96,609 indexed
CVECVE vulnerabilities
96,609 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 6,651–6,700 of 96,609 · page 134 of 1933
| ID | Title | Summary |
|---|---|---|
| CVE-2026-88118 | CVE-2026-88118 CVSS 7.8 | Integer overflow or wraparound in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88117 | CVE-2026-88117 CVSS 8.1 | Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network. |
| CVE-2026-88116 | CVE-2026-88116 CVSS 8.8 | Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network. |
| CVE-2026-88115 | CVE-2026-88115 CVSS 8.8 | Out-of-bounds read in Windows Server for NFS allows an unauthorized attacker to execute code over a network. |
| CVE-2026-88114 | CVE-2026-88114 CVSS 8.8 | Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network. |
| CVE-2026-88113 | CVE-2026-88113 CVSS 7.0 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88112 | CVE-2026-88112 CVSS 8.8 | Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network. |
| CVE-2026-88110 | CVE-2026-88110 CVSS 7.0 | Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-8811 | CVE-2026-8811 | SEPPmail versions before 15.0.5 allow improper handling of attachment filenames during encrypted PDF generation. An attacker can exploit this to create new fil… |
| CVE-2026-88109 | CVE-2026-88109 CVSS 7.8 | Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88107 | CVE-2026-88107 CVSS 7.0 | Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88106 | CVE-2026-88106 CVSS 7.0 | Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88105 | CVE-2026-88105 CVSS 7.8 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88103 | CVE-2026-88103 CVSS 7.0 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88102 | CVE-2026-88102 CVSS 9.8 | Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network. |
| CVE-2026-88101 | CVE-2026-88101 CVSS 7.8 | Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88100 | CVE-2026-88100 CVSS 7.8 | Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. |
| CVE-2026-8810 | CVE-2026-8810 CVSS 6.9 | On ARM platforms, a vulnerability in the architecture design of HDD Password could allow an attacker to retrieve HDD Password from UEFI variables. |
| CVE-2026-88099 | CVE-2026-88099 CVSS 5.9 | Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network. |
| CVE-2026-88098 | CVE-2026-88098 CVSS 7.0 | Untrusted pointer dereference in Windows Security Support Provider Interface allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88097 | CVE-2026-88097 CVSS 8.1microsoft | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges locally. |
| CVE-2026-88096 | CVE-2026-88096 CVSS 7.0 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DCOM Server allows an authorized attacker to elevate pri… |
| CVE-2026-88094 | CVE-2026-88094 CVSS 8.1 | Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Storage Library allows an authorized attacker to el… |
| CVE-2026-88093 | CVE-2026-88093 CVSS 7.8 | Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88092 | CVE-2026-88092 CVSS 9.4 | Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to perform tampering over a ne… |
| CVE-2026-88091 | CVE-2026-88091 CVSS 7.8 | Deserialization of untrusted data in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. |
| CVE-2026-8809 | CVE-2026-8809 CVSS 9.8 | The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to Privilege Escalation via Validation Bypass in all versions up to and including 0.9.2… |
| CVE-2026-88089 | CVE-2026-88089 CVSS 6.7 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally. |
| CVE-2026-88088 | CVE-2026-88088 CVSS 7.0 | Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88086 | CVE-2026-88086 CVSS 5.3 | Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network. |
| CVE-2026-88085 | CVE-2026-88085 CVSS 6.4 | Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88084 | CVE-2026-88084 CVSS 5.3 | Allocation of resources without limits or throttling in SQL Server allows an authorized attacker to deny service over a network. |
| CVE-2026-88083 | CVE-2026-88083 CVSS 7.5 | Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network. |
| CVE-2026-88082 | CVE-2026-88082 CVSS 7.0 | Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88081 | CVE-2026-88081 CVSS 7.7 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-88080 | CVE-2026-88080 CVSS 7.8 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88079 | CVE-2026-88079 CVSS 7.0 | Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88076 | CVE-2026-88076 CVSS 7.0 | Null pointer dereference in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88075 | CVE-2026-88075 CVSS 8.8 | Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevat… |
| CVE-2026-88074 | CVE-2026-88074 CVSS 7.8 | Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88073 | CVE-2026-88073 CVSS 8.8 | Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88072 | CVE-2026-88072 CVSS 7.8 | Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88071 | CVE-2026-88071 CVSS 7.8 | Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88070 | CVE-2026-88070 CVSS 7.8 | Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88069 | CVE-2026-88069 | Pandora contains a path traversal vulnerability in its archive extraction worker. When processing a specially crafted archive or disk image, attacker-controlle… |
| CVE-2026-88065 | CVE-2026-88065 CVSS 7.5 | `tts-be` is a backend for a timetable selector that aims to help students better choose their class schedules. Versions prior to 2.1.0 have a Broken Access Con… |
| CVE-2026-88064 | CVE-2026-88064 CVSS 8.8 | Backstage is an open framework for building developer portals. Prior to 1.14.6 and from 1.15.0 until 1.15.4, the @backstage/plugin-techdocs-node package insuff… |
| CVE-2026-88062 | CVE-2026-88062 | OmniRoute is an open-source AI gateway providing a single endpoint for multiple model providers. In 3.8.49 and earlier, the OmniRoute POST /api/acp/agents cust… |
| CVE-2026-88061 | CVE-2026-88061 | career-ops is an open-source AI-assisted job search and application management tool. Prior to 0.8.0, the career-ops local web dashboard web/ exposed command-sp… |
| CVE-2026-88060 | CVE-2026-88060 CVSS 6.1angular | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, … |