103,766 indexed

CVECVE vulnerabilities

103,766 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.

Showing 8,401–8,450 of 103,766 · page 169 of 2076

IDTitleSummary
CVE-2026-85930CVE-2026-85930
CVSS 7.0
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
CVE-2026-8593CVE-2026-8593Improper permission enforcement in Checkmk versions 2.5.0 before 2.5.0p9, 2.4.0 before 2.4.0p34, 2.3.0 before 2.3.0p49, and 2.2.0 (EOL) allows users without pe…
CVE-2026-85928CVE-2026-85928
CVSS 9.8
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.
CVE-2026-85927CVE-2026-85927
CVSS 7.8
Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
CVE-2026-85926CVE-2026-85926
CVSS 8.1
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
CVE-2026-85925CVE-2026-85925
CVSS 8.2
Improper restriction of communication channel to intended endpoints in Azure Key Vault allows an authorized attacker to elevate privileges over a network.
CVE-2026-85922CVE-2026-85922
CVSS 7.4
Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-85921CVE-2026-85921
CVSS 8.2microsoft
Double free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
CVE-2026-85920CVE-2026-85920
CVSS 7.0
Time-of-check time-of-use (toctou) race condition in Windows BitLocker allows an authorized attacker to elevate privileges locally.
CVE-2026-8592CVE-2026-8592
CVSS 7.7rapid7
OS Command Injection vulnerability in the process_string action of Rapid7 InsightConnect AWK Plugin on Linux allows remote attackers to execute arbitrary OS co…
CVE-2026-85919CVE-2026-85919
CVSS 7.0
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.
CVE-2026-85918CVE-2026-85918
CVSS 7.0
Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
CVE-2026-85917CVE-2026-85917
CVSS 7.5microsoft
Server-side request forgery (ssrf) in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-85916CVE-2026-85916
CVSS 6.2
Exposure of private personal information to an unauthorized actor in Azure Active Directory allows an unauthorized attacker to disclose information locally.
CVE-2026-85915CVE-2026-85915
CVSS 7.8
Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-85914CVE-2026-85914
CVSS 7.0
Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally.
CVE-2026-85912CVE-2026-85912
CVSS 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clipboard User Service allows an authorized attacker to …
CVE-2026-85911CVE-2026-85911
CVSS 7.8
Use after free in Windows StateRepository API allows an authorized attacker to elevate privileges locally.
CVE-2026-85910CVE-2026-85910
CVSS 5.5
Buffer over-read in Windows StateRepository API allows an authorized attacker to disclose information locally.
CVE-2026-85909CVE-2026-85909
CVSS 5.5
Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.
CVE-2026-85908CVE-2026-85908
CVSS 7.8
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
CVE-2026-85906CVE-2026-85906
CVSS 7.8
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
CVE-2026-85905CVE-2026-85905
CVSS 8.8
Heap-based buffer overflow in Windows UI Immersive Server allows an authorized attacker to elevate privileges locally.
CVE-2026-85904CVE-2026-85904
CVSS 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Association Service allows an authorized attacker…
CVE-2026-85903CVE-2026-85903
CVSS 8.8
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
CVE-2026-85902CVE-2026-85902
CVSS 7.8
Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
CVE-2026-85901CVE-2026-85901
CVSS 7.8
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
CVE-2026-85900CVE-2026-85900
CVSS 8.8microsoft
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-8590CVE-2026-8590Vulnerability in Spotfire Spotfire Enterprise (Spotfire Server modules), Spotfire Spotfire Enterprise with External Consumers (Spotfire Server modules), Spotfi…
CVE-2026-85893CVE-2026-85893
CVSS 8.8microsoft
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-85892CVE-2026-85892
CVSS 7.8microsoft
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Edge (Chromium-based) allows an authorized attacker to…
CVE-2026-85891CVE-2026-85891
CVSS 7.5
Exposure of sensitive information to an unauthorized actor in Azure HDInsight allows an unauthorized attacker to disclose information over a network.
CVE-2026-8589CVE-2026-8589
CVSS 7.3gitlab
GitLab has remediated an issue in GitLab EE affecting all versions from 13.1.4 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain …
CVE-2026-85889CVE-2026-85889
CVSS 10.0microsoft
Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-85888CVE-2026-85888
CVSS 7.7
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-85887CVE-2026-85887
CVSS 7.7microsoft
Incorrect permission assignment for critical resource in M365 Copilot allows an authorized attacker to disclose information over a network.
CVE-2026-85886CVE-2026-85886
CVSS 8.5
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-85885CVE-2026-85885
CVSS 9.9microsoft
Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an authorized attacker to elevate privileges over a …
CVE-2026-85884CVE-2026-85884
CVSS 7.8
Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally.
CVE-2026-85881CVE-2026-85881
CVSS 8.0
Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network.
CVE-2026-85880Microsoft Windows Heap-Based Buffer Overflow Vulnerability
KEVCVSS 7.8Microsoft
Microsoft Windows Advanced Local Procedure Call contains a heap-based buffer overflow vulnerability that allows an attacker to elevate privileges locally.
CVE-2026-85879CVE-2026-85879
CVSS 7.0
Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
CVE-2026-85878CVE-2026-85878
CVSS 9.9microsoft
Improper authorization in Azure Database for PostgreSQL allows an authorized attacker to elevate privileges over a network.
CVE-2026-85877CVE-2026-85877
CVSS 8.8microsoft
Heap-based buffer overflow in Windows Print Spooler Components allows an unauthorized attacker to execute code over a network.
CVE-2026-85876CVE-2026-85876
CVSS 7.0
Use after free in SQL Server allows an authorized attacker to elevate privileges locally.
CVE-2026-85875CVE-2026-85875
CVSS 5.5microsoft
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-85874CVE-2026-85874
CVSS 7.8
Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to execute code locally.
CVE-2026-85873CVE-2026-85873
CVSS 6.5
Improper authorization in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.
CVE-2026-85872CVE-2026-85872
CVSS 7.8
Use after free in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-85871CVE-2026-85871
CVSS 7.8
Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
Sourced from NVD + CISA KEV + FIRST EPSS. Curated by Adam Lundqvist, Founder at SQUR.