microsoft

Disclosed vulnerabilities where the NVD names microsoft as an affected vendor, highest CVSS first.

1. CRITICAL 10CVE-2026-892752026-09-22

   Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arb…

   campaign · linux kernel · windows

   AI risk analysis on Exploit-DB.ai →

2. CRITICAL 10CVE-2026-844122026-09-22

   Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arb…

   campaign · linux kernel · windows

   AI risk analysis on Exploit-DB.ai →

3. CRITICAL 10CVE-2026-757232026-09-22

   Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this …

   campaign · linux kernel · windows

   AI risk analysis on Exploit-DB.ai →

4. CRITICAL 10CVE-2026-757212026-09-22

   Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arb…

   campaign · linux kernel · windows

   AI risk analysis on Exploit-DB.ai →

5. CRITICAL 10CVE-2026-757032026-09-22

   Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arb…

   campaign · linux kernel · windows

   AI risk analysis on Exploit-DB.ai →

6. CRITICAL 10CVE-2026-756992026-09-22

   Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arb…

   campaign · linux kernel · windows

   AI risk analysis on Exploit-DB.ai →

7. CRITICAL 10CVE-2026-733692026-09-22

   Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arb…

   campaign · linux kernel · windows

   AI risk analysis on Exploit-DB.ai →

8. CRITICAL 9.9CVE-2026-756822026-09-22

   Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vu…

   connect · macos · windows · connect for mobile

   AI risk analysis on Exploit-DB.ai →

9. CRITICAL 9.9CVE-2026-892762026-09-22

   Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability …

   campaign · linux kernel · windows

   AI risk analysis on Exploit-DB.ai →

10. CRITICAL 9.9CVE-2026-836602026-09-22

    Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.

    campaign · linux kernel · windows

    AI risk analysis on Exploit-DB.ai →

11. CRITICAL 9.9CVE-2026-820132026-09-22

    Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploitation of …

    campaign · linux kernel · windows

    AI risk analysis on Exploit-DB.ai →

12. CRITICAL 9.9CVE-2026-820102026-09-22

    Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could …

    campaign · linux kernel · windows

    AI risk analysis on Exploit-DB.ai →

13. CRITICAL 9.9CVE-2026-820082026-09-22

    Adobe Campaign Classic (ACC) is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Explo…

    campaign · linux kernel · windows

    AI risk analysis on Exploit-DB.ai →

14. CRITICAL 9.8CVE-2026-111497public PoC2026-10-22

    A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a…

    brotli · node.js · brotlicffi · .net · debian linux · istio

    AI risk analysis on Exploit-DB.ai →

15. CRITICAL 9.8CVE-2026-978162026-10-13

    Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.

    windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2

    AI risk analysis on Exploit-DB.ai →

16. CRITICAL 9.8CVE-2026-978152026-10-13

    Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

    windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

    AI risk analysis on Exploit-DB.ai →

17. CRITICAL 9.8CVE-2026-978142026-10-13

    Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.

    windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

    AI risk analysis on Exploit-DB.ai →

18. CRITICAL 9.8CVE-2026-978052026-10-13

    Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.

    windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

    AI risk analysis on Exploit-DB.ai →

19. CRITICAL 9.8CVE-2026-977492026-10-13

    Double free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

    365 apps · office 2021 · office 2024

    AI risk analysis on Exploit-DB.ai →

20. CRITICAL 9.8CVE-2026-970162026-10-13

    Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

    365 apps · office 2021 · office 2024

    AI risk analysis on Exploit-DB.ai →

21. CRITICAL 9.8CVE-2026-969342026-10-13

    Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

    windows 10 1607 · windows 10 1809 · windows server 2012 · windows server 2016 · windows server 2019 · windows server 2022

    AI risk analysis on Exploit-DB.ai →

22. CRITICAL 9.8CVE-2026-969242026-10-13

    Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a network.

    windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

    AI risk analysis on Exploit-DB.ai →

23. CRITICAL 9.8CVE-2026-969092026-10-13

    Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to execute code over a network.

    windows 11 23h2 · windows 11 24h2 · windows 11 25h2 · windows 11 26h1 · windows 11 26h2 · windows server 2022

    AI risk analysis on Exploit-DB.ai →

24. CRITICAL 9.8CVE-2026-963202026-10-13

    Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

    windows 10 1607 · windows 10 1809 · windows server 2012 · windows server 2016 · windows server 2019 · windows server 2022

    AI risk analysis on Exploit-DB.ai →

25. CRITICAL 9.8CVE-2026-962192026-10-13

    Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network.

    windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2

    AI risk analysis on Exploit-DB.ai →

26. CRITICAL 9.8CVE-2026-961132026-10-13

    Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network.

    windows 10 1607 · windows 10 1809 · windows server 2012 · windows server 2016 · windows server 2019 · windows server 2022

    AI risk analysis on Exploit-DB.ai →

27. CRITICAL 9.8CVE-2026-960962026-10-13

    Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.

    windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

    AI risk analysis on Exploit-DB.ai →

28. CRITICAL 9.8CVE-2026-881782026-10-13

    Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

    365 apps · microsoft 365 · office 2021 · office 2024

    AI risk analysis on Exploit-DB.ai →

29. CRITICAL 9.8CVE-2026-881562026-10-13

    Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

    365 apps · microsoft 365 · office 2021 · office 2024

    AI risk analysis on Exploit-DB.ai →

30. CRITICAL 9.8CVE-2026-881022026-10-13

    Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.

    windows server 2019 · windows server 2022 · windows server 2025

    AI risk analysis on Exploit-DB.ai →

31. CRITICAL 9.8CVE-2026-858142026-10-13

    Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

    windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

    AI risk analysis on Exploit-DB.ai →

32. CRITICAL 9.8CVE-2026-858092026-10-13

    Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

    windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

    AI risk analysis on Exploit-DB.ai →

33. CRITICAL 9.8CVE-2026-858062026-10-13

    Integer underflow (wrap or wraparound) in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.

    windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

    AI risk analysis on Exploit-DB.ai →

34. CRITICAL 9.8CVE-2026-857922026-10-13

    Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

    windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

    AI risk analysis on Exploit-DB.ai →

35. CRITICAL 9.8CVE-2026-840152026-10-13

    Heap-based buffer overflow in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an unauthorized attacker to execute code over a network.

    windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

    AI risk analysis on Exploit-DB.ai →

36. CRITICAL 9.8CVE-2026-839352026-10-13

    Heap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute code over a network.

    windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

    AI risk analysis on Exploit-DB.ai →

37. CRITICAL 9.8CVE-2026-838692026-10-13

    Integer underflow (wrap or wraparound) in DNS Server allows an unauthorized attacker to execute code over a network.

    windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

    AI risk analysis on Exploit-DB.ai →

38. CRITICAL 9.8CVE-2026-703002026-10-13

    Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

    365 apps · office 2021 · office 2024

    AI risk analysis on Exploit-DB.ai →

39. CRITICAL 9.8CVE-2026-702912026-10-13

    Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

    365 apps · microsoft 365 · office 2021 · office 2024

    AI risk analysis on Exploit-DB.ai →

40. CRITICAL 9.8CVE-2026-702422026-10-13

    Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

    365 apps · office 2021 · office 2024

    AI risk analysis on Exploit-DB.ai →

41. CRITICAL 9.8CVE-2026-700242026-10-13

    Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network.

    windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

    AI risk analysis on Exploit-DB.ai →

42. CRITICAL 9.8CVE-2026-698862026-10-13

    Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

    windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

    AI risk analysis on Exploit-DB.ai →

43. CRITICAL 9.8CVE-2026-698832026-10-13

    Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.

    windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

    AI risk analysis on Exploit-DB.ai →

44. CRITICAL 9.6CVE-2026-1210372026-11-03

    Out of bounds write in ANGLE in Google Chrome on on Windows prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

    chrome · windows

    AI risk analysis on Exploit-DB.ai →

45. CRITICAL 9.6CVE-2026-1210342026-11-03

    Use after free in Views in Google Chrome on on Windows prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

    chrome · windows

    AI risk analysis on Exploit-DB.ai →

46. CRITICAL 9.6CVE-2026-1183102026-10-27

    Improper input validation in Views in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

    chrome · windows

    AI risk analysis on Exploit-DB.ai →

47. CRITICAL 9.6CVE-2026-1132832026-10-20

    Memory corruption in CredentialProvider in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

    chrome · windows

    AI risk analysis on Exploit-DB.ai →

48. CRITICAL 9.6CVE-2026-1132522026-10-20

    Improper input validation in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

    chrome · windows

    AI risk analysis on Exploit-DB.ai →

49. CRITICAL 9.6CVE-2026-1036262026-10-02

    Incorrect authorization in FileSystem in Google Chrome on on Windows prior to 154.0.8037.97 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: …

    chrome · windows

    AI risk analysis on Exploit-DB.ai →

50. CRITICAL 9.6CVE-2026-824432026-09-22

    Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploitation of …

    campaign · linux kernel · windows

    AI risk analysis on Exploit-DB.ai →

51. CRITICAL 9.4CVE-2026-880922026-10-13

    Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to perform tampering over a network.

    asp.net core · visual studio 2022 · visual studio 2026

    AI risk analysis on Exploit-DB.ai →

52. CRITICAL 9.3CVE-2026-756982026-09-22

    Adobe Connect is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's account or session. Ex…

    connect · macos · windows · connect for mobile

    AI risk analysis on Exploit-DB.ai →

53. CRITICAL 9.3CVE-2026-756972026-09-22

    Adobe Connect is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page …

    connect · macos · windows · connect for mobile

    AI risk analysis on Exploit-DB.ai →

54. CRITICAL 9.3CVE-2026-756892026-09-22

    Adobe Connect is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page …

    connect · macos · windows · connect for mobile

    AI risk analysis on Exploit-DB.ai →

55. CRITICAL 9.3CVE-2026-756862026-09-22

    Adobe Connect is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue require…

    connect · macos · windows · connect for mobile

    AI risk analysis on Exploit-DB.ai →

56. CRITICAL 9.3CVE-2026-756842026-09-22

    Adobe Connect is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page …

    connect · macos · windows · connect for mobile

    AI risk analysis on Exploit-DB.ai →

57. CRITICAL 9.1CVE-2026-962522026-10-13

    Improper verification of cryptographic signature in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.

    windows 10 1607 · windows 10 1809 · windows server 2012 · windows server 2016 · windows server 2019 · windows server 2022

    AI risk analysis on Exploit-DB.ai →

58. CRITICAL 9.1CVE-2026-820112026-09-22

    Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to byp…

    campaign · linux kernel · windows

    AI risk analysis on Exploit-DB.ai →

59. CRITICAL 9.1CVE-2026-820092026-09-22

    Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges…

    campaign · linux kernel · windows

    AI risk analysis on Exploit-DB.ai →

60. CRITICAL 9.1CVE-2026-757282026-09-22

    Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this …

    campaign · linux kernel · windows

    AI risk analysis on Exploit-DB.ai →

61. CRITICAL 9CVE-2026-858182026-10-13

    Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.

    windows 11 23h2 · windows 11 24h2 · windows 11 25h2 · windows 11 26h1 · windows 11 26h2 · windows server 2022

    AI risk analysis on Exploit-DB.ai →

62. HIGH 8.8CVE-2026-962032026-10-29

    Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

    edge chromium

    AI risk analysis on Exploit-DB.ai →

63. HIGH 8.8CVE-2026-961992026-10-29

    Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

    edge chromium

    AI risk analysis on Exploit-DB.ai →

64. HIGH 8.8CVE-2026-961982026-10-29

    Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

    edge chromium

    AI risk analysis on Exploit-DB.ai →

65. HIGH 8.8CVE-2026-961962026-10-29

    Incomplete list of disallowed inputs in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.

    edge chromium

    AI risk analysis on Exploit-DB.ai →

66. HIGH 8.8CVE-2026-961922026-10-29

    Use after free in Microsoft Edge for iOS allows an unauthorized attacker to execute code over a network.

