CVE-2026-81355 Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability 5 hours ago
CVE-2026-69522 .NET and Visual Studio Remote Code Execution Vulnerability Friday September 25th, 2026
CVE-2026-65660 Microsoft SharePoint Server Remote Code Execution Vulnerability Friday September 25th, 2026
CVE-2026-100208 Microsoft Office Outlook Remote Code Execution Vulnerability Friday September 25th, 2026
CVE-2026-78510 Microsoft Outlook and Word Remote Code Execution Vulnerability Friday September 25th, 2026
CVE-2026-85921 Windows Secure Kernel Mode Elevation of Privilege Vulnerability Friday September 25th, 2026
Chromium CVE-2026-95385: Inappropriate implementation in PlatformIntegration Friday September 25th, 2026
CVE-2026-69439 .NET and Visual Studio Elevation of Privilege Vulnerability Friday September 25th, 2026
CVE-2026-71328 .NET and Visual Studio Remote Code Execution Vulnerability Friday September 25th, 2026
CVE-2026-69681 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability Thursday September 24th, 2026
CVE-2026-54981 Visual Studio Code Python Extension Security Feature Bypass Vulnerability Thursday September 24th, 2026
CVE-2026-80073 Microsoft Office Outlook Information Disclosure Vulnerability Thursday September 24th, 2026
CVE-2026-69590 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Thursday September 24th, 2026
CVE-2026-69409 Microsoft Office SharePoint Information Disclosure Vulnerability Thursday September 24th, 2026
CVE-2026-69803 Windows DHCP Server Information Disclosure Vulnerability Thursday September 24th, 2026
CVE-2026-68894 Windows Error Reporting Elevation of Privilege Vulnerability Thursday September 24th, 2026
CVE-2026-81357 Visual Studio Code Security Feature Bypass Vulnerability Thursday September 24th, 2026
CVE-2026-69282 Microsoft Office SharePoint Remote Code Execution Vulnerability Thursday September 24th, 2026
CVE-2026-71337 Windows Storage Management Provider Elevation of Privilege Vulnerability Thursday September 24th, 2026
CVE-2026-69732 Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability Thursday September 24th, 2026
CVE-2026-57091 Windows File History Service Elevation of Privilege Vulnerability Tuesday September 22nd, 2026
CVE-2026-68824 Connected User Experiences and Telemetry Elevation of Privilege Vulnerability Tuesday September 22nd, 2026
CVE-2026-83498 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability Monday September 21st, 2026
CVE-2026-68825 Windows Bind Filter Driver Elevation of Privilege Vulnerability Monday September 21st, 2026
CVE-2026-88097 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Friday September 18th, 2026
CVE-2026-80086 Microsoft Office PowerPoint Information Disclosure Vulnerability Thursday September 17th, 2026
CVE-2026-80090 Microsoft Office Word Information Disclosure Vulnerability Thursday September 17th, 2026
CVE-2026-80088 Microsoft Office Word Information Disclosure Vulnerability Thursday September 17th, 2026
CVE-2026-80085 Microsoft Office Word Remote Code Execution Vulnerability Thursday September 17th, 2026
CVE-2026-80080 Microsoft Office Word Remote Code Execution Vulnerability Thursday September 17th, 2026
CVE-2026-85878 Azure Database for PostgreSQL Elevation of Privilege Vulnerability Thursday September 17th, 2026
CVE-2026-78526 Microsoft Office Word Remote Code Execution Vulnerability Thursday September 17th, 2026
CVE-2026-33835 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Thursday September 17th, 2026
CVE-2026-62819 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Thursday September 17th, 2026
CVE-2026-66809 Microsoft Office Graphics Component Information Disclosure Vulnerability Thursday September 17th, 2026
CVE-2026-85875 Microsoft Office Excel Information Disclosure Vulnerability Thursday September 17th, 2026
CVE-2026-81955 Windows Graphics Component Remote Code Execution Vulnerability Thursday September 17th, 2026
CVE-2026-78525 Microsoft Office Outlook Remote Code Execution Vulnerability Thursday September 17th, 2026
CVE-2026-69797 Microsoft Office PowerPoint Remote Code Execution Vulnerability Thursday September 17th, 2026
CVE-2026-69767 Microsoft Office PowerPoint Remote Code Execution Vulnerability Thursday September 17th, 2026
CVE-2026-69759 Microsoft Office Word Remote Code Execution Vulnerability Thursday September 17th, 2026
CVE-2026-69719 Microsoft Office Word Information Disclosure Vulnerability Thursday September 17th, 2026
CVE-2026-69724 Microsoft Office SharePoint Remote Code Execution Vulnerability Thursday September 17th, 2026
CVE-2026-69722 Microsoft Office Word Remote Code Execution Vulnerability Thursday September 17th, 2026
CVE-2026-69686 Microsoft Office Word Remote Code Execution Vulnerability Thursday September 17th, 2026
CVE-2026-69678 Microsoft Office PowerPoint Remote Code Execution Vulnerability Thursday September 17th, 2026
CVE-2026-69671 Microsoft Office Word Remote Code Execution Vulnerability Thursday September 17th, 2026
CVE-2026-78439 Microsoft Office Graphics Component Remote Code Execution Vulnerability Thursday September 17th, 2026
CVE-2026-78501 Microsoft 365 Copilot Business Chat Information Disclosure Vulnerability Thursday September 17th, 2026
CVE-2026-78510 Microsoft Outlook and Word Remote Code Execution Vulnerability Thursday September 17th, 2026
CVE-2026-85885 Microsoft 365 Copilot Elevation of Privilege Vulnerability Thursday September 17th, 2026
CVE-2026-68791 Azure Machine Learning Information Disclosure Vulnerability Thursday September 17th, 2026
CVE-2026-77903 Microsoft Dataverse Elevation of Privilege Vulnerability Thursday September 17th, 2026
CVE-2026-69865 Microsoft Container Registry Elevation of Privilege Vulnerability Thursday September 17th, 2026
CVE-2026-69734 Microsoft Office Word Information Disclosure Vulnerability Thursday September 17th, 2026
CVE-2026-78511 Microsoft Office Word Remote Code Execution Vulnerability Thursday September 17th, 2026
CVE-2026-72974 Microsoft Office Excel Information Disclosure Vulnerability Thursday September 17th, 2026
CVE-2026-78520 Microsoft Office Outlook Information Disclosure Vulnerability Thursday September 17th, 2026
CVE-2026-78521 Microsoft Office Word Remote Code Execution Vulnerability Thursday September 17th, 2026
CVE-2026-78503 Microsoft Office Word Information Disclosure Vulnerability Thursday September 17th, 2026
CVE-2026-78502 Microsoft Office Word Information Disclosure Vulnerability Thursday September 17th, 2026
CVE-2026-78512 Microsoft Office Word Remote Code Execution Vulnerability Thursday September 17th, 2026
