrix", "product": "Workspace app for Windows", "cwe": "CWE-787", "title": "Out-of-Bounds Write", "url": "https://www.cve.org/CVERecord?id=CVE-2026-84419" }, { "rank": 1563, "cve_id": "CVE-2026-85115", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Siemens", "product": ".NET Client Library for SIMATIC S7 Webserver API", "cwe": "CWE-209", "title": "A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.62). Affected applications do not properly redact PLC restore passwords from HTTP error exception messages. This could allow an attacker with access to logs or other diagnostic output to obtain the plaintext restore password and potentially perform unauthorized operations on the PLC.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85115" }, { "rank": 1564, "cve_id": "CVE-2026-85323", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-1390", "title": "Network Device Enrollment Service (NDES) Spoofing Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85323" }, { "rank": 1565, "cve_id": "CVE-2026-85747", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "distribution", "product": "distribution", "cwe": "CWE-354", "title": "Distribution: Client `manifests.Get()` does not verify returned content against requested digest", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85747" }, { "rank": 1566, "cve_id": "CVE-2026-96863", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-122", "title": "Windows Storage Port Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96863" }, { "rank": 1567, "cve_id": "CVE-2026-97782", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SharePoint Server Subscription Edition", "cwe": "CWE-203", "title": "Microsoft Office SharePoint Tampering Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97782" }, { "rank": 1568, "cve_id": "CVE-2026-102188", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-822", "title": "Windows Storage Port Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102188" }, { "rank": 1569, "cve_id": "CVE-2026-102206", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Portable Device MTP Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102206" }, { "rank": 1570, "cve_id": "CVE-2026-102229", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Visual Studio Code", "cwe": "CWE-22", "title": "Visual Studio Code Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102229" }, { "rank": 1571, "cve_id": "CVE-2026-103578", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 26H1", "cwe": "CWE-822", "title": "Windows Kernel Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103578" }, { "rank": 1572, "cve_id": "CVE-2026-54697", "cvss_base": 6.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "connectbot", "product": "cbssh", "cwe": "CWE-190", "title": "ConnectBot SSH: Excessive allocation and integer overflow in DER private-key parsing", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54697" }, { "rank": 1573, "cve_id": "CVE-2026-69902", "cvss_base": 6.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-822", "title": "Windows NTFS Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69902" }, { "rank": 1574, "cve_id": "CVE-2026-70165", "cvss_base": 6.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": ".NET 10.0", "cwe": "CWE-59", "title": ".NET Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70165" }, { "rank": 1575, "cve_id": "CVE-2026-70189", "cvss_base": 6.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SQL Server 2017 (GDR)", "cwe": "CWE-122", "title": "Microsoft SQL Server Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70189" }, { "rank": 1576, "cve_id": "CVE-2026-83706", "cvss_base": 6.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-416", "title": "Windows NTFS Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83706" }, { "rank": 1577, "cve_id": "CVE-2026-85333", "cvss_base": 6.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-362", "title": "Windows Performance Monitor Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85333" }, { "rank": 1578, "cve_id": "CVE-2026-88089", "cvss_base": 6.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SQL Server 2017 (GDR)", "cwe": "CWE-20", "title": "Microsoft SQL Server Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88089" }, { "rank": 1579, "cve_id": "CVE-2026-88143", "cvss_base": 6.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Storage Spaces Controller Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88143" }, { "rank": 1580, "cve_id": "CVE-2026-96938", "cvss_base": 6.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Distributed File System (DFS) Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96938" }, { "rank": 1581, "cve_id": "CVE-2026-102672", "cvss_base": 6.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "electron", "product": "electron", "cwe": "CWE-367", "title": "Electron: Local race condition in Squirrel.Mac update installation on macOS", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102672" }, { "rank": 1582, "cve_id": "CVE-2026-110235", "cvss_base": 6.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Abdurazaaq Mohammed", "product": "MP Manager", "cwe": "CWE-22", "title": "MP Manager through 1.1.0 Path Traversal via Archive Extraction sanitizeEntryName Bypass", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110235" }, { "rank": 1583, "cve_id": "CVE-2026-69635", "cvss_base": 6.6, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Installer Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69635" }, { "rank": 1584, "cve_id": "CVE-2026-83945", "cvss_base": 6.6, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SQL Server 2022 (GDR)", "cwe": "CWE-122", "title": "Microsoft SQL Server Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83945" }, { "rank": 1585, "cve_id": "CVE-2026-85841", "cvss_base": 6.6, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows DHCP Server Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85841" }, { "rank": 1586, "cve_id": "CVE-2026-14909", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "WebSphere Application Server - Liberty", "cwe": "CWE-209", "title": "IBM WebSphere Application Server Liberty Information Disclosure", "url": "https://www.cve.org/CVERecord?id=CVE-2026-14909" }, { "rank": 1587, "cve_id": "CVE-2026-15577", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Grafana", "product": "Grafana Enterprise", "cwe": "CWE-863", "title": "Git Sync connection configuration can be modified with read-only access", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15577" }, { "rank": 1588, "cve_id": "CVE-2026-19940", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "zephyrproject", "product": "zephyr", "cwe": "CWE-416", "title": "Bluetooth HFP AG reuses a connection slot while a delayable work item is still armed, corrupting kernel timeout bookkeeping", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19940" }, { "rank": 1589, "cve_id": "CVE-2026-23706", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Fortinet", "product": "FortiAnalyzer Cloud", "cwe": "CWE-89", "title": "An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiAnalyzer Cloud 7.6.2 through 7.6.4, FortiAnalyzer Cloud 7.4.1 through 7.4.7, FortiAnalyzer Cloud 7.2.1 through 7.2.11, FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.6, FortiManager 7.2 all versions may allow a low privileged user to execute arbitrary commands via crafted requests.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-23706" }, { "rank": 1590, "cve_id": "CVE-2026-33374", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Grafana", "product": "Grafana Enterprise", "cwe": "CWE-400", "title": "Unbounded memory allocation in the Prometheus rule conversion API", "url": "https://www.cve.org/CVERecord?id=CVE-2026-33374" }, { "rank": 1591, "cve_id": "CVE-2026-67626", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SQL Server 2022 (GDR)", "cwe": "CWE-400", "title": "Microsoft SQL Server Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-67626" }, { "rank": 1592, "cve_id": "CVE-2026-69226", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Esri", "product": "Portal for ArcGIS", "cwe": "CWE-863", "title": "Portal for ArcGIS has a security vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69226" }, { "rank": 1593, "cve_id": "CVE-2026-69877", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Azure CLI", "cwe": "CWE-346", "title": "Azure DevOps Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69877" }, { "rank": 1594, "cve_id": "CVE-2026-69922", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-125", "title": "Microsoft Office Excel Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69922" }, { "rank": 1595, "cve_id": "CVE-2026-69940", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Client for NFS Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69940" }, { "rank": 1596, "cve_id": "CVE-2026-69955", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Client for NFS Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69955" }, { "rank": 1597, "cve_id": "CVE-2026-69968", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-23", "title": "Windows libarchive Tampering Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69968" }, { "rank": 1598, "cve_id": "CVE-2026-69973", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-22", "title": "Windows libarchive Tampering Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69973" }, { "rank": 1599, "cve_id": "CVE-2026-70072", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-770", "title": "Windows Netlogon Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70072" }, { "rank": 1600, "cve_id": "CVE-2026-70119", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows Server 2022", "cwe": "CWE-125", "title": "Windows DNS Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70119" }, { "rank": 1601, "cve_id": "CVE-2026-70122", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-367", "title": "Windows Broadcast DVR User Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70122" }, { "rank": 1602, "cve_id": "CVE-2026-70148", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-441", "title": "Windows Broadcast DVR User Service Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70148" }, { "rank": 1603, "cve_id": "CVE-2026-70166", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows DNS Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70166" }, { "rank": 1604, "cve_id": "CVE-2026-70170", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-822", "title": "Windows Kernel Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70170" }, { "rank": 1605, "cve_id": "CVE-2026-70194", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": ".NET 11.0", "cwe": "CWE-295", "title": ".NET Framework Security Feature Bypass Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70194" }, { "rank": 1606, "cve_id": "CVE-2026-70206", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-125", "title": "Microsoft Office Word Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70206" }, { "rank": 1607, "cve_id": "CVE-2026-70219", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-125", "title": "Microsoft Office Excel Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70219" }, { "rank": 1608, "cve_id": "CVE-2026-70244", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows DNS Server Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70244" }, { "rank": 1609, "cve_id": "CVE-2026-70248", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-476", "title": "Windows Hyper-V Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70248" }, { "rank": 1610, "cve_id": "CVE-2026-70259", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SharePoint Server Subscription Edition", "cwe": "CWE-918", "title": "Microsoft Office SharePoint Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70259" }, { "rank": 1611, "cve_id": "CVE-2026-70263", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-125", "title": "Microsoft Office Word Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70263" }, { "rank": 1612, "cve_id": "CVE-2026-70298", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SharePoint Server Subscription Edition", "cwe": "CWE-22", "title": "Microsoft Office SharePoint Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70298" }, { "rank": 1613, "cve_id": "CVE-2026-77375", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "drakkan", "product": "sftpgo", "cwe": "CWE-129", "title": "SFTPGo: Denial of service via malformed SSH channel request", "url": "https://www.cve.org/CVERecord?id=CVE-2026-77375" }, { "rank": 1614, "cve_id": "CVE-2026-77816", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "WebSphere Application Server - Liberty", "cwe": "CWE-295", "title": "IBM WebSphere Application Server Liberty Improper Certificate Validation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-77816" }, { "rank": 1615, "cve_id": "CVE-2026-78633", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Okta", "product": "Okta RADIUS Agent", "cwe": "CWE-835", "title": "Denial of Service in Okta RADIUS Agent Packet Parser", "url": "https://www.cve.org/CVERecord?id=CVE-2026-78633" }, { "rank": 1616, "cve_id": "CVE-2026-81507", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "espressif", "product": "esp-idf", "cwe": "CWE-125", "title": "ESF-IDF: Bluetooth Classic L2CAP Heap Memory Disclosure Allowing Unauthorized Access to Sensitive Data", "url": "https://www.cve.org/CVERecord?id=CVE-2026-81507" }, { "rank": 1617, "cve_id": "CVE-2026-83515", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-908", "title": "RPC Runtime Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83515" }, { "rank": 1618, "cve_id": "CVE-2026-83521", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows IKE Extension Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83521" }, { "rank": 1619, "cve_id": "CVE-2026-83636", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-476", "title": "Windows Hyper-V Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83636" }, { "rank": 1620, "cve_id": "CVE-2026-83648", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-476", "title": "Windows Active Directory Domain Services Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83648" }, { "rank": 1621, "cve_id": "CVE-2026-83649", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83649" }, { "rank": 1622, "cve_id": "CVE-2026-83651", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows GDI Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83651" }, { "rank": 1623, "cve_id": "CVE-2026-83667", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Active Directory Domain Services Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83667" }, { "rank": 1624, "cve_id": "CVE-2026-83671", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-125", "title": "Windows Hyper-V Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83671" }, { "rank": 1625, "cve_id": "CVE-2026-83683", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-36", "title": "Windows Encrypting File System (EFS) Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83683" }, { "rank": 1626, "cve_id": "CVE-2026-83685", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-126", "title": "Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83685" }, { "rank": 1627, "cve_id": "CVE-2026-83703", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Wi-Fi Driver Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83703" }, { "rank": 1628, "cve_id": "CVE-2026-83888", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-126", "title": "Windows CD-ROM Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83888" }, { "rank": 1629, "cve_id": "CVE-2026-83906", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-303", "title": "Windows Shell Spoofing Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83906" }, { "rank": 1630, "cve_id": "CVE-2026-84007", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows Server 2012", "cwe": "CWE-125", "title": "Remote Desktop Gateway Service Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-84007" }, { "rank": 1631, "cve_id": "CVE-2026-85331", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Device Association Service Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85331" }, { "rank": 1632, "cve_id": "CVE-2026-85337", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Remote Desktop Client Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85337" }, { "rank": 1633, "cve_id": "CVE-2026-85797", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-20", "title": "Windows GDI Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85797" }, { "rank": 1634, "cve_id": "CVE-2026-85805", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-358", "title": "Microsoft PowerShell Security Feature Bypass Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85805" }, { "rank": 1635, "cve_id": "CVE-2026-85821", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85821" }, { "rank": 1636, "cve_id": "CVE-2026-85840", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-552", "title": "Windows Event Viewer Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85840" }, { "rank": 1637, "cve_id": "CVE-2026-85847", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Print Spooler Components Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85847" }, { "rank": 1638, "cve_id": "CVE-2026-85859", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-476", "title": "Windows Message Queuing Queue Manager Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85859" }, { "rank": 1639, "cve_id": "CVE-2026-85873", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Skype for Business Server 2015 CU13", "cwe": "CWE-639", "title": "Skype for Business Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85873" }, { "rank": 1640, "cve_id": "CVE-2026-85932", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SharePoint Server Subscription Edition", "cwe": "CWE-22", "title": "Microsoft Office SharePoint Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85932" }, { "rank": 1641, "cve_id": "CVE-2026-87714", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-862", "title": "WebDAV Security Feature Bypass Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87714" }, { "rank": 1642, "cve_id": "CVE-2026-88122", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows Server 2012", "cwe": "CWE-125", "title": "Role: DNS Server Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88122" }, { "rank": 1643, "cve_id": "CVE-2026-88123", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows Server 2012", "cwe": "CWE-125", "title": "Role: DNS Server Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88123" }, { "rank": 1644, "cve_id": "CVE-2026-88125", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows Server 2012", "cwe": "CWE-125", "title": "Role: DNS Server Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88125" }, { "rank": 1645, "cve_id": "CVE-2026-88129", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows Server 2012", "cwe": "CWE-125", "title": "Role: DNS Server Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88129" }, { "rank": 1646, "cve_id": "CVE-2026-88130", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows Server 2012", "cwe": "CWE-125", "title": "Role: DNS Server Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88130" }, { "rank": 1647, "cve_id": "CVE-2026-88137", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-552", "title": "WebDAV Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88137" }, { "rank": 1648, "cve_id": "CVE-2026-88151", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-125", "title": "Microsoft Office Excel Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88151" }, { "rank": 1649, "cve_id": "CVE-2026-88153", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-125", "title": "Microsoft Office Excel Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88153" }, { "rank": 1650, "cve_id": "CVE-2026-88154", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-125", "title": "Microsoft Office Excel Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88154" }, { "rank": 1651, "cve_id": "CVE-2026-88167", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-126", "title": "Microsoft Office Word Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88167" }, { "rank": 1652, "cve_id": "CVE-2026-88169", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-125", "title": "Microsoft Office Word Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88169" }, { "rank": 1653, "cve_id": "CVE-2026-88172", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-125", "title": "Microsoft Office Excel Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88172" }, { "rank": 1654, "cve_id": "CVE-2026-88175", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-125", "title": "Microsoft Office Excel Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88175" }, { "rank": 1655, "cve_id": "CVE-2026-88183", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-125", "title": "Microsoft Office PowerPoint Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88183" }, { "rank": 1656, "cve_id": "CVE-2026-88184", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-125", "title": "Microsoft Office Excel Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88184" }, { "rank": 1657, "cve_id": "CVE-2026-88190", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-125", "title": "Microsoft Office Excel Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88190" }, { "rank": 1658, "cve_id": "CVE-2026-88192", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-125", "title": "Microsoft Office Excel Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88192" }, { "rank": 1659, "cve_id": "CVE-2026-88195", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-126", "title": "Microsoft Office Excel Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88195" }, { "rank": 1660, "cve_id": "CVE-2026-88201", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-126", "title": "Microsoft Office Excel Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88201" }, { "rank": 1661, "cve_id": "CVE-2026-88203", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-822", "title": "Microsoft Office PowerPoint Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88203" }, { "rank": 1662, "cve_id": "CVE-2026-88833", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat Hardened Images", "cwe": "CWE-191", "title": "Busybox: busybox: udhcpc integer underflow in dhcp packet length calculation causes denial of service", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88833" }, { "rank": 1663, "cve_id": "CVE-2026-89279", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "AuthTake Technology Inc.", "product": "authtake", "cwe": "CWE-352", "title": "Active Directory Password Change CSRF in AuthTake Technology's authtake", "url": "https://www.cve.org/CVERecord?id=CVE-2026-89279" }, { "rank": 1664, "cve_id": "CVE-2026-94506", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-125", "title": "Microsoft Office Access Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-94506" }, { "rank": 1665, "cve_id": "CVE-2026-95696", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "WebSphere Application Server - Liberty", "cwe": "CWE-400", "title": "IBM WebSphere Application Server Liberty Denial of Service", "url": "https://www.cve.org/CVERecord?id=CVE-2026-95696" }, { "rank": 1666, "cve_id": "CVE-2026-96204", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Arc Enabled Servers - Azure Connected Machine Agent", "cwe": "CWE-918", "title": "Azure Arc Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96204" }, { "rank": 1667, "cve_id": "CVE-2026-96206", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows Subsystem for Linux (WSL2)", "cwe": "CWE-908", "title": "Windows Subsystem for Linux Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96206" }, { "rank": 1668, "cve_id": "CVE-2026-96229", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": ".NET 10.0", "cwe": "CWE-183", "title": ".NET Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96229" }, { "rank": 1669, "cve_id": "CVE-2026-96238", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": ".NET 10.0", "cwe": "CWE-346", "title": ".NET Security Feature Bypass Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96238" }, { "rank": 1670, "cve_id": "CVE-2026-96303", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "PowerShell 7.4", "cwe": "CWE-358", "title": "Microsoft PowerShell Security Feature Bypass Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96303" }, { "rank": 1671, "cve_id": "CVE-2026-97740", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-497", "title": "Microsoft Office Excel Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97740" }, { "rank": 1672, "cve_id": "CVE-2026-97743", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-416", "title": "Microsoft Office Excel Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97743" }, { "rank": 1673, "cve_id": "CVE-2026-97760", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-125", "title": "Microsoft Office Excel Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97760" }, { "rank": 1674, "cve_id": "CVE-2026-97779", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-125", "title": "Microsoft Office Excel Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97779" }, { "rank": 1675, "cve_id": "CVE-2026-97813", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-122", "title": "Windows Hyper-V Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97813" }, { "rank": 1676, "cve_id": "CVE-2026-97817", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Role: DNS Server Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97817" }, { "rank": 1677, "cve_id": "CVE-2026-97819", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Role: DNS Server Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97819" }, { "rank": 1678, "cve_id": "CVE-2026-97820", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Role: DNS Server Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97820" }, { "rank": 1679, "cve_id": "CVE-2026-97821", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Role: DNS