104,345 indexed

CVECVE vulnerabilities

104,345 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.

Showing 10,101–10,150 of 104,345 · page 203 of 2087

IDTitleSummary
CVE-2026-83835CVE-2026-83835
CVSS 5.5
Buffer over-read in Windows Common Log File System Driver allows an authorized attacker to disclose information locally.
CVE-2026-83834CVE-2026-83834
CVSS 7.0
Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
CVE-2026-83833CVE-2026-83833
CVSS 7.8
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-83832CVE-2026-83832
CVSS 7.8
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
CVE-2026-83830CVE-2026-83830
CVSS 7.8
Heap-based buffer overflow in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83829CVE-2026-83829
CVSS 7.8
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-83828CVE-2026-83828
CVSS 7.8
Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
CVE-2026-83827CVE-2026-83827
CVSS 7.0
Heap-based buffer overflow in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-83826CVE-2026-83826
CVSS 7.8
Untrusted pointer dereference in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-8382CVE-2026-8382
CVSS 5.3
The Advanced Custom Fields (ACF®) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.8.1. This is due to the pl…
CVE-2026-8381CVE-2026-8381
CVSS 5.4
A broken access control vulnerability exists in the TeamViewer DEX Platform (On‑Premises) prior version 9.2. Certain backend API endpoints do not correctly enf…
CVE-2026-83805CVE-2026-83805
CVSS 6.4
Nautobot is a Network Source of Truth and Network Automation Platform. From 3.0.0 until 3.1.8, the generic ApprovalWorkflowStageResponse create endpoint does n…
CVE-2026-83803CVE-2026-83803Sentry is an error tracking and performance monitoring tool. From 23.11.0 until 26.7.0, Sentry instances with the relocation feature enabled unsafely deseriali…
CVE-2026-83801CVE-2026-83801
CVSS 5.4
Nautobot is a Network Source of Truth and Network Automation Platform. Prior to 2.4.37 and 3.1.8, a user with extras.add_relationship or extras.change_relation…
CVE-2026-8380CVE-2026-8380
CVSS 6.5
The Frontend File Manager Plugin WordPress plugin through 23.6 does not properly verify ownership of every targeted post before permanent deletion, allowing au…
CVE-2026-83798CVE-2026-83798
CVSS 5.5
Improper verification of cryptographic signature in Windows Update Stack allows an authorized attacker to perform spoofing locally.
CVE-2026-83797CVE-2026-83797
CVSS 8.8
Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.
CVE-2026-83796CVE-2026-83796
CVSS 7.8
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-83795CVE-2026-83795
CVSS 7.5
Heap-based buffer overflow in Windows IKE Extension allows an unauthorized attacker to deny service over a network.
CVE-2026-83794CVE-2026-83794
CVSS 5.5
Out-of-bounds read in Windows Portable Device MTP Driver allows an authorized attacker to disclose information locally.
CVE-2026-83793CVE-2026-83793
CVSS 7.0
Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges local…
CVE-2026-83792CVE-2026-83792
CVSS 7.8
Incorrect authorization in Windows Device Install Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83791CVE-2026-83791
CVSS 7.8
Improper authorization in Windows Virtual Input allows an authorized attacker to elevate privileges locally.
CVE-2026-83790CVE-2026-83790
CVSS 7.0
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.
CVE-2026-8379CVE-2026-8379
CVSS 7.5
The Frontend File Manager Plugin WordPress plugin through 23.6 does not properly enforce its nonce check on the file download handler, allowing unauthenticated…
CVE-2026-83789CVE-2026-83789
CVSS 8.8
Heap-based buffer overflow in Windows SMB Client allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-83788CVE-2026-83788
CVSS 4.6
Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack.
CVE-2026-83787CVE-2026-83787
CVSS 5.5
Insufficient verification of data authenticity in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.
CVE-2026-83786CVE-2026-83786
CVSS 4.7
Generation of error message containing sensitive information in Windows NTFS allows an authorized attacker to disclose information locally.
CVE-2026-83785CVE-2026-83785
CVSS 7.0
Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83784CVE-2026-83784
CVSS 8.8
Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network.
CVE-2026-83783CVE-2026-83783
CVSS 7.8
Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
CVE-2026-83782CVE-2026-83782
CVSS 9.8
Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.
CVE-2026-83781CVE-2026-83781
CVSS 7.8
Improper null termination in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83780CVE-2026-83780
CVSS 9.8
Use after free in Windows CCFFilter Driver allows an unauthorized attacker to execute code over a network.
CVE-2026-8378CVE-2026-8378
CVSS 5.4
The Frontend File Manager Plugin WordPress plugin through 23.6 does not sanitise nor escape a filename submitted to the frontend file-rename endpoint before st…
CVE-2026-83779CVE-2026-83779
CVSS 7.8
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-83778CVE-2026-83778
CVSS 8.8
Heap-based buffer overflow in Microsoft Internet Messaging API allows an unauthorized attacker to execute code over a network.
CVE-2026-83777CVE-2026-83777
CVSS 8.8
Heap-based buffer overflow in Windows Bluetooth Service allows an unauthorized attacker to elevate privileges over an adjacent network.
CVE-2026-83776CVE-2026-83776
CVSS 6.8
Out-of-bounds read in Microsoft Bluetooth Driver allows an unauthorized attacker to elevate privileges with a physical attack.
CVE-2026-83775CVE-2026-83775
CVSS 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privi…
CVE-2026-83774CVE-2026-83774
CVSS 4.7
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose informat…
CVE-2026-83773CVE-2026-83773
CVSS 5.5
Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information…
CVE-2026-83772CVE-2026-83772
CVSS 9.9
A vulnerability was detected in Cobham SATCOM VSAT7090 Maritime Satellite Router up to 20260704. This issue affects the function c_set_reports_decode of the fi…
CVE-2026-83771CVE-2026-83771
CVSS 8.8
Use after free in Windows Camera Frame Server Monitor allows an unauthorized attacker to elevate privileges over an adjacent network.
CVE-2026-83770CVE-2026-83770
CVSS 9.8
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
CVE-2026-8377CVE-2026-8377
CVSS 8.2
Missing Authorization vulnerability in Armiya Information Technologies Ltd. Co. Access Control System (GKS) allows Collect Data from Common Resource Locations.…
CVE-2026-83769CVE-2026-83769
CVSS 7.8
Use after free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.
CVE-2026-83768CVE-2026-83768
CVSS 7.8
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-83767CVE-2026-83767
CVSS 7.8
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
Sourced from NVD + CISA KEV + FIRST EPSS. Curated by Adam Lundqvist, Founder at SQUR.