CVE-2026-78506 Microsoft Office Word Information Disclosure Vulnerability Thursday September 17th, 2026
CVE-2026-78507 Microsoft Office Word Remote Code Execution Vulnerability Thursday September 17th, 2026
CVE-2026-77901 Microsoft Office Word Remote Code Execution Vulnerability Thursday September 17th, 2026
CVE-2026-72976 Microsoft Office Word Information Disclosure Vulnerability Thursday September 17th, 2026
CVE-2026-72975 Microsoft Office PowerPoint Information Disclosure Vulnerability Thursday September 17th, 2026
CVE-2026-72977 Microsoft Office PowerPoint Information Disclosure Vulnerability Thursday September 17th, 2026
CVE-2026-78514 Microsoft Office Word Remote Code Execution Vulnerability Thursday September 17th, 2026
CVE-2026-72973 Microsoft Office Word Remote Code Execution Vulnerability Thursday September 17th, 2026
CVE-2026-78517 Microsoft Office Word Remote Code Execution Vulnerability Thursday September 17th, 2026
CVE-2026-72938 Microsoft Office PowerPoint Information Disclosure Vulnerability Thursday September 17th, 2026
CVE-2026-78515 Microsoft Office Excel Information Disclosure Vulnerability Thursday September 17th, 2026
CVE-2026-78504 Microsoft Office Word Remote Code Execution Vulnerability Thursday September 17th, 2026
CVE-2026-78513 Microsoft Office PowerPoint Information Disclosure Vulnerability Thursday September 17th, 2026
CVE-2026-78509 Microsoft Office Outlook Remote Code Execution Vulnerability Thursday September 17th, 2026
CVE-2026-78518 Microsoft Office Excel Remote Code Execution Vulnerability Thursday September 17th, 2026
CVE-2026-72972 Microsoft Office Word Remote Code Execution Vulnerability Thursday September 17th, 2026
CVE-2026-85880 Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability Wednesday September 16th, 2026
CVE-2026-85893 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Tuesday September 15th, 2026
CVE-2026-61923 Windows Display Enhancement Service Elevation of Privilege Vulnerability Tuesday September 15th, 2026
CVE-2026-62772 Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability Tuesday September 15th, 2026
CVE-2026-61363 Remote Desktop Client Remote Code Execution Vulnerability Tuesday September 15th, 2026
CVE-2026-62717 Windows Message Queuing Elevation of Privilege Vulnerability Tuesday September 15th, 2026
CVE-2026-63508 Microsoft Planetary Computer Pro Elevation of Privilege Vulnerability Tuesday September 15th, 2026
CVE-2026-50696 Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability Tuesday September 15th, 2026
CVE-2026-50351 Windows Audio Compression Manager (ACM) Elevation of Privilege Vulnerability Tuesday September 15th, 2026
CVE-2026-81963 Windows Update Stack Elevation of Privilege Vulnerability Tuesday September 15th, 2026
CVE-2026-65812 Microsoft Teams for Android Information Disclosure Vulnerability Tuesday September 15th, 2026
CVE-2026-80075 Windows Work Folders Elevation of Privilege Vulnerability Tuesday September 15th, 2026
CVE-2026-69559 Microsoft Teams for Android Information Disclosure Vulnerability Tuesday September 15th, 2026
CVE-2026-68824 Connected User Experiences and Telemetry Elevation of Privilege Vulnerability Tuesday September 15th, 2026
CVE-2026-68847 Connected User Experiences and Telemetry Elevation of Privilege Vulnerability Tuesday September 15th, 2026
CVE-2026-69608 Microsoft Windows Search Component Elevation of Privilege Vulnerability Tuesday September 15th, 2026
CVE-2026-69605 Microsoft Install Service Elevation of Privilege Vulnerability Tuesday September 15th, 2026
CVE-2026-78517 Microsoft Office Word Remote Code Execution Vulnerability Tuesday September 15th, 2026
CVE-2026-80097 Microsoft Authenticator Elevation of Privilege Vulnerability Tuesday September 15th, 2026
CVE-2026-81355 Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability Tuesday September 15th, 2026
CVE-2026-69486 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Tuesday September 15th, 2026
CVE-2026-69286 Windows USB Audio Class Driver Information Disclosure Vulnerability Tuesday September 15th, 2026
CVE-2026-69314 Windows Device Association Broker Service Elevation of Privilege Vulnerability Tuesday September 15th, 2026
CVE-2026-69321 Windows Power Dependency Coordinator Tampering Vulnerability Tuesday September 15th, 2026
CVE-2026-69619 Windows exFAT File System Elevation of Privilege Vulnerability Tuesday September 15th, 2026
CVE-2026-69714 Windows Device Association Service Elevation of Privilege Vulnerability Tuesday September 15th, 2026
Chromium CVE-2026-87626: Incorrect authorization in DeviceBoundSessionCredentials Tuesday September 15th, 2026
Chromium CVE-2026-87562: Incorrect reference resolution in Accessibility Tuesday September 15th, 2026
Chromium CVE-2026-87546: Incorrect type conversion or cast in Safebrowsing Tuesday September 15th, 2026
Chromium CVE-2026-87530: Uncontrolled search path element in CredentialProvider Tuesday September 15th, 2026
Chromium CVE-2026-87449: Cross-site request forgery in DeviceBoundSessionCredentials Tuesday September 15th, 2026
CVE-2026-62721 Windows User-Mode Power Service (UMPS) Elevation of Privilege Vulnerability Monday September 14th, 2026
CVE-2026-85921 Windows Secure Kernel Mode Elevation of Privilege Vulnerability Monday September 14th, 2026
Chromium CVE-2026-76023: Improper resource control in Linux Toolkit Theming Saturday September 12th, 2026
CVE-2026-50679 Windows Search Service Elevation of Privilege Vulnerability Friday September 11th, 2026
CVE-2026-61349 Windows Work Folder Service Elevation of Privilege Vulnerability Friday September 11th, 2026
CVE-2026-71336 Windows Work Folder Service Remote Code Execution Vulnerability Friday September 11th, 2026
CVE-2026-85892 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Friday September 11th, 2026
CVE-2026-69468 Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability Friday September 11th, 2026
CVE-2026-69732 Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability Friday September 11th, 2026
CVE-2026-69860 Windows Imaging Component Remote Code Execution Vulnerability Friday September 11th, 2026
CVE-2026-81355 Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability Friday September 11th, 2026
CVE-2026-68894 Windows Error Reporting Elevation of Privilege Vulnerability Friday September 11th, 2026
CVE-2026-69314 Windows Device Association Broker Service Elevation of Privilege Vulnerability Friday September 11th, 2026
CVE-2026-73024 Windows Services for NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability Wednesday September 9th, 2026