    edge

    AI risk analysis on Exploit-DB.ai →

67. HIGH 8.8CVE-2026-880772026-10-29

    Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

    edge chromium

    AI risk analysis on Exploit-DB.ai →

68. HIGH 8.8CVE-2026-858972026-10-29

    Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

    edge chromium

    AI risk analysis on Exploit-DB.ai →

69. HIGH 8.8CVE-2026-858902026-10-29

    Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

    edge chromium

    AI risk analysis on Exploit-DB.ai →

70. HIGH 8.8CVE-2026-1183302026-10-27

    Use after free in Browser in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

    chrome · windows

    AI risk analysis on Exploit-DB.ai →

71. HIGH 8.8CVE-2026-858982026-10-27

    Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

    edge

    AI risk analysis on Exploit-DB.ai →

72. HIGH 8.8CVE-2026-838312026-10-27

    Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

    edge

    AI risk analysis on Exploit-DB.ai →

73. HIGH 8.8CVE-2026-1133342026-10-20

    Improper input validation in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

    chrome · windows

    AI risk analysis on Exploit-DB.ai →

74. HIGH 8.8CVE-2026-1132932026-10-20

    Use after free in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

    chrome · windows

    AI risk analysis on Exploit-DB.ai →

75. HIGH 8.8CVE-2026-1132852026-10-20

    Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

    chrome · windows

    AI risk analysis on Exploit-DB.ai →

76. HIGH 8.8CVE-2026-1132422026-10-20

    Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

    chrome · windows

    AI risk analysis on Exploit-DB.ai →

77. HIGH 8.8CVE-2026-1132102026-10-20

    Use after free in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

    chrome · windows

    AI risk analysis on Exploit-DB.ai →

78. HIGH 8.8CVE-2026-1131342026-10-20

    Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

    chrome · windows

    AI risk analysis on Exploit-DB.ai →

79. HIGH 8.8CVE-2026-1131192026-10-20

    Use after free in Network in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

    chrome · windows

    AI risk analysis on Exploit-DB.ai →

80. HIGH 8.8CVE-2026-1130742026-10-20

    Use after free in Media in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

    chrome · windows

    AI risk analysis on Exploit-DB.ai →

81. HIGH 8.8CVE-2026-1130112026-10-20

    Use after free in CredentialProvider in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

    chrome · windows

    AI risk analysis on Exploit-DB.ai →

82. HIGH 8.8CVE-2026-1084522026-10-15

    Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

    sharepoint server

    AI risk analysis on Exploit-DB.ai →

83. HIGH 8.8CVE-2026-1084512026-10-15

    Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

    365 apps · office 2021 · office 2024

    AI risk analysis on Exploit-DB.ai →

84. HIGH 8.8CVE-2026-1084502026-10-15

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

    365 apps · office 2021 · office 2024

    AI risk analysis on Exploit-DB.ai →

85. HIGH 8.8CVE-2026-1084492026-10-15

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

    365 apps · microsoft 365 · office 2021 · office 2024

    AI risk analysis on Exploit-DB.ai →

86. HIGH 8.8CVE-2026-1084472026-10-15

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

    365 apps · office 2021 · office 2024

    AI risk analysis on Exploit-DB.ai →

87. HIGH 8.8CVE-2026-1084462026-10-15

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

    365 apps · microsoft 365 · office 2021 · office 2024 · office online server

    AI risk analysis on Exploit-DB.ai →

88. HIGH 8.8CVE-2026-1084452026-10-15

    Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

    365 apps · microsoft 365 · office 2021 · office 2024

    AI risk analysis on Exploit-DB.ai →

89. HIGH 8.8CVE-2026-1084442026-10-15

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

    365 apps · microsoft 365 · office 2021 · office 2024

    AI risk analysis on Exploit-DB.ai →

90. HIGH 8.8CVE-2026-1084432026-10-15

    Off-by-one error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

    365 apps · microsoft 365 · office 2021 · office 2024

    AI risk analysis on Exploit-DB.ai →

91. HIGH 8.8CVE-2026-977812026-10-13

    Improper neutralization of special elements used in a command ('command injection') in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network.

    365 apps

    AI risk analysis on Exploit-DB.ai →

92. HIGH 8.8CVE-2026-977802026-10-13

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

    365 apps · microsoft 365 · office 2021 · office 2024 · office online server

    AI risk analysis on Exploit-DB.ai →

93. HIGH 8.8CVE-2026-977782026-10-13

    Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

    365 apps · microsoft 365 · office 2021 · office 2024 · office online server

    AI risk analysis on Exploit-DB.ai →

94. HIGH 8.8CVE-2026-977772026-10-13

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

    365 apps · microsoft 365 · office 2021 · office 2024 · office online server

    AI risk analysis on Exploit-DB.ai →

95. HIGH 8.8CVE-2026-977762026-10-13

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

    365 apps · microsoft 365 · office 2021 · office 2024 · office online server

    AI risk analysis on Exploit-DB.ai →

96. HIGH 8.8CVE-2026-977752026-10-13

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

    365 apps · microsoft 365 · office 2021 · office 2024 · office online server

    AI risk analysis on Exploit-DB.ai →

97. HIGH 8.8CVE-2026-977732026-10-13

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

    365 apps · microsoft 365 · office 2021 · office 2024 · office online server

    AI risk analysis on Exploit-DB.ai →

98. HIGH 8.8CVE-2026-977722026-10-13

    Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

    365 apps · microsoft 365 · office 2021 · office 2024 · office online server

    AI risk analysis on Exploit-DB.ai →

99. HIGH 8.8CVE-2026-977712026-10-13

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

    365 apps · microsoft 365 · office 2021 · office 2024 · office online server

    AI risk analysis on Exploit-DB.ai →

100. HIGH 8.8CVE-2026-977702026-10-13

     Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

     365 apps · microsoft 365 · office 2021 · office 2024 · office online server

     AI risk analysis on Exploit-DB.ai →

101. HIGH 8.8CVE-2026-977692026-10-13

     Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

     365 apps · microsoft 365 · office 2021 · office 2024 · office online server

     AI risk analysis on Exploit-DB.ai →

102. HIGH 8.8CVE-2026-977682026-10-13

     Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

     365 apps · microsoft 365 · office 2021 · office 2024 · office online server

     AI risk analysis on Exploit-DB.ai →

103. HIGH 8.8CVE-2026-977672026-10-13

     Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

     365 apps · microsoft 365 · office 2021 · office 2024 · office online server

     AI risk analysis on Exploit-DB.ai →

104. HIGH 8.8CVE-2026-977662026-10-13

     Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

     365 apps · microsoft 365 · office 2021 · office 2024 · office online server

     AI risk analysis on Exploit-DB.ai →

105. HIGH 8.8CVE-2026-977652026-10-13

     Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

     365 apps · microsoft 365 · office 2021 · office 2024 · office online server

     AI risk analysis on Exploit-DB.ai →

106. HIGH 8.8CVE-2026-977632026-10-13

     Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

     365 apps · microsoft 365 · office 2021 · office 2024 · office online server

     AI risk analysis on Exploit-DB.ai →

107. HIGH 8.8CVE-2026-977622026-10-13

     Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

     365 apps · microsoft 365 · office 2021 · office 2024 · office online server

     AI risk analysis on Exploit-DB.ai →

108. HIGH 8.8CVE-2026-977612026-10-13

     Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

     365 apps · microsoft 365 · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

109. HIGH 8.8CVE-2026-977592026-10-13

     Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

     365 apps · microsoft 365 · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

110. HIGH 8.8CVE-2026-977582026-10-13

     Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

     365 apps · microsoft 365 · office 2021 · office 2024 · office online server

     AI risk analysis on Exploit-DB.ai →

111. HIGH 8.8CVE-2026-977572026-10-13

     Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

     365 apps · microsoft 365 · office 2021 · office 2024 · office online server

     AI risk analysis on Exploit-DB.ai →

112. HIGH 8.8CVE-2026-977562026-10-13

     Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

     365 apps · microsoft 365 · office 2021 · office 2024 · office online server

     AI risk analysis on Exploit-DB.ai →

113. HIGH 8.8CVE-2026-977552026-10-13

     Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

     365 apps · microsoft 365 · office 2021 · office 2024 · office online server · sharepoint server

     AI risk analysis on Exploit-DB.ai →

114. HIGH 8.8CVE-2026-977542026-10-13

     Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

     365 apps · microsoft 365 · office 2021 · office 2024 · office online server

     AI risk analysis on Exploit-DB.ai →

115. HIGH 8.8CVE-2026-977532026-10-13

     Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

     365 apps · microsoft 365 · office 2021 · office 2024 · office online server

     AI risk analysis on Exploit-DB.ai →

116. HIGH 8.8CVE-2026-977522026-10-13

     Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

     365 apps · microsoft 365 · office 2021 · office 2024 · office online server

     AI risk analysis on Exploit-DB.ai →

117. HIGH 8.8CVE-2026-977512026-10-13

     Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

     365 apps · microsoft 365 · office 2021 · office 2024 · office online server

     AI risk analysis on Exploit-DB.ai →

118. HIGH 8.8CVE-2026-977502026-10-13

     Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

     365 apps · microsoft 365 · office 2021 · office 2024 · office online server

     AI risk analysis on Exploit-DB.ai →

119. HIGH 8.8CVE-2026-977482026-10-13

     Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

     365 apps · microsoft 365 · office 2021 · office 2024 · office online server

     AI risk analysis on Exploit-DB.ai →

120. HIGH 8.8CVE-2026-977472026-10-13

     Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

     365 apps · microsoft 365 · office 2021 · office 2024 · office online server

     AI risk analysis on Exploit-DB.ai →

121. HIGH 8.8CVE-2026-977462026-10-13

     Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

     365 apps · microsoft 365 · office 2021 · office 2024 · office online server

     AI risk analysis on Exploit-DB.ai →

122. HIGH 8.8CVE-2026-977452026-10-13

     Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

     365 apps · microsoft 365 · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

123. HIGH 8.8CVE-2026-977422026-10-13

     Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

     365 apps · microsoft 365 · office 2021 · office 2024 · office online server

     AI risk analysis on Exploit-DB.ai →

124. HIGH 8.8CVE-2026-977412026-10-13

     Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

     365 apps · microsoft 365 · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

125. HIGH 8.8CVE-2026-977392026-10-13

     Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

     365 apps · microsoft 365 · office 2021 · office 2024 · office online server

     AI risk analysis on Exploit-DB.ai →

126. HIGH 8.8CVE-2026-977382026-10-13

     Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

     365 apps · microsoft 365 · office 2021 · office 2024 · office online server

     AI risk analysis on Exploit-DB.ai →

127. HIGH 8.8CVE-2026-970172026-10-13

     Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

     365 apps · microsoft 365 · office 2021 · office 2024 · office online server

     AI risk analysis on Exploit-DB.ai →

128. HIGH 8.8CVE-2026-970122026-10-13

     Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

     365 apps · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

129. HIGH 8.8CVE-2026-970112026-10-13

     Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

     365 apps · microsoft 365 · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

130. HIGH 8.8CVE-2026-970102026-10-13

     Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

     365 apps · microsoft 365 · office 2021 · office 2024 · office online server

     AI risk analysis on Exploit-DB.ai →

131. HIGH 8.8CVE-2026-970082026-10-13

     Buffer underwrite ('buffer underflow') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

     365 apps · microsoft 365 · office 2021 · office 2024 · office online server

     AI risk analysis on Exploit-DB.ai →

132. HIGH 8.8CVE-2026-970072026-10-13

     Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

     365 apps · microsoft 365 · office 2021 · office 2024 · office online server

     AI risk analysis on Exploit-DB.ai →

133. HIGH 8.8CVE-2026-970042026-10-13

     Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

     365 apps · microsoft 365 · office 2021 · office 2024 · office online server

     AI risk analysis on Exploit-DB.ai →

134. HIGH 8.8CVE-2026-970032026-10-13

     Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

     365 apps · microsoft 365 · office 2021 · office 2024 · office online server

     AI risk analysis on Exploit-DB.ai →

135. HIGH 8.8CVE-2026-969572026-10-13

     Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.

