104,345 indexed

CVECVE vulnerabilities

104,345 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.

Showing 10,151–10,200 of 104,345 · page 204 of 2087

IDTitleSummary
CVE-2026-83766CVE-2026-83766
CVSS 4.2
Incorrect authorization in Windows Hyper-V allows an authorized attacker to bypass a security feature over an adjacent network.
CVE-2026-83765CVE-2026-83765
CVSS 5.5
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.
CVE-2026-83764CVE-2026-83764
CVSS 5.5
Incorrect authorization in Windows Clipboard User Service allows an authorized attacker to disclose information locally.
CVE-2026-83763CVE-2026-83763
CVSS 7.8
Access of resource using incompatible type ('type confusion') in Windows Input System allows an authorized attacker to elevate privileges locally.
CVE-2026-83762CVE-2026-83762
CVSS 7.8
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-83761CVE-2026-83761
CVSS 7.8
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVE-2026-83760CVE-2026-83760
CVSS 5.5
Out-of-bounds read in Microsoft Bluetooth Driver allows an authorized attacker to disclose information locally.
CVE-2026-8376CVE-2026-8376
CVSS 9.8perl
Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have a heap buffer overflow when compiling regular expressions with …
CVE-2026-83759CVE-2026-83759
CVSS 8.8
Improper control of generation of code ('code injection') in Windows Encrypting File System (EFS) allows an authorized attacker to execute code over a network.
CVE-2026-83758CVE-2026-83758
CVSS 7.8
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to execute code locally.
CVE-2026-83757CVE-2026-83757
CVSS 7.8
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-83756CVE-2026-83756
CVSS 7.8
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVE-2026-83755CVE-2026-83755
CVSS 5.5
Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally.
CVE-2026-83754CVE-2026-83754
CVSS 7.5
Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
CVE-2026-83753CVE-2026-83753
CVSS 7.8
Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.
CVE-2026-83752CVE-2026-83752
CVSS 7.0
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-83751CVE-2026-83751
CVSS 7.0
Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
CVE-2026-83750CVE-2026-83750
CVSS 7.0
Time-of-check time-of-use (toctou) race condition in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-83749CVE-2026-83749
CVSS 7.0
Use after free in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
CVE-2026-83748CVE-2026-83748
CVSS 9.8
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
CVE-2026-83747CVE-2026-83747
CVSS 5.5
Out-of-bounds read in Windows Error Reporting allows an authorized attacker to disclose information locally.
CVE-2026-83746CVE-2026-83746
CVSS 8.1
Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.
CVE-2026-83745CVE-2026-83745Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift  nodejs and D lang bindings. B…
CVE-2026-83744CVE-2026-83744
CVSS 4.3
A security vulnerability has been detected in invoiceninja Invoice Ninja up to 5.13.26. This vulnerability affects the function Purify::isHostSafe of the file …
CVE-2026-83743CVE-2026-83743
CVSS 6.3
A weakness has been identified in invoiceninja Invoice Ninja up to 5.13.26. This affects an unknown part of the file /vedor/profile/ of the component Vendor Po…
CVE-2026-83742CVE-2026-83742
CVSS 8.8wolfssh
Unsigned integer underflow in wstrncat() in src/port.c in wolfSSL wolfSSH from v1.4.11 through v1.5.0 on non-Windows platforms allows an authenticated remote a…
CVE-2026-83741CVE-2026-83741
CVSS 7.8
Use after free in Internet Explorer allows an authorized attacker to elevate privileges locally.
CVE-2026-83740CVE-2026-83740
CVSS 7.0
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.
CVE-2026-8374CVE-2026-8374Misuse and misconfiguration in Bluetooth communication in SwitchBot Door Lock Series allows an attacker to bypass the electronic lock and access controls via a…
CVE-2026-83739CVE-2026-83739
CVSS 7.5
Use after free in Windows Bluetooth Service allows an unauthorized attacker to execute code over an adjacent network.
CVE-2026-83738CVE-2026-83738
CVSS 7.0
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2026-83737CVE-2026-83737
CVSS 5.5
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
CVE-2026-83736CVE-2026-83736
CVSS 5.5
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-83735CVE-2026-83735
CVSS 7.8
Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-83733CVE-2026-83733
CVSS 5.5
Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.
CVE-2026-83732CVE-2026-83732
CVSS 7.8
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-83728CVE-2026-83728
CVSS 8.8
Improper validation of syntactic correctness of input in Windows Hyper-V allows an authorized attacker to perform spoofing locally.
CVE-2026-83727CVE-2026-83727
CVSS 7.8
Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
CVE-2026-83726CVE-2026-83726
CVSS 7.8
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2026-83725CVE-2026-83725
CVSS 8.8
Heap-based buffer overflow in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network.
CVE-2026-83724CVE-2026-83724
CVSS 7.0
Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
CVE-2026-83723CVE-2026-83723
CVSS 5.5
Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally.
CVE-2026-83722CVE-2026-83722
CVSS 7.0
Use after free in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.
CVE-2026-83721CVE-2026-83721
CVSS 7.8
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-83720CVE-2026-83720
CVSS 7.0
Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally.
CVE-2026-83719CVE-2026-83719
CVSS 5.5
Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally.
CVE-2026-83718CVE-2026-83718
CVSS 7.0
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-83717CVE-2026-83717
CVSS 7.0
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-83716CVE-2026-83716
CVSS 8.8
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
CVE-2026-83715CVE-2026-83715
CVSS 7.1
Missing authentication for critical function in Windows Error Reporting allows an authorized attacker to perform tampering locally.
Sourced from NVD + CISA KEV + FIRST EPSS. Curated by Adam Lundqvist, Founder at SQUR.