Server Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97821" }, { "rank": 1680, "cve_id": "CVE-2026-97822", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Role: DNS Server Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97822" }, { "rank": 1681, "cve_id": "CVE-2026-97823", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Role: DNS Server Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97823" }, { "rank": 1682, "cve_id": "CVE-2026-97824", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Role: DNS Server Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97824" }, { "rank": 1683, "cve_id": "CVE-2026-97825", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Role: DNS Server Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97825" }, { "rank": 1684, "cve_id": "CVE-2026-97826", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Role: DNS Server Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97826" }, { "rank": 1685, "cve_id": "CVE-2026-97827", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Role: DNS Server Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97827" }, { "rank": 1686, "cve_id": "CVE-2026-97828", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-126", "title": "Role: DNS Server Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97828" }, { "rank": 1687, "cve_id": "CVE-2026-97829", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Role: DNS Server Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97829" }, { "rank": 1688, "cve_id": "CVE-2026-97831", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Role: DNS Server Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97831" }, { "rank": 1689, "cve_id": "CVE-2026-97832", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Role: DNS Server Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97832" }, { "rank": 1690, "cve_id": "CVE-2026-97833", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Role: DNS Server Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97833" }, { "rank": 1691, "cve_id": "CVE-2026-97834", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Role: DNS Server Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97834" }, { "rank": 1692, "cve_id": "CVE-2026-97835", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Role: DNS Server Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97835" }, { "rank": 1693, "cve_id": "CVE-2026-97836", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Role: DNS Server Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97836" }, { "rank": 1694, "cve_id": "CVE-2026-97837", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Role: DNS Server Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97837" }, { "rank": 1695, "cve_id": "CVE-2026-97838", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Role: DNS Server Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97838" }, { "rank": 1696, "cve_id": "CVE-2026-97839", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Role: DNS Server Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97839" }, { "rank": 1697, "cve_id": "CVE-2026-97840", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Role: DNS Server Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97840" }, { "rank": 1698, "cve_id": "CVE-2026-97841", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Role: DNS Server Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97841" }, { "rank": 1699, "cve_id": "CVE-2026-97842", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Role: DNS Server Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97842" }, { "rank": 1700, "cve_id": "CVE-2026-97843", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Role: DNS Server Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97843" }, { "rank": 1701, "cve_id": "CVE-2026-97844", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Role: DNS Server Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97844" }, { "rank": 1702, "cve_id": "CVE-2026-102199", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-121", "title": "Microsoft Windows Codecs Library Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102199" }, { "rank": 1703, "cve_id": "CVE-2026-102865", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SharePoint Server Subscription Edition", "cwe": "CWE-863", "title": "Microsoft Office SharePoint Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102865" }, { "rank": 1704, "cve_id": "CVE-2026-102867", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-20", "title": "Microsoft Office Word Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102867" }, { "rank": 1705, "cve_id": "CVE-2026-102981", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "makeplane", "product": "plane", "cwe": "CWE-200", "title": "Plane: Unauthenticated Workspace Invitation Token Leakage", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102981" }, { "rank": 1706, "cve_id": "CVE-2026-103576", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-601", "title": "Active Directory Federation Services (AD FS) Spoofing Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103576" }, { "rank": 1707, "cve_id": "CVE-2026-105719", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SharePoint Server Subscription Edition", "cwe": "CWE-20", "title": "Microsoft SharePoint Server Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105719" }, { "rank": 1708, "cve_id": "CVE-2026-108127", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Role: DNS Server Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108127" }, { "rank": 1709, "cve_id": "CVE-2026-108128", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Role: DNS Server Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108128" }, { "rank": 1710, "cve_id": "CVE-2026-108129", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Role: DNS Server Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108129" }, { "rank": 1711, "cve_id": "CVE-2026-109768", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": "CWE-400", "title": "Denial-of-service in the Site Reports component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109768" }, { "rank": 1712, "cve_id": "CVE-2026-109773", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": "CWE-400", "title": "Denial-of-service in the Sync component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109773" }, { "rank": 1713, "cve_id": "CVE-2026-109775", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": "CWE-400", "title": "Denial-of-service in the WebRTC component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109775" }, { "rank": 1714, "cve_id": "CVE-2026-109781", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": "CWE-400", "title": "Denial-of-service in the Printing: Output component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109781" }, { "rank": 1715, "cve_id": "CVE-2026-71347", "cvss_base": 6.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-362", "title": "Windows Security Center Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-71347" }, { "rank": 1716, "cve_id": "CVE-2026-88085", "cvss_base": 6.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SQL Server 2017 (GDR)", "cwe": "CWE-122", "title": "Microsoft SQL Server Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88085" }, { "rank": 1717, "cve_id": "CVE-2026-105006", "cvss_base": 6.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "HID Class Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105006" }, { "rank": 1718, "cve_id": "CVE-2026-11731", "cvss_base": 6.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "NETGEAR", "product": "RAX30", "cwe": "CWE-288", "title": "Authentication Bypass Vulnerability in Certain NETGEAR RAX Series Models", "url": "https://www.cve.org/CVERecord?id=CVE-2026-11731" }, { "rank": 1719, "cve_id": "CVE-2026-11732", "cvss_base": 6.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "NETGEAR", "product": "CAX30", "cwe": "CWE-20", "title": "Insufficient input validation vulnerability exists in website blocking feature of certain NETGEAR RAX/CAX series models", "url": "https://www.cve.org/CVERecord?id=CVE-2026-11732" }, { "rank": 1720, "cve_id": "CVE-2026-19939", "cvss_base": 6.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "zephyrproject", "product": "zephyr", "cwe": "CWE-825", "title": "Bluetooth Classic AVDTP: stale timeout work on signalling-channel disconnect leads to kernel timeout-list corruption", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19939" }, { "rank": 1721, "cve_id": "CVE-2026-93294", "cvss_base": 6.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Grafana", "product": "Grafana Enterprise", "cwe": "CWE-441", "title": "Azure Monitor data source resource proxy allows calls to arbitrary Azure Resource Manager APIs", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93294" }, { "rank": 1722, "cve_id": "CVE-2026-109162", "cvss_base": 6.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "TYPO3", "product": "TYPO3 CMS", "cwe": "CWE-552", "title": "TYPO3 CMS - Security Misconfiguration in Form Framework", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109162" }, { "rank": 1723, "cve_id": "CVE-2026-109964", "cvss_base": 6.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "ImageMagick", "product": "ImageMagick", "cwe": "CWE-124", "title": "ImageMagick before 7.1.2-33 and 6.9.13-58 Heap Buffer Underwrite in PICT Decoder", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109964" }, { "rank": 1724, "cve_id": "CVE-2026-110214", "cvss_base": 6.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "xiaonuobase", "product": "Snowy", "cwe": "CWE-321", "title": "Snowy 3.6.5 Hard-coded Download Signature Key Allows Unauthenticated File Download", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110214" }, { "rank": 1725, "cve_id": "CVE-2026-110218", "cvss_base": 6.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Webkul", "product": "Aureus ERP", "cwe": "CWE-862", "title": "Aureus ERP through 1.6.0 Unpublished Blog Post Disclosure via Direct URL", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110218" }, { "rank": 1726, "cve_id": "CVE-2026-110240", "cvss_base": 6.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "duke-git", "product": "lancet", "cwe": "CWE-918", "title": "Lancet through 2.3.9 SSRF Protection Bypass via netutil.IsInternalIP", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110240" }, { "rank": 1727, "cve_id": "CVE-2026-110256", "cvss_base": 6.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Finsys", "product": "dockhand", "cwe": "CWE-90", "title": "Dockhand before 1.0.19 Username Enumeration via LDAP Injection in tryLdapAuth", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110256" }, { "rank": 1728, "cve_id": "CVE-2026-85916", "cvss_base": 6.2, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-359", "title": "Azure Active Directory Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85916" }, { "rank": 1729, "cve_id": "CVE-2026-49264", "cvss_base": 6.1, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "oauthlib", "product": "oauthlib", "cwe": "CWE-79", "title": "OAuthLib: Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-49264" }, { "rank": 1730, "cve_id": "CVE-2026-83500", "cvss_base": 6.1, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-601", "title": "Windows BitLocker Security Feature Bypass Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83500" }, { "rank": 1731, "cve_id": "CVE-2026-102851", "cvss_base": 6.1, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Visual Studio Code", "cwe": "CWE-266", "title": "Visual Studio Code Security Feature Bypass Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102851" }, { "rank": 1732, "cve_id": "CVE-2026-104250", "cvss_base": 6.1, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Unstructured-IO", "product": "unstructured", "cwe": "CWE-79", "title": "unstructured: Stored XSS via unescaped HTML generation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-104250" }, { "rank": 1733, "cve_id": "CVE-2026-106171", "cvss_base": 6.1, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Fortinet", "product": "FortiManager", "cwe": "CWE-78", "title": "A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.6, FortiManager Cloud 7.6.2 through 7.6.6 may allow attacker to escalation of privilege via specially crafted packets", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106171" }, { "rank": 1734, "cve_id": "CVE-2026-107369", "cvss_base": 6.1, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Auth0", "product": "nextjs-auth0", "cwe": "CWE-601", "title": "Improper Validation of Post-Login Redirect URL in nextjs-auth0", "url": "https://www.cve.org/CVERecord?id=CVE-2026-107369" }, { "rank": 1735, "cve_id": "CVE-2026-65131", "cvss_base": 6, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "NVIDIA", "product": "NVSentinel", "cwe": "CWE-306", "title": "NVIDIA NVSentinel for Linux contains a vulnerability in the platform-connectors component, where the gRPC health-event interface, exposed over a world-writable Unix domain socket, lacks authentication. A successful exploit of this vulnerability might lead to denial of service.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65131" }, { "rank": 1736, "cve_id": "CVE-2026-78628", "cvss_base": 6, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Okta", "product": "Okta Credential Provider for Windows", "cwe": "CWE-20", "title": "Improper Input Validation in the Okta Credential Provider for Windows", "url": "https://www.cve.org/CVERecord?id=CVE-2026-78628" }, { "rank": 1737, "cve_id": "CVE-2026-96297", "cvss_base": 6, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "MongoDB", "product": "MongoDB Server", "cwe": "CWE-416", "title": "MongoDB Server may disclose process memory via a crafted `$_internalApplyOplogUpdate` aggregation pipeline", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96297" }, { "rank": 1738, "cve_id": "CVE-2026-104126", "cvss_base": 6, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "jumpserver", "product": "jumpserver", "cwe": "CWE-94", "title": "JumpServer: Ansible Automation Template Rendering Allows Unsafe Lookup Plugin Invocation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-104126" }, { "rank": 1739, "cve_id": "CVE-2026-109679", "cvss_base": 6, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "FreeRDP", "product": "FreeRDP", "cwe": "CWE-476", "title": "FreeRDP 3.0.0-beta4 before 3.32.0 NULL Pointer Crash via ARM Response", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109679" }, { "rank": 1740, "cve_id": "CVE-2026-109680", "cvss_base": 6, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "FreeRDP", "product": "FreeRDP", "cwe": "CWE-787", "title": "FreeRDP 3.18.0 before 3.32.0 Heap Out-of-Bounds Write via ARM Redirected Username", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109680" }, { "rank": 1741, "cve_id": "CVE-2026-109945", "cvss_base": 6, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "FreeRDP", "product": "FreeRDP", "cwe": "CWE-362", "title": "FreeRDP 3.0.0 before 3.32.0 Smartcard Use-After-Free via Concurrent Disconnect and Transmit", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109945" }, { "rank": 1742, "cve_id": "CVE-2026-109952", "cvss_base": 6, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "FreeRDP", "product": "FreeRDP", "cwe": "CWE-757", "title": "FreeRDP 3.0.0 before 3.32.0 Security Protocol Downgrade via Negotiation Response", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109952" }, { "rank": 1743, "cve_id": "CVE-2026-109953", "cvss_base": 6, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "FreeRDP", "product": "FreeRDP", "cwe": "CWE-522", "title": "FreeRDP 3.0.0 before 3.32.0 Cleartext Credential Disclosure via /restricted-admin", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109953" }, { "rank": 1744, "cve_id": "CVE-2026-110210", "cvss_base": 6, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Phase", "product": "Phase Console", "cwe": "CWE-862", "title": "Phase Console through 2.77.3 Missing Authorization via secretHistory GraphQL Query", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110210" }, { "rank": 1745, "cve_id": "CVE-2026-66822", "cvss_base": 5.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": ".NET 10.0", "cwe": "CWE-201", "title": ".NET Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-66822" }, { "rank": 1746, "cve_id": "CVE-2026-69982", "cvss_base": 5.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-1390", "title": "Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69982" }, { "rank": 1747, "cve_id": "CVE-2026-70005", "cvss_base": 5.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows Server 2019", "cwe": "CWE-1390", "title": "Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70005" }, { "rank": 1748, "cve_id": "CVE-2026-70162", "cvss_base": 5.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft Visual Studio 2022 version 17.14", "cwe": "CWE-405", "title": ".NET Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70162" }, { "rank": 1749, "cve_id": "CVE-2026-70196", "cvss_base": 5.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "ASP.NET Core 10.0", "cwe": "CWE-407", "title": "ASP.NET Core Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70196" }, { "rank": 1750, "cve_id": "CVE-2026-85790", "cvss_base": 5.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft Visual Studio 2022 version 17.14", "cwe": "CWE-416", "title": "Microsoft QUIC Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85790" }, { "rank": 1751, "cve_id": "CVE-2026-88099", "cvss_base": 5.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows Server 2019", "cwe": "CWE-248", "title": "Windows Failover Cluster Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88099" }, { "rank": 1752, "cve_id": "CVE-2026-88132", "cvss_base": 5.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Azure Key Vault Client SDK", "cwe": "CWE-346", "title": "Azure Key Vault Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88132" }, { "rank": 1753, "cve_id": "CVE-2026-96300", "cvss_base": 5.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-770", "title": "RPC Endpoint Mapper Service Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96300" }, { "rank": 1754, "cve_id": "CVE-2026-100116", "cvss_base": 5.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Content Credentials Rust SDK", "cwe": "CWE-295", "title": "CAI Content Credentials | Improper Certificate Validation (CWE-295)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100116" }, { "rank": 1755, "cve_id": "CVE-2026-100125", "cvss_base": 5.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Content Credentials Rust SDK", "cwe": "CWE-20", "title": "CAI Content Credentials | Improper Input Validation (CWE-20)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100125" }, { "rank": 1756, "cve_id": "CVE-2026-103294", "cvss_base": 5.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Content Credentials Rust SDK", "cwe": "CWE-295", "title": "CAI Content Credentials | Improper Certificate Validation (CWE-295)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103294" }, { "rank": 1757, "cve_id": "CVE-2026-107605", "cvss_base": 5.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Swann Communications", "product": "SWIFI-SE2KIC", "cwe": "CWE-306", "title": "Missing authentication for critical function in Swann Communications SWIFI-SE2KIC", "url": "https://www.cve.org/CVERecord?id=CVE-2026-107605" }, { "rank": 1758, "cve_id": "CVE-2026-109833", "cvss_base": 5.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", "cwe": "CWE-121", "title": "Gnome-remote-desktop: heap buffer overflow in gnome-remote-desktop vnc tls peek buffer handling allows remote denial of service", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109833" }, { "rank": 1759, "cve_id": "CVE-2026-0893", "cvss_base": 5.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "AMI", "product": "AptioV", "cwe": "CWE-213", "title": "Uncleared Password Keystrokes Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-0893" }, { "rank": 1760, "cve_id": "CVE-2026-84420", "cvss_base": 5.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Citirx", "product": "Citrix Workspace app for Windows", "cwe": "CWE-125", "title": "Out-of-Bounds Write and Out-of-Bounds Read", "url": "https://www.cve.org/CVERecord?id=CVE-2026-84420" }, { "rank": 1761, "cve_id": "CVE-2026-85816", "cvss_base": 5.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Wi-Fi Driver Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85816" }, { "rank": 1762, "cve_id": "CVE-2026-105713", "cvss_base": 5.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SharePoint Server Subscription Edition", "cwe": "CWE-918", "title": "Microsoft Office SharePoint Spoofing Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105713" }, { "rank": 1763, "cve_id": "CVE-2026-106108", "cvss_base": 5.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "quasarframework", "product": "quasar", "cwe": "CWE-22", "title": "Quasar Framework: App Vite SSG page output paths can escape the configured distribution directory", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106108" }, { "rank": 1764, "cve_id": "CVE-2026-69978", "cvss_base": 5.6, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-476", "title": "Microsoft Windows VMSwitch Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69978" }, { "rank": 1765, "cve_id": "CVE-2026-70097", "cvss_base": 5.6, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-362", "title": "Windows Virtualization-Based Security (VBS) Enclave Spoofing Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70097" }, { "rank": 1766, "cve_id": "CVE-2026-83885", "cvss_base": 5.6, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-326", "title": "Windows Virtualization-Based Security (VBS) Enclave Spoofing Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83885" }, { "rank": 1767, "cve_id": "CVE-2026-96865", "cvss_base": 5.6, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-497", "title": "Windows Secure Kernel Mode Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96865" }, { "rank": 1768, "cve_id": "CVE-2026-110231", "cvss_base": 5.6, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "muCommander", "product": "muCommander", "cwe": "CWE-22", "title": "muCommander through 1.6.2 Path Traversal via Archive Extraction to FTP/SFTP", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110231" }, { "rank": 1769, "cve_id": "CVE-2026-10759", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Esri", "product": "Portal for ArcGIS", "cwe": "CWE-90", "title": "BUG-000171040 Portal for ArcGIS has a security vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-10759" }, { "rank": 1770, "cve_id": "CVE-2026-62687", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-59", "title": "Windows Backup Engine Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-62687" }, { "rank": 1771, "cve_id": "CVE-2026-62879", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-306", "title": "Windows SmartScreen Tampering Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-62879" }, { "rank": 1772, "cve_id": "CVE-2026-69644", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-497", "title": "Windows iSCSI Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69644" }, { "rank": 1773, "cve_id": "CVE-2026-69675", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows Server 2012", "cwe": "CWE-125", "title": "Windows Network File System Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69675" }, { "rank": 1774, "cve_id": "CVE-2026-69721", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows iSCSI Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69721" }, { "rank": 1775, "cve_id": "CVE-2026-69905", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-862", "title": "Windows AppX Deployment Service Tampering Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69905" }, { "rank": 1776, "cve_id": "CVE-2026-69914", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-125", "title": "Windows AppX Deployment Service Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69914" }, { "rank": 1777, "cve_id": "CVE-2026-69919", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-125", "title": "Windows Cryptographic Services Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69919" }, { "rank": 1778, "cve_id": "CVE-2026-69954", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-126", "title": "Windows Overlay Filter Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69954" }, { "rank": 1779, "cve_id": "CVE-2026-69967", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Overlay Filter Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69967" }, { "rank": 1780, "cve_id": "CVE-2026-69971", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-863", "title": "Windows Kernel-Mode Drivers Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69971" }, { "rank": 1781, "cve_id": "CVE-2026-69979", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-424", "title": "Windows AppX Deployment Service Security Feature Bypass Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69979" }, { "rank": 1782, "cve_id": "CVE-2026-69999", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-125", "title": "Windows Update Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69999" }, { "rank": 1783, "cve_id": "CVE-2026-70011", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-125", "title": "Windows IP Over USB Service Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70011" }, { "rank": 1784, "cve_id": "CVE-2026-70017", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-843", "title": "Windows Secure Kernel Mode Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70017" }, { "rank": 1785, "cve_id": "CVE-2026-70041", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-126", "title": "Windows CD-ROM Driver Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70041" }, { "rank": 1786, "cve_id": "CVE-2026-70044", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Microsoft Windows Media Foundation Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70044" }, { "rank": 1787, "cve_id": "CVE-2026-70055", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-497", "title": "Windows