     .net · macos · linux kernel · windows · visual studio 2022 · visual studio 2026

     AI risk analysis on Exploit-DB.ai →

136. HIGH 8.8CVE-2026-969522026-10-13

     Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

     windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2

     AI risk analysis on Exploit-DB.ai →

137. HIGH 8.8CVE-2026-969512026-10-13

     Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.

     outlook web · windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2

     AI risk analysis on Exploit-DB.ai →

138. HIGH 8.8CVE-2026-969432026-10-13

     Integer overflow or wraparound in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.

     raw image extension · windows 11 21h2 · windows 11 26h2 · windows 10 1507 · windows 10 1607 · windows 10 1809

     AI risk analysis on Exploit-DB.ai →

139. HIGH 8.8CVE-2026-969172026-10-13

     Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally.

     windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2

     AI risk analysis on Exploit-DB.ai →

140. HIGH 8.8CVE-2026-962512026-10-13

     Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute code over a network.

     powershell

     AI risk analysis on Exploit-DB.ai →

141. HIGH 8.8CVE-2026-960442026-10-13

     No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

     sharepoint server

     AI risk analysis on Exploit-DB.ai →

142. HIGH 8.8CVE-2026-882192026-10-13

     Untrusted pointer dereference in RPC Runtime allows an unauthorized attacker to execute code over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

143. HIGH 8.8CVE-2026-882022026-10-13

     Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

     365 apps · microsoft 365 · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

144. HIGH 8.8CVE-2026-882002026-10-13

     Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

     sharepoint server

     AI risk analysis on Exploit-DB.ai →

145. HIGH 8.8CVE-2026-881982026-10-13

     Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

     sharepoint server

     AI risk analysis on Exploit-DB.ai →

146. HIGH 8.8CVE-2026-881972026-10-13

     Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

     365 apps · microsoft 365 · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

147. HIGH 8.8CVE-2026-881962026-10-13

     Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

     365 apps · microsoft 365 · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

148. HIGH 8.8CVE-2026-881862026-10-13

     Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

     365 apps · microsoft 365 · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

149. HIGH 8.8CVE-2026-881662026-10-13

     Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

     sharepoint server

     AI risk analysis on Exploit-DB.ai →

150. HIGH 8.8CVE-2026-881652026-10-13

     Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute code over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

151. HIGH 8.8CVE-2026-881632026-10-13

     Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

     sharepoint server

     AI risk analysis on Exploit-DB.ai →

152. HIGH 8.8CVE-2026-881552026-10-13

     Heap-based buffer overflow in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

     sharepoint server

     AI risk analysis on Exploit-DB.ai →

153. HIGH 8.8CVE-2026-881502026-10-13

     Use of uninitialized resource in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

     365 apps · microsoft 365 · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

154. HIGH 8.8CVE-2026-881452026-10-13

     Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

     365 apps · microsoft 365 · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

155. HIGH 8.8CVE-2026-881442026-10-13

     Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

     365 apps · microsoft 365 · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

156. HIGH 8.8CVE-2026-881162026-10-13

     Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

157. HIGH 8.8CVE-2026-881142026-10-13

     Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

158. HIGH 8.8CVE-2026-881122026-10-13

     Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

159. HIGH 8.8CVE-2026-880752026-10-13

     Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network.

     configuration manager 2503 · configuration manager 2509 · configuration manager 2603

     AI risk analysis on Exploit-DB.ai →

160. HIGH 8.8CVE-2026-880732026-10-13

     Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

     windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2 · windows 11 26h1

     AI risk analysis on Exploit-DB.ai →

161. HIGH 8.8CVE-2026-859032026-10-13

     Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

162. HIGH 8.8CVE-2026-859002026-10-13

     Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

     sharepoint server

     AI risk analysis on Exploit-DB.ai →

163. HIGH 8.8CVE-2026-858172026-10-13

     Reliance on untrusted inputs in a security decision in Windows PowerShell allows an unauthorized attacker to execute code over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

164. HIGH 8.8CVE-2026-839342026-10-13

     Stack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

165. HIGH 8.8CVE-2026-838912026-10-13

     Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

     365 apps · microsoft 365 · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

166. HIGH 8.8CVE-2026-838892026-10-13

     Release of invalid pointer or reference in DNS Server allows an authorized attacker to execute code over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

167. HIGH 8.8CVE-2026-836422026-10-13

     Access of resource using incompatible type ('type confusion') in DNS Server allows an unauthorized attacker to execute code over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

168. HIGH 8.8CVE-2026-779022026-10-13

     Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

     365 apps · microsoft 365 · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

169. HIGH 8.8CVE-2026-703022026-10-13

     Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

     365 apps · microsoft 365 · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

170. HIGH 8.8CVE-2026-703012026-10-13

     Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

     365 apps · microsoft 365 · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

171. HIGH 8.8CVE-2026-702872026-10-13

     Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

     365 apps · microsoft 365 · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

172. HIGH 8.8CVE-2026-702822026-10-13

     Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

     365 apps · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

173. HIGH 8.8CVE-2026-702682026-10-13

     Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

     365 apps · microsoft 365 · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

174. HIGH 8.8CVE-2026-702662026-10-13

     Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

     sharepoint server

     AI risk analysis on Exploit-DB.ai →

175. HIGH 8.8CVE-2026-702572026-10-13

     Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

     365 apps · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

176. HIGH 8.8CVE-2026-702562026-10-13

     Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

     365 apps · office 2024

     AI risk analysis on Exploit-DB.ai →

177. HIGH 8.8CVE-2026-702542026-10-13

     Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

     365 apps · microsoft 365 · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

178. HIGH 8.8CVE-2026-702462026-10-13

     Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

     sharepoint server

     AI risk analysis on Exploit-DB.ai →

179. HIGH 8.8CVE-2026-702152026-10-13

     Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

     365 apps · microsoft 365 · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

180. HIGH 8.8CVE-2026-701672026-10-13

     Access of resource using incompatible type ('type confusion') in DNS Server allows an authorized attacker to execute code over a network.

     windows server 2022 · windows server 2025

     AI risk analysis on Exploit-DB.ai →

181. HIGH 8.8CVE-2026-699452026-10-13

     Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate privileges locally.

     windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2 · windows 11 26h1

     AI risk analysis on Exploit-DB.ai →

182. HIGH 8.8CVE-2026-699432026-10-13

     Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

     sharepoint server

     AI risk analysis on Exploit-DB.ai →

183. HIGH 8.8CVE-2026-699182026-10-13

     Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

184. HIGH 8.8CVE-2026-1057182026-10-13

     Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

     365 apps · microsoft 365 · office 2021 · office 2024 · office online server

     AI risk analysis on Exploit-DB.ai →

185. HIGH 8.8CVE-2026-1057172026-10-13

     Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

     365 apps · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

186. HIGH 8.8CVE-2026-1057162026-10-13

     Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

     365 apps · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

187. HIGH 8.8CVE-2026-1055982026-10-13

     Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

     365 apps · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

188. HIGH 8.8CVE-2026-1055972026-10-13

     Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

     365 apps · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

189. HIGH 8.8CVE-2026-1055962026-10-13

     Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

     365 apps · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

190. HIGH 8.8CVE-2026-1055952026-10-13

     Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

     365 apps · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

191. HIGH 8.8CVE-2026-1055932026-10-13

     Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

     365 apps · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

192. HIGH 8.8CVE-2026-1055912026-10-13

     Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

     365 apps · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

193. HIGH 8.8CVE-2026-1028632026-10-13

     Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

     sharepoint server

     AI risk analysis on Exploit-DB.ai →

194. HIGH 8.8CVE-2026-1028622026-10-13

     Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

     sharepoint server

     AI risk analysis on Exploit-DB.ai →

195. HIGH 8.8CVE-2026-1028612026-10-13

     Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

     sharepoint server

     AI risk analysis on Exploit-DB.ai →

196. HIGH 8.8CVE-2026-1028602026-10-13

     Improper access control in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

     sharepoint server

     AI risk analysis on Exploit-DB.ai →

197. HIGH 8.8CVE-2026-1028582026-10-13

     Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network.

     microsoft 365 · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

198. HIGH 8.8CVE-2026-1028572026-10-13

     Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.

     365 apps · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

199. HIGH 8.8CVE-2026-1028562026-10-13

     Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.

     365 apps · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

200. HIGH 8.8CVE-2026-1028502026-10-13

     Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

     365 apps · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

201. HIGH 8.8CVE-2026-1028492026-10-13

     Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

     365 apps · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

202. HIGH 8.8CVE-2026-1002122026-10-13

     Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

     365 apps · microsoft 365 · office 2021 · office 2024 · office online server

     AI risk analysis on Exploit-DB.ai →

203. HIGH 8.8CVE-2026-1002112026-10-13

     Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

     365 apps · microsoft 365 · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

204. HIGH 8.8CVE-2026-1002102026-10-13

     Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

     365 apps · microsoft 365 · office 2021 · office 2024 · office online server

     AI risk analysis on Exploit-DB.ai →

205. HIGH 8.8CVE-2026-1002092026-10-13

     Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

     365 apps · microsoft 365 · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

206. HIGH 8.8CVE-2026-1063732026-10-06

     Use after free in Fonts in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

     chrome · windows

     AI risk analysis on Exploit-DB.ai →

207. HIGH 8.8CVE-2026-252652026-09-22

     Privilege escalation due to weak configuration while temporary file handling.

     software center · windows

     AI risk analysis on Exploit-DB.ai →

208. HIGH 8.8CVE-2026-252642026-09-22

     Privilege escalation due to weak configuration during package extraction process.

     software center · windows

     AI risk analysis on Exploit-DB.ai →

209. HIGH 8.6CVE-2026-1101442026-10-13

     Incorrect authorization in Mojo in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High)

     chrome · windows

     AI risk analysis on Exploit-DB.ai →

210. HIGH 8.6CVE-2026-1061862026-10-06

     Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. (Chromium security severity: Low)

     chrome · windows

     AI risk analysis on Exploit-DB.ai →

211. HIGH 8.6CVE-2026-1023172026-09-29

     Improper privilege management in Mojo in Google Chrome on on Windows prior to 154.0.8037.92 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High)

     chrome · windows

     AI risk analysis on Exploit-DB.ai →

212. HIGH 8.6CVE-2026-346892026-09-22

     Adobe Connect is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories o…

     connect · macos · windows · connect for mobile

     AI risk analysis on Exploit-DB.ai →

213. HIGH 8.5CVE-2026-820032026-09-22

     Adobe Campaign Classic (ACC) is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Explo…

     campaign · linux kernel · windows

     AI risk analysis on Exploit-DB.ai →

214. HIGH 8.3CVE-2026-1036242026-10-02

     Use after free in Contextual Tasks in Google Chrome on on Windows prior to 154.0.8037.97 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security se…

     chrome · windows

     AI risk analysis on Exploit-DB.ai →

215. HIGH 8.2CVE-2026-859252026-10-13

     Improper restriction of communication channel to intended endpoints in Azure Key Vault allows an authorized attacker to elevate privileges over a network.

     azure-keyvault-administration · azure-keyvault-certificates · azure-keyvault-keys · azure-keyvault-secrets

     AI risk analysis on Exploit-DB.ai →

216. HIGH 8.1CVE-2026-858992026-10-29

     Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges over a network.

     edge chromium

     AI risk analysis on Exploit-DB.ai →

217. HIGH 8.1CVE-2026-96644public PoC2026-10-21

     Pillow is a Python imaging library. Prior to 13.0.0 on Windows, src/PIL/WmfImagePlugin.py passes unchecked 32-bit WMF or EMF dimensions to the native drawwmf handler in src/display.c. The handler sizes a DIB allocation from 16-bit-truncated bcWidth and bcHeigh…

     pillow · windows

     AI risk analysis on Exploit-DB.ai →

218. HIGH 8.1CVE-2026-977832026-10-13

     Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

     sharepoint server

     AI risk analysis on Exploit-DB.ai →

219. HIGH 8.1CVE-2026-881852026-10-13

     Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

     365 apps · microsoft 365 · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

220. HIGH 8.1CVE-2026-881742026-10-13

     Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Deployment Services allows an unauthorized attacker to execute code over a network.

     windows 10 1607 · windows 10 1809 · windows server 2012 · windows server 2016 · windows server 2019 · windows server 2022

     AI risk analysis on Exploit-DB.ai →

221. HIGH 8.1CVE-2026-881732026-10-13

     Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.

     windows 10 1607 · windows 10 1809 · windows server 2012 · windows server 2016 · windows server 2019 · windows server 2022

     AI risk analysis on Exploit-DB.ai →

222. HIGH 8.1CVE-2026-881712026-10-13

     Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

     windows 10 1607 · windows 10 1809 · windows server 2012 · windows server 2016 · windows server 2019 · windows server 2022

     AI risk analysis on Exploit-DB.ai →

223. HIGH 8.1CVE-2026-859262026-10-13

     Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

224. HIGH 8.1CVE-2026-857992026-10-13

     Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

225. HIGH 8.1CVE-2026-853712026-10-13

     Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

226. HIGH 8.1CVE-2026-840122026-10-13

     Double free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.

     windows 10 1607 · windows 10 1809 · windows server 2012 · windows server 2016 · windows server 2019 · windows server 2022

     AI risk analysis on Exploit-DB.ai →

227. HIGH 8.1CVE-2026-702692026-10-13

     Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

     365 apps · microsoft 365 · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

228. HIGH 8.1CVE-2026-701272026-10-13

     Use after free in DNS Server allows an unauthorized attacker to execute code over a network.

