96,609 indexed

CVECVE vulnerabilities

96,609 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.

Showing 6,601–6,650 of 96,609 · page 133 of 1933

IDTitleSummary
CVE-2026-88169CVE-2026-88169
CVSS 6.5
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-88168CVE-2026-88168
CVSS 7.8
Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-88167CVE-2026-88167
CVSS 6.5
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-88166CVE-2026-88166
CVSS 8.8
Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-88165CVE-2026-88165
CVSS 8.8
Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute code over a network.
CVE-2026-88163CVE-2026-88163
CVSS 8.8
Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-88162CVE-2026-88162
CVSS 5.5
Improper authorization in Windows Encrypting File System (EFS) allows an authorized attacker to perform tampering locally.
CVE-2026-88161CVE-2026-88161
CVSS 7.0
Use after free in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally.
CVE-2026-88160CVE-2026-88160
CVSS 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows Search Component allows an authorized attacker…
CVE-2026-88159CVE-2026-88159
CVSS 8.8
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.
CVE-2026-88158CVE-2026-88158
CVSS 5.5
Out-of-bounds read in Microsoft Digest Authentication allows an authorized attacker to disclose information locally.
CVE-2026-88157CVE-2026-88157
CVSS 8.8
Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
CVE-2026-88156CVE-2026-88156
CVSS 9.8
Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-88155CVE-2026-88155
CVSS 8.8
Heap-based buffer overflow in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-88154CVE-2026-88154
CVSS 6.5
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-88153CVE-2026-88153
CVSS 6.5
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-88152CVE-2026-88152
CVSS 7.8
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.
CVE-2026-88151CVE-2026-88151
CVSS 6.5
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-88150CVE-2026-88150
CVSS 8.8
Use of uninitialized resource in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-88149CVE-2026-88149
CVSS 7.0
Double free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2026-88147CVE-2026-88147
CVSS 7.8
Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.
CVE-2026-88146CVE-2026-88146
CVSS 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Background Intelligent Transfer Service (BITS) allows an…
CVE-2026-88145CVE-2026-88145
CVSS 8.8
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-88144CVE-2026-88144
CVSS 8.8
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
CVE-2026-88143CVE-2026-88143
CVSS 6.7
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
CVE-2026-88142CVE-2026-88142
CVSS 8.8
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.
CVE-2026-88141CVE-2026-88141
CVSS 7.0
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-88140CVE-2026-88140
CVSS 5.5
Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally.
CVE-2026-8814CVE-2026-8814
CVSS 5.3
Versions of the package exifreader before 4.39.0 are vulnerable to Improper Handling of Highly Compressed Data (Data Amplification) due to decompressing PNG zT…
CVE-2026-88139CVE-2026-88139
CVSS 7.0
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-88137CVE-2026-88137
CVSS 6.5
Files or directories accessible to external parties in WebDAV allows an authorized attacker to disclose information over a network.
CVE-2026-88136CVE-2026-88136
CVSS 8.8
Improper resolution of path equivalence in WebDAV allows an authorized attacker to execute code over a network.
CVE-2026-88135CVE-2026-88135
CVSS 7.8
Improper access control in WebDAV allows an authorized attacker to elevate privileges locally.
CVE-2026-88134CVE-2026-88134
CVSS 7.8
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-88133CVE-2026-88133
CVSS 7.8
Improper authorization in Windows Portable Device Enumerator Service allows an authorized attacker to elevate privileges locally.
CVE-2026-88132CVE-2026-88132
CVSS 5.9
Origin validation error in Azure Key Vault allows an unauthorized attacker to disclose information over a network.
CVE-2026-88131CVE-2026-88131
CVSS 9.8
Deserialization of untrusted data in Microsoft Dataverse allows an unauthorized attacker to execute code over a network.
CVE-2026-88130CVE-2026-88130
CVSS 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
CVE-2026-8813CVE-2026-8813
CVSS 7.5
This affects versions of the package exifreader before 4.39.0. A crafted image containing an ICC mluc tag can set an attacker-controlled record count together …
CVE-2026-88129CVE-2026-88129
CVSS 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
CVE-2026-88128CVE-2026-88128
CVSS 7.8
Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2026-88127CVE-2026-88127
CVSS 7.0
Use after free in Windows SMB Server allows an authorized attacker to elevate privileges locally.
CVE-2026-88126CVE-2026-88126
CVSS 7.8
Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.
CVE-2026-88125CVE-2026-88125
CVSS 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
CVE-2026-88124CVE-2026-88124
CVSS 7.0
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-88123CVE-2026-88123
CVSS 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
CVE-2026-88122CVE-2026-88122
CVSS 6.5
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
CVE-2026-88121CVE-2026-88121
CVSS 8.0
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.
CVE-2026-88120CVE-2026-88120
CVSS 8.1
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
CVE-2026-88119CVE-2026-88119
CVSS 8.1
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
Sourced from NVD + CISA KEV + FIRST EPSS. Curated by Adam Lundqvist, Founder at SQUR.