CVE-2026-62693 Windows MIDI Service Module Elevation of Privileges Vulnerability Wednesday September 9th, 2026
CVE-2026-69508 Windows MIDI Service Module Elevation of Privileges Vulnerability Wednesday September 9th, 2026
CVE-2026-69492 Windows Partition Management Driver Elevation of Privilege Vulnerability Wednesday September 9th, 2026
CVE-2026-68877 Windows Storage Spaces Controller Remote Code Execution Vulnerability Wednesday September 9th, 2026
CVE-2026-69777 Windows DHCP Client Elevation of Privilege Vulnerability Wednesday September 9th, 2026
CVE-2026-69334 Windows Volume Manager Extension Driver Remote Code Execution Vulnerability Wednesday September 9th, 2026
CVE-2026-69852 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-69769 Windows HTTP Print Provider Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-70573 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-70565 Windows AF_UNIX Socket Provider Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-70574 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability Tuesday September 8th, 2026
CVE-2026-70567 Windows Display Enhancement Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-70568 Windows Defender Firewall Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-70569 Windows Spaceport.sys Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69911 Microsoft Windows Search Component Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69824 Microsoft Standard XPS Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-69895 Windows Spaceport.sys Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-69841 Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69727 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69826 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69738 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69801 Windows Audio Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69692 Windows Audio Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69814 Windows Credential Providers Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69773 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69794 Windows Encrypting File System (EFS) Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-69921 Windows Print Spooler Components Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69809 Windows Active Directory Domain Services Denial of Service Vulnerability Tuesday September 8th, 2026
CVE-2026-69708 Windows Web Platform Storage Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69907 Windows Enterprise App Management Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69900 Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-70572 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-72932 Windows Message Queuing Queue Manager Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-70581 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69499 Windows Imaging Component Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-69298 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69311 Windows Audio Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69352 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69395 Active Directory Certificate Services (AD CS) Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-69397 Microsoft OpenSSH for Windows Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-69409 Microsoft Office SharePoint Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-69489 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69490 Windows USB Mass Storage Class Driver Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69334 Windows Volume Manager Extension Driver Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-69559 Microsoft Teams for Android Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-69560 Windows Work Folder Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69564 Windows Online Certificate Status Protocol (OCSP) Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69593 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69568 Storage Spaces Controller Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-69575 Windows Storage Spaces Controller Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69607 Windows Deployment Services Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-69590 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-69601 Microsoft Windows Media Foundation Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-69464 Microsoft Office SharePoint Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69614 Microsoft Office Access Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-69323 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69291 Windows Volume Manager Extension Driver Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-70577 Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-70578 Windows Credential Guard Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-70579 Windows Mobile Broadband Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-70583 Windows Core Messaging Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-71342 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-71352 Windows Remote Access Connection Manager Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-72931 Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability Tuesday September 8th, 2026
CVE-2026-72933 Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-69674 Windows Modern Device Management (MDM) Security Feature Bypass Vulnerability Tuesday September 8th, 2026
CVE-2026-72941 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69290 Windows Storage Spaces Controller Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-72942 Windows Spaceport.sys Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-72957 Windows Deployment Services Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-72950 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-72959 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-72954 Windows Deployment Services Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-72964 Windows Internet Connection Sharing (ICS) Tampering Vulnerability Tuesday September 8th, 2026
CVE-2026-72966 Windows Remote Access Connection Manager Tampering Vulnerability Tuesday September 8th, 2026