     windows 10 1607 · windows 10 1809 · windows server 2012 · windows server 2016 · windows server 2019 · windows server 2022

     AI risk analysis on Exploit-DB.ai →

229. HIGH 8.1CVE-2026-700382026-10-13

     Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

230. HIGH 8.1CVE-2026-700132026-10-13

     Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

231. HIGH 8.1CVE-2026-699132026-10-13

     Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

232. HIGH 8.1CVE-2026-1028662026-10-13

     Improper verification of cryptographic signature in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.

     sharepoint server

     AI risk analysis on Exploit-DB.ai →

233. HIGH 8CVE-2026-968442026-10-13

     Integer underflow (wrap or wraparound) in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges over an adjacent network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

234. HIGH 7.8CVE-2026-973122026-10-13

     Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

     photoshop · macos · windows

     AI risk analysis on Exploit-DB.ai →

235. HIGH 7.8CVE-2026-965232026-10-13

     Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

     photoshop · macos · windows

     AI risk analysis on Exploit-DB.ai →

236. HIGH 7.8CVE-2026-965222026-10-13

     Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

     photoshop · macos · windows

     AI risk analysis on Exploit-DB.ai →

237. HIGH 7.8CVE-2026-1043482026-10-13

     Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

     photoshop · macos · windows

     AI risk analysis on Exploit-DB.ai →

238. HIGH 7.8CVE-2026-1043472026-10-13

     Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

     photoshop · macos · windows

     AI risk analysis on Exploit-DB.ai →

239. HIGH 7.8CVE-2026-1043462026-10-13

     Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

     photoshop · macos · windows

     AI risk analysis on Exploit-DB.ai →

240. HIGH 7.8CVE-2026-1038212026-10-13

     Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

     substance 3d designer · macos · windows

     AI risk analysis on Exploit-DB.ai →

241. HIGH 7.8CVE-2026-1001122026-10-13

     Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

     photoshop · macos · windows

     AI risk analysis on Exploit-DB.ai →

242. HIGH 7.8CVE-2026-1001112026-10-13

     Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

     photoshop · macos · windows

     AI risk analysis on Exploit-DB.ai →

243. HIGH 7.8CVE-2026-978112026-10-13

     Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.

     windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2

     AI risk analysis on Exploit-DB.ai →

244. HIGH 7.8CVE-2026-978092026-10-13

     Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

     windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2

     AI risk analysis on Exploit-DB.ai →

245. HIGH 7.8CVE-2026-978072026-10-13

     Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

     windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2

     AI risk analysis on Exploit-DB.ai →

246. HIGH 7.8CVE-2026-978062026-10-13

     Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

     windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2

     AI risk analysis on Exploit-DB.ai →

247. HIGH 7.8CVE-2026-978042026-10-13

     Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

248. HIGH 7.8CVE-2026-978032026-10-13

     Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

     windows 11 26h1

     AI risk analysis on Exploit-DB.ai →

249. HIGH 7.8CVE-2026-978002026-10-13

     Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally.

     windows 11 24h2 · windows 11 25h2 · windows 11 26h1 · windows 11 26h2

     AI risk analysis on Exploit-DB.ai →

250. HIGH 7.8CVE-2026-977992026-10-13

     Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally.

     windows 11 24h2 · windows 11 25h2 · windows 11 26h1 · windows 11 26h2

     AI risk analysis on Exploit-DB.ai →

251. HIGH 7.8CVE-2026-977982026-10-13

     Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

     windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2 · windows 11 26h1

     AI risk analysis on Exploit-DB.ai →

252. HIGH 7.8CVE-2026-977942026-10-13

     Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

     windows 11 23h2 · windows 11 24h2 · windows 11 25h2 · windows 11 26h1 · windows 11 26h2 · windows server 2022

     AI risk analysis on Exploit-DB.ai →

253. HIGH 7.8CVE-2026-977922026-10-13

     Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

     windows 11 23h2 · windows 11 24h2 · windows 11 25h2 · windows 11 26h2 · windows server 2022 · windows server 2025

     AI risk analysis on Exploit-DB.ai →

254. HIGH 7.8CVE-2026-970092026-10-13

     Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

     365 apps · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

255. HIGH 7.8CVE-2026-970012026-10-13

     Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

     365 apps · microsoft 365 · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

256. HIGH 7.8CVE-2026-969972026-10-13

     Use after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally.

     365 apps · microsoft 365 · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

257. HIGH 7.8CVE-2026-969962026-10-13

     Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

     365 apps · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

258. HIGH 7.8CVE-2026-969952026-10-13

     Stack-based buffer overflow in Microsoft Office Word allows an authorized attacker to elevate privileges locally.

     365 apps · microsoft 365 · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

259. HIGH 7.8CVE-2026-969532026-10-13

     Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

260. HIGH 7.8CVE-2026-969502026-10-13

     Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

261. HIGH 7.8CVE-2026-969472026-10-13

     Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

262. HIGH 7.8CVE-2026-969462026-10-13

     Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

263. HIGH 7.8CVE-2026-969332026-10-13

     Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

264. HIGH 7.8CVE-2026-969312026-10-13

     Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

265. HIGH 7.8CVE-2026-969292026-10-13

     Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

     windows server 2022 · windows server 2025

     AI risk analysis on Exploit-DB.ai →

266. HIGH 7.8CVE-2026-969282026-10-13

     Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

267. HIGH 7.8CVE-2026-969202026-10-13

     Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

268. HIGH 7.8CVE-2026-969182026-10-13

     Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

269. HIGH 7.8CVE-2026-969162026-10-13

     Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

270. HIGH 7.8CVE-2026-969152026-10-13

     Integer overflow or wraparound in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

271. HIGH 7.8CVE-2026-968562026-10-13

     Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

272. HIGH 7.8CVE-2026-968472026-10-13

     Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

273. HIGH 7.8CVE-2026-968432026-10-13

     Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

274. HIGH 7.8CVE-2026-963242026-10-13

     Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

275. HIGH 7.8CVE-2026-963182026-10-13

     Heap-based buffer overflow in Windows Resume allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

276. HIGH 7.8CVE-2026-963172026-10-13

     Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

     windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2

     AI risk analysis on Exploit-DB.ai →

277. HIGH 7.8CVE-2026-963122026-10-13

     Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

278. HIGH 7.8CVE-2026-963092026-10-13

     Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.

     windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2 · windows 11 26h1

     AI risk analysis on Exploit-DB.ai →

279. HIGH 7.8CVE-2026-963082026-10-13

     Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

280. HIGH 7.8CVE-2026-963062026-10-13

     Out-of-bounds read in Windows Sysmain Service allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

281. HIGH 7.8CVE-2026-962492026-10-13

     Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

     windows 11 24h2 · windows 11 25h2 · windows 11 26h1 · windows 11 26h2 · windows server 2025

     AI risk analysis on Exploit-DB.ai →

282. HIGH 7.8CVE-2026-962442026-10-13

     Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

283. HIGH 7.8CVE-2026-962432026-10-13

     Improper link resolution before file access ('link following') in Windows WalletService allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

284. HIGH 7.8CVE-2026-962232026-10-13

     Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

     windows 11 24h2 · windows 11 25h2 · windows 11 26h1 · windows 11 26h2 · windows server 2025

     AI risk analysis on Exploit-DB.ai →

285. HIGH 7.8CVE-2026-962202026-10-13

     Improper control of generation of code ('code injection') in Windows Assigned Access allows an authorized attacker to elevate privileges locally.

     windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2

     AI risk analysis on Exploit-DB.ai →

286. HIGH 7.8CVE-2026-962172026-10-13

     Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

287. HIGH 7.8CVE-2026-961862026-10-13

     Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

288. HIGH 7.8CVE-2026-961182026-10-13

     Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

289. HIGH 7.8CVE-2026-882102026-10-13

     Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.

     365 apps · microsoft 365 · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

290. HIGH 7.8CVE-2026-881942026-10-13

     Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

291. HIGH 7.8CVE-2026-881932026-10-13

     Heap-based buffer overflow in Microsoft Scripting Engine allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

292. HIGH 7.8CVE-2026-881912026-10-13

     Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

293. HIGH 7.8CVE-2026-881892026-10-13

     Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

     windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2

     AI risk analysis on Exploit-DB.ai →

294. HIGH 7.8CVE-2026-881882026-10-13

     Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

295. HIGH 7.8CVE-2026-881822026-10-13

     Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

296. HIGH 7.8CVE-2026-881812026-10-13

     Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

     windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2

     AI risk analysis on Exploit-DB.ai →

297. HIGH 7.8CVE-2026-881802026-10-13

     Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

     windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2

     AI risk analysis on Exploit-DB.ai →

298. HIGH 7.8CVE-2026-881792026-10-13

     Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

299. HIGH 7.8CVE-2026-881772026-10-13

     Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

300. HIGH 7.8CVE-2026-881682026-10-13

     Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

     windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2

     AI risk analysis on Exploit-DB.ai →

301. HIGH 7.8CVE-2026-881092026-10-13

     Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.

     365 apps · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

302. HIGH 7.8CVE-2026-881052026-10-13

     Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

303. HIGH 7.8CVE-2026-881012026-10-13

     Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

304. HIGH 7.8CVE-2026-881002026-10-13

     Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.

     windows 11 24h2 · windows 11 25h2 · windows 11 26h1 · windows 11 26h2 · windows server 2025

     AI risk analysis on Exploit-DB.ai →

305. HIGH 7.8CVE-2026-880932026-10-13

     Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

     windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2

     AI risk analysis on Exploit-DB.ai →

306. HIGH 7.8CVE-2026-880912026-10-13

     Deserialization of untrusted data in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

307. HIGH 7.8CVE-2026-880802026-10-13

     Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

308. HIGH 7.8CVE-2026-880742026-10-13

     Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.

     windows 11 23h2 · windows 11 24h2 · windows 11 25h2 · windows 11 26h1 · windows 11 26h2

     AI risk analysis on Exploit-DB.ai →

309. HIGH 7.8CVE-2026-880722026-10-13

     Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally.

     windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2

     AI risk analysis on Exploit-DB.ai →

310. HIGH 7.8CVE-2026-880712026-10-13

     Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

     windows 11 23h2 · windows 11 24h2 · windows 11 25h2 · windows 11 26h2 · windows server 2022 · windows server 2025

     AI risk analysis on Exploit-DB.ai →

311. HIGH 7.8CVE-2026-880702026-10-13

     Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

312. HIGH 7.8CVE-2026-877122026-10-13

     Use after free in Windows Quality of Service (QoS) Packet Scheduler allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

313. HIGH 7.8CVE-2026-877112026-10-13

     Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

314. HIGH 7.8CVE-2026-859152026-10-13

     Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally.

     windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2

     AI risk analysis on Exploit-DB.ai →

315. HIGH 7.8CVE-2026-859022026-10-13

     Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

316. HIGH 7.8CVE-2026-859012026-10-13

     Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

317. HIGH 7.8CVE-2026-858372026-10-13

     Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.

     windows 11 24h2 · windows 11 25h2 · windows 11 26h1 · windows 11 26h2 · windows server 2025

     AI risk analysis on Exploit-DB.ai →

318. HIGH 7.8CVE-2026-858362026-10-13

     Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

     windows 11 24h2 · windows 11 25h2 · windows 11 26h1 · windows 11 26h2 · windows server 2025

     AI risk analysis on Exploit-DB.ai →

319. HIGH 7.8CVE-2026-858222026-10-13

     Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

320. HIGH 7.8CVE-2026-858202026-10-13

     Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

321. HIGH 7.8CVE-2026-858072026-10-13

     Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

322. HIGH 7.8CVE-2026-858042026-10-13

     Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

     windows 11 23h2 · windows 11 24h2 · windows 11 25h2 · windows 11 26h1 · windows 11 26h2 · windows server 2025

     AI risk analysis on Exploit-DB.ai →

323. HIGH 7.8CVE-2026-858002026-10-13

     Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

324. HIGH 7.8CVE-2026-857962026-10-13

     Numeric truncation error in Windows Installer allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

325. HIGH 7.8CVE-2026-857952026-10-13

     Use after free in Windows Text Services Framework allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

326. HIGH 7.8CVE-2026-853772026-10-13

     Access of resource using incompatible type ('type confusion') in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

327. HIGH 7.8CVE-2026-853762026-10-13

     Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

328. HIGH 7.8CVE-2026-853752026-10-13

     Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

329. HIGH 7.8CVE-2026-853732026-10-13

     Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

330. HIGH 7.8CVE-2026-853402026-10-13

     Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.