Cryptographic Services Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70055" }, { "rank": 1788, "cve_id": "CVE-2026-70057", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-863", "title": "Windows Routing and Remote Access Service (RRAS) Security Feature Bypass Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70057" }, { "rank": 1789, "cve_id": "CVE-2026-70071", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-347", "title": "Role: DNS Server Tampering Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70071" }, { "rank": 1790, "cve_id": "CVE-2026-70074", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows DNS Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70074" }, { "rank": 1791, "cve_id": "CVE-2026-70083", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-863", "title": "Role: DNS Server Tampering Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70083" }, { "rank": 1792, "cve_id": "CVE-2026-70084", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-22", "title": "Windows Projected File System Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70084" }, { "rank": 1793, "cve_id": "CVE-2026-70085", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows Server 2012", "cwe": "CWE-862", "title": "Role: DNS Server Tampering Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70085" }, { "rank": 1794, "cve_id": "CVE-2026-70087", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-863", "title": "Role: DNS Server Security Feature Bypass Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70087" }, { "rank": 1795, "cve_id": "CVE-2026-70090", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-908", "title": "Windows Netlogon Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70090" }, { "rank": 1796, "cve_id": "CVE-2026-70128", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-125", "title": "HID Parser Library Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70128" }, { "rank": 1797, "cve_id": "CVE-2026-70135", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Remote POS Driver Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70135" }, { "rank": 1798, "cve_id": "CVE-2026-70137", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-306", "title": "Windows Remote Access Connection Manager Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70137" }, { "rank": 1799, "cve_id": "CVE-2026-70141", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Microsoft Windows Search Component Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70141" }, { "rank": 1800, "cve_id": "CVE-2026-70173", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Microsoft Windows Search Component Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70173" }, { "rank": 1801, "cve_id": "CVE-2026-70199", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-497", "title": "Windows Kernel Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70199" }, { "rank": 1802, "cve_id": "CVE-2026-70201", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows Server 2012", "cwe": "CWE-125", "title": "Windows DHCP Server Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70201" }, { "rank": 1803, "cve_id": "CVE-2026-70208", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "HTTP.sys Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70208" }, { "rank": 1804, "cve_id": "CVE-2026-70211", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Win32k Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70211" }, { "rank": 1805, "cve_id": "CVE-2026-70214", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-125", "title": "Microsoft Office Excel Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70214" }, { "rank": 1806, "cve_id": "CVE-2026-70216", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-1220", "title": "Windows Mobile Device Management Tampering Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70216" }, { "rank": 1807, "cve_id": "CVE-2026-70227", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-125", "title": "Windows Device Association Service Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70227" }, { "rank": 1808, "cve_id": "CVE-2026-70232", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-497", "title": "Windows Kernel Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70232" }, { "rank": 1809, "cve_id": "CVE-2026-70234", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-126", "title": "Desktop Window Manager Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70234" }, { "rank": 1810, "cve_id": "CVE-2026-70235", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-862", "title": "Windows Event Tracing Spoofing Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70235" }, { "rank": 1811, "cve_id": "CVE-2026-70260", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-497", "title": "Microsoft Trace Data Helper Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70260" }, { "rank": 1812, "cve_id": "CVE-2026-70261", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-497", "title": "Microsoft Trace Data Helper Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70261" }, { "rank": 1813, "cve_id": "CVE-2026-70264", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows Defender", "cwe": "CWE-59", "title": "Microsoft Defender Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70264" }, { "rank": 1814, "cve_id": "CVE-2026-70270", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-822", "title": "Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70270" }, { "rank": 1815, "cve_id": "CVE-2026-70277", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Fast FAT File System Driver Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70277" }, { "rank": 1816, "cve_id": "CVE-2026-70284", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-908", "title": "Win32k Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70284" }, { "rank": 1817, "cve_id": "CVE-2026-70288", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-367", "title": "Win32k Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70288" }, { "rank": 1818, "cve_id": "CVE-2026-70292", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Win32k Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70292" }, { "rank": 1819, "cve_id": "CVE-2026-70293", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-908", "title": "Win32k Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70293" }, { "rank": 1820, "cve_id": "CVE-2026-70294", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-20", "title": "Win32k Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70294" }, { "rank": 1821, "cve_id": "CVE-2026-70295", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Win32k Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70295" }, { "rank": 1822, "cve_id": "CVE-2026-79715", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "WebSphere Application Server - Liberty", "cwe": "CWE-22", "title": "IBM WebSphere Application Server Liberty Path Traversal", "url": "https://www.cve.org/CVERecord?id=CVE-2026-79715" }, { "rank": 1823, "cve_id": "CVE-2026-81964", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-798", "title": "Windows Update Orchestrator Service Security Feature Bypass Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-81964" }, { "rank": 1824, "cve_id": "CVE-2026-83507", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-59", "title": "Windows Update Orchestrator Service Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83507" }, { "rank": 1825, "cve_id": "CVE-2026-83565", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-126", "title": "Windows Encrypting File System (EFS) Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83565" }, { "rank": 1826, "cve_id": "CVE-2026-83571", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-476", "title": "Windows Audio Service Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83571" }, { "rank": 1827, "cve_id": "CVE-2026-83657", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-1390", "title": "Windows Modern Device Management (MDM) Tampering Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83657" }, { "rank": 1828, "cve_id": "CVE-2026-83658", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-862", "title": "Windows Error Reporting Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83658" }, { "rank": 1829, "cve_id": "CVE-2026-83664", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-843", "title": "Windows Portable Device File System Driver Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83664" }, { "rank": 1830, "cve_id": "CVE-2026-83668", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows WLAN Service Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83668" }, { "rank": 1831, "cve_id": "CVE-2026-83681", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft PowerToys", "cwe": "CWE-1390", "title": "Microsoft PowerToys Tampering Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83681" }, { "rank": 1832, "cve_id": "CVE-2026-83686", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Microsoft Windows Search Component Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83686" }, { "rank": 1833, "cve_id": "CVE-2026-83695", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-908", "title": "Windows Event Logging Service Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83695" }, { "rank": 1834, "cve_id": "CVE-2026-83705", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-497", "title": "HTTP.sys Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83705" }, { "rank": 1835, "cve_id": "CVE-2026-83713", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-497", "title": "Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83713" }, { "rank": 1836, "cve_id": "CVE-2026-83714", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-908", "title": "HTTP.sys Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83714" }, { "rank": 1837, "cve_id": "CVE-2026-83719", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-126", "title": "Servicing Stack Updates Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83719" }, { "rank": 1838, "cve_id": "CVE-2026-83723", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-908", "title": "Windows Event Logging Service Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83723" }, { "rank": 1839, "cve_id": "CVE-2026-83733", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Print Spooler Components Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83733" }, { "rank": 1840, "cve_id": "CVE-2026-83736", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-122", "title": "Windows Kernel Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83736" }, { "rank": 1841, "cve_id": "CVE-2026-83737", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows NTFS Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83737" }, { "rank": 1842, "cve_id": "CVE-2026-83747", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Error Reporting Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83747" }, { "rank": 1843, "cve_id": "CVE-2026-83755", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-908", "title": "Win32k Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83755" }, { "rank": 1844, "cve_id": "CVE-2026-83760", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Microsoft Bluetooth Driver Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83760" }, { "rank": 1845, "cve_id": "CVE-2026-83764", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-863", "title": "Windows Clipboard User Service Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83764" }, { "rank": 1846, "cve_id": "CVE-2026-83765", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows DWM Core Library Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83765" }, { "rank": 1847, "cve_id": "CVE-2026-83773", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-497", "title": "Windows MIDI Service Module Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83773" }, { "rank": 1848, "cve_id": "CVE-2026-83787", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-288", "title": "Windows DHCP Server Security Feature Bypass Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83787" }, { "rank": 1849, "cve_id": "CVE-2026-83794", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Portable Device MTP Driver Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83794" }, { "rank": 1850, "cve_id": "CVE-2026-83798", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-20", "title": "Windows Update Stack Spoofing Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83798" }, { "rank": 1851, "cve_id": "CVE-2026-83835", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-126", "title": "Windows Common Log File System Driver Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83835" }, { "rank": 1852, "cve_id": "CVE-2026-83849", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-125", "title": "Windows Hello Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83849" }, { "rank": 1853, "cve_id": "CVE-2026-83854", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-306", "title": "Windows Notification Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83854" }, { "rank": 1854, "cve_id": "CVE-2026-83864", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-290", "title": "Windows NTFS Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83864" }, { "rank": 1855, "cve_id": "CVE-2026-83870", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-125", "title": "Windows Aggregated Data Platform Service Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83870" }, { "rank": 1856, "cve_id": "CVE-2026-83875", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-125", "title": "Windows Human Interface Device Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83875" }, { "rank": 1857, "cve_id": "CVE-2026-83884", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-125", "title": "Windows Human Interface Device Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83884" }, { "rank": 1858, "cve_id": "CVE-2026-83887", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-125", "title": "HID Parser Library Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83887" }, { "rank": 1859, "cve_id": "CVE-2026-83892", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-125", "title": "Windows Human Interface Device Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83892" }, { "rank": 1860, "cve_id": "CVE-2026-83893", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-497", "title": "Windows Clipboard User Service Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83893" }, { "rank": 1861, "cve_id": "CVE-2026-83898", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-125", "title": "HID Parser Library Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83898" }, { "rank": 1862, "cve_id": "CVE-2026-83904", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-125", "title": "HID Parser Library Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83904" }, { "rank": 1863, "cve_id": "CVE-2026-83907", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-497", "title": "Windows Hello Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83907" }, { "rank": 1864, "cve_id": "CVE-2026-83933", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-59", "title": "Windows Update Orchestrator Service Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83933" }, { "rank": 1865, "cve_id": "CVE-2026-84011", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-863", "title": "Windows SMB Client Security Feature Bypass Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-84011" }, { "rank": 1866, "cve_id": "CVE-2026-85320", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-908", "title": "Windows Print Spooler Components Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85320" }, { "rank": 1867, "cve_id": "CVE-2026-85336", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Device Association Service Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85336" }, { "rank": 1868, "cve_id": "CVE-2026-85374", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Installer Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85374" }, { "rank": 1869, "cve_id": "CVE-2026-85793", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-497", "title": "Windows Sysmain Service Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85793" }, { "rank": 1870, "cve_id": "CVE-2026-85794", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85794" }, { "rank": 1871, "cve_id": "CVE-2026-85812", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-552", "title": "Windows Bind Filter Driver Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85812" }, { "rank": 1872, "cve_id": "CVE-2026-85815", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Device Association Service Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85815" }, { "rank": 1873, "cve_id": "CVE-2026-85830", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Installer Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85830" }, { "rank": 1874, "cve_id": "CVE-2026-85831", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-122", "title": "Windows Biometric Service Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85831" }, { "rank": 1875, "cve_id": "CVE-2026-85835", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-126", "title": "Servicing Stack Updates Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85835" }, { "rank": 1876, "cve_id": "CVE-2026-85852", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Management Instrumentation Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85852" }, { "rank": 1877, "cve_id": "CVE-2026-85857", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-532", "title": "Windows Kernel-Mode Drivers Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85857" }, { "rank": 1878, "cve_id": "CVE-2026-85865", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-288", "title": "Windows DHCP Server Security Feature Bypass Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85865" }, { "rank": 1879, "cve_id": "CVE-2026-85909", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-822", "title": "Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85909" }, { "rank": 1880, "cve_id": "CVE-2026-85910", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-126", "title": "Windows StateRepository API Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85910" }, { "rank": 1881, "cve_id": "CVE-2026-85935", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-126", "title": "Windows USB Driver Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85935" }, { "rank": 1882, "cve_id": "CVE-2026-85938", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-862", "title": "Windows Broadcast DVR User Service Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85938" }, { "rank": 1883, "cve_id": "CVE-2026-87698", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Remote Access Service Infrastructure Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87698" }, { "rank": 1884, "cve_id": "CVE-2026-87709", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-250", "title": "Windows Host Guardian Service Tampering Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87709" }, { "rank": 1885, "cve_id": "CVE-2026-88140", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Key Storage Provider Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88140" }, { "rank": 1886, "cve_id": "CVE-2026-88158", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Microsoft Digest Authentication Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88158" }, { "rank": 1887, "cve_id": "CVE-2026-88162", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-863", "title": "Windows Encrypting File System (EFS) Tampering Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88162" }, { "rank": 1888, "cve_id": "CVE-2026-88838", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat Hardened Images", "cwe": "CWE-693", "title": "Busybox: busybox: non-root mount option filter bypass allows clearing fstab security restrictions", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88838" }, { "rank": 1889, "cve_id": "CVE-2026-95640", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Photoshop", "cwe": "CWE-476", "title": "Photoshop Desktop | NULL Pointer Dereference (CWE-476)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-95640" }, { "rank": 1890, "cve_id": "CVE-2026-95904", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-126", "title": "Windows Event Logging Service Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-95904" }, { "rank": 1891, "cve_id": "CVE-2026-96183", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-306", "title": "Windows Health and Optimized Experiences Service Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96183" }, { "rank": 1892, "cve_id": "CVE-2026-96218", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-15", "title": "Windows Update Stack Tampering Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96218" }, { "rank": 1893, "cve_id": "CVE-2026-96247", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-908", "title": "Windows Kernel-Mode Drivers Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96247" }, { "rank": 1894, "cve_id": "CVE-2026-96311", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-862", "title": "Windows Network List Service Tampering Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96311" }, { "rank": 1895, "cve_id": "CVE-2026-96314", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Audio Service Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96314" }, { "rank": 1896, "cve_id": "CVE-2026-96315", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-862", "title": "Windows Overlay Filter Tampering Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96315" }, { "rank": 1897, "cve_id": "CVE-2026-96316", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-862", "title": "Windows Routing and Remote Access Service (RRAS) Tampering Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96316" }, { "rank": 1898, "cve_id": "CVE-2026-96321", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-125", "title": "Remote Desktop Display Driver Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96321" }, { "rank": 1899, "cve_id": "CVE-2026-96846", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "WebDAV Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96846" }, { "rank": 1900, "cve_id": "CVE-2026-96848", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-126", "title": "Windows Win32 Kernel Subsystem Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96848" }, { "rank": 1901, "cve_id": "CVE-2026-96849", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 26H1", "cwe": "CWE-908", "title": "Windows Kernel-Mode Drivers Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96849" }, { "rank": 1902, "cve_id": "CVE-2026-96850", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-170", "title": "Windows Modern Device Management (MDM) Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96850" }, { "rank": 1903, "cve_id": "CVE-2026-96851", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-126", "title": "Windows Management Instrumentation Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96851" }, { "rank": 1904, "cve_id": "CVE-2026-96854", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-843", "title": "Windows Device Association Service Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96854" }, { "rank": 1905, "cve_id": "CVE-2026-96855", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-862", "title": "Windows Modern Device Management (MDM) Tampering Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96855" }, { "rank": 1906, "cve_id": "CVE-2026-96857", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-552", "title": "Windows Projected File System Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96857" }, { "rank": 1907, "cve_id": "CVE-2026-96858", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-306", "title": "Windows Security Account Manager Tampering Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96858" }, { "rank": 1908, "cve_id": "CVE-2026-96859", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Imaging Component Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96859" }, { "rank": 1909, "cve_id": "CVE-2026-96860", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows USB Print Driver Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96860" }, { "rank": 1910, "cve_id": "CVE-2026-96910", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-822", "title": "Microsoft Windows Search Component Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96910" }, { "rank": 1911, "cve_id": "CVE-2026-96921", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-843", "title": "Windows Message Queuing Queue Manager Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96921" }, { "rank": 1912, "cve_id": "CVE-2026-96925", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-191", "title": "Windows NTFS Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96925" }, { "rank": 1913, "cve_id": "CVE-2026-96926", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-862", "title": "Role: DNS Server Tampering Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96926" }, { "rank": 1914, "cve_id": "CVE-2026-96927", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows NTFS Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96927" }, { "rank": 1915, "cve_id": "CVE-2026-96930", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96930" }, { "rank": 1916, "cve_id": "CVE-2026-96935", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-497", "title": "Windows NTFS Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96935" }, { "rank": 1917, "cve_id": "CVE-2026-96944", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-538", "title": "Windows Storage Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96944" }, { "rank": 1918, "cve_id": "CVE-2026-96948", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-497", "title": "Windows Client Side Caching driver (csc.sys) Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96948" }, { "rank": 1919, "cve_id": "CVE-2026-97005", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-125", "title": "Microsoft