CVE-2026-72967 Windows Network Connection Broker Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-68896 Microsoft Windows Search Component Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69287 Windows Remote Desktop Services Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69309 Windows Print Spooler Components Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69688 Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69866 Windows Device Association Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69407 Volume Manager Driver Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69424 Windows Distributed File System (DFS) Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69428 Windows LDAP - Lightweight Directory Access Protocol Denial of Service Vulnerability Tuesday September 8th, 2026
CVE-2026-69422 Windows USB Video Driver Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69427 Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69475 Windows Remote Desktop Services Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69430 Windows Embedded Mode Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69447 Windows Audio Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69433 Windows Error Reporting Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69440 Windows MIDI Service Module Elevation of Privileges Vulnerability Tuesday September 8th, 2026
CVE-2026-69421 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69444 Microsoft Windows Speech Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69445 Windows Compressed Folder Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69462 Windows Error Reporting Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69453 Microsoft Windows Search Component Tampering Vulnerability Tuesday September 8th, 2026
CVE-2026-69456 Microsoft Windows Speech Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69459 Windows Power Dependency Coordinator Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69460 Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69467 Microsoft Graphics Component Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69474 Windows Overlay Filter Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-69478 Windows Device Association Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69561 Windows CD-ROM Driver Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69398 Windows Bluetooth Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69483 Windows Image Acquisition Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-69376 Microsoft Standard XPS Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-69331 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69343 Windows Overlay Filter Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-69344 Windows Print Spooler Components Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-69346 Windows Print Spooler Components Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69350 Windows Overlay Filter Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69384 Virtual Hard Disk (VHD) Miniport Driver Denial of Service Vulnerability Tuesday September 8th, 2026
CVE-2026-69372 Windows Network File System Denial of Service Vulnerability Tuesday September 8th, 2026
CVE-2026-69365 Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69364 Windows Print Spooler Components Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69373 Windows Overlay Filter Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69386 Microsoft Windows Media Foundation Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-69388 Windows Bluetooth Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69393 Windows Spaceport.sys Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-69480 Windows Partition Management Driver Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69616 Windows Remote Desktop Services Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-69613 Windows Image Acquisition Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69881 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability Tuesday September 8th, 2026
CVE-2026-69817 Windows Bluetooth Port Driver Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69619 Windows exFAT File System Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69720 Windows MIDI Service Module Elevation of Privileges Vulnerability Tuesday September 8th, 2026
CVE-2026-69821 Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69682 Windows Host Guardian Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69611 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability Tuesday September 8th, 2026
CVE-2026-69629 Microsoft Office Outlook Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-69643 Windows Spaceport.sys Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69687 Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69791 Windows Device Association Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69707 Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69654 Windows Accounts Control Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69816 Windows Accounts Control Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69714 Windows Device Association Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69617 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69602 Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69488 Windows Device Association Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69493 Windows Event Logging Service Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-69511 Microsoft Windows Media Foundation Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-69512 Windows Spaceport.sys Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69508 Windows MIDI Service Module Elevation of Privileges Vulnerability Tuesday September 8th, 2026
CVE-2026-69509 Role: Windows Fax Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69599 Remote Desktop Services Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-69536 Remote Desktop Services Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-69546 Windows Active Directory Domain Services Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-69571 Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69535 Windows Spaceport.sys Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69542 Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69569 Windows Print Spooler Components Denial of Service Vulnerability Tuesday September 8th, 2026
CVE-2026-69581 Windows Device Association Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69612 Windows Error Reporting Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69592 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69584 Windows USB Video Driver Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69600 Microsoft Windows Search Component Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69625 Connected User Experiences and Telemetry Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69624 Active Directory Certificate Services (AD CS) Tampering Vulnerability Tuesday September 8th, 2026