     365 apps · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

331. HIGH 7.8CVE-2026-853382026-10-13

     Out-of-bounds read in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

     windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2

     AI risk analysis on Exploit-DB.ai →

332. HIGH 7.8CVE-2026-853322026-10-13

     Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

     windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2

     AI risk analysis on Exploit-DB.ai →

333. HIGH 7.8CVE-2026-853272026-10-13

     Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

334. HIGH 7.8CVE-2026-840162026-10-13

     Out-of-bounds write in Windows EAPHost Service allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

335. HIGH 7.8CVE-2026-840132026-10-13

     Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

336. HIGH 7.8CVE-2026-702202026-10-13

     Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

     365 apps · microsoft 365 · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

337. HIGH 7.8CVE-2026-700272026-10-13

     Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.

     windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2 · windows 11 26h1

     AI risk analysis on Exploit-DB.ai →

338. HIGH 7.8CVE-2026-700232026-10-13

     Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

     windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2

     AI risk analysis on Exploit-DB.ai →

339. HIGH 7.8CVE-2026-700152026-10-13

     Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

340. HIGH 7.8CVE-2026-699592026-10-13

     Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to execute code locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

341. HIGH 7.8CVE-2026-699572026-10-13

     Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

342. HIGH 7.8CVE-2026-699532026-10-13

     Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

343. HIGH 7.8CVE-2026-699522026-10-13

     Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

344. HIGH 7.8CVE-2026-699502026-10-13

     Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

345. HIGH 7.8CVE-2026-699492026-10-13

     Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

346. HIGH 7.8CVE-2026-699422026-10-13

     Buffer over-read in Windows Overlay Filter allows an authorized attacker to execute code locally.

     windows 11 23h2 · windows 11 24h2 · windows 11 25h2 · windows 11 26h1 · windows 11 26h2 · windows server 2022

     AI risk analysis on Exploit-DB.ai →

347. HIGH 7.8CVE-2026-699342026-10-13

     Integer overflow or wraparound in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

     windows 11 23h2 · windows 11 24h2 · windows 11 25h2 · windows 11 26h1 · windows 11 26h2 · windows server 2022

     AI risk analysis on Exploit-DB.ai →

348. HIGH 7.8CVE-2026-699262026-10-13

     Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

     windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2

     AI risk analysis on Exploit-DB.ai →

349. HIGH 7.8CVE-2026-699232026-10-13

     Uncontrolled search path element in Windows AI allows an authorized attacker to elevate privileges locally.

     windows 11 24h2 · windows 11 25h2 · windows 11 26h1 · windows 11 26h2 · windows server 2025

     AI risk analysis on Exploit-DB.ai →

350. HIGH 7.8CVE-2026-699162026-10-13

     Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

351. HIGH 7.8CVE-2026-699092026-10-13

     Heap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

352. HIGH 7.8CVE-2026-698982026-10-13

     Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

     windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2

     AI risk analysis on Exploit-DB.ai →

353. HIGH 7.8CVE-2026-698822026-10-13

     Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally.

     windows 11 23h2 · windows 11 24h2 · windows 11 25h2 · windows 11 26h1 · windows 11 26h2 · windows server 2025

     AI risk analysis on Exploit-DB.ai →

354. HIGH 7.8CVE-2026-698802026-10-13

     Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

     windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2

     AI risk analysis on Exploit-DB.ai →

355. HIGH 7.8CVE-2026-756492026-09-22

     Bridge is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

     bridge · macos · windows

     AI risk analysis on Exploit-DB.ai →

356. HIGH 7.5CVE-2026-627652026-10-27

     Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

     edge

     AI risk analysis on Exploit-DB.ai →

357. HIGH 7.5CVE-2026-1084482026-10-15

     Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

     365 apps · microsoft 365 · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

358. HIGH 7.5CVE-2026-978302026-10-13

     Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.

     windows 11 23h2 · windows 11 24h2 · windows 11 25h2 · windows 11 26h1 · windows 11 26h2 · windows server 2022

     AI risk analysis on Exploit-DB.ai →

359. HIGH 7.5CVE-2026-977892026-10-13

     Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

     windows server 2022 · windows server 2025

     AI risk analysis on Exploit-DB.ai →

360. HIGH 7.5CVE-2026-977882026-10-13

     Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

361. HIGH 7.5CVE-2026-969602026-10-13

     Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.

     .net · macos · linux kernel · windows · .net framework · windows 11 26h1

     AI risk analysis on Exploit-DB.ai →

362. HIGH 7.5CVE-2026-969592026-10-13

     Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

     .net · macos · linux kernel · windows · .net framework · windows 11 26h1

     AI risk analysis on Exploit-DB.ai →

363. HIGH 7.5CVE-2026-969582026-10-13

     Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

     .net · macos · linux kernel · windows · .net framework · windows 11 26h1

     AI risk analysis on Exploit-DB.ai →

364. HIGH 7.5CVE-2026-969452026-10-13

     Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.

     windows server 2019 · windows server 2022 · windows server 2025

     AI risk analysis on Exploit-DB.ai →

365. HIGH 7.5CVE-2026-963252026-10-13

     Missing reference to active allocated resource in Windows SMB Server allows an unauthorized attacker to deny service over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

366. HIGH 7.5CVE-2026-962482026-10-13

     Stack-based buffer overflow in Windows Host Guardian Service allows an unauthorized attacker to deny service over a network.

     windows 10 1607 · windows 10 1809 · windows server 2016 · windows server 2019 · windows server 2022 · windows server 2025

     AI risk analysis on Exploit-DB.ai →

367. HIGH 7.5CVE-2026-962462026-10-13

     Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to disclose information over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

368. HIGH 7.5CVE-2026-962452026-10-13

     Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

369. HIGH 7.5CVE-2026-960712026-10-13

     Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

370. HIGH 7.5CVE-2026-882072026-10-13

     Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

     365 apps · microsoft 365 · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

371. HIGH 7.5CVE-2026-882062026-10-13

     Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

     sharepoint server

     AI risk analysis on Exploit-DB.ai →

372. HIGH 7.5CVE-2026-877162026-10-13

     Heap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized attacker to deny service over a network.

     windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2

     AI risk analysis on Exploit-DB.ai →

373. HIGH 7.5CVE-2026-877132026-10-13

     Use after free in Windows Bluetooth Port Driver allows an unauthorized attacker to elevate privileges over an adjacent network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

374. HIGH 7.5CVE-2026-858112026-10-13

     Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over an adjacent network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

375. HIGH 7.5CVE-2026-858082026-10-13

     Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

376. HIGH 7.5CVE-2026-853342026-10-13

     Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

377. HIGH 7.5CVE-2026-853242026-10-13

     Memory allocation with excessive size value in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.

     windows 10 1607 · windows 10 1809 · windows server 2012 · windows server 2016 · windows server 2019 · windows server 2022

     AI risk analysis on Exploit-DB.ai →

378. HIGH 7.5CVE-2026-853222026-10-13

     Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

379. HIGH 7.5CVE-2026-840172026-10-13

     Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

380. HIGH 7.5CVE-2026-836352026-10-13

     Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network.

     windows server 2012 · windows server 2016 · windows server 2019 · windows server 2022 · windows server 2025

     AI risk analysis on Exploit-DB.ai →

381. HIGH 7.5CVE-2026-702812026-10-13

     Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.

     365 apps · microsoft 365 · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

382. HIGH 7.5CVE-2026-702512026-10-13

     Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

     sharepoint server

     AI risk analysis on Exploit-DB.ai →

383. HIGH 7.5CVE-2026-702022026-10-13

     Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

     sharepoint server

     AI risk analysis on Exploit-DB.ai →

384. HIGH 7.5CVE-2026-701552026-10-13

     Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny service over a network.

     windows 10 1607 · windows 10 1809 · windows server 2012 · windows server 2016 · windows server 2019 · windows server 2022

     AI risk analysis on Exploit-DB.ai →

385. HIGH 7.5CVE-2026-700822026-10-13

     Uncaught exception in Windows DNS allows an unauthorized attacker to deny service over a network.

     windows server 2012 · windows server 2016 · windows server 2019 · windows server 2022 · windows server 2025

     AI risk analysis on Exploit-DB.ai →

386. HIGH 7.5CVE-2026-700792026-10-13

     Improper enforcement of behavioral workflow in Windows DNS allows an unauthorized attacker to deny service over a network.

     windows 10 1607 · windows 10 1809 · windows server 2012 · windows server 2016 · windows server 2019 · windows server 2022

     AI risk analysis on Exploit-DB.ai →

387. HIGH 7.5CVE-2026-700332026-10-13

     Missing release of memory after effective lifetime in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network.

     windows 10 1607 · windows 10 1809 · windows server 2012 · windows server 2016 · windows server 2019 · windows server 2022

     AI risk analysis on Exploit-DB.ai →

388. HIGH 7.5CVE-2026-700312026-10-13

     Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

389. HIGH 7.5CVE-2026-700142026-10-13

     Use after free in Windows Cryptographic Services allows an authorized attacker to execute code over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

390. HIGH 7.5CVE-2026-700122026-10-13

     Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

391. HIGH 7.5CVE-2026-700042026-10-13

     Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

392. HIGH 7.5CVE-2026-699982026-10-13

     Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

393. HIGH 7.5CVE-2026-699972026-10-13

     Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

394. HIGH 7.5CVE-2026-699962026-10-13

     Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

395. HIGH 7.5CVE-2026-699952026-10-13

     Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

396. HIGH 7.5CVE-2026-699942026-10-13

     Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

397. HIGH 7.5CVE-2026-699922026-10-13

     Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

398. HIGH 7.5CVE-2026-699912026-10-13

     Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

399. HIGH 7.5CVE-2026-1057152026-10-13

     Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

     365 apps · microsoft 365 · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

400. HIGH 7.5CVE-2026-1057142026-10-13

     Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

     365 apps · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

401. HIGH 7.5CVE-2026-1055992026-10-13

     Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

     365 apps · microsoft 365 · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

402. HIGH 7.5CVE-2026-1055922026-10-13

     Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

     365 apps · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

403. HIGH 7.4CVE-2026-961872026-10-29

     Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

     edge chromium

     AI risk analysis on Exploit-DB.ai →

404. HIGH 7.4CVE-2026-962222026-10-13

     Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.

     windows 10 1607 · windows 10 1809 · windows server 2012 · windows server 2016 · windows server 2019 · windows server 2022

     AI risk analysis on Exploit-DB.ai →

405. HIGH 7.4CVE-2026-859222026-10-13

     Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network.

     azure-keyvault-administration · azure-keyvault-certificates · azure-keyvault-keys · azure-keyvault-secrets · azure-keyvault-securitydomain

     AI risk analysis on Exploit-DB.ai →

406. HIGH 7.4CVE-2026-1050132026-10-13

     Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

     sharepoint server

     AI risk analysis on Exploit-DB.ai →

407. HIGH 7.4CVE-2026-917342026-09-15

     Incorrect authorization in Core in Google Chrome on on Windows prior to 153.0.8010.47 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High)

     chrome · windows

     AI risk analysis on Exploit-DB.ai →

408. HIGH 7.3CVE-2026-882042026-10-13

     Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

     sharepoint server

     AI risk analysis on Exploit-DB.ai →

409. HIGH 7.2CVE-2026-857982026-10-13

     Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

410. HIGH 7.2CVE-2026-702672026-10-13

     Inclusion of functionality from untrusted control sphere in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

     sharepoint server

     AI risk analysis on Exploit-DB.ai →

411. HIGH 7CVE-2026-978122026-10-13

     Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.

     windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2 · windows 11 26h1

     AI risk analysis on Exploit-DB.ai →

412. HIGH 7CVE-2026-978102026-10-13

     Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

     windows 11 24h2 · windows 11 25h2 · windows 11 26h1 · windows 11 26h2 · windows server 2022 · windows server 2025

     AI risk analysis on Exploit-DB.ai →

413. HIGH 7CVE-2026-978082026-10-13

     Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

     windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2

     AI risk analysis on Exploit-DB.ai →

414. HIGH 7CVE-2026-977932026-10-13

     Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally.

     windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2

     AI risk analysis on Exploit-DB.ai →

415. HIGH 7CVE-2026-977872026-10-13

     Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

     windows 11 23h2 · windows 11 24h2 · windows 11 25h2 · windows 11 26h1 · windows 11 26h2 · windows server 2022

     AI risk analysis on Exploit-DB.ai →

416. HIGH 7CVE-2026-977742026-10-13

     Time-of-check time-of-use (toctou) race condition in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.

