104,345 indexed
CVECVE vulnerabilities
104,345 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 10,201–10,250 of 104,345 · page 205 of 2087
| ID | Title | Summary |
|---|---|---|
| CVE-2026-83714 | CVE-2026-83714 CVSS 5.5 | Use of uninitialized resource in Windows HTTP.sys allows an authorized attacker to disclose information locally. |
| CVE-2026-83713 | CVE-2026-83713 CVSS 5.5 | Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally. |
| CVE-2026-83712 | CVE-2026-83712 CVSS 7.8 | Out-of-bounds write in Windows NTFS allows an authorized attacker to execute code locally. |
| CVE-2026-83711 | CVE-2026-83711 CVSS 10.0microsoft | Authorization bypass through user-controlled key in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-83710 | CVE-2026-83710 CVSS 7.0 | Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83709 | CVE-2026-83709 CVSS 7.8 | Heap-based buffer overflow in Windows NTLM allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83708 | CVE-2026-83708 CVSS 7.0 | Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83707 | CVE-2026-83707 CVSS 7.0 | Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83706 | CVE-2026-83706 CVSS 6.7 | Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83705 | CVE-2026-83705 CVSS 5.5 | Exposure of sensitive system information to an unauthorized control sphere in Windows HTTP.sys allows an authorized attacker to disclose information locally. |
| CVE-2026-83704 | CVE-2026-83704 CVSS 7.8 | Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locall… |
| CVE-2026-83703 | CVE-2026-83703 CVSS 6.5 | Out-of-bounds read in Windows Wi-Fi Driver allows an unauthorized attacker to deny service over an adjacent network. |
| CVE-2026-83702 | CVE-2026-83702 CVSS 7.0 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83701 | CVE-2026-83701 CVSS 7.0 | Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83700 | CVE-2026-83700 CVSS 7.8 | Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally. |
| CVE-2026-8370 | CVE-2026-8370 | Execution with unnecessary privileges vulnerability in Broadcom Automic Automation Agent Unix on Linux x64, Linux Power 64 BE, Linux Power 64 LE, zLinux (zSeri… |
| CVE-2026-83699 | CVE-2026-83699 CVSS 7.8 | Stack-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83698 | CVE-2026-83698 CVSS 7.8 | Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83697 | CVE-2026-83697 CVSS 4.7 | Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally. |
| CVE-2026-83696 | CVE-2026-83696 CVSS 7.0 | Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83695 | CVE-2026-83695 CVSS 5.5 | Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally. |
| CVE-2026-83694 | CVE-2026-83694 CVSS 7.0 | Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83693 | CVE-2026-83693 CVSS 9.8 | Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network. |
| CVE-2026-83692 | CVE-2026-83692 CVSS 7.8 | Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83691 | CVE-2026-83691 CVSS 7.8 | Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83690 | CVE-2026-83690 CVSS 7.8 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83689 | CVE-2026-83689 CVSS 7.0 | Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83688 | CVE-2026-83688 CVSS 8.8 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
| CVE-2026-83687 | CVE-2026-83687 CVSS 7.0 | Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83686 | CVE-2026-83686 CVSS 5.5 | Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally. |
| CVE-2026-83685 | CVE-2026-83685 CVSS 6.5 | Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a network. |
| CVE-2026-83683 | CVE-2026-83683 CVSS 6.5 | Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information over a network. |
| CVE-2026-83682 | CVE-2026-83682 CVSS 7.0 | Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83681 | CVE-2026-83681 CVSS 5.5 | Weak authentication in Microsoft PowerToys allows an authorized attacker to perform tampering locally. |
| CVE-2026-83680 | CVE-2026-83680 CVSS 7.0 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83679 | CVE-2026-83679 CVSS 7.8 | Use after free in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83678 | CVE-2026-83678 CVSS 7.8 | Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83677 | CVE-2026-83677 CVSS 7.5 | Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over a network. |
| CVE-2026-83676 | CVE-2026-83676 CVSS 7.0 | Integer underflow (wrap or wraparound) in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83675 | CVE-2026-83675 CVSS 7.0 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83674 | CVE-2026-83674 CVSS 8.1 | Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-83672 | CVE-2026-83672 CVSS 4.7 | Exposure of sensitive system information to an unauthorized control sphere in Windows Installer allows an authorized attacker to disclose information locally. |
| CVE-2026-83671 | CVE-2026-83671 CVSS 6.5 | Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally. |
| CVE-2026-83670 | CVE-2026-83670 CVSS 7.5 | Out-of-bounds read in Function Discovery Service (fdwsd.dll) allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-8367 | CVE-2026-8367 CVSS 4.8aria2_project | aria2c accepts a server certificate with incorrect Extended Key Usage (EKU). If the attackers compromise a certificate (with the associated private key) issued… |
| CVE-2026-83669 | CVE-2026-83669 CVSS 7.8 | Use of uninitialized resource in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83668 | CVE-2026-83668 CVSS 5.5 | Out-of-bounds read in Windows WLAN Service allows an authorized attacker to disclose information locally. |
| CVE-2026-83667 | CVE-2026-83667 CVSS 6.5 | Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network. |
| CVE-2026-83666 | CVE-2026-83666 CVSS 7.0 | Concurrent execution using shared resource with improper synchronization ('race condition') in Active Directory Certificate Services (AD CS) allows an authoriz… |
| CVE-2026-83665 | CVE-2026-83665 CVSS 7.5 | Null pointer dereference in Windows DHCP Server allows an unauthorized attacker to deny service over a network. |