CVE-2026-69636 Microsoft Office SharePoint Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-69477 Microsoft Office Access Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-69381 Windows Storage Port Driver Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-83940 Windows Device Association Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-83939 Windows Secure Kernel Mode Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-77897 Microsoft Power Automate Desktop Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-83951 Microsoft Office Word Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-83949 Microsoft Office Word Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-69530 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-72965 Windows WebClient Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-83971 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-83954 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-83967 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-83970 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-83972 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-83968 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-70145 Microsoft Windows Search Component Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-83973 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-83981 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-83977 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-83978 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-83982 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-83987 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-81385 Microsoft Office Publisher Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-81955 Windows Graphics Component Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-83980 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-83983 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-62893 Windows Deployment Services TFTP Server Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-50453 Windows USB Audio Class Driver Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-57085 Windows Print Spooler Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-83711 Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-62747 Windows Device Association Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-44814 Windows DWM Core Library Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-50696 Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability Tuesday September 8th, 2026
CVE-2026-83985 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-83989 Windows Services for NFS ONCRPC XDR Driver Denial of Service Vulnerability Tuesday September 8th, 2026
CVE-2026-83990 Microsoft Graphics Component Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-83992 Windows Imaging Component Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-83997 Windows Message Queuing Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-84000 Microsoft Graphics Component Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-85875 Microsoft Office Excel Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-83501 Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-83498 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-84003 Microsoft Authentication Library (MSAL) for Node.js Spoofing Vulnerability Tuesday September 8th, 2026
CVE-2026-66303 Skype for Business and Lync Denial of Service Vulnerability Tuesday September 8th, 2026
CVE-2026-66307 Skype for Business and Lync Denial of Service Vulnerability Tuesday September 8th, 2026
CVE-2026-62906 Microsoft Discovery Studio Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-80096 Windows Remote Desktop Services Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-80081 Microsoft Office PowerPoint Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-73011 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-72996 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-72997 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-72999 Windows USB Hub Driver Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-73002 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-73020 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-73000 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-73001 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-73021 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-73015 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-73003 Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-73022 Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-73014 Data Sharing Service Client Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-72993 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-73008 Windows Biometric Service Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-73005 Windows Authentication Methods Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-73024 Windows Services for NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-73007 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-73026 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-73012 Windows Management Services Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-73009 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-73010 Microsoft Failover Cluster Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-73023 Windows Imaging Component Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-73013 Windows Imaging Component Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-72994 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-72992 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69439 .NET and Visual Studio Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69904 Microsoft Office SharePoint Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-69906 Windows Secure Kernel Mode Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-70296 Windows Imaging Component Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-70570 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-72956 Microsoft Office PowerPoint Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-72938 Microsoft Office PowerPoint Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-72974 Microsoft Office