     365 apps

     AI risk analysis on Exploit-DB.ai →

417. HIGH 7CVE-2026-969492026-10-13

     Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

418. HIGH 7CVE-2026-969392026-10-13

     Time-of-check time-of-use (toctou) race condition in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.

     windows 11 23h2 · windows 11 24h2 · windows 11 25h2 · windows 11 26h1 · windows 11 26h2 · windows server 2025

     AI risk analysis on Exploit-DB.ai →

419. HIGH 7CVE-2026-969372026-10-13

     Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

     windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2 · windows 11 26h1

     AI risk analysis on Exploit-DB.ai →

420. HIGH 7CVE-2026-969322026-10-13

     Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

421. HIGH 7CVE-2026-969232026-10-13

     Use after free in Windows Workstation Service allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

422. HIGH 7CVE-2026-969192026-10-13

     Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

     windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2

     AI risk analysis on Exploit-DB.ai →

423. HIGH 7CVE-2026-968522026-10-13

     Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

424. HIGH 7CVE-2026-963232026-10-13

     Use after free in Windows Update allows an authorized attacker to elevate privileges locally.

     windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2 · windows 11 26h1

     AI risk analysis on Exploit-DB.ai →

425. HIGH 7CVE-2026-963222026-10-13

     Use after free in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

426. HIGH 7CVE-2026-963192026-10-13

     Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

     windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2 · windows 11 26h1

     AI risk analysis on Exploit-DB.ai →

427. HIGH 7CVE-2026-963132026-10-13

     Missing authentication for critical function in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

     windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2

     AI risk analysis on Exploit-DB.ai →

428. HIGH 7CVE-2026-963102026-10-13

     Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

     windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2 · windows 11 26h1

     AI risk analysis on Exploit-DB.ai →

429. HIGH 7CVE-2026-963072026-10-13

     Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

430. HIGH 7CVE-2026-963052026-10-13

     Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

431. HIGH 7CVE-2026-963042026-10-13

     Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

     windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2 · windows 11 26h1

     AI risk analysis on Exploit-DB.ai →

432. HIGH 7CVE-2026-963022026-10-13

     Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

433. HIGH 7CVE-2026-963012026-10-13

     Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

     windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2 · windows 11 26h1

     AI risk analysis on Exploit-DB.ai →

434. HIGH 7CVE-2026-962542026-10-13

     Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

     windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2 · windows 11 26h1

     AI risk analysis on Exploit-DB.ai →

435. HIGH 7CVE-2026-962532026-10-13

     Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

     windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2 · windows 11 26h1

     AI risk analysis on Exploit-DB.ai →

436. HIGH 7CVE-2026-962502026-10-13

     Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

     windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2 · windows 11 26h1

     AI risk analysis on Exploit-DB.ai →

437. HIGH 7CVE-2026-962162026-10-13

     Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

     windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2

     AI risk analysis on Exploit-DB.ai →

438. HIGH 7CVE-2026-962152026-10-13

     Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Autopilot allows an authorized attacker to elevate privileges locally.

     windows 11 24h2 · windows 11 25h2 · windows 11 26h1 · windows 11 26h2

     AI risk analysis on Exploit-DB.ai →

439. HIGH 7CVE-2026-962092026-10-13

     Out-of-bounds read in Windows Network File System allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

440. HIGH 7CVE-2026-881612026-10-13

     Use after free in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

441. HIGH 7CVE-2026-881602026-10-13

     Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

442. HIGH 7CVE-2026-881032026-10-13

     Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

     windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2

     AI risk analysis on Exploit-DB.ai →

443. HIGH 7CVE-2026-880982026-10-13

     Untrusted pointer dereference in Windows Security Support Provider Interface allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

444. HIGH 7CVE-2026-880962026-10-13

     Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DCOM Server allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

445. HIGH 7CVE-2026-880792026-10-13

     Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

     windows 11 24h2 · windows 11 25h2 · windows 11 26h1 · windows 11 26h2

     AI risk analysis on Exploit-DB.ai →

446. HIGH 7CVE-2026-880762026-10-13

     Null pointer dereference in Windows Installer allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

447. HIGH 7CVE-2026-877152026-10-13

     Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

448. HIGH 7CVE-2026-877102026-10-13

     Improper access control in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

449. HIGH 7CVE-2026-859202026-10-13

     Time-of-check time-of-use (toctou) race condition in Windows BitLocker allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

450. HIGH 7CVE-2026-859182026-10-13

     Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

451. HIGH 7CVE-2026-859142026-10-13

     Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

452. HIGH 7CVE-2026-859042026-10-13

     Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

453. HIGH 7CVE-2026-858262026-10-13

     Out-of-bounds write in Windows Fast FAT Driver allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

454. HIGH 7CVE-2026-858252026-10-13

     Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

455. HIGH 7CVE-2026-858242026-10-13

     Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally.

     windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2 · windows 11 26h1

     AI risk analysis on Exploit-DB.ai →

456. HIGH 7CVE-2026-858232026-10-13

     Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally.

     windows 11 24h2 · windows 11 25h2 · windows 11 26h1 · windows 11 26h2 · windows server 2022 · windows server 2025

     AI risk analysis on Exploit-DB.ai →

457. HIGH 7CVE-2026-858102026-10-13

     Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

458. HIGH 7CVE-2026-858032026-10-13

     Use after free in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.

     windows 11 23h2 · windows 11 24h2 · windows 11 25h2 · windows 11 26h1 · windows 11 26h2 · windows server 2025

     AI risk analysis on Exploit-DB.ai →

459. HIGH 7CVE-2026-858022026-10-13

     Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

460. HIGH 7CVE-2026-857912026-10-13

     Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

461. HIGH 7CVE-2026-853722026-10-13

     Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

462. HIGH 7CVE-2026-853652026-10-13

     Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

463. HIGH 7CVE-2026-853292026-10-13

     Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Account allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

464. HIGH 7CVE-2026-853282026-10-13

     Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally.

     windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2

     AI risk analysis on Exploit-DB.ai →

465. HIGH 7CVE-2026-840202026-10-13

     Use after free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.

     windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2 · windows 11 26h1

     AI risk analysis on Exploit-DB.ai →

466. HIGH 7CVE-2026-840192026-10-13

     Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.

     windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2

     AI risk analysis on Exploit-DB.ai →

467. HIGH 7CVE-2026-840182026-10-13

     Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

468. HIGH 7CVE-2026-840142026-10-13

     Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

469. HIGH 7CVE-2026-702762026-10-13

     Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.

     365 apps · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

470. HIGH 7CVE-2026-700452026-10-13

     Use after free in Windows Work Folders allows an authorized attacker to elevate privileges locally.

     windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2

     AI risk analysis on Exploit-DB.ai →

471. HIGH 7CVE-2026-700262026-10-13

     Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

     windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2

     AI risk analysis on Exploit-DB.ai →

472. HIGH 7CVE-2026-700212026-10-13

     Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.

     windows 11 24h2 · windows 11 25h2 · windows 11 26h1 · windows 11 26h2 · windows server 2022 · windows server 2025

     AI risk analysis on Exploit-DB.ai →

473. HIGH 7CVE-2026-699352026-10-13

     Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.

     windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2

     AI risk analysis on Exploit-DB.ai →

474. HIGH 7CVE-2026-699312026-10-13

     Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Storage allows an authorized attacker to elevate privileges locally.

     windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2

     AI risk analysis on Exploit-DB.ai →

475. HIGH 7CVE-2026-699152026-10-13

     Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.

     windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2

     AI risk analysis on Exploit-DB.ai →

476. MEDIUM 6.8CVE-2026-977822026-10-13

     Observable discrepancy in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network.

     sharepoint server

     AI risk analysis on Exploit-DB.ai →

477. MEDIUM 6.8CVE-2026-853232026-10-13

     Weak authentication in Network Device Enrollment Service (NDES) allows an authorized attacker to perform spoofing over a network.

     windows 10 1607 · windows 10 1809 · windows server 2012 · windows server 2016 · windows server 2019 · windows server 2022

     AI risk analysis on Exploit-DB.ai →

478. MEDIUM 6.8CVE-2026-699582026-10-13

     Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

479. MEDIUM 6.8CVE-2026-699472026-10-13

     Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack.

     windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2 · windows 11 26h1

     AI risk analysis on Exploit-DB.ai →

480. MEDIUM 6.7CVE-2026-969382026-10-13

     Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

481. MEDIUM 6.7CVE-2026-853332026-10-13

     Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

482. MEDIUM 6.7CVE-2026-699022026-10-13

     Untrusted pointer dereference in Windows NTFS allows an authorized attacker to execute code locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

483. MEDIUM 6.5CVE-2026-1133402026-10-20

     Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

     chrome · windows

     AI risk analysis on Exploit-DB.ai →

484. MEDIUM 6.5CVE-2026-1133262026-10-20

     Memory corruption in Core in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

     chrome · windows

     AI risk analysis on Exploit-DB.ai →

485. MEDIUM 6.5CVE-2026-1132952026-10-20

     Out of bounds read in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High)

     chrome · windows

     AI risk analysis on Exploit-DB.ai →

486. MEDIUM 6.5CVE-2026-1131572026-10-20

     Information leak in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Medium)

     chrome · windows

     AI risk analysis on Exploit-DB.ai →

487. MEDIUM 6.5CVE-2026-1130822026-10-20

     Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High)

     chrome · windows

     AI risk analysis on Exploit-DB.ai →

488. MEDIUM 6.5CVE-2026-1084552026-10-15

     Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

     365 apps · microsoft 365 · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

489. MEDIUM 6.5CVE-2026-1084542026-10-15

     Buffer over-read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

     365 apps · microsoft 365 · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

490. MEDIUM 6.5CVE-2026-1084532026-10-15

     Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

     365 apps · microsoft 365 · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

491. MEDIUM 6.5CVE-2026-978442026-10-13

     Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

492. MEDIUM 6.5CVE-2026-978432026-10-13

     Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

493. MEDIUM 6.5CVE-2026-978422026-10-13

     Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

494. MEDIUM 6.5CVE-2026-978412026-10-13

     Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

495. MEDIUM 6.5CVE-2026-978402026-10-13

     Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

496. MEDIUM 6.5CVE-2026-978392026-10-13

     Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

497. MEDIUM 6.5CVE-2026-978382026-10-13

     Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

498. MEDIUM 6.5CVE-2026-978372026-10-13

     Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

499. MEDIUM 6.5CVE-2026-978362026-10-13

     Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

500. MEDIUM 6.5CVE-2026-978352026-10-13

     Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

501. MEDIUM 6.5CVE-2026-978342026-10-13

     Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

502. MEDIUM 6.5CVE-2026-978332026-10-13

     Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

503. MEDIUM 6.5CVE-2026-978322026-10-13

     Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

504. MEDIUM 6.5CVE-2026-978312026-10-13

     Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

505. MEDIUM 6.5CVE-2026-978292026-10-13

     Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

506. MEDIUM 6.5CVE-2026-978282026-10-13

     Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

507. MEDIUM 6.5CVE-2026-978272026-10-13

     Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

508. MEDIUM 6.5CVE-2026-978262026-10-13

     Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

509. MEDIUM 6.5CVE-2026-978252026-10-13

     Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

510. MEDIUM 6.5CVE-2026-978242026-10-13

     Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

511. MEDIUM 6.5CVE-2026-978232026-10-13

     Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

512. MEDIUM 6.5CVE-2026-978222026-10-13

     Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

513. MEDIUM 6.5CVE-2026-978212026-10-13

     Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

514. MEDIUM 6.5CVE-2026-978202026-10-13

     Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

515. MEDIUM 6.5CVE-2026-978192026-10-13

     Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

516. MEDIUM 6.5CVE-2026-978172026-10-13

     Heap-based buffer overflow in DNS Server allows an authorized attacker to disclose information over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

517. MEDIUM 6.5CVE-2026-978132026-10-13

     Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information over a network.

     windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2

     AI risk analysis on Exploit-DB.ai →

518. MEDIUM 6.5CVE-2026-977792026-10-13

     Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

     365 apps · microsoft 365 · office 2021 · office 2024 · office online server

     AI risk analysis on Exploit-DB.ai →

519. MEDIUM 6.5CVE-2026-977602026-10-13

     Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

     365 apps · microsoft 365 · office 2021 · office 2024 · office online server

     AI risk analysis on Exploit-DB.ai →

520. MEDIUM 6.5CVE-2026-977432026-10-13

     Use after free in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

     365 apps · microsoft 365 · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

521. MEDIUM 6.5CVE-2026-977402026-10-13

     Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

     365 apps · microsoft 365 · office 2021 · office 2024 · office online server

     AI risk analysis on Exploit-DB.ai →

522. MEDIUM 6.5CVE-2026-963032026-10-13

     Improperly implemented security check for standard in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature over a network.

     powershell

     AI risk analysis on Exploit-DB.ai →

523. MEDIUM 6.5CVE-2026-945062026-10-13

     Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to disclose information over a network.