Office PowerPoint Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97005" }, { "rank": 1920, "cve_id": "CVE-2026-97014", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-125", "title": "Microsoft Office Excel Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97014" }, { "rank": 1921, "cve_id": "CVE-2026-97744", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-125", "title": "Microsoft Office PowerPoint Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97744" }, { "rank": 1922, "cve_id": "CVE-2026-97790", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-59", "title": "Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97790" }, { "rank": 1923, "cve_id": "CVE-2026-100126", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Bridge", "cwe": "CWE-125", "title": "Bridge | Out-of-bounds Read (CWE-125)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100126" }, { "rank": 1924, "cve_id": "CVE-2026-100130", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Substance 3D Sampler", "cwe": "CWE-125", "title": "Substance3D - Sampler | Out-of-bounds Read (CWE-125)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100130" }, { "rank": 1925, "cve_id": "CVE-2026-100131", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Substance 3D Sampler", "cwe": "CWE-125", "title": "Substance3D - Sampler | Out-of-bounds Read (CWE-125)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100131" }, { "rank": 1926, "cve_id": "CVE-2026-102187", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-908", "title": "Windows Kernel Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102187" }, { "rank": 1927, "cve_id": "CVE-2026-102734", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "lmfit", "product": "asteval", "cwe": "CWE-693", "title": "asteval sandbox escape: arbitrary native memory read/write via numpy ctypes in default asteval Interpreter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102734" }, { "rank": 1928, "cve_id": "CVE-2026-103560", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows Server 2012", "cwe": "CWE-862", "title": "Role: DNS Server Tampering Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103560" }, { "rank": 1929, "cve_id": "CVE-2026-103567", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-126", "title": "Windows Broadcast DVR User Service Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103567" }, { "rank": 1930, "cve_id": "CVE-2026-103820", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Content Credentials Rust SDK", "cwe": "CWE-22", "title": "CAI Content Credentials | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103820" }, { "rank": 1931, "cve_id": "CVE-2026-103822", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Substance 3D Designer", "cwe": "CWE-125", "title": "Substance3D - Designer | Out-of-bounds Read (CWE-125)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103822" }, { "rank": 1932, "cve_id": "CVE-2026-103823", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Substance 3D Designer", "cwe": "CWE-121", "title": "Substance3D - Designer | Stack-based Buffer Overflow (CWE-121)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103823" }, { "rank": 1933, "cve_id": "CVE-2026-103824", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Substance 3D Designer", "cwe": "CWE-476", "title": "Substance3D - Designer | NULL Pointer Dereference (CWE-476)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103824" }, { "rank": 1934, "cve_id": "CVE-2026-103825", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Substance 3D Designer", "cwe": "CWE-125", "title": "Substance3D - Designer | Out-of-bounds Read (CWE-125)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103825" }, { "rank": 1935, "cve_id": "CVE-2026-103826", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Substance 3D Designer", "cwe": "CWE-476", "title": "Substance3D - Designer | NULL Pointer Dereference (CWE-476)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103826" }, { "rank": 1936, "cve_id": "CVE-2026-103827", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Substance 3D Designer", "cwe": "CWE-121", "title": "Substance3D - Designer | Stack-based Buffer Overflow (CWE-121)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103827" }, { "rank": 1937, "cve_id": "CVE-2026-103828", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Substance 3D Designer", "cwe": "CWE-476", "title": "Substance3D - Designer | NULL Pointer Dereference (CWE-476)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103828" }, { "rank": 1938, "cve_id": "CVE-2026-103829", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Substance 3D Designer", "cwe": "CWE-476", "title": "Substance3D - Designer | NULL Pointer Dereference (CWE-476)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103829" }, { "rank": 1939, "cve_id": "CVE-2026-103850", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Substance 3D Stager", "cwe": "CWE-125", "title": "Substance3D - Stager | Out-of-bounds Read (CWE-125)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103850" }, { "rank": 1940, "cve_id": "CVE-2026-103852", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Substance 3D Stager", "cwe": "CWE-476", "title": "Substance3D - Stager | NULL Pointer Dereference (CWE-476)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103852" }, { "rank": 1941, "cve_id": "CVE-2026-103853", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Dimension", "cwe": "CWE-125", "title": "Dimension | Out-of-bounds Read (CWE-125)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103853" }, { "rank": 1942, "cve_id": "CVE-2026-103855", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Dimension", "cwe": "CWE-476", "title": "Dimension | NULL Pointer Dereference (CWE-476)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103855" }, { "rank": 1943, "cve_id": "CVE-2026-103856", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe FrameMaker 2026", "cwe": "CWE-125", "title": "Adobe Framemaker | Out-of-bounds Read (CWE-125)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103856" }, { "rank": 1944, "cve_id": "CVE-2026-103857", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe FrameMaker 2026", "cwe": "CWE-125", "title": "Adobe Framemaker | Out-of-bounds Read (CWE-125)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103857" }, { "rank": 1945, "cve_id": "CVE-2026-104343", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe FrameMaker 2026", "cwe": "CWE-476", "title": "Adobe Framemaker | NULL Pointer Dereference (CWE-476)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-104343" }, { "rank": 1946, "cve_id": "CVE-2026-105460", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", "cwe": "CWE-125", "title": "Bluez: bluez: stack-based out-of-bounds read in btmon via unvalidated num_keys in return_link_keys_evt()", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105460" }, { "rank": 1947, "cve_id": "CVE-2026-105726", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft Defender for Endpoint for Windows", "cwe": "CWE-125", "title": "Microsoft Defender Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105726" }, { "rank": 1948, "cve_id": "CVE-2026-105731", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft Office for Android", "cwe": "CWE-908", "title": "Microsoft Office Graphics Component Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105731" }, { "rank": 1949, "cve_id": "CVE-2026-105896", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Photoshop", "cwe": "CWE-476", "title": "Photoshop Desktop | NULL Pointer Dereference (CWE-476)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105896" }, { "rank": 1950, "cve_id": "CVE-2026-106035", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Ivanti", "product": "Xtraction", "cwe": "CWE-532", "title": "An Information Exposure Through Log Files vulnerability in Ivanti Xtraction Cloud Sync before version 2026.4 allows a remote authenticated attacker to disclose partial SQL database passwords through application log.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106035" }, { "rank": 1951, "cve_id": "CVE-2026-108462", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-497", "title": "Windows Kernel Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108462" }, { "rank": 1952, "cve_id": "CVE-2026-109149", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "beautifier", "product": "js-beautify", "cwe": "CWE-400", "title": "beautifier js-beautify memory allocation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109149" }, { "rank": 1953, "cve_id": "CVE-2026-109403", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "conductor-oss", "product": "conductor", "cwe": "CWE-918", "title": "conductor-oss conductor Agent Card Fetching A2AService.java A2AService.getAgentCard server-side request forgery", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109403" }, { "rank": 1954, "cve_id": "CVE-2026-109404", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "conductor-oss", "product": "conductor", "cwe": "CWE-918", "title": "conductor-oss conductor Agentspan Agent Runtime AgentController.java server-side request forgery", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109404" }, { "rank": 1955, "cve_id": "CVE-2026-109405", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "conductor-oss", "product": "conductor", "cwe": "CWE-918", "title": "conductor-oss conductor KafkaPublishTask.java KafkaPublishTask.start server-side request forgery", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109405" }, { "rank": 1956, "cve_id": "CVE-2026-109521", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "girishsaraf", "product": "Online-Appointment-Booking-System", "cwe": "CWE-74", "title": "girishsaraf Online-Appointment-Booking-System changebookingstatus.php sql injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109521" }, { "rank": 1957, "cve_id": "CVE-2026-109522", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "girishsaraf", "product": "Online-Appointment-Booking-System", "cwe": "CWE-74", "title": "girishsaraf Online-Appointment-Booking-System Admin CRUD Endpoint deleteclinic.php sql injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109522" }, { "rank": 1958, "cve_id": "CVE-2026-109523", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "girishsaraf", "product": "Online-Appointment-Booking-System", "cwe": "CWE-74", "title": "girishsaraf Online-Appointment-Booking-System AJAX Endpoint getclinic.php sql injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109523" }, { "rank": 1959, "cve_id": "CVE-2026-109524", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "girishsaraf", "product": "Online-Appointment-Booking-System", "cwe": "CWE-862", "title": "girishsaraf Online-Appointment-Booking-System Admin Display Pages showdoctor.php authorization", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109524" }, { "rank": 1960, "cve_id": "CVE-2026-109525", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "girishsaraf", "product": "Online-Appointment-Booking-System", "cwe": "CWE-862", "title": "girishsaraf Online-Appointment-Booking-System submit2 changebookingstatus.php authorization", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109525" }, { "rank": 1961, "cve_id": "CVE-2026-109605", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "SourceCodester", "product": "Simple Cafe Billing System", "cwe": "CWE-266", "title": "SourceCodester Simple Cafe Billing System User Management admin_class.php save_user improper authorization", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109605" }, { "rank": 1962, "cve_id": "CVE-2026-109606", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "SourceCodester", "product": "Art Gallery Management System", "cwe": "CWE-74", "title": "SourceCodester Art Gallery Management System Account Creation admin_class.php save_user sql injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109606" }, { "rank": 1963, "cve_id": "CVE-2026-109607", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "SourceCodester", "product": "Online Exam System", "cwe": "CWE-74", "title": "SourceCodester Online Exam System Login Endpoint loginExe.php sql injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109607" }, { "rank": 1964, "cve_id": "CVE-2026-109620", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "SourceCodester", "product": "Online Reviewer System", "cwe": "CWE-74", "title": "SourceCodester Online Reviewer System index.php prepare sql injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109620" }, { "rank": 1965, "cve_id": "CVE-2026-4869", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Flexera", "product": "InstallShield", "cwe": "CWE-426", "title": "Potential Privilege Escalation in InstallShield", "url": "https://www.cve.org/CVERecord?id=CVE-2026-4869" }, { "rank": 1966, "cve_id": "CVE-2026-11713", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "WebSphere Application Server - Liberty", "cwe": "CWE-863", "title": "IBM WebSphere Application Server Liberty Incorrect Authorization", "url": "https://www.cve.org/CVERecord?id=CVE-2026-11713" }, { "rank": 1967, "cve_id": "CVE-2026-19810", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Broadcom", "product": "Symantec Endpoint Detection and Response", "cwe": "CWE-79", "title": "Cross-Site Scripting (XSS) in Symantec Endpoint Detection and Response Console", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19810" }, { "rank": 1968, "cve_id": "CVE-2026-48398", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Experience Manager 6.5", "cwe": "CWE-79", "title": "Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48398" }, { "rank": 1969, "cve_id": "CVE-2026-56826", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "shopperlabs", "product": "shopper", "cwe": "CWE-862", "title": "Shopper: Missing function-level authorization on Settings tax/zone/shipping Livewire components allows a low-privileged user to delete commerce configuration", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56826" }, { "rank": 1970, "cve_id": "CVE-2026-65199", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Huawei", "product": "openBMC", "cwe": "CWE-266", "title": "Huawei openUBMC low-privilege SNMP to administrator privilege escalation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65199" }, { "rank": 1971, "cve_id": "CVE-2026-83958", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Experience Manager as a Cloud Service", "cwe": "CWE-79", "title": "Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83958" }, { "rank": 1972, "cve_id": "CVE-2026-83960", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Experience Manager as a Cloud Service", "cwe": "CWE-79", "title": "Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83960" }, { "rank": 1973, "cve_id": "CVE-2026-102342", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "rust-ammonia", "product": "ammonia", "cwe": "CWE-79", "title": "ammonia allows stored XSS through unsanitized SVG animate and set attributes", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102342" }, { "rank": 1974, "cve_id": "CVE-2026-106628", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Experience Manager 6.5 LTS", "cwe": "CWE-79", "title": "Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106628" }, { "rank": 1975, "cve_id": "CVE-2026-106631", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Experience Manager 6.5 LTS", "cwe": "CWE-79", "title": "Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106631" }, { "rank": 1976, "cve_id": "CVE-2026-106632", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Experience Manager 6.5 LTS", "cwe": "CWE-79", "title": "Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106632" }, { "rank": 1977, "cve_id": "CVE-2026-106633", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Experience Manager 6.5 LTS", "cwe": "CWE-79", "title": "Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106633" }, { "rank": 1978, "cve_id": "CVE-2026-107305", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Experience Manager 6.5", "cwe": "CWE-79", "title": "Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-107305" }, { "rank": 1979, "cve_id": "CVE-2026-107371", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Auth0", "product": "auth0.js", "cwe": "CWE-613", "title": "Missing Verification of auth_time Claim in auth0.js", "url": "https://www.cve.org/CVERecord?id=CVE-2026-107371" }, { "rank": 1980, "cve_id": "CVE-2026-107682", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Experience Manager 6.5", "cwe": "CWE-79", "title": "Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-107682" }, { "rank": 1981, "cve_id": "CVE-2026-109415", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Experience Manager 6.5 LTS", "cwe": "CWE-79", "title": "Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109415" }, { "rank": 1982, "cve_id": "CVE-2026-109706", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": "CWE-416", "title": "Use-after-free in the Storage: IndexedDB component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109706" }, { "rank": 1983, "cve_id": "CVE-2026-109710", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": "CWE-416", "title": "Use-after-free in the Graphics: Text component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109710" }, { "rank": 1984, "cve_id": "CVE-2026-109711", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": "CWE-416", "title": "Use-after-free in the Graphics: Canvas2D component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109711" }, { "rank": 1985, "cve_id": "CVE-2026-109713", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": "CWE-416", "title": "Use-after-free in the Crash Reporting component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109713" }, { "rank": 1986, "cve_id": "CVE-2026-109717", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": "CWE-416", "title": "Use-after-free in the DOM: Bindings (WebIDL) component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109717" }, { "rank": 1987, "cve_id": "CVE-2026-109718", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": "CWE-416", "title": "Use-after-free in the XML component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109718" }, { "rank": 1988, "cve_id": "CVE-2026-109724", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": "CWE-416", "title": "Use-after-free in the DOM: Core & HTML component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109724" }, { "rank": 1989, "cve_id": "CVE-2026-109725", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": "CWE-416", "title": "Use-after-free in the DOM: Core & HTML component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109725" }, { "rank": 1990, "cve_id": "CVE-2026-109726", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": "CWE-416", "title": "Use-after-free in the SVG component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109726" }, { "rank": 1991, "cve_id": "CVE-2026-109727", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": "CWE-416", "title": "Use-after-free in the Audio/Video component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109727" }, { "rank": 1992, "cve_id": "CVE-2026-109728", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": "CWE-416", "title": "Use-after-free in the DOM: Animation component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109728" }, { "rank": 1993, "cve_id": "CVE-2026-109729", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": "CWE-416", "title": "Use-after-free in the JavaScript Engine: JIT component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109729" }, { "rank": 1994, "cve_id": "CVE-2026-109732", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": "CWE-416", "title": "Use-after-free in the DOM: Streams component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109732" }, { "rank": 1995, "cve_id": "CVE-2026-109735", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": "CWE-416", "title": "Use-after-free in the DOM: Animation component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109735" }, { "rank": 1996, "cve_id": "CVE-2026-109738", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": "CWE-416", "title": "Use-after-free in the Audio/Video: Playback component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109738" }, { "rank": 1997, "cve_id": "CVE-2026-109741", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": "CWE-416", "title": "Use-after-free in the Storage: Bucket File System component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109741" }, { "rank": 1998, "cve_id": "CVE-2026-109748", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": "CWE-416", "title": "Use-after-free in the JavaScript: WebAssembly component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109748" }, { "rank": 1999, "cve_id": "CVE-2026-109749", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": "CWE-416", "title": "Use-after-free in the JavaScript: WebAssembly component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109749" }, { "rank": 2000, "cve_id": "CVE-2026-109752", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": "CWE-416", "title": "Use-after-free in the DOM: Workers component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109752" }, { "rank": 2001, "cve_id": "CVE-2026-109761", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": "CWE-416", "title": "Use-after-free in the JavaScript: WebAssembly component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109761" }, { "rank": 2002, "cve_id": "CVE-2026-110037", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Experience Manager 6.5 LTS", "cwe": "CWE-79", "title": "Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110037" }, { "rank": 2003, "cve_id": "CVE-2026-110073", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Experience Manager 6.5", "cwe": "CWE-79", "title": "Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110073" }, { "rank": 2004, "cve_id": "CVE-2026-110074", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Experience Manager 6.5 LTS", "cwe": "CWE-79", "title": "Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110074" }, { "rank": 2005, "cve_id": "CVE-2026-110075", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Experience Manager 6.5", "cwe": "CWE-79", "title": "Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110075" }, { "rank": 2006, "cve_id": "CVE-2026-110076", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Experience Manager 6.5", "cwe": "CWE-79", "title": "Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110076" }, { "rank": 2007, "cve_id": "CVE-2026-110077", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Experience Manager 6.5", "cwe": "CWE-79", "title": "Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110077" }, { "rank": 2008, "cve_id": "CVE-2026-110078", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Experience Manager 6.5", "cwe": "CWE-79", "title": "Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110078" }, { "rank": 2009, "cve_id": "CVE-2026-110079", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Experience Manager 6.5", "cwe": "CWE-79", "title": "Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110079" }, { "rank": 2010, "cve_id": "CVE-2026-110080", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Experience Manager 6.5", "cwe": "CWE-79", "title": "Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110080" }, { "rank": 2011, "cve_id": "CVE-2026-110081", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Experience Manager 6.5 LTS", "cwe": "CWE-79", "title": "Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110081" }, { "rank": 2012, "cve_id": "CVE-2026-110082", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Experience Manager 6.5 LTS", "cwe": "CWE-79", "title": "Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110082" }, { "rank": 2013, "cve_id": "CVE-2026-48377", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Content Credentials Rust SDK", "cwe": "CWE-20", "title": "CAI Content Credentials | Improper Input Validation (CWE-20)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48377" }, { "rank": 2014, "cve_id": "CVE-2026-48378", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Content Credentials Rust SDK", "cwe": "CWE-20", "title": "CAI Content Credentials | Improper Input Validation (CWE-20)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48378" }, { "rank": 2015, "cve_id": "CVE-2026-54086", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "esa", "product": "sleapi-j", "cwe": "CWE-770", "title": "SLE API for Java: Uncontrolled Memory Allocation / handled exception leading to Denial of Service", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54086" }, { "rank": 2016, "cve_id": "CVE-2026-63169", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Omnispace", "product": "Agora Project", "cwe": "CWE-79", "title": "Omnispace Agora Project < 26.10.0 Stored XSS via Messenger Iframe", "url": "https://www.cve.org/CVERecord?id=CVE-2026-63169" }, { "rank": 2017, "cve_id": "CVE-2026-63351", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Siemens", "product": "SIMATIC Drive Controller CPU 1504D TF", "cwe": "CWE-79", "title": "Affected devices do not properly validate and sanitize visual properties of calculated signals contained in imported CSV trace files before rendering them on the Trace page. This could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” into importing a specially crafted trace file. Successful exploitation could allow attacker-controlled JavaScript to execute in the user’s browser session and perform PLC operations through the web server within the scope of the user’s authorization.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-63351" }, { "rank": 2018, "cve_id": "CVE-2026-63352", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Siemens", "product": "SIMATIC Drive Controller CPU 1504D TF", "cwe": "CWE-79", "title": "Affected devices do not properly sanitize calculated signal data contained in imported CSV trace files before rendering it on the Trace page. This could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” into importing a specially crafted trace file. Successful exploitation could allow attacker-controlled JavaScript to execute in the user’s browser session and perform PLC operations through the web server within the scope of the user’s authorization.