CVE database
Archive of known vulnerabilities (CVEs) with CVSS scores, severity, affected products and vendors. Filter by year and severity, linked to our coverage.
- CVE-2026-78510High8.4
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
- CVE-2026-77909High7.7
Insufficiently protected credentials in Azure CycleCloud allows an authorized attacker to disclose information over a network.
- CVE-2026-73018High8.8
Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.
- CVE-2026-73014High7.8
Missing authorization in Data Sharing Service Client allows an authorized attacker to elevate privileges locally.
- CVE-2026-72986High8.8
Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.
- CVE-2026-72981High8.1
Use after free in IP Helper allows an unauthorized attacker to execute code over a network.
- CVE-2026-72978Medium5.9
Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
- CVE-2026-69900High7.8
Untrusted pointer dereference in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-69829Critical9.8
Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.
- CVE-2026-69821High7.8
Improper encoding or escaping of output in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally.
- CVE-2026-69809High7.5
Missing release of memory after effective lifetime in Active Directory Domain Services allows an unauthorized attacker to deny service over a network.
- CVE-2026-69806High7.0
Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.
- CVE-2026-69805High7.5
External control of file name or path in .NET allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-69731High7.8
Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-69730Critical9.8
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
- CVE-2026-69624Medium6.5
Incomplete list of disallowed inputs in Active Directory Certificate Services (AD CS) allows an authorized attacker to perform tampering over a network.
- CVE-2026-69595Critical9.8
Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network.
- CVE-2026-69576High7.8
Use after free in Graphic Fonts allows an authorized attacker to elevate privileges locally.
- CVE-2026-69546High8.1
Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.
- CVE-2026-69524High8.1
Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.
This product uses the NVD API but is not endorsed or certified by the NVD.