     365 apps · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

524. MEDIUM 6.5CVE-2026-882032026-10-13

     Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

     365 apps · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

525. MEDIUM 6.5CVE-2026-882012026-10-13

     Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

     365 apps · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

526. MEDIUM 6.5CVE-2026-881952026-10-13

     Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

     365 apps · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

527. MEDIUM 6.5CVE-2026-881922026-10-13

     Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

     365 apps · microsoft 365 · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

528. MEDIUM 6.5CVE-2026-881902026-10-13

     Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

     365 apps · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

529. MEDIUM 6.5CVE-2026-881842026-10-13

     Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

     365 apps · microsoft 365 · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

530. MEDIUM 6.5CVE-2026-881832026-10-13

     Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

     365 apps · microsoft 365 · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

531. MEDIUM 6.5CVE-2026-881752026-10-13

     Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

     365 apps · microsoft 365 · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

532. MEDIUM 6.5CVE-2026-881722026-10-13

     Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

     365 apps · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

533. MEDIUM 6.5CVE-2026-881692026-10-13

     Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

     365 apps · microsoft 365 · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

534. MEDIUM 6.5CVE-2026-881672026-10-13

     Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

     365 apps · microsoft 365 · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

535. MEDIUM 6.5CVE-2026-881542026-10-13

     Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

     365 apps · microsoft 365 · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

536. MEDIUM 6.5CVE-2026-881532026-10-13

     Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

     365 apps · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

537. MEDIUM 6.5CVE-2026-881512026-10-13

     Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

     365 apps · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

538. MEDIUM 6.5CVE-2026-881302026-10-13

     Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.

     windows server 2012 · windows server 2016 · windows server 2019 · windows server 2022 · windows server 2025

     AI risk analysis on Exploit-DB.ai →

539. MEDIUM 6.5CVE-2026-881292026-10-13

     Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.

     windows server 2012 · windows server 2016 · windows server 2019 · windows server 2022 · windows server 2025

     AI risk analysis on Exploit-DB.ai →

540. MEDIUM 6.5CVE-2026-881252026-10-13

     Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.

     windows server 2012 · windows server 2016 · windows server 2019 · windows server 2022 · windows server 2025

     AI risk analysis on Exploit-DB.ai →

541. MEDIUM 6.5CVE-2026-881232026-10-13

     Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.

     windows server 2012 · windows server 2016 · windows server 2019 · windows server 2022 · windows server 2025

     AI risk analysis on Exploit-DB.ai →

542. MEDIUM 6.5CVE-2026-881222026-10-13

     Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.

     windows server 2012 · windows server 2016 · windows server 2019 · windows server 2022 · windows server 2025

     AI risk analysis on Exploit-DB.ai →

543. MEDIUM 6.5CVE-2026-877142026-10-13

     Missing authorization in WebDAV allows an authorized attacker to bypass a security feature over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

544. MEDIUM 6.5CVE-2026-859322026-10-13

     Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

     sharepoint server

     AI risk analysis on Exploit-DB.ai →

545. MEDIUM 6.5CVE-2026-858212026-10-13

     Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

546. MEDIUM 6.5CVE-2026-858052026-10-13

     Improperly implemented security check for standard in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

547. MEDIUM 6.5CVE-2026-857972026-10-13

     Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

548. MEDIUM 6.5CVE-2026-853372026-10-13

     Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

549. MEDIUM 6.5CVE-2026-853312026-10-13

     Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

550. MEDIUM 6.5CVE-2026-840072026-10-13

     Out-of-bounds read in Remote Desktop Gateway Service allows an authorized attacker to disclose information over a network.

     windows server 2012 · windows server 2016 · windows server 2019 · windows server 2022 · windows server 2025

     AI risk analysis on Exploit-DB.ai →

551. MEDIUM 6.5CVE-2026-702982026-10-13

     Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

     sharepoint server

     AI risk analysis on Exploit-DB.ai →

552. MEDIUM 6.5CVE-2026-702632026-10-13

     Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

     365 apps · microsoft 365 · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

553. MEDIUM 6.5CVE-2026-702592026-10-13

     Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

     sharepoint server

     AI risk analysis on Exploit-DB.ai →

554. MEDIUM 6.5CVE-2026-702442026-10-13

     Out-of-bounds read in DNS Server allows an unauthorized attacker to disclose information over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

555. MEDIUM 6.5CVE-2026-702192026-10-13

     Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

     365 apps · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

556. MEDIUM 6.5CVE-2026-702062026-10-13

     Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

     365 apps · microsoft 365 · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

557. MEDIUM 6.5CVE-2026-701662026-10-13

     Out-of-bounds read in Windows DNS allows an authorized attacker to deny service over a network.

     windows 10 1607 · windows 10 1809 · windows server 2012 · windows server 2016 · windows server 2019 · windows server 2022

     AI risk analysis on Exploit-DB.ai →

558. MEDIUM 6.5CVE-2026-701192026-10-13

     Out-of-bounds read in Windows DNS allows an authorized attacker to execute code over a network.

     windows server 2022 · windows server 2025

     AI risk analysis on Exploit-DB.ai →

559. MEDIUM 6.5CVE-2026-699552026-10-13

     Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

560. MEDIUM 6.5CVE-2026-699402026-10-13

     Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

561. MEDIUM 6.5CVE-2026-699222026-10-13

     Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

     365 apps · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

562. MEDIUM 6.5CVE-2026-1081292026-10-13

     Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

563. MEDIUM 6.5CVE-2026-1081282026-10-13

     Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

564. MEDIUM 6.5CVE-2026-1081272026-10-13

     Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

565. MEDIUM 6.5CVE-2026-1057192026-10-13

     Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

     sharepoint server

     AI risk analysis on Exploit-DB.ai →

566. MEDIUM 6.5CVE-2026-1028672026-10-13

     Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

     365 apps · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

567. MEDIUM 6.5CVE-2026-1028652026-10-13

     Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

     sharepoint server

     AI risk analysis on Exploit-DB.ai →

568. MEDIUM 6.5CVE-2026-953852026-09-29

     Inappropriate implementation in PlatformIntegration in Google Chrome on on Windows prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)

     chrome · windows

     AI risk analysis on Exploit-DB.ai →

569. MEDIUM 6.2CVE-2026-859162026-10-13

     Exposure of private personal information to an unauthorized actor in Azure Active Directory allows an unauthorized attacker to disclose information locally.

     windows 11 23h2 · windows 11 24h2 · windows 11 25h2 · windows 11 26h1 · windows 11 26h2 · windows server 2025

     AI risk analysis on Exploit-DB.ai →

570. MEDIUM 6.2CVE-2026-839642026-09-22

     Adobe Connect is affected by an Improper Certificate Validation vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue does not require user i…

     connect · macos · windows · connect for mobile

     AI risk analysis on Exploit-DB.ai →

571. MEDIUM 6.1CVE-2026-483612026-09-22

     Adobe Connect is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page …

     connect · macos · windows · connect for mobile

     AI risk analysis on Exploit-DB.ai →

572. MEDIUM 5.9CVE-2026-963002026-10-13

     Uncontrolled resource consumption in RPC Endpoint Mapper Service allows an unauthorized attacker to deny service over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

573. MEDIUM 5.9CVE-2026-880992026-10-13

     Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.

     windows server 2019 · windows server 2022 · windows server 2025

     AI risk analysis on Exploit-DB.ai →

574. MEDIUM 5.9CVE-2026-857902026-10-13

     Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.

     windows 11 23h2 · windows 11 24h2 · windows 11 25h2 · windows 11 26h1 · windows 11 26h2 · windows server 2022

     AI risk analysis on Exploit-DB.ai →

575. MEDIUM 5.9CVE-2026-1061832026-10-06

     Missing authorization in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafted network traffic. (Chromium security severity: Medium)

     chrome · windows

     AI risk analysis on Exploit-DB.ai →

576. MEDIUM 5.7CVE-2026-858162026-10-13

     Out-of-bounds read in Windows Wi-Fi Driver allows an authorized attacker to disclose information over an adjacent network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

577. MEDIUM 5.7CVE-2026-1057132026-10-13

     Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over an adjacent network.

     sharepoint server

     AI risk analysis on Exploit-DB.ai →

578. MEDIUM 5.5CVE-2026-1101502026-10-13

     Privilege elevation in Installer in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to obtain sensitive information via a local program. (Chromium security severity: High)

     chrome · windows

     AI risk analysis on Exploit-DB.ai →

579. MEDIUM 5.5CVE-2026-1058962026-10-13

     Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of th…

     photoshop · macos · windows

     AI risk analysis on Exploit-DB.ai →

580. MEDIUM 5.5CVE-2026-1038292026-10-13

     Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation …

     substance 3d designer · macos · windows

     AI risk analysis on Exploit-DB.ai →

581. MEDIUM 5.5CVE-2026-1038282026-10-13

     Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation …

     substance 3d designer · macos · windows

     AI risk analysis on Exploit-DB.ai →

582. MEDIUM 5.5CVE-2026-1038272026-10-13

     Substance3D - Designer is affected by a Stack-based Buffer Overflow vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitati…

     substance 3d designer · macos · windows

     AI risk analysis on Exploit-DB.ai →

583. MEDIUM 5.5CVE-2026-1038262026-10-13

     Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation …

     substance 3d designer · macos · windows

     AI risk analysis on Exploit-DB.ai →

584. MEDIUM 5.5CVE-2026-1038252026-10-13

     Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction i…

     substance 3d designer · macos · windows

     AI risk analysis on Exploit-DB.ai →

585. MEDIUM 5.5CVE-2026-1038242026-10-13

     Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation …

     substance 3d designer · macos · windows

     AI risk analysis on Exploit-DB.ai →

586. MEDIUM 5.5CVE-2026-1038232026-10-13

     Substance3D - Designer is affected by a Stack-based Buffer Overflow vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitati…

     substance 3d designer · macos · windows

     AI risk analysis on Exploit-DB.ai →

587. MEDIUM 5.5CVE-2026-1038222026-10-13

     Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction i…

     substance 3d designer · macos · windows

     AI risk analysis on Exploit-DB.ai →

588. MEDIUM 5.5CVE-2026-977902026-10-13

     Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform tampering locally.

     windows 11 24h2 · windows 11 25h2 · windows 11 26h1 · windows 11 26h2 · windows server 2022 · windows server 2025

     AI risk analysis on Exploit-DB.ai →

589. MEDIUM 5.5CVE-2026-977442026-10-13

     Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

     365 apps · microsoft 365 · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

590. MEDIUM 5.5CVE-2026-970142026-10-13

     Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

     365 apps · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

591. MEDIUM 5.5CVE-2026-970052026-10-13

     Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

     365 apps · microsoft 365 · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

592. MEDIUM 5.5CVE-2026-969482026-10-13

     Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

593. MEDIUM 5.5CVE-2026-969442026-10-13

     Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally.

     windows 11 24h2 · windows 11 25h2 · windows 11 26h1 · windows 11 26h2 · windows server 2022 · windows server 2025

     AI risk analysis on Exploit-DB.ai →

594. MEDIUM 5.5CVE-2026-969352026-10-13

     Exposure of sensitive system information to an unauthorized control sphere in Windows NTFS allows an authorized attacker to disclose information locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

595. MEDIUM 5.5CVE-2026-969302026-10-13

     Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

596. MEDIUM 5.5CVE-2026-969272026-10-13

     Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

597. MEDIUM 5.5CVE-2026-969262026-10-13

     Missing authorization in DNS Server allows an authorized attacker to perform tampering locally.

     windows 10 1607 · windows 10 1809 · windows server 2012 · windows server 2016 · windows server 2019 · windows server 2022

     AI risk analysis on Exploit-DB.ai →

598. MEDIUM 5.5CVE-2026-969252026-10-13

     Integer underflow (wrap or wraparound) in Windows NTFS allows an authorized attacker to disclose information locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

599. MEDIUM 5.5CVE-2026-969212026-10-13

     Access of resource using incompatible type ('type confusion') in Windows Message Queuing Queue Manager allows an authorized attacker to disclose information locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

600. MEDIUM 5.5CVE-2026-968572026-10-13

     Files or directories accessible to external parties in Windows Projected File System allows an authorized attacker to disclose information locally.

     windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2

     AI risk analysis on Exploit-DB.ai →

601. MEDIUM 5.5CVE-2026-968552026-10-13

     Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.

     windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2

     AI risk analysis on Exploit-DB.ai →

602. MEDIUM 5.5CVE-2026-968542026-10-13

     Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

603. MEDIUM 5.5CVE-2026-968512026-10-13

     Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

604. MEDIUM 5.5CVE-2026-968502026-10-13

     Use of uninitialized resource in Windows Modern Device Management (MDM) allows an authorized attacker to disclose information locally.

     windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2

     AI risk analysis on Exploit-DB.ai →

605. MEDIUM 5.5CVE-2026-968492026-10-13

     Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.

     windows 11 26h1

     AI risk analysis on Exploit-DB.ai →

606. MEDIUM 5.5CVE-2026-968482026-10-13

     Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

     windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows server 2019 · windows server 2022

     AI risk analysis on Exploit-DB.ai →

607. MEDIUM 5.5CVE-2026-968462026-10-13

     Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

608. MEDIUM 5.5CVE-2026-963212026-10-13

     Out-of-bounds read in Remote Desktop Display Driver allows an authorized attacker to disclose information locally.

     windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2 · windows 11 26h1

     AI risk analysis on Exploit-DB.ai →

609. MEDIUM 5.5CVE-2026-963162026-10-13

     Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to perform tampering locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

610. MEDIUM 5.5CVE-2026-963152026-10-13

     Missing authorization in Windows Overlay Filter allows an authorized attacker to perform tampering locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

611. MEDIUM 5.5CVE-2026-963142026-10-13

     Out-of-bounds read in Windows Audio Service allows an authorized attacker to disclose information locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

612. MEDIUM 5.5CVE-2026-963112026-10-13

     Improper authorization in Windows Network List Service allows an authorized attacker to perform tampering locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

613. MEDIUM 5.5CVE-2026-962472026-10-13

     Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

614. MEDIUM 5.5CVE-2026-962182026-10-13

     Improper access control in Windows Update Stack allows an authorized attacker to perform tampering locally.

     windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2

     AI risk analysis on Exploit-DB.ai →

615. MEDIUM 5.5CVE-2026-961832026-10-13

     Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to disclose information locally.

     windows 11 24h2 · windows 11 25h2 · windows 11 26h1 · windows 11 26h2

     AI risk analysis on Exploit-DB.ai →

616. MEDIUM 5.5CVE-2026-959042026-10-13

     Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

617. MEDIUM 5.5CVE-2026-881622026-10-13

     Improper authorization in Windows Encrypting File System (EFS) allows an authorized attacker to perform tampering locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

618. MEDIUM 5.5CVE-2026-858152026-10-13

     Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

619. MEDIUM 5.5CVE-2026-858122026-10-13

     Files or directories accessible to external parties in Windows Bind Filter Driver allows an authorized attacker to disclose information locally.

     windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2 · windows 11 26h1

     AI risk analysis on Exploit-DB.ai →

620. MEDIUM 5.5CVE-2026-857942026-10-13

     Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

621. MEDIUM 5.5CVE-2026-857932026-10-13

     Exposure of sensitive system information to an unauthorized control sphere in Windows Sysmain Service allows an authorized attacker to disclose information locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

622. MEDIUM 5.5CVE-2026-853742026-10-13

     Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

623. MEDIUM 5.5CVE-2026-853362026-10-13

     Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

624. MEDIUM 5.5CVE-2026-840112026-10-13

     Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security feature locally.

     windows 11 23h2 · windows 11 24h2 · windows 11 25h2 · windows 11 26h1 · windows 11 26h2 · windows server 2022

     AI risk analysis on Exploit-DB.ai →

625. MEDIUM 5.5CVE-2026-702142026-10-13

     Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

     365 apps · office 2021 · office 2024

     AI risk analysis on Exploit-DB.ai →

626. MEDIUM 5.5CVE-2026-700872026-10-13

     Incorrect authorization in DNS Server allows an authorized attacker to bypass a security feature locally.

     windows 10 1607 · windows 10 1809 · windows server 2012 · windows server 2016 · windows server 2019 · windows server 2022

     AI risk analysis on Exploit-DB.ai →

627. MEDIUM 5.5CVE-2026-700852026-10-13

     Missing authorization in DNS Server allows an authorized attacker to perform tampering locally.

     windows server 2012 · windows server 2016 · windows server 2019 · windows server 2022 · windows server 2025

     AI risk analysis on Exploit-DB.ai →

628. MEDIUM 5.5CVE-2026-700832026-10-13

     Incorrect authorization in DNS Server allows an authorized attacker to perform tampering locally.

     windows 10 1607 · windows 10 1809 · windows server 2012 · windows server 2016 · windows server 2019 · windows server 2022

     AI risk analysis on Exploit-DB.ai →

629. MEDIUM 5.5CVE-2026-700742026-10-13

     Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally.

     windows 10 1607 · windows 10 1809 · windows server 2012 · windows server 2016 · windows server 2019 · windows server 2022

     AI risk analysis on Exploit-DB.ai →

630. MEDIUM 5.5CVE-2026-700712026-10-13

     Improper verification of cryptographic signature in DNS Server allows an authorized attacker to perform tampering locally.

     windows 10 1607 · windows 10 1809 · windows server 2012 · windows server 2016 · windows server 2019 · windows server 2022

     AI risk analysis on Exploit-DB.ai →

631. MEDIUM 5.5CVE-2026-700442026-10-13

     Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to disclose information locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

632. MEDIUM 5.5CVE-2026-700412026-10-13

     Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

633. MEDIUM 5.5CVE-2026-700172026-10-13

     Access of resource using incompatible type ('type confusion') in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.

     windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2

     AI risk analysis on Exploit-DB.ai →

634. MEDIUM 5.5CVE-2026-699992026-10-13

     Out-of-bounds read in Windows Update allows an authorized attacker to disclose information locally.

     windows 11 23h2 · windows 11 24h2 · windows 11 25h2 · windows 11 26h1 · windows 11 26h2 · windows server 2025

     AI risk analysis on Exploit-DB.ai →

635. MEDIUM 5.5CVE-2026-699542026-10-13

     Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

636. MEDIUM 5.5CVE-2026-699192026-10-13

     Out-of-bounds read in Windows Cryptographic Services allows an authorized attacker to disclose information locally.

     windows 11 24h2 · windows 11 25h2 · windows 11 26h1 · windows 11 26h2 · windows server 2025

     AI risk analysis on Exploit-DB.ai →

637. MEDIUM 5.5CVE-2026-699142026-10-13

     Out-of-bounds read in Windows AppX Deployment Service allows an authorized attacker to disclose information locally.

     windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2

     AI risk analysis on Exploit-DB.ai →

638. MEDIUM 5.5CVE-2026-699052026-10-13

     Missing authorization in Windows AppX Deployment Service allows an authorized attacker to perform tampering locally.

     windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2

     AI risk analysis on Exploit-DB.ai →

639. MEDIUM 5.5CVE-2026-1035602026-10-13

     Improper authorization in DNS Server allows an authorized attacker to perform tampering locally.

     windows server 2012 · windows server 2016 · windows server 2019 · windows server 2022 · windows server 2025

     AI risk analysis on Exploit-DB.ai →

640. MEDIUM 5.4CVE-2026-1211622026-11-03

     UI misrepresentation in Notifications in Google Chrome on on Windows prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)

     chrome · windows

     AI risk analysis on Exploit-DB.ai →

641. MEDIUM 5.4CVE-2026-880902026-10-29

     Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

     edge chromium

     AI risk analysis on Exploit-DB.ai →

642. MEDIUM 5.4CVE-2026-1064202026-10-06

     Incorrect calculation in API in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted Chrome extension. (Chromium security severity: Medium)

     chrome · windows

     AI risk analysis on Exploit-DB.ai →

643. MEDIUM 5.4CVE-2026-1062722026-10-06

     UI misrepresentation in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially spoof UI elements via crafted network traffic. (Chromium security severity: Low)

     chrome · windows

     AI risk analysis on Exploit-DB.ai →

644. MEDIUM 5.4CVE-2026-1062362026-10-06

     UI misrepresentation in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via crafted network traffic. (Chromium security severity: Low)

     chrome · windows

     AI risk analysis on Exploit-DB.ai →

645. MEDIUM 5.3CVE-2026-700252026-10-13

     Use after free in Windows Netlogon allows an authorized attacker to deny service over a network.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

646. MEDIUM 5.3CVE-2026-106214public PoC2026-10-06

     Information leak in Proxy in Google Chrome on on Windows prior to 155.0.8059.39 allowed an adjacent attacker to obtain sensitive information via crafted network traffic. (Chromium security severity: High)

     chrome · windows

     AI risk analysis on Exploit-DB.ai →

647. MEDIUM 5.1CVE-2026-842902026-10-08

     IBM Guardium Data Protection 12.0, 12.1, 12.2 is affected by an improper validation of user-supplied pointers in the WfpMonitor kernel driver. Certain METHOD_NEITHER IOCTL handlers dereference user-controlled pointers without adequate probing and exception han…

     guardium data protection · windows

     AI risk analysis on Exploit-DB.ai →

648. MEDIUM 4.9CVE-2026-702172026-10-13

     Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

     sharepoint server

     AI risk analysis on Exploit-DB.ai →

649. MEDIUM 4.7CVE-2026-968532026-10-13

     Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

650. MEDIUM 4.7CVE-2026-840092026-10-13

     Time-of-check time-of-use (toctou) race condition in Windows Projected File System allows an authorized attacker to perform tampering locally.

     windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2 · windows 11 25h2

     AI risk analysis on Exploit-DB.ai →

651. MEDIUM 4.7CVE-2026-1063762026-10-06

     Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)

     chrome · windows

     AI risk analysis on Exploit-DB.ai →

652. MEDIUM 4.7CVE-2026-1062842026-10-06

     Out of bounds read in Printing in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to read memory outside the sandbox via a crafted HTML page. (Chromium secur…

     chrome · windows

     AI risk analysis on Exploit-DB.ai →

653. MEDIUM 4.7CVE-2026-1062582026-10-06

     Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)

     chrome · windows

     AI risk analysis on Exploit-DB.ai →

654. MEDIUM 4.7CVE-2026-1062152026-10-06

     Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)

     chrome · windows

     AI risk analysis on Exploit-DB.ai →

655. MEDIUM 4.7CVE-2026-1062022026-10-06

     Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)

     chrome · windows

     AI risk analysis on Exploit-DB.ai →

656. MEDIUM 4.7CVE-2026-1023132026-09-29

     Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 154.0.8037.92 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)

     chrome · windows

     AI risk analysis on Exploit-DB.ai →

657. MEDIUM 4.6CVE-2026-882262026-10-13

     Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack.

     windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

     AI risk analysis on Exploit-DB.ai →

658. MEDIUM 4.6CVE-2026-882092026-10-13

     Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

     sharepoint server

     AI risk analysis on Exploit-DB.ai →

659. MEDIUM 4.6CVE-2026-882082026-10-13

     Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

     sharepoint server

     AI risk analysis on Exploit-DB.ai →

660. MEDIUM 4.6CVE-2026-1028642026-10-13

     Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

     sharepoint server

     AI risk analysis on Exploit-DB.ai →

661. MEDIUM 4.6CVE-2026-1028592026-10-13

     Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

     sharepoint server

     AI risk analysis on Exploit-DB.ai →

662. MEDIUM 4.4CVE-2026-694462026-10-30

     Incorrect authorization in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges locally.

     edge chromium

     AI risk analysis on Exploit-DB.ai →

663. MEDIUM 4.3CVE-2026-880782026-10-29

     Improper verification of cryptographic signature in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

     edge chromium

     AI risk analysis on Exploit-DB.ai →

664. MEDIUM 4.3CVE-2026-853302026-10-29

     Incorrect authorization in Microsoft Edge for Android allows an unauthorized attacker to bypass a security feature over a network.

     edge

     AI risk analysis on Exploit-DB.ai →

665. MEDIUM 4.3CVE-2026-209422026-10-29

     Improper restriction of rendered ui layers or frames in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

     edge chromium

     AI risk analysis on Exploit-DB.ai →

666. MEDIUM 4.3CVE-2026-1057202026-10-13

     Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

     sharepoint server

     AI risk analysis on Exploit-DB.ai →

667. LOW 3.4CVE-2026-1023152026-09-29

     Uninitialized resource in Media in Google Chrome on on Windows prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)

     chrome · windows

     AI risk analysis on Exploit-DB.ai →