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-63352" }, { "rank": 2019, "cve_id": "CVE-2026-63355", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Siemens", "product": "SIMATIC Drive Controller CPU 1504D TF", "cwe": "CWE-79", "title": "Affected devices do not properly sanitize signal names contained in imported CSV trace files before rendering them in selection menus on the Trace page. This could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” into importing a specially crafted trace file. Attacker-controlled JavaScript could be executed in the user’s browser session when the user subsequently interacts with an affected selection menu.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-63355" }, { "rank": 2020, "cve_id": "CVE-2026-63356", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Siemens", "product": "SIMATIC Drive Controller CPU 1504D TF", "cwe": "CWE-79", "title": "Affected devices do not properly sanitize calculated signal names contained in imported CSV trace files before including them in error messages on the Trace page. This could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” into importing a specially crafted trace file. Attacker-controlled JavaScript could be executed in the user’s browser session when the resulting error message is displayed.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-63356" }, { "rank": 2021, "cve_id": "CVE-2026-63357", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Siemens", "product": "SIMATIC Drive Controller CPU 1504D TF", "cwe": "CWE-79", "title": "Affected devices do not properly sanitize calculated signal data contained in imported calculated signal files before rendering it on the Trace page. This could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” into importing a specially crafted file. Successful exploitation could allow attacker-controlled JavaScript to execute in the user’s browser session and perform PLC operations through the web server within the scope of the user’s authorization.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-63357" }, { "rank": 2022, "cve_id": "CVE-2026-69640", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-863", "title": "Windows Key Distribution Center Security Feature Bypass Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69640" }, { "rank": 2023, "cve_id": "CVE-2026-70025", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Netlogon Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70025" }, { "rank": 2024, "cve_id": "CVE-2026-74032", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Wazuh", "product": "wazuh-manager", "cwe": "CWE-863", "title": "Wazuh 4.0.0 before 4.14.8 RBAC Authorization Bypass via /security/actions", "url": "https://www.cve.org/CVERecord?id=CVE-2026-74032" }, { "rank": 2025, "cve_id": "CVE-2026-78632", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Okta", "product": "Okta RADIUS Agent", "cwe": "CWE-732", "title": "Insecure Default File Permissions in Okta RADIUS Agent Windows Installer", "url": "https://www.cve.org/CVERecord?id=CVE-2026-78632" }, { "rank": 2026, "cve_id": "CVE-2026-85473", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Auth0", "product": "java-jwt", "cwe": "CWE-20", "title": "Out-of-Range Timestamp Claim Handling in auth0/java-jwt", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85473" }, { "rank": 2027, "cve_id": "CVE-2026-85733", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "php", "product": "frankenphp", "cwe": "CWE-200", "title": "FrankenPHP: Docker images serve phpinfo() as the default index.php, leaking environment variables", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85733" }, { "rank": 2028, "cve_id": "CVE-2026-85939", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-1390", "title": "Windows Kernel Security Feature Bypass Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85939" }, { "rank": 2029, "cve_id": "CVE-2026-88084", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SQL Server 2019 (GDR)", "cwe": "CWE-770", "title": "Microsoft SQL Server Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88084" }, { "rank": 2030, "cve_id": "CVE-2026-88086", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SQL Server 2019 (GDR)", "cwe": "CWE-125", "title": "Microsoft SQL Server Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88086" }, { "rank": 2031, "cve_id": "CVE-2026-89203", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Siemens", "product": "RUGGEDCOM CROSSBOW", "cwe": "CWE-201", "title": "A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to various database queries, allowing users to retrieve system-wide information that is not intended for their privilege level. This could allow an authenticated attacker to gather sensitive information about the system's infrastructure, including details on all devices, substations, users, and scheduled activities.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-89203" }, { "rank": 2032, "cve_id": "CVE-2026-89204", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Siemens", "product": "RUGGEDCOM CROSSBOW", "cwe": "CWE-639", "title": "A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to database queries used for subnet management. This could allow an authenticated attacker to read, modify, or delete subnet configurations, leading to unauthorized information disclosure and data manipulation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-89204" }, { "rank": 2033, "cve_id": "CVE-2026-89205", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Siemens", "product": "RUGGEDCOM CROSSBOW", "cwe": "CWE-602", "title": "A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for requests to schedule special operations. This could allow an authenticated attacker with minimal privileges to schedule unauthorized operations on devices.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-89205" }, { "rank": 2034, "cve_id": "CVE-2026-89206", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Siemens", "product": "RUGGEDCOM CROSSBOW", "cwe": "CWE-602", "title": "A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for requests to modify the state of scheduled actions. This could allow an authenticated attacker with minimal privileges to retry, stop, or delete scheduled tasks without proper authorization.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-89206" }, { "rank": 2035, "cve_id": "CVE-2026-94410", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Bender", "product": "Customer&Partner", "cwe": "CWE-862", "title": "Exposure of Role List to Low-Privileged Remote Users in Bender Custom&Partner Service", "url": "https://www.cve.org/CVERecord?id=CVE-2026-94410" }, { "rank": 2036, "cve_id": "CVE-2026-95502", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Grafana", "product": "Nanogit", "cwe": "CWE-409", "title": "Git Sync memory exhaustion via a malicious Git server", "url": "https://www.cve.org/CVERecord?id=CVE-2026-95502" }, { "rank": 2037, "cve_id": "CVE-2026-96234", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": ".NET 10.0", "cwe": "CWE-346", "title": ".NET Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96234" }, { "rank": 2038, "cve_id": "CVE-2026-102198", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Remote Desktop Protocol Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102198" }, { "rank": 2039, "cve_id": "CVE-2026-102501", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Content Credentials Rust SDK", "cwe": "CWE-20", "title": "CAI Content Credentials | Improper Input Validation (CWE-20)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102501" }, { "rank": 2040, "cve_id": "CVE-2026-102502", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Content Credentials Rust SDK", "cwe": "CWE-347", "title": "CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102502" }, { "rank": 2041, "cve_id": "CVE-2026-102603", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "gotify", "product": "server", "cwe": "CWE-620", "title": "Gotify: Insufficiently Protected Password Change endpoint", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102603" }, { "rank": 2042, "cve_id": "CVE-2026-102988", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "makeplane", "product": "plane", "cwe": "CWE-943", "title": "Plane: ORM Field Injection via Unvalidated `order_by` Parameter (Including Unauthenticated Path)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102988" }, { "rank": 2043, "cve_id": "CVE-2026-103965", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "MongoDB", "product": "MongoDB Server", "cwe": "CWE-94", "title": "Fixed values in MongoDB Server $bucket stage may be misread as field references", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103965" }, { "rank": 2044, "cve_id": "CVE-2026-106172", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Fortinet", "product": "FortiSandbox", "cwe": "CWE-321", "title": "A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions, FortiSandbox Cloud 5.2.0 through 5.2.1, FortiSandbox Cloud 5.0.0 through 5.0.6, FortiSandbox Cloud 4.4 all versions may allow attacker to escalation of privilege via specially crafted HTTP requests", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106172" }, { "rank": 2045, "cve_id": "CVE-2026-107370", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Auth0", "product": "auth0-lock", "cwe": "CWE-532", "title": "Improper Request Handling for Active Directory Logins in auth0-lock", "url": "https://www.cve.org/CVERecord?id=CVE-2026-107370" }, { "rank": 2046, "cve_id": "CVE-2026-108466", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Kernel Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108466" }, { "rank": 2047, "cve_id": "CVE-2026-109152", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "jbardin", "product": "scp.py", "cwe": "CWE-22", "title": "jbardin scp.py SCP Receive _recv_pushd path traversal", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109152" }, { "rank": 2048, "cve_id": "CVE-2026-109153", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "MosaicML", "product": "Composer", "cwe": "CWE-22", "title": "MosaicML Composer Checkpoint Extraction checkpoint.py tarball.extractall path traversal", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109153" }, { "rank": 2049, "cve_id": "CVE-2026-109155", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "DeepPavlov", "cwe": "CWE-22", "title": "DeepPavlov Model Download untar path traversal", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109155" }, { "rank": 2050, "cve_id": "CVE-2026-109156", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "SeldonIO", "product": "MLServer", "cwe": "CWE-22", "title": "SeldonIO MLServer environment_tarball env.py _extract_env path traversal", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109156" }, { "rank": 2051, "cve_id": "CVE-2026-109406", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "macrozheng", "product": "mall", "cwe": "CWE-840", "title": "macrozheng mall mall-portal generateOrder OmsPortalOrderServiceImpl logic error", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109406" }, { "rank": 2052, "cve_id": "CVE-2026-109890", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "LeapWorx", "product": "Premium Addons for Elementor", "cwe": "CWE-862", "title": "WordPress Premium Addons for Elementor plugin <= 4.11.110 - Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109890" }, { "rank": 2053, "cve_id": "CVE-2026-109898", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Arraytics", "product": "WP Event Solution", "cwe": "CWE-862", "title": "WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109898" }, { "rank": 2054, "cve_id": "CVE-2026-109948", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "FreeRDP", "product": "FreeRDP", "cwe": "CWE-200", "title": "FreeRDP 3.0.0 before 3.32.0 Memory Disclosure via SCardTransmit Smartcard Redirection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109948" }, { "rank": 2055, "cve_id": "CVE-2026-109950", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "FreeRDP", "product": "FreeRDP", "cwe": "CWE-125", "title": "FreeRDP 3.0.0 before 3.32.0 Heap Out-of-Bounds Read via RD Gateway Messages", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109950" }, { "rank": 2056, "cve_id": "CVE-2026-109957", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "espocrm", "product": "espocrm", "cwe": "CWE-639", "title": "EspoCRM before 10.0.7 IDOR via Import attachmentId Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109957" }, { "rank": 2057, "cve_id": "CVE-2026-109958", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "espocrm", "product": "espocrm", "cwe": "CWE-200", "title": "EspoCRM 4.0.0 before 10.0.7 Field-Level Access Bypass via Address-Book Search", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109958" }, { "rank": 2058, "cve_id": "CVE-2026-109959", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "espocrm", "product": "espocrm", "cwe": "CWE-200", "title": "EspoCRM 4.0.0 before 10.0.7 Field-Level Security Bypass via Note Read Endpoint", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109959" }, { "rank": 2059, "cve_id": "CVE-2026-109962", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "froxlor", "product": "froxlor", "cwe": "CWE-285", "title": "Froxlor 0.10.0 before 2.3.14 Missing Authorization in MysqlServer and Cronjobs API", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109962" }, { "rank": 2060, "cve_id": "CVE-2026-109963", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "froxlor", "product": "froxlor", "cwe": "CWE-639", "title": "Froxlor before 2.3.14 IDOR in Email Template Editor via admin_templates.php", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109963" }, { "rank": 2061, "cve_id": "CVE-2026-110098", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Jorani", "product": "Jorani", "cwe": "CWE-639", "title": "Jorani before 1.0.4 Insecure Direct Object Reference in Leave and Overtime Requests", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110098" }, { "rank": 2062, "cve_id": "CVE-2026-110099", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Jorani", "product": "Jorani", "cwe": "CWE-862", "title": "Jorani before 1.0.4 Missing Authorization in HR Export Actions", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110099" }, { "rank": 2063, "cve_id": "CVE-2026-110100", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Jorani", "product": "Jorani", "cwe": "CWE-862", "title": "Jorani before 1.0.4 Missing Authorization and SSRF via Contracts::import()", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110100" }, { "rank": 2064, "cve_id": "CVE-2026-110110", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "jetlinks", "product": "JetLinks Community", "cwe": "CWE-862", "title": "JetLinks Community through 2.10.0 Missing Authorization via Alarm Enable/Disable Endpoints", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110110" }, { "rank": 2065, "cve_id": "CVE-2026-110113", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Sanluan", "product": "PublicCMS", "cwe": "CWE-639", "title": "PublicCMS through V6.202608.a IDOR via tradeAddress/save Endpoint", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110113" }, { "rank": 2066, "cve_id": "CVE-2026-110120", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "guchengwuyue", "product": "yshopmall", "cwe": "CWE-639", "title": "yshopmall through 2.0.0 IDOR via After-Sales API in StoreAfterSalesController", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110120" }, { "rank": 2067, "cve_id": "CVE-2026-110122", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "PickMall", "product": "lilishop", "cwe": "CWE-639", "title": "PickMall lilishop through 4.4 IDOR via Goods Freight Endpoint", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110122" }, { "rank": 2068, "cve_id": "CVE-2026-110125", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "wayn111", "product": "waynboot-mall", "cwe": "CWE-639", "title": "waynboot-mall through 2.0.0 IDOR via Mobile Order Endpoints", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110125" }, { "rank": 2069, "cve_id": "CVE-2026-110126", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "wayn111", "product": "waynboot-mall", "cwe": "CWE-639", "title": "waynboot-mall through 2.0.0 IDOR via Mobile Address Endpoints", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110126" }, { "rank": 2070, "cve_id": "CVE-2026-110127", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "wayn111", "product": "waynboot-mall", "cwe": "CWE-639", "title": "waynboot-mall through 2.0.0 IDOR via Mobile Cart Endpoints", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110127" }, { "rank": 2071, "cve_id": "CVE-2026-110212", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Stonewuu", "product": "ai-fusion-video", "cwe": "CWE-22", "title": "ai-fusion-video through 1.2.0 Path Traversal in Media Upload subDir Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110212" }, { "rank": 2072, "cve_id": "CVE-2026-110213", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Stonewuu", "product": "ai-fusion-video", "cwe": "CWE-639", "title": "ai-fusion-video through 1.2.0 Insecure Direct Object Reference in Generation Task Item Endpoints", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110213" }, { "rank": 2073, "cve_id": "CVE-2026-110226", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Webkul", "product": "QloApps", "cwe": "CWE-639", "title": "QloApps through 1.7.0 Authorization Bypass via id_hotel in Room Type Creation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110226" }, { "rank": 2074, "cve_id": "CVE-2026-110229", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Webkul", "product": "QloApps", "cwe": "CWE-862", "title": "QloApps through 1.7.0 Missing Hotel Access Restriction in Credit Slips", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110229" }, { "rank": 2075, "cve_id": "CVE-2026-110230", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "sergix44", "product": "XBackBone", "cwe": "CWE-862", "title": "XBackBone through 3.8.2 Missing Authorization via Upload Vanity Endpoint", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110230" }, { "rank": 2076, "cve_id": "CVE-2026-110254", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Finsys", "product": "dockhand", "cwe": "CWE-918", "title": "Dockhand before 1.0.45 SSRF via IPv6 Transition Address Bypass in ipCategory", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110254" }, { "rank": 2077, "cve_id": "CVE-2026-53564", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Citrix", "product": "UniconOS", "cwe": null, "title": "Arbitrary file read and write", "url": "https://www.cve.org/CVERecord?id=CVE-2026-53564" }, { "rank": 2078, "cve_id": "CVE-2026-53711", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "mcp-context-forge", "cwe": "CWE-79", "title": "MCP ContextForge: Global Prompts stored cross-site scripting compromises the Admin UI", "url": "https://www.cve.org/CVERecord?id=CVE-2026-53711" }, { "rank": 2079, "cve_id": "CVE-2026-63147", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Omnispace", "product": "Agora Project", "cwe": "CWE-79", "title": "Omnispace Agora Project < 26.10.0 Stored XSS via Uploaded File Name", "url": "https://www.cve.org/CVERecord?id=CVE-2026-63147" }, { "rank": 2080, "cve_id": "CVE-2026-63148", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Omnispace", "product": "Agora Project", "cwe": "CWE-79", "title": "Omnispace Agora Project < 26.10.0 Stored XSS via Poll-Response Attachment Filename", "url": "https://www.cve.org/CVERecord?id=CVE-2026-63148" }, { "rank": 2081, "cve_id": "CVE-2026-63156", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Omnispace", "product": "Agora Project", "cwe": "CWE-79", "title": "Omnispace Agora Project < 26.10.0 Reflected XSS via visioUrl Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-63156" }, { "rank": 2082, "cve_id": "CVE-2026-63157", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Omnispace", "product": "Agora Project", "cwe": "CWE-79", "title": "Omnispace Agora Project < 26.10.0 Stored XSS via Links Module", "url": "https://www.cve.org/CVERecord?id=CVE-2026-63157" }, { "rank": 2083, "cve_id": "CVE-2026-63168", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Omnispace", "product": "Agora Project", "cwe": "CWE-79", "title": "Omnispace Agora Project < 26.10.0 Stored XSS via Nested POST Array Bypass", "url": "https://www.cve.org/CVERecord?id=CVE-2026-63168" }, { "rank": 2084, "cve_id": "CVE-2026-63171", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Omnispace", "product": "Agora Project", "cwe": "CWE-79", "title": "Omnispace Agora Project < 26.10.0 Stored XSS via Category Description", "url": "https://www.cve.org/CVERecord?id=CVE-2026-63171" }, { "rank": 2085, "cve_id": "CVE-2026-66057", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "frappe", "product": "frappe", "cwe": "CWE-601", "title": "Frappe: Open Redirect via Unsanitized OAuth State Param.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-66057" }, { "rank": 2086, "cve_id": "CVE-2026-109940", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "FreeRDP", "product": "FreeRDP", "cwe": "CWE-121", "title": "FreeRDP 3.0.0-beta1 before 3.32.0 Stack Buffer Overflow via PKCS#11 Key Name", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109940" }, { "rank": 2087, "cve_id": "CVE-2026-110101", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "benjaminjonard", "product": "Koillection", "cwe": "CWE-79", "title": "Koillection through 1.8.4 Stored XSS via Datum File Attachment Uploads", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110101" }, { "rank": 2088, "cve_id": "CVE-2026-110103", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "mlogclub", "product": "bbs-go", "cwe": "CWE-79", "title": "bbs-go through 4.4.6 Stored XSS via Image Upload Content-Type", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110103" }, { "rank": 2089, "cve_id": "CVE-2026-110219", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Webkul", "product": "QloApps", "cwe": "CWE-79", "title": "QloApps through 1.7.0 Reflected XSS via Additional Facility Price Field", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110219" }, { "rank": 2090, "cve_id": "CVE-2026-110221", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Webkul", "product": "QloApps", "cwe": "CWE-79", "title": "QloApps through 1.7.0 Reflected XSS via Advanced Price Rule Name and Impact Value", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110221" }, { "rank": 2091, "cve_id": "CVE-2026-110224", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Webkul", "product": "QloApps", "cwe": "CWE-79", "title": "QloApps through 1.7.0 Reflected XSS via Search Alias Validation Errors", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110224" }, { "rank": 2092, "cve_id": "CVE-2026-110225", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "shaarli", "product": "Shaarli", "cwe": "CWE-918", "title": "Shaarli through 0.16.9 SSRF via Thumbnail Retrieval update-thumbnail Route", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110225" }, { "rank": 2093, "cve_id": "CVE-2026-110228", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "wallabag", "product": "wallabag", "cwe": "CWE-79", "title": "wallabag 2.6.13 through 2.6.14 Stored XSS via Failed HTML Import Upload", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110228" }, { "rank": 2094, "cve_id": "CVE-2026-106034", "cvss_base": 5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Ivanti", "product": "Xtraction", "cwe": "CWE-22", "title": "A Path Traversal vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to create, modify, arbitrary directories the host file system.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106034" }, { "rank": 2095, "cve_id": "CVE-2026-67628", "cvss_base": 4.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SQL Server 2017 (GDR)", "cwe": "CWE-125", "title": "Microsoft SQL Server Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-67628" }, { "rank": 2096, "cve_id": "CVE-2026-70217", "cvss_base": 4.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SharePoint Server Subscription Edition", "cwe": "CWE-284", "title": "Microsoft Office SharePoint Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70217" }, { "rank": 2097, "cve_id": "CVE-2026-94520", "cvss_base": 4.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SQL Server 2017 (GDR)", "cwe": "CWE-134", "title": "Microsoft SQL Server Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-94520" }, { "rank": 2098, "cve_id": "CVE-2026-106170", "cvss_base": 4.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Fortinet", "product": "FortiSandbox", "cwe": "CWE-248", "title": "An Uncaught Exception vulnerability [CWE-248] vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions may allow a privileged attacker to deny access to the GUI and CLI persistently via crafted HTTP requests.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106170" }, { "rank": 2099, "cve_id": "CVE-2026-83646", "cvss_base": 4.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-601", "title": "Active Directory Federation Services (AD FS) Spoofing Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83646" }, { "rank": 2100, "cve_id": "CVE-2026-109410", "cvss_base": 4.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "macrozheng", "product": "mall", "cwe": "CWE-682", "title": "macrozheng mall mall-admin/mall-portal moneyInfo OmsOrderServiceImpl.updateMoneyInfo calculation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109410" }, { "rank": 2101, "cve_id": "CVE-2026-69506", "cvss_base": 4.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Key Storage Provider Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69506" }, { "rank": 2102, "cve_id": "CVE-2026-69969", "cvss_base": 4.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-59", "title": "Windows AppX Deployment Service Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69969" }, { "rank": 2103, "cve_id": "CVE-2026-69974", "cvss_base": 4.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-125", "title": "Desktop Window Manager Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69974" }, { "rank": 2104, "cve_id": "CVE-2026-70063", "cvss_base": 4.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Kernel Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70063" }, { "rank": 2105, "cve_id": "CVE-2026-70077", "cvss_base": 4.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Kernel Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70077" }, { "rank": 2106, "cve_id": "CVE-2026-70195", "cvss_base": 4.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-362", "title": "Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70195" }, { "rank": 2107, "cve_id": "CVE-2026-77361", "cvss_base": 4.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "The-40-Thieves", "product": "obsidian-tc", "cwe": "CWE-59", "title": "obsidian-tc symlink path mismatch bypasses read ACL restrictions", "url": "https://www.cve.org/CVERecord?id=CVE-2026-77361" }, { "rank": 2108, "cve_id": "CVE-2026-83504", "cvss_base": 4.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 23H2", "cwe": "CWE-367", "title": "Windows SmartScreen Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83504" }, { "rank": 2109, "cve_id": "CVE-2026-83582", "cvss_base": 4.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Graphics Kernel Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83582" }, { "rank": 2110, "cve_id": "CVE-2026-83656", "cvss_base": 4.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-306", "title": "Windows Modern Device Management (MDM) Tampering Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83656" }, { "rank": 2111, "cve_id": "CVE-2026-83672", "cvss_base": 4.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-497", "title": "Windows Installer Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83672" }, { "rank": 2112, "cve_id": "CVE-2026-83697", "cvss_base": 4.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-367", "title": "Windows Modern Device Management (MDM) Tampering Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83697" }, { "rank": 2113, "cve_id": "CVE-2026-83774", "cvss_base": 4.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-497", "title": "Windows Win32 Kernel Subsystem Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83774" }, { "rank": 2114, "cve_id": "CVE-2026-83786", "cvss_base": 4.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-209", "title": "Windows NTFS Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83786" }, { "rank": 2115, "cve_id": "CVE-2026-83865", "cvss_base": 4.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-23", "title": "Windows Internet (wininet.dll) Tampering Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83865" }, { "rank": 2116, "cve_id": "CVE-2026-83897", "cvss_base": 4.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-497", "title": "Windows Win32 Kernel Subsystem Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83897" }, { "rank": 2117, "cve_id": "CVE-2026-83905", "cvss_base": 4.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-497", "title": "Windows Shell Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83905" }, { "rank": 2118, "cve_id": "CVE-2026-83909", "cvss_base": 4.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-497", "title": "Windows Win32 Kernel Subsystem Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83909" }, { "rank": 2119, "cve_id": "CVE-2026-83925", "cvss_base": 4.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-497", "title": "Windows Kernel Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83925" }, { "rank": 2120, "cve_id": "CVE-2026-84009", "cvss_base": 4.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-367", "title": "Windows Projected File System Tampering Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-84009" }, { "rank": 2121, "cve_id": "CVE-2026-85866", "cvss_base": 4.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-497", "title": "Windows ALPC Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85866" }, { "rank": 2122, "cve_id": "CVE-2026-96853", "cvss_base": 4.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-367", "title": "Windows Win32 Kernel Subsystem Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96853" }, { "rank": 2123, "cve_id": "CVE-2026-102186", "cvss_base": 4.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-822", "title": "Windows Network File System Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102186" }, { "rank": 2124, "cve_id": "CVE-2026-109976", "cvss_base": 4.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", "cwe": "CWE-787", "title": "Clevis: clevis: integer underflow in pkcs#11 data socket handler crashes daemon on unbound client connection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109976" }, { "rank": 2125, "cve_id": "CVE-2026-83788", "cvss_base": 4.6, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-126", "title": "Windows rndismp6.sys Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83788" }, { "rank": 2126, "cve_id": "CVE-2026-88208", "cvss_base": 4.6, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SharePoint Server Subscription Edition", "cwe": "CWE-79", "title": "Microsoft Office SharePoint Spoofing Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88208" }, { "rank": 2127, "cve_id": "CVE-2026-88209", "cvss_base": 4.6, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SharePoint Server Subscription Edition", "cwe": "CWE-79", "title": "Microsoft Office SharePoint Spoofing Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88209" }, { "rank": 2128, "cve_id": "CVE-2026-88226", "cvss_base": 4.6, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Storage Port Driver Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88226" }, { "rank": 2129, "cve_id": "CVE-2026-102859", "cvss_base": 4.6, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SharePoint Server Subscription Edition", "cwe": "CWE-79", "title": "Microsoft Office SharePoint Spoofing Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102859" }, { "rank": 2130, "cve_id": "CVE-2026-102864", "cvss_base": 4.6, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SharePoint Server Subscription Edition", "cwe": "CWE-79", "title": "Microsoft Office SharePoint Spoofing Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102864" }, { "rank": 2131, "cve_id": "CVE-2026-110232", "cvss_base": 4.6, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Fossify", "product": "Fossify File Manager", "cwe": "CWE-22", "title": "Fossify File Manager through 1.6.2 Zip Slip Path Traversal via DecompressActivity", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110232" }, { "rank": 2132, "cve_id": "CVE-2026-67456", "cvss_base": 4.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "NVIDIA", "product": "Warp", "cwe": "CWE-122", "title": "NVIDIA Warp contains a vulnerability where an attacker could cause a heap-based buffer overflow. A successful exploit of this vulnerability might lead to denial of service.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-67456" }, { "rank": 2133, "cve_id": "CVE-2026-70075", "cvss_base": 4.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-367", "title": "Windows Virtualization-Based Security (VBS) Enclave Security Feature Bypass Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70075" }, { "rank": 2134, "cve_id": "CVE-2026-70280", "cvss_base": 4.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-863", "title": "Windows Hello Security Feature Bypass Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70280" }, { "rank": 2135, "cve_id": "CVE-2026-83926", "cvss_base": 4.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-295", "title": "Windows Hello Security Feature Bypass Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83926" }, { "rank": 2136, "cve_id": "CVE-2026-102221", "cvss_base": 4.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-299", "title": "Secure Boot Security Feature Bypass Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102221" }, { "rank": 2137, "cve_id": "CVE-2026-9218", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "NETGEAR", "product": "CBR40", "cwe": "CWE-20", "title": "Insufficient input validation vulnerability in Certain NETGEAR routers allows unauthorized access", "url": "https://www.cve.org/CVERecord?id=CVE-2026-9218" }, { "rank": 2138, "cve_id": "CVE-2026-14532", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "WebSphere Application Server - Liberty", "cwe": "CWE-190", "title": "IBM WebSphere Application Server Liberty Integer Overflow", "url": "https://www.cve.org/CVERecord?id=CVE-2026-14532" }, { "rank": 2139, "cve_id": "CVE-2026-69150", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "keepassxreboot", "product": "keepassxc", "cwe": "CWE-416", "title": "KeePassXC: Heap use-after-free in KeePass1 (KDB) importer via unpruned m_entryUuids map", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69150" }, { "rank": 2140, "cve_id": "CVE-2026-77362", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "The-40-Thieves", "product": "obsidian-tc", "cwe": "CWE-200", "title": "obsidian-tc bridge tools expose data outside the read ACL", "url": "https://www.cve.org/CVERecord?id=CVE-2026-77362" }, { "rank": 2141, "cve_id": "CVE-2026-95630", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Commerce", "cwe": "CWE-20", "title": "Adobe Commerce | Improper Input Validation (CWE-20)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-95630" }, { "rank": 2142, "cve_id": "CVE-2026-103028", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "drakkan", "product": "sftpgo", "cwe": "CWE-863", "title": "SFTPGo source-side file-pattern filter bypass during copy operations", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103028" }, { "rank": 2143, "cve_id": "CVE-2026-105720", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SharePoint Server Subscription Edition", "cwe": "CWE-863", "title": "Microsoft Office SharePoint Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105720" }, { "rank": 2144, "cve_id": "CVE-2026-107917", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "NETGEAR", "product": "R7300DST", "cwe": "CWE-20", "title": "Insufficient input validation vulnerability in NETGEAR R7300 router", "url": "https://www.cve.org/CVERecord?id=CVE-2026-107917" }, { "rank": 2145, "cve_id": "CVE-2026-107918", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "NETGEAR", "product": "R7300DST", "cwe": "CWE-20", "title": "Insufficient input validation vulnerability in NETGEAR R7300", "url": "https://www.cve.org/CVERecord?id=CVE-2026-107918" }, { "rank": 2146, "cve_id": "CVE-2026-109742", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": "CWE-200", "title": "Information disclosure in the PDF Viewer component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109742" }, { "rank": 2147, "cve_id": "CVE-2026-109751", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": "CWE-200", "title": "Information disclosure in the Networking component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109751" }, { "rank": 2148, "cve_id": "CVE-2026-109767", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": "CWE-200", "title": "Information disclosure in the Networking component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109767" }, { "rank": 2149, "cve_id": "CVE-2026-109769", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": "CWE-200", "title": "Information disclosure in the Networking: Cache component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109769" }, { "rank": 2150, "cve_id": "CVE-2026-109771", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": "CWE-200", "title": "Information disclosure in the WebRTC: Networking component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109771" }, { "rank": 2151, "cve_id": "CVE-2026-109777", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": "CWE-200", "title": "Information disclosure in the Storage: IndexedDB component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109777" }, { "rank": 2152, "cve_id": "CVE-2026-109896", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "WP Chill", "product": "Download Monitor integration for WooCommerce", "cwe": "CWE-862", "title": "WordPress Download Monitor integration for WooCommerce plugin <= 1.0.3 - Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109896" }, { "rank": 2153, "cve_id": "CVE-2026-70116", "cvss_base": 4.2, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-121", "title": "Windows Resilient File System (ReFS) Security Feature Bypass Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70116" }, { "rank": 2154, "cve_id": "CVE-2026-83766", "cvss_base": 4.2, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-863", "title": "Windows Hyper-V Security Feature Bypass Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83766" }, { "rank": 2155, "cve_id": "CVE-2026-102832", "cvss_base": 4.2, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "jupyterlab", "product": "jupyterlab", "cwe": "CWE-367", "title": "JupyterLab: Command link trust prompt in JupyterLab can trust a document other than the one clicked", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102832" }, { "rank": 2156, "cve_id": "CVE-2026-109719", "cvss_base": 4.2, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": "CWE-362", "title": "Race condition, use-after-free in the Graphics: CanvasWebGL component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109719" }, { "rank": 2157, "cve_id": "CVE-2026-109765", "cvss_base": 4.2, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": "CWE-362", "title": "Race condition, use-after-free in the Graphics: Text component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109765" }, { "rank": 2158, "cve_id": "CVE-2026-109779", "cvss_base": 4.2, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": "CWE-362", "title": "Race condition in the Networking: DNS component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109779" }, { "rank": 2159, "cve_id": "CVE-2026-110234", "cvss_base": 4.1, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "elio-fm", "product": "elio", "cwe": "CWE-377", "title": "Elio through 1.13.0 Insecure Temporary File Creation in External Preview Command Capture", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110234" }, { "rank": 2160, "cve_id": "CVE-2026-106176", "cvss_base": 3.8, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Fortinet", "product": "FortiSIEM", "cwe": "CWE-862", "title": "A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via Specially crafted HTTP requests", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106176" }, { "rank": 2161, "cve_id": "CVE-2026-77205", "cvss_base": 3.7, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "The Libreswan Project", "product": "libreswan", "cwe": "CWE-772", "title": "Denial of Service via sending bogus X.509 certificates", "url": "https://www.cve.org/CVERecord?id=CVE-2026-77205" }, { "rank": 2162, "cve_id": "CVE-2026-88834", "cvss_base": 3.7, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat Hardened Images", "cwe": "CWE-203", "title": "Busybox: busybox: httpd user existence oracle in non-default shadow-disabled builds", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88834" }, { "rank": 2163, "cve_id": "CVE-2026-107832", "cvss_base": 3.7, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "fastify", "product": "fastify", "cwe": "CWE-178", "title": "fastify vulnerable to header validation bypass via case-sensitive propertyNames", "url": "https://www.cve.org/CVERecord?id=CVE-2026-107832" }, { "rank": 2164, "cve_id": "CVE-2026-65200", "cvss_base": 3.5, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Huawei", "product": "openBMC", "cwe": "CWE-191", "title": "Huawei malicious on-bus PLDM or NCSI device can drive out-of-bounds-heap reads via short MCTP responses", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65200" }, { "rank": 2165, "cve_id": "CVE-2026-108388", "cvss_base": 3.5, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "indico", "product": "indico", "cwe": "CWE-863", "title": "Indico legacy contribution export cache poisoning discloses restricted metadata", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108388" }, { "rank": 2166, "cve_id": "CVE-2026-110036", "cvss_base": 3.3, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", "cwe": "CWE-190", "title": "Device-mapper-persistent-data: device-mapper-persistent-data: denial of service via crafted block indices", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110036" }, { "rank": 2167, "cve_id": "CVE-2026-65197", "cvss_base": 3.1, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "H3C", "product": "HDM Family-A G5", "cwe": "CWE-347", "title": "H3C G3/G5 HDM Firmware Verification Key Replacement", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65197" }, { "rank": 2168, "cve_id": "CVE-2026-109854", "cvss_base": 2.5, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", "cwe": "CWE-457", "title": "M17n-lib: uninitialized stack read in iso-2022 compound text utf-8 decoding", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109854" }, { "rank": 2169, "cve_id": "CVE-2026-106175", "cvss_base": 2.3, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Fortinet", "product": "FortiSwitch", "cwe": "CWE-415", "title": "A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.7, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiProxy 7.6.0 through 7.6.6, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions, FortiSwitch 7.6.0 through 7.6.6, FortiSwitch 7.4 all versions, FortiSwitch 7.2 all versions may allow a local authenticated attacker to crash the newcli daemon via crafted CLI commands.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106175" }, { "rank": 2170, "cve_id": "CVE-2026-109407", "cvss_base": 2.3, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "macrozheng", "product": "mall", "cwe": "CWE-362", "title": "macrozheng mall Coupon Redemption generateOrder race condition", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109407" }, { "rank": 2171, "cve_id": "CVE-2026-110106", "cvss_base": 2.3, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "dromara", "product": "RuoYi-Vue-Plus", "cwe": "CWE-639", "title": "RuoYi-Vue-Plus through 6.0.0 IDOR via DELETE /auth/unlock/{socialId}", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110106" }, { "rank": 2172, "cve_id": "CVE-2026-110107", "cvss_base": 2.3, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "dromara", "product": "RuoYi-Cloud-Plus", "cwe": "CWE-639", "title": "RuoYi-Cloud-Plus through 6.0.0 IDOR via DELETE /auth/unlock/{socialId}", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110107" }, { "rank": 2173, "cve_id": "CVE-2026-110223", "cvss_base": 2.3, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Kareadita", "product": "Kavita", "cwe": "CWE-918", "title": "Kavita 0.9.0 through 0.9.1.4 SSRF Blocklist Bypass via upload-cbl-file Endpoint", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110223" }, { "rank": 2174, "cve_id": "CVE-2026-11730", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "NETGEAR", "product": "EX3700", "cwe": "CWE-335", "title": "Insufficient session randomness vulnerability exists in certain NETGEAR EX Series Models", "url": "https://www.cve.org/CVERecord?id=CVE-2026-11730" }, { "rank": 2175, "cve_id": "CVE-2026-109160", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "PublicCMS", "cwe": "CWE-601", "title": "PublicCMS pay Endpoint SafeConfigComponent.java SafeConfigComponent.getSafeUrl redirect", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109160" }, { "rank": 2176, "cve_id": "CVE-2026-109189", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "fit2cloud", "product": "MeterSphere", "cwe": "CWE-918", "title": "fit2cloud MeterSphere Swagger3 Swagger3ParserApiDefinition.java Swagger3ParserApiDefinition.testUrlTimeout server-side request forgery", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109189" }, { "rank": 2177, "cve_id": "CVE-2026-109190", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "conductor-oss", "product": "conductor", "cwe": "CWE-918", "title": "conductor-oss conductor API Tool Configuration ListApiToolsTask.java ListApiToolsTask.start server-side request forgery", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109190" }, { "rank": 2178, "cve_id": "CVE-2026-109402", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "conductor-oss", "product": "conductor", "cwe": "CWE-918", "title": "conductor-oss conductor MCP Service MCPService.java MCPService.listTools server-side request forgery", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109402" }, { "rank": 2179, "cve_id": "CVE-2026-109827", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "GPAC", "cwe": "CWE-119", "title": "GPAC AIT Parser ait.c gf_m2ts_decode_ait out-of-bounds write", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109827" }, { "rank": 2180, "cve_id": "CVE-2026-109828", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "libsndfile", "cwe": "CWE-453", "title": "libsndfile WAV Parsing wavlike.c wavlike_subchunk_parse uninitialized variable", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109828" }, { "rank": 2181, "cve_id": "CVE-2026-110239", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "zofe", "product": "rapyd-admin", "cwe": "CWE-79", "title": "Rapyd Admin before 9.20.0 Stored XSS via rich-text Component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110239" }, { "rank": 2182, "cve_id": "CVE-2026-109409", "cvss_base": 1.9, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "HBAI-Ltd", "product": "Toonflow-app", "cwe": "CWE-74", "title": "HBAI-Ltd Toonflow-app Open Folder Endpoint openFolder.ts child_process.exec command injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109409" }, { "rank": 2183, "cve_id": "CVE-2026-109526", "cvss_base": 1.9, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "HBAI-Ltd", "product": "Toonflow-app", "cwe": "CWE-200", "title": "HBAI-Ltd Toonflow-app exportData Endpoint information disclosure", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109526" }, { "rank": 2184, "cve_id": "CVE-2024-34319", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": null, "title": "A Server-Side Request Forgery (SSRF) in the serviceURL parameter of ProPhoenix Law RMS v2022.2403.3.101 allows attackers to force the application server to make unintended DNS and web requests via a crafted HTTP request.", "url": "https://www.cve.org/CVERecord?id=CVE-2024-34319" }, { "rank": 2185, "cve_id": "CVE-2024-34320", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": null, "title": "ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an incorrect access control issue in sensitive API endpoints.", "url": "https://www.cve.org/CVERecord?id=CVE-2024-34320" }, { "rank": 2186, "cve_id": "CVE-2024-34321", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": null, "title": "ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the PageTitle/Notes parameter in the Notes.aspx endpoint.", "url": "https://www.cve.org/CVERecord?id=CVE-2024-34321" }, { "rank": 2187, "cve_id": "CVE-2024-34324", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": null, "title": "An issue in ProPhoenix Law RMS v2022.2403.3.101 allows attackers to execute a session hijacking attack via injecting a crafted 24-character string into the ASP.NET_SessionId cookie.", "url": "https://www.cve.org/CVERecord?id=CVE-2024-34324" }, { "rank": 2188, "cve_id": "CVE-2024-34326", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": null, "title": "ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the PageTitle/Alert/MsgType parameter in the errorHandler.aspx endpoint.", "url": "https://www.cve.org/CVERecord?id=CVE-2024-34326" }, { "rank": 2189, "cve_id": "CVE-2026-16753", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Lowcoder", "product": "Lowcoder", "cwe": null, "title": "CVE-2026-16753", "url": "https://www.cve.org/CVERecord?id=CVE-2026-16753" }, { "rank": 2190, "cve_id": "CVE-2026-37107", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": null, "title": "An issue in HTMLy v.3.1.1 allows a remote attacker to escalate privileges via the get_feed function in the admin.php component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-37107" }, { "rank": 2191, "cve_id": "CVE-2026-78799", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": null, "title": "Directory Traversal vulnerability in Quanxun Huiju Network Technology (Beijing) Co., Ltd IK-Q3000 Enterprise-grade Wi-Fi 6 wireless router Enterprise Edition: <= iKuai8_3.7.23_Enterprise Build 202606021825 - Free Edition: <= iKuai 8_4.0.304-beta allows a remote attacker to execute arbitrary code.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-78799" }, { "rank": 2192, "cve_id": "CVE-2026-78802", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": null, "title": "An issue in SKYWORTH DIGITAL CO.,LTD SK-WR6640X Wi-Fi 6 Dual-Band Fiber Router (AX1800M) V1.0.3 allows a remote attacker to execute arbitrary code.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-78802" }, { "rank": 2193, "cve_id": "CVE-2026-79607", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Xen", "product": "Xen", "cwe": null, "title": "Xenstore: Guests can crash xenstored during Live Update", "url": "https://www.cve.org/CVERecord?id=CVE-2026-79607" }, { "rank": 2194, "cve_id": "CVE-2026-79608", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Xen", "product": "Xen", "cwe": null, "title": "x86/AMD: ineffectual Zenbleed workaround", "url": "https://www.cve.org/CVERecord?id=CVE-2026-79608" }, { "rank": 2195, "cve_id": "CVE-2026-79609", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Xen", "product": "Xen", "cwe": null, "title": "x86: XPTI may break on huge-memory systems", "url": "https://www.cve.org/CVERecord?id=CVE-2026-79609" }, { "rank": 2196, "cve_id": "CVE-2026-79610", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Xen", "product": "Xen", "cwe": null, "title": "grant-table: double version change race", "url": "https://www.cve.org/CVERecord?id=CVE-2026-79610" }, { "rank": 2197, "cve_id": "CVE-2026-79611", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Xen", "product": "Xen", "cwe": null, "title": "VMX: VMentry failure with branch tracing and blocked states", "url": "https://www.cve.org/CVERecord?id=CVE-2026-79611" }, { "rank": 2198, "cve_id": "CVE-2026-95115", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": null, "title": "Buffer Overflow vulnerability in libwebsockets main 106d542c allows a remote attacker to cause a denial of service via the LEJP JSON parser", "url": "https://www.cve.org/CVERecord?id=CVE-2026-95115" }, { "rank": 2199, "cve_id": "CVE-2026-95117", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": null, "title": "Buffer Overflow vulnerability in zserge jsmn jsmn HEAD 25647e6 allows a remote attacker to cause a denial of service via the jsmn.h, jsmn_parse(), example/jsondump.c, dump() components", "url": "https://www.cve.org/CVERecord?id=CVE-2026-95117" }, { "rank": 2200, "cve_id": "CVE-2026-95121", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": null, "title": "An issue in mp4v2 2.0.0 allows an attacker to execute arbitrary code via the MP4RtpAtom::ReadHntiType() in src/atom_rtp.cpp. A specially crafted MP4 file can cause an undersized rtp atom to produce a near-2^64 allocation size through an unchecked offset subtraction", "url": "https://www.cve.org/CVERecord?id=CVE-2026-95121" }, { "rank": 2201, "cve_id": "CVE-2026-95124", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": null, "title": "Buffer Overflow vulnerability in madmurphy libconfini v.1.16.4 allows a remote attacker to cause a denial of service via an allocation-size mismatch between its bundled load_ini_buffer utility and strip_ini_cache()", "url": "https://www.cve.org/CVERecord?id=CVE-2026-95124" }, { "rank": 2202, "cve_id": "CVE-2026-95127", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": null, "title": "An issue in libass v.0.17.5 allows a remote attacker to cause a denial of service via the ass_outline_construct() in libass/ass_render.c", "url": "https://www.cve.org/CVERecord?id=CVE-2026-95127" }, { "rank": 2203, "cve_id": "CVE-2026-102699", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Xen", "product": "Xen", "cwe": null, "title": "Arm: multiple issues with GNTTABOP_cache_flush", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102699" }, { "rank": 2204, "cve_id": "CVE-2026-102700", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Xen", "product": "Xen", "cwe": null, "title": "gnttab: cache-flush handling may cause page reference leak", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102700" }, { "rank": 2205, "cve_id": "CVE-2026-102702", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Xen", "product": "Xen", "cwe": null, "title": "Arm: multiple issues with GNTTABOP_cache_flush", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102702" }, { "rank": 2206, "cve_id": "CVE-2026-104584", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": null, "title": "reNgine up to v2.2.0 and current master branch (commit de4199222cca5618f1255930ce78987e47d43a99) is vulnerable to OS Command Injection via the custom_headers scan engine configuration field in web/reNgine/tasks.py (fetch_url and dir_file_fuzz functions).", "url": "https://www.cve.org/CVERecord?id=CVE-2026-104584" }, { "rank": 2207, "cve_id": "CVE-2026-104585", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": null, "title": "Mobile Security Framework (MobSF) v4.5.2 is vulnerable to Command Injection in /download_data/, /api/v1/scan, Dynamic Analyzer ADB integration module.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-104585" }, { "rank": 2208, "cve_id": "CVE-2026-104587", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": null, "title": "blob42 gosuki through commit 6e2bf34 contains a Stored Cross-Site Scripting (XSS) vulnerability. The application uses text/template instead of html/template, failing to perform context-aware auto-escaping on the URL and DisplayURL fields of bookmarks in internal/webui/templates/bookmarks.html. An attacker can craft a malicious bookmark URL containing HTML attribute-breaking payloads that execute arbitrary JavaScript in the victim's browser context when rendered in the local web interface.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-104587" }, { "rank": 2209, "cve_id": "CVE-2026-104937", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Shopware", "product": "Shopware", "cwe": null, "title": "CVE-2026-104937", "url": "https://www.cve.org/CVERecord?id=CVE-2026-104937" }, { "rank": 2210, "cve_id": "CVE-2026-107460", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Apache Software Foundation", "product": "Apache Fesod (Incubating)", "cwe": "CWE-918", "title": "Apache Fesod (Incubating): UrlImageConverter SSRF protection bypass via DNS rebinding", "url": "https://www.cve.org/CVERecord?id=CVE-2026-107460" }, { "rank": 2211, "cve_id": "CVE-2026-109704", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Privilege escalation in the Application Update component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109704" }, { "rank": 2212, "cve_id": "CVE-2026-109708", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Sandbox escape due to incorrect boundary conditions in the Networking component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109708" }, { "rank": 2213, "cve_id": "CVE-2026-109712", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Sandbox escape due to uninitialized memory in the Graphics component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109712" }, { "rank": 2214, "cve_id": "CVE-2026-109714", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Incorrect boundary conditions in the Layout component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109714" }, { "rank": 2215, "cve_id": "CVE-2026-109715", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Incorrect boundary conditions in the JavaScript Engine component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109715" }, { "rank": 2216, "cve_id": "CVE-2026-109716", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Incorrect boundary conditions in the JavaScript Engine component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109716" }, { "rank": 2217, "cve_id": "CVE-2026-109720", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "JIT miscompilation in the JavaScript: WebAssembly component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109720" }, { "rank": 2218, "cve_id": "CVE-2026-109721", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Incorrect boundary conditions in the JavaScript Engine: JIT component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109721" }, { "rank": 2219, "cve_id": "CVE-2026-109722", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "JIT miscompilation in the JavaScript Engine: JIT component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109722" }, { "rank": 2220, "cve_id": "CVE-2026-109723", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Integer overflow in the Layout: Text and Fonts component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109723" }, { "rank": 2221, "cve_id": "CVE-2026-109730", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Integer overflow in the Graphics component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109730" }, { "rank": 2222, "cve_id": "CVE-2026-109731", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Incorrect boundary conditions in the Graphics: Canvas2D component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109731" }, { "rank": 2223, "cve_id": "CVE-2026-109733", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "JIT miscompilation in the JavaScript Engine: JIT component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109733" }, { "rank": 2224, "cve_id": "CVE-2026-109734", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Mitigation bypass in the DOM: Security component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109734" }, { "rank": 2225, "cve_id": "CVE-2026-109736", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Frame poisoning in the Layout component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109736" }, { "rank": 2226, "cve_id": "CVE-2026-109737", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Mitigation bypass in the Enterprise Policies component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109737" }, { "rank": 2227, "cve_id": "CVE-2026-109739", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Privilege escalation in the WebExtensions component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109739" }, { "rank": 2228, "cve_id": "CVE-2026-109740", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109740" }, { "rank": 2229, "cve_id": "CVE-2026-109743", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Privilege escalation in the Panning and Zooming component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109743" }, { "rank": 2230, "cve_id": "CVE-2026-109744", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Other issue in the DOM: File component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109744" }, { "rank": 2231, "cve_id": "CVE-2026-109745", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Sandbox escape due to uninitialized memory in the DOM: Web Serial component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109745" }, { "rank": 2232, "cve_id": "CVE-2026-109746", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Mitigation bypass in the DOM: Security component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109746" }, { "rank": 2233, "cve_id": "CVE-2026-109747", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Other issue in the Address Bar component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109747" }, { "rank": 2234, "cve_id": "CVE-2026-109750", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Site isolation issue in the DOM: Web Authentication component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109750" }, { "rank": 2235, "cve_id": "CVE-2026-109753", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Incorrect boundary conditions in the Layout component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109753" }, { "rank": 2236, "cve_id": "CVE-2026-109754", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Incorrect boundary conditions in the DOM: Editor component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109754" }, { "rank": 2237, "cve_id": "CVE-2026-109755", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Sandbox escape in the DOM: Content Processes component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109755" }, { "rank": 2238, "cve_id": "CVE-2026-109757", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Sandbox escape due to race condition in the Networking component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109757" }, { "rank": 2239, "cve_id": "CVE-2026-109759", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Site isolation issue in the Networking component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109759" }, { "rank": 2240, "cve_id": "CVE-2026-109760", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Mitigation bypass in the Networking: HTTP component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109760" }, { "rank": 2241, "cve_id": "CVE-2026-109762", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Incorrect boundary conditions in the SVG component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109762" }, { "rank": 2242, "cve_id": "CVE-2026-109763", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Mitigation bypass in the File Handling component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109763" }, { "rank": 2243, "cve_id": "CVE-2026-109764", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Mitigation bypass in the Enterprise Policies component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109764" }, { "rank": 2244, "cve_id": "CVE-2026-109766", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Mitigation bypass in the Enterprise Policies component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109766" }, { "rank": 2245, "cve_id": "CVE-2026-109770", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Spoofing issue in the DOM: Web Serial component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109770" }, { "rank": 2246, "cve_id": "CVE-2026-109772", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Same-origin policy bypass in the DevTools component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109772" }, { "rank": 2247, "cve_id": "CVE-2026-109774", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Invalid pointer, undefined behavior in the DOM: Notifications component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109774" }, { "rank": 2248, "cve_id": "CVE-2026-109776", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Race condition in the XPCOM component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109776" }, { "rank": 2249, "cve_id": "CVE-2026-109780", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Mitigation bypass in the DOM: Core & HTML component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109780" }, { "rank": 2250, "cve_id": "CVE-2026-109782", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Mitigation bypass in the File Handling component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109782" }, { "rank": 2251, "cve_id": "CVE-2026-109783", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": null, "title": "Mitigation bypass in the File Handling component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109783" }, { "rank": 2252, "cve_id": "CVE-2026-110005", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Komodo", "product": "Komodo", "cwe": null, "title": "Moghtech Komodo contains an OS command injection vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110005" }, { "rank": 2253, "cve_id": "CVE-2026-110136", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-416", "title": "Use after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110136" }, { "rank": 2254, "cve_id": "CVE-2026-110137", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-416", "title": "Use after free in WebRTC in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110137" }, { "rank": 2255, "cve_id": "CVE-2026-110138", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-416", "title": "Use after free in ShapeDetection in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110138" }, { "rank": 2256, "cve_id": "CVE-2026-110139", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-416", "title": "Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110139" }, { "rank": 2257, "cve_id": "CVE-2026-110140", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-843", "title": "Type confusion in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110140" }, { "rank": 2258, "cve_id": "CVE-2026-110141", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-203", "title": "Observable discrepancy in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110141" }, { "rank": 2259, "cve_id": "CVE-2026-110142", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-416", "title": "Use after free in FileSystem in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110142" }, { "rank": 2260, "cve_id": "CVE-2026-110143", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-457", "title": "Use of uninitialized variable in ThirdParty lmza_sdk in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially read memory inside the sandbox via a crafted file. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110143" }, { "rank": 2261, "cve_id": "CVE-2026-110144", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-863", "title": "Incorrect authorization in Mojo in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110144" }, { "rank": 2262, "cve_id": "CVE-2026-110145", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-416", "title": "Use after free in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110145" }, { "rank": 2263, "cve_id": "CVE-2026-110146", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-200", "title": "Information leak in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110146" }, { "rank": 2264, "cve_id": "CVE-2026-110147", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-416", "title": "Use after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110147" }, { "rank": 2265, "cve_id": "CVE-2026-110148", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-416", "title": "Use after free in SVG in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110148" }, { "rank": 2266, "cve_id": "CVE-2026-110149", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-416", "title": "Use after free in Browser in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110149" }, { "rank": 2267, "cve_id": "CVE-2026-110150", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-250", "title": "Privilege elevation in Installer in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to obtain sensitive information via a local program. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110150" }, { "rank": 2268, "cve_id": "CVE-2026-110151", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-416", "title": "Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110151" }, { "rank": 2269, "cve_id": "CVE-2026-110152", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-122", "title": "Buffer overflow in ANGLE in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110152" }, { "rank": 2270, "cve_id": "CVE-2026-110153", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-416", "title": "Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110153" }, { "rank": 2271, "cve_id": "CVE-2026-110154", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-416", "title": "Use after free in Canvas in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110154" }, { "rank": 2272, "cve_id": "CVE-2026-110155", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-122", "title": "Buffer overflow in PDFium in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110155" }, { "rank": 2273, "cve_id": "CVE-2026-110156", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-706", "title": "Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110156" }, { "rank": 2274, "cve_id": "CVE-2026-110157", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-416", "title": "Use after free in SVG in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110157" }, { "rank": 2275, "cve_id": "CVE-2026-110158", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-416", "title": "Use after free in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110158" }, { "rank": 2276, "cve_id": "CVE-2026-110159", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-863", "title": "Incorrect authorization in Updater in Google Chrome prior to 155.0.8059.79 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110159" }, { "rank": 2277, "cve_id": "CVE-2026-110160", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-862", "title": "Missing authorization in ReadingMode in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially bypass site isolation via a crafted HTML page. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110160" }, { "rank": 2278, "cve_id": "CVE-2026-110161", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-416", "title": "Use after free in Network in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Critical)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110161" }, { "rank": 2279, "cve_id": "CVE-2026-110162", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-416", "title": "Use after free in Desktop in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110162" }, { "rank": 2280, "cve_id": "CVE-2026-110163", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-416", "title": "Use after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110163" }, { "rank": 2281, "cve_id": "CVE-2026-110164", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-416", "title": "Use after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110164" }, { "rank": 2282, "cve_id": "CVE-2026-110165", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-416", "title": "Use after free in Core in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110165" }, { "rank": 2283, "cve_id": "CVE-2026-110166", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-122", "title": "Buffer overflow in Animation in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110166" }, { "rank": 2284, "cve_id": "CVE-2026-110167", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-416", "title": "Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110167" }, { "rank": 2285, "cve_id": "CVE-2026-110168", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-416", "title": "Use after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110168" }, { "rank": 2286, "cve_id": "CVE-2026-110169", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-416", "title": "Use after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110169" }, { "rank": 2287, "cve_id": "CVE-2026-110170", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-416", "title": "Use after free in Bindings in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110170" }, { "rank": 2288, "cve_id": "CVE-2026-110171", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-416", "title": "Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110171" }, { "rank": 2289, "cve_id": "CVE-2026-110172", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-416", "title": "Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110172" }, { "rank": 2290, "cve_id": "CVE-2026-110247", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Thunderbird", "cwe": null, "title": "Integer overflow in libmime buffer growth could lead to heap corruption", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110247" }, { "rank": 2291, "cve_id": "CVE-2026-110249", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Thunderbird", "cwe": null, "title": "Denial-of-service in the Exchange email component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110249" } ], "transactions": [ { "type": "KEV_ADDED", "cve_id": "CVE-2026-104935", "detail": "ADDED TO KEV — CVE-2026-104935 (Ivanti Connect Secure). Remediation due October 16, 2026." }, { "type": "KEV_ADDED", "cve_id": "CVE-2026-96951", "detail": "ADDED TO KEV — CVE-2026-96951 (Microsoft Outlook.com). Remediation due October 16, 2026." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2021-22555", "detail": "EXPLOIT PUBLISHED — CVE-2021-22555 (Linux Kernel). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2025-10457", "detail": "EXPLOIT PUBLISHED — CVE-2025-10457 (zephyrproject-rtos Zephyr). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2025-2962", "detail": "EXPLOIT PUBLISHED — CVE-2025-2962 (zephyrproject-rtos Zephyr). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2025-59838", "detail": "EXPLOIT PUBLISHED — CVE-2025-59838 (monkeytypegame monkeytype). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2025-68613", "detail": "EXPLOIT PUBLISHED — CVE-2025-68613 (n8n-io n8n). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-104045", "detail": "EXPLOIT PUBLISHED — CVE-2026-104045 (Red Hat Enterprise Linux 10). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-104046", "detail": "EXPLOIT PUBLISHED — CVE-2026-104046 (Red Hat Enterprise Linux 10). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-104079", "detail": "EXPLOIT PUBLISHED — CVE-2026-104079 (Syed Balkhi Envira Gallery). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-104083", "detail": "EXPLOIT PUBLISHED — CVE-2026-104083 (Smartertools Smartermail). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-106267", "detail": "EXPLOIT PUBLISHED — CVE-2026-106267 (Google Chrome). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-107211", "detail": "EXPLOIT PUBLISHED — CVE-2026-107211 (qax-os excelize). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-107212", "detail": "EXPLOIT PUBLISHED — CVE-2026-107212 (qax-os excelize). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-107213", "detail": "EXPLOIT PUBLISHED — CVE-2026-107213 (qax-os excelize). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-107214", "detail": "EXPLOIT PUBLISHED — CVE-2026-107214 (qax-os excelize). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-107215", "detail": "EXPLOIT PUBLISHED — CVE-2026-107215 (qax-os excelize). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-107216", "detail": "EXPLOIT PUBLISHED — CVE-2026-107216 (qax-os excelize). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-107217", "detail": "EXPLOIT PUBLISHED — CVE-2026-107217 (qax-os excelize). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-107218", "detail": "EXPLOIT PUBLISHED — CVE-2026-107218 (qax-os excelize). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-107219", "detail": "EXPLOIT PUBLISHED — CVE-2026-107219 (qax-os excelize). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-107220", "detail": "EXPLOIT PUBLISHED — CVE-2026-107220 (qax-os excelize). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-107221", "detail": "EXPLOIT PUBLISHED — CVE-2026-107221 (qax-os excelize). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-107222", "detail": "EXPLOIT PUBLISHED — CVE-2026-107222 (qax-os excelize). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-107223", "detail": "EXPLOIT PUBLISHED — CVE-2026-107223 (qax-os excelize). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-107224", "detail": "EXPLOIT PUBLISHED — CVE-2026-107224 (qax-os excelize). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-107225", "detail": "EXPLOIT PUBLISHED — CVE-2026-107225 (qax-os excelize). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-107289", "detail": "EXPLOIT PUBLISHED — CVE-2026-107289 (pydantic-ai). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-107290", "detail": "EXPLOIT PUBLISHED — CVE-2026-107290 (pydantic-ai). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-107291", "detail": "EXPLOIT PUBLISHED — CVE-2026-107291 (pydantic-ai). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-107335", "detail": "EXPLOIT PUBLISHED — CVE-2026-107335 (CISA Malcolm). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-107387", "detail": "EXPLOIT PUBLISHED — CVE-2026-107387 (Borewit music-metadata). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-107391", "detail": "EXPLOIT PUBLISHED — CVE-2026-107391 (Borewit music-metadata). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-107392", "detail": "EXPLOIT PUBLISHED — CVE-2026-107392 (Borewit music-metadata). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-107695", "detail": "EXPLOIT PUBLISHED — CVE-2026-107695 (FFmpeg). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108114", "detail": "EXPLOIT PUBLISHED — CVE-2026-108114 (strapi). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108164", "detail": "EXPLOIT PUBLISHED — CVE-2026-108164 (opensource-socialnetwork). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108521", "detail": "EXPLOIT PUBLISHED — CVE-2026-108521 (Studio-Saelix Sencho). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108522", "detail": "EXPLOIT PUBLISHED — CVE-2026-108522 (Studio-Saelix Sencho). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108523", "detail": "EXPLOIT PUBLISHED — CVE-2026-108523 (Studio-Saelix Sencho). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108539", "detail": "EXPLOIT PUBLISHED — CVE-2026-108539 (GPAC). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108540", "detail": "EXPLOIT PUBLISHED — CVE-2026-108540 (OpenSpug Spug). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108543", "detail": "EXPLOIT PUBLISHED — CVE-2026-108543 (ag2ai ag2). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108546", "detail": "EXPLOIT PUBLISHED — CVE-2026-108546 (spotweb). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108606", "detail": "EXPLOIT PUBLISHED — CVE-2026-108606 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108608", "detail": "EXPLOIT PUBLISHED — CVE-2026-108608 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108611", "detail": "EXPLOIT PUBLISHED — CVE-2026-108611 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108613", "detail": "EXPLOIT PUBLISHED — CVE-2026-108613 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108616", "detail": "EXPLOIT PUBLISHED — CVE-2026-108616 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108618", "detail": "EXPLOIT PUBLISHED — CVE-2026-108618 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108621", "detail": "EXPLOIT PUBLISHED — CVE-2026-108621 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108623", "detail": "EXPLOIT PUBLISHED — CVE-2026-108623 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108626", "detail": "EXPLOIT PUBLISHED — CVE-2026-108626 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108628", "detail": "EXPLOIT PUBLISHED — CVE-2026-108628 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108631", "detail": "EXPLOIT PUBLISHED — CVE-2026-108631 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108633", "detail": "EXPLOIT PUBLISHED — CVE-2026-108633 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108636", "detail": "EXPLOIT PUBLISHED — CVE-2026-108636 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108638", "detail": "EXPLOIT PUBLISHED — CVE-2026-108638 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108641", "detail": "EXPLOIT PUBLISHED — CVE-2026-108641 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108643", "detail": "EXPLOIT PUBLISHED — CVE-2026-108643 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108646", "detail": "EXPLOIT PUBLISHED — CVE-2026-108646 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108648", "detail": "EXPLOIT PUBLISHED — CVE-2026-108648 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108651", "detail": "EXPLOIT PUBLISHED — CVE-2026-108651 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108653", "detail": "EXPLOIT PUBLISHED — CVE-2026-108653 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108656", "detail": "EXPLOIT PUBLISHED — CVE-2026-108656 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108658", "detail": "EXPLOIT PUBLISHED — CVE-2026-108658 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108661", "detail": "EXPLOIT PUBLISHED — CVE-2026-108661 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108663", "detail": "EXPLOIT PUBLISHED — CVE-2026-108663 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108666", "detail": "EXPLOIT PUBLISHED — CVE-2026-108666 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108668", "detail": "EXPLOIT PUBLISHED — CVE-2026-108668 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108671", "detail": "EXPLOIT PUBLISHED — CVE-2026-108671 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108673", "detail": "EXPLOIT PUBLISHED — CVE-2026-108673 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108676", "detail": "EXPLOIT PUBLISHED — CVE-2026-108676 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108678", "detail": "EXPLOIT PUBLISHED — CVE-2026-108678 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108681", "detail": "EXPLOIT PUBLISHED — CVE-2026-108681 (zhayujie CowAgent). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108683", "detail": "EXPLOIT PUBLISHED — CVE-2026-108683 (zhayujie CowAgent). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108688", "detail": "EXPLOIT PUBLISHED — CVE-2026-108688 (elunez eladmin). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108690", "detail": "EXPLOIT PUBLISHED — CVE-2026-108690 (gz-yami mall4j). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108691", "detail": "EXPLOIT PUBLISHED — CVE-2026-108691 (gz-yami mall4j). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108693", "detail": "EXPLOIT PUBLISHED — CVE-2026-108693 (ImageMagick). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108699", "detail": "EXPLOIT PUBLISHED — CVE-2026-108699 (hyper-mcp-rs hyper-mcp). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108701", "detail": "EXPLOIT PUBLISHED — CVE-2026-108701 (1Panel-dev CordysCRM). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108703", "detail": "EXPLOIT PUBLISHED — CVE-2026-108703 (1Panel-dev CordysCRM). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108704", "detail": "EXPLOIT PUBLISHED — CVE-2026-108704 (1Panel-dev CordysCRM). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108706", "detail": "EXPLOIT PUBLISHED — CVE-2026-108706 (elunez eladmin). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108708", "detail": "EXPLOIT PUBLISHED — CVE-2026-108708 (WuKongOpenSource Wukong_HRM). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108712", "detail": "EXPLOIT PUBLISHED — CVE-2026-108712 (SuiteCRM). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108722", "detail": "EXPLOIT PUBLISHED — CVE-2026-108722 (e2b-dev open-computer-use). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108732", "detail": "EXPLOIT PUBLISHED — CVE-2026-108732 (frappe hrms). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108742", "detail": "EXPLOIT PUBLISHED — CVE-2026-108742 (DBeaver CloudBeaver). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108768", "detail": "EXPLOIT PUBLISHED — CVE-2026-108768 (zhayujie CowAgent). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108783", "detail": "EXPLOIT PUBLISHED — CVE-2026-108783 (PRVTPRO Amnezia-Web-Panel). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108785", "detail": "EXPLOIT PUBLISHED — CVE-2026-108785 (macrozheng mall). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108787", "detail": "EXPLOIT PUBLISHED — CVE-2026-108787 (houtini-ai voice-analyser-mcp). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108789", "detail": "EXPLOIT PUBLISHED — CVE-2026-108789 (deepseek-ai deepseek-harness). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108791", "detail": "EXPLOIT PUBLISHED — CVE-2026-108791 (westboy CicadasCMS). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108799", "detail": "EXPLOIT PUBLISHED — CVE-2026-108799 (jackq XCMS). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108801", "detail": "EXPLOIT PUBLISHED — CVE-2026-108801 (prasathmani TinyFileManager). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108805", "detail": "EXPLOIT PUBLISHED — CVE-2026-108805 (krupalshah EmployeeRecruitmentSystem). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108807", "detail": "EXPLOIT PUBLISHED — CVE-2026-108807 (krupalshah EmployeeRecruitmentSystem). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108811", "detail": "EXPLOIT PUBLISHED — CVE-2026-108811 (WMCMS). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108813", "detail": "EXPLOIT PUBLISHED — CVE-2026-108813 (SEMCMS). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108815", "detail": "EXPLOIT PUBLISHED — CVE-2026-108815 (idcCMS). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108817", "detail": "EXPLOIT PUBLISHED — CVE-2026-108817 (agno-agi agno). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108819", "detail": "EXPLOIT PUBLISHED — CVE-2026-108819 (agno-agi agno). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108821", "detail": "EXPLOIT PUBLISHED — CVE-2026-108821 (Tencent WeKnora). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108824", "detail": "EXPLOIT PUBLISHED — CVE-2026-108824 (DataEase). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108826", "detail": "EXPLOIT PUBLISHED — CVE-2026-108826 (Zen Cart). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108828", "detail": "EXPLOIT PUBLISHED — CVE-2026-108828 (Zen Cart). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108830", "detail": "EXPLOIT PUBLISHED — CVE-2026-108830 (meetecho janus-gateway). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108836", "detail": "EXPLOIT PUBLISHED — CVE-2026-108836 (Ollama). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108853", "detail": "EXPLOIT PUBLISHED — CVE-2026-108853 (UnicomAI Wanwu). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108856", "detail": "EXPLOIT PUBLISHED — CVE-2026-108856 (UnicomAI Wanwu). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108858", "detail": "EXPLOIT PUBLISHED — CVE-2026-108858 (Predibase LoRAX). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108861", "detail": "EXPLOIT PUBLISHED — CVE-2026-108861 (erpipe-org Odoo MCP). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108863", "detail": "EXPLOIT PUBLISHED — CVE-2026-108863 (Katanemo Plano). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108866", "detail": "EXPLOIT PUBLISHED — CVE-2026-108866 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108867", "detail": "EXPLOIT PUBLISHED — CVE-2026-108867 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108868", "detail": "EXPLOIT PUBLISHED — CVE-2026-108868 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108871", "detail": "EXPLOIT PUBLISHED — CVE-2026-108871 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108872", "detail": "EXPLOIT PUBLISHED — CVE-2026-108872 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108873", "detail": "EXPLOIT PUBLISHED — CVE-2026-108873 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108876", "detail": "EXPLOIT PUBLISHED — CVE-2026-108876 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108877", "detail": "EXPLOIT PUBLISHED — CVE-2026-108877 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108878", "detail": "EXPLOIT PUBLISHED — CVE-2026-108878 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108881", "detail": "EXPLOIT PUBLISHED — CVE-2026-108881 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108882", "detail": "EXPLOIT PUBLISHED — CVE-2026-108882 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108883", "detail": "EXPLOIT PUBLISHED — CVE-2026-108883 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108886", "detail": "EXPLOIT PUBLISHED — CVE-2026-108886 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108887", "detail": "EXPLOIT PUBLISHED — CVE-2026-108887 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108888", "detail": "EXPLOIT PUBLISHED — CVE-2026-108888 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108890", "detail": "EXPLOIT PUBLISHED — CVE-2026-108890 (BlackBeltTechnology pi-agent-dashboard). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108893", "detail": "EXPLOIT PUBLISHED — CVE-2026-108893 (Linksys E1700). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108895", "detail": "EXPLOIT PUBLISHED — CVE-2026-108895 (Linksys E1700). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108897", "detail": "EXPLOIT PUBLISHED — CVE-2026-108897 (Smart Media4U Technology SHAREit App). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108899", "detail": "EXPLOIT PUBLISHED — CVE-2026-108899 (tobychui zoraxy). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108901", "detail": "EXPLOIT PUBLISHED — CVE-2026-108901 (Shenzhen HCC Technology MPOS M6 PLUS). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108907", "detail": "EXPLOIT PUBLISHED — CVE-2026-108907 (Netcore NR268). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108909", "detail": "EXPLOIT PUBLISHED — CVE-2026-108909 (Netcore NR268). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108915", "detail": "EXPLOIT PUBLISHED — CVE-2026-108915 (Edimax BR-6208AC). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108917", "detail": "EXPLOIT PUBLISHED — CVE-2026-108917 (Edimax BR-6208AC). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108921", "detail": "EXPLOIT PUBLISHED — CVE-2026-108921 (KusalkaSilva Learning-Management-System). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108923", "detail": "EXPLOIT PUBLISHED — CVE-2026-108923 (1024-lab smart-admin). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108926", "detail": "EXPLOIT PUBLISHED — CVE-2026-108926 (itsourcecode Baptism Information Management System). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108928", "detail": "EXPLOIT PUBLISHED — CVE-2026-108928 (itsourcecode Online Admission System). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108930", "detail": "EXPLOIT PUBLISHED — CVE-2026-108930 (Netcore NR268). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108934", "detail": "EXPLOIT PUBLISHED — CVE-2026-108934 (Edimax BR-6208AC). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108938", "detail": "EXPLOIT PUBLISHED — CVE-2026-108938 (code-projects Matrimonial System). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108963", "detail": "EXPLOIT PUBLISHED — CVE-2026-108963 (David-Crty databasement). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108980", "detail": "EXPLOIT PUBLISHED — CVE-2026-108980 (Blinko). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-109166", "detail": "EXPLOIT PUBLISHED — CVE-2026-109166 (dromara lamp-cloud). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-109168", "detail": "EXPLOIT PUBLISHED — CVE-2026-109168 (dromara lamp-cloud). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-109173", "detail": "EXPLOIT PUBLISHED — CVE-2026-109173 (guchengwuyue yshop-crm). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-109174", "detail": "EXPLOIT PUBLISHED — CVE-2026-109174 (moxi624 MoguBlog). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-109175", "detail": "EXPLOIT PUBLISHED — CVE-2026-109175 (moxi624 MoguBlog). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-109178", "detail": "EXPLOIT PUBLISHED — CVE-2026-109178 (jishenghua jshERP). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-109179", "detail": "EXPLOIT PUBLISHED — CVE-2026-109179 (jishenghua jshERP). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-109180", "detail": "EXPLOIT PUBLISHED — CVE-2026-109180 (jishenghua jshERP). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-109183", "detail": "EXPLOIT PUBLISHED — CVE-2026-109183 (jishenghua jshERP). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-109184", "detail": "EXPLOIT PUBLISHED — CVE-2026-109184 (jishenghua jshERP). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-109185", "detail": "EXPLOIT PUBLISHED — CVE-2026-109185 (jishenghua jshERP). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-109188", "detail": "EXPLOIT PUBLISHED — CVE-2026-109188 (jishenghua jshERP). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-109391", "detail": "EXPLOIT PUBLISHED — CVE-2026-109391 (Square Squash). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-109392", "detail": "EXPLOIT PUBLISHED — CVE-2026-109392 (Pimcore). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-109425", "detail": "EXPLOIT PUBLISHED — CVE-2026-109425 (tink-crypto tink-go). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-109570", "detail": "EXPLOIT PUBLISHED — CVE-2026-109570 (Fire-Boltt BSW013). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-21413", "detail": "EXPLOIT PUBLISHED — CVE-2026-21413 (LibRaw). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-61511", "detail": "EXPLOIT PUBLISHED — CVE-2026-61511 (vBulletin). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-86684", "detail": "EXPLOIT PUBLISHED — CVE-2026-86684 (Gitea). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-94205", "detail": "EXPLOIT PUBLISHED — CVE-2026-94205 (Gitea). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-96404", "detail": "EXPLOIT PUBLISHED — CVE-2026-96404 (Gitea). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-97147", "detail": "EXPLOIT PUBLISHED — CVE-2026-97147 (OpenStack Mistral). Public exploit reference added." }, { "type": "RESCORED", "cve_id": "CVE-2019-5589", "detail": "RESCORED — CVE-2019-5589 (Fortinet FortiClientWindows). CVSS 8.6 → 8.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2020-12811", "detail": "RESCORED — CVE-2020-12811 (Fortinet FortiManager). CVSS 4.9 → 6.1 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2020-9287", "detail": "RESCORED — CVE-2020-9287 (Fortinet FortiClientEMS). CVSS 7.5 → 7.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2020-9290", "detail": "RESCORED — CVE-2020-9290 (Fortinet FortiClientWindows). CVSS 7.1 → 7.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2021-22555", "detail": "RESCORED — CVE-2021-22555 (Linux Kernel). CVSS 8.3 → 7.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2025-10456", "detail": "RESCORED — CVE-2025-10456 (zephyrproject-rtos Zephyr). CVSS 7.1 → 6.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2025-10457", "detail": "RESCORED — CVE-2025-10457 (zephyrproject-rtos Zephyr). CVSS 4.3 → 8.1 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2025-1675", "detail": "RESCORED — CVE-2025-1675 (zephyrproject-rtos Zephyr). CVSS 8.2 → 9.1 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2025-2962", "detail": "RESCORED — CVE-2025-2962 (zephyrproject-rtos Zephyr). CVSS 8.2 → 7.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2025-68613", "detail": "RESCORED — CVE-2025-68613 (n8n-io n8n). CVSS 10 → 8.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2025-7403", "detail": "RESCORED — CVE-2025-7403 (zephyrproject-rtos Zephyr). CVSS 7.6 → 6.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2025-9408", "detail": "RESCORED — CVE-2025-9408 (zephyrproject-rtos Zephyr). CVSS 8.2 → 8.1 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-106552", "detail": "RESCORED — CVE-2026-106552 (OpenBSD OpenSSH). CVSS 4.2 → 6.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-106553", "detail": "RESCORED — CVE-2026-106553 (OpenBSD OpenSSH). CVSS 2.2 → 7.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-106555", "detail": "RESCORED — CVE-2026-106555 (OpenBSD OpenSSH). CVSS 2.2 → 7.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-106583", "detail": "RESCORED — CVE-2026-106583 (OpenBSD OpenSSH). CVSS 2.5 → 7.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-106584", "detail": "RESCORED — CVE-2026-106584 (OpenBSD OpenSSH). CVSS 2.5 → 3.3 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-106586", "detail": "RESCORED — CVE-2026-106586 (OpenBSD OpenSSH). CVSS 2.5 → 4.3 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-107387", "detail": "RESCORED — CVE-2026-107387 (Borewit music-metadata). CVSS 6.2 → 5.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-107391", "detail": "RESCORED — CVE-2026-107391 (Borewit music-metadata). CVSS 6.2 → 7.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-107392", "detail": "RESCORED — CVE-2026-107392 (Borewit music-metadata). CVSS 6.2 → 7.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-108939", "detail": "RESCORED — CVE-2026-108939 (EricLBuehler mistral.rs). CVSS 6.9 → 5.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-108940", "detail": "RESCORED — CVE-2026-108940 (EricLBuehler Mistral.rs). CVSS 6.9 → 5.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-63697", "detail": "RESCORED — CVE-2026-63697 (Dell System Update). CVSS 7.6 → 7.2 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-66785", "detail": "RESCORED — CVE-2026-66785 (Red Hat Advanced Cluster Management for Kubernetes 2.17). CVSS 2.5 → 8.7 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-71168", "detail": "RESCORED — CVE-2026-71168 (Dell System Update). CVSS 7.3 → 7.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-76769", "detail": "RESCORED — CVE-2026-76769 (Dell Secure Connect Gateway (SCG) Policy Manager). CVSS 4.3 → 8.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-76779", "detail": "RESCORED — CVE-2026-76779 (Dell Secure Connect Gateway (SCG) Policy Manager). CVSS 7.4 → 9.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-78013", "detail": "RESCORED — CVE-2026-78013 (Dell Secure Connect Gateway (SCG) Policy Manager). CVSS 5.2 → 6.3 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-78015", "detail": "RESCORED — CVE-2026-78015 (Dell Secure Connect Gateway (SCG) Policy Manager). CVSS 3.7 → 5.3 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-78018", "detail": "RESCORED — CVE-2026-78018 (Dell Secure Connect Gateway (SCG) Policy Manager). CVSS 6.3 → 7.1 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-78019", "detail": "RESCORED — CVE-2026-78019 (Dell Secure Connect Gateway (SCG) Policy Manager). CVSS 7.5 → 8.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-78022", "detail": "RESCORED — CVE-2026-78022 (Dell Secure Connect Gateway (SCG) Policy Manager). CVSS 6.8 → 8.1 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-78024", "detail": "RESCORED — CVE-2026-78024 (Dell Secure Connect Gateway (SCG) Policy Manager). CVSS 7.7 → 8.7 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-78027", "detail": "RESCORED — CVE-2026-78027 (Dell Secure Connect Gateway (SCG) Policy Manager). CVSS 5.8 → 6.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-78339", "detail": "RESCORED — CVE-2026-78339 (Dell Secure Connect Gateway (SCG) Policy Manager). CVSS 6.3 → 7.1 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-78340", "detail": "RESCORED — CVE-2026-78340 (Dell Secure Connect Gateway (SCG) Policy Manager). CVSS 6.3 → 6.7 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-82162", "detail": "RESCORED — CVE-2026-82162 (Dell Command | Configure (DCC)). CVSS 7.4 → 9.8 (NVD)." }, { "type": "REJECTED", "cve_id": "CVE-2026-22314", "detail": "REJECTED — CVE-2026-22314 (Mesalvo Meona Client Launcher Component). Record withdrawn by the CNA." }, { "type": "REJECTED", "cve_id": "CVE-2026-94489", "detail": "REJECTED — CVE-2026-94489 (OctoPrint). Record withdrawn by the CNA." }, { "type": "REJECTED", "cve_id": "CVE-2026-94490", "detail": "REJECTED — CVE-2026-94490 (OctoPrint). Record withdrawn by the CNA." }, { "type": "DISPUTED", "cve_id": "CVE-2026-19061", "detail": "DISPUTED — CVE-2026-19061 (InstaKNXServiceApp). Record marked disputed." }, { "type": "PATCH_SHIPPED", "cve_id": "CVE-2023-54404", "detail": "PATCH SHIPPED — CVE-2023-54404 (colinhacks zod). Fixed in zod e06a510b6fc1e6e28e3201fd116ca2a76212f6be." }, { "type": "PATCH_SHIPPED", "cve_id": "CVE-2026-19548", "detail": "PATCH SHIPPED — CVE-2026-19548 (Red Hat Hardened Images). Fixed in Red Hat Hardened Images 2.46.1-1.4.hum1." }, { "type": "PATCH_SHIPPED", "cve_id": "CVE-2026-78367", "detail": "PATCH SHIPPED — CVE-2026-78367 (Red Hat Hardened Images). Fixed in Red Hat Hardened Images 6.1.0-1.3.hum1." }, { "type": "PATCH_SHIPPED", "cve_id": "CVE-2026-84837", "detail": "PATCH SHIPPED — CVE-2026-84837 (Red Hat Hardened Images). Fixed in Red Hat Hardened Images 6.1.0-1.3.hum1." }, { "type": "PATCH_SHIPPED", "cve_id": "CVE-2026-84838", "detail": "PATCH SHIPPED — CVE-2026-84838 (Red Hat Hardened Images). Fixed in Red Hat Hardened Images 6.1.0-1.3.hum1." }, { "type": "PATCH_SHIPPED", "cve_id": "CVE-2026-88763", "detail": "PATCH SHIPPED — CVE-2026-88763 (Red Hat Service Interconnect 2 for RHEL 8). Fixed in Service Interconnect 2 for RHEL 8 0:3.5.3-1.el8." }, { "type": "ENRICHED", "cve_id": "CVE-2025-68725", "detail": "ENRICHED — CVE-2025-68725 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-106327", "detail": "ENRICHED — CVE-2026-106327 (Google Chrome). Received CVSS 6.1 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-63997", "detail": "ENRICHED — CVE-2026-63997 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-63998", "detail": "ENRICHED — CVE-2026-63998 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-64006", "detail": "ENRICHED — CVE-2026-64006 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-64012", "detail": "ENRICHED — CVE-2026-64012 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-64013", "detail": "ENRICHED — CVE-2026-64013 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-64014", "detail": "ENRICHED — CVE-2026-64014 (Linux). Received CVSS 7.1 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-64019", "detail": "ENRICHED — CVE-2026-64019 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-64021", "detail": "ENRICHED — CVE-2026-64021 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-64022", "detail": "ENRICHED — CVE-2026-64022 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-64028", "detail": "ENRICHED — CVE-2026-64028 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-64038", "detail": "ENRICHED — CVE-2026-64038 (Linux). Received CVSS 4.7 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-76285", "detail": "ENRICHED — CVE-2026-76285 (Splunk Enterprise). Received CVSS 9.8 and CPE data from NVD." } ], "attribution": "CVE Program, NVD (NIST), CISA KEV, FIRST EPSS, OSV. See /security/methodology/." }