Excel Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-72991 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-72977 Microsoft Office PowerPoint Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-72975 Microsoft Office PowerPoint Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-72976 Microsoft Office Word Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-65772 Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-65812 Microsoft Teams for Android Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-69465 Microsoft Office SharePoint Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-72989 Windows Failover Cluster Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-72995 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-72988 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-72990 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-71328 .NET and Visual Studio Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-80090 Microsoft Office Word Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-78522 Microsoft Office Word Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-78506 Microsoft Office Word Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-78503 Microsoft Office Word Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-78519 Microsoft Office Outlook Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-80079 Microsoft Office Word Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-80073 Microsoft Office Outlook Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-78520 Microsoft Office Outlook Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-80084 Microsoft Office Outlook Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-78525 Microsoft Office Outlook Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-80086 Microsoft Office PowerPoint Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-80088 Microsoft Office Word Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-78464 Windows MIDI Service Module Elevation of Privileges Vulnerability Tuesday September 8th, 2026
CVE-2026-77905 Windows Management Instrumentation Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-77911 Microsoft Office Word Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-78445 Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-69595 Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-78446 Windows Distributed File System (DFS) Denial of Service Vulnerability Tuesday September 8th, 2026
CVE-2026-78449 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-78444 Microsoft Failover Cluster Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-78450 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-78447 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-78448 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-78451 Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-78453 Microsoft Windows SCSI Class System File Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-78452 Microsoft Windows SCSI Class System File Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-78454 Windows CD-ROM Driver Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-78457 Windows Security Health Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69351 Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-69693 Windows Device Association Broker Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69729 Windows Credential Providers Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-69711 Windows Device Association Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69694 Windows IP Address Management (IPAM) Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69889 Windows Bluetooth Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69681 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability Tuesday September 8th, 2026
CVE-2026-69896 Windows Error Reporting Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69735 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69741 Windows Spaceport.sys Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-69862 Windows Wireless Wide Area Network Service Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-69691 Windows Spaceport.sys Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69838 Windows Print Spooler Components Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69839 Windows iSCSI Target Service Denial of Service Vulnerability Tuesday September 8th, 2026
CVE-2026-69772 Windows Network File System Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-69775 Windows DWM Core Library Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69758 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69771 Windows Container Manager Service Security Feature Bypass Vulnerability Tuesday September 8th, 2026
CVE-2026-69732 Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-69770 Windows Spaceport.sys Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-69859 Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69539 Remote Desktop Services Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-69582 Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69524 Windows Active Directory Domain Services Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-69534 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69574 Windows Device Association Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69540 Windows Audio Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69549 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability Tuesday September 8th, 2026
CVE-2026-69541 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability Tuesday September 8th, 2026
CVE-2026-69563 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69552 Windows Print Spooler Components Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-69554 Microsoft Windows Search Component Tampering Vulnerability Tuesday September 8th, 2026
CVE-2026-69585 Microsoft Windows Search Component Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69790 Windows Credential Providers Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69608 Microsoft Windows Search Component Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69587 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability Tuesday September 8th, 2026
CVE-2026-69594 Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69605 Microsoft Install Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69645 Windows Message Queuing Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69684 Windows Error Reporting Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-69623 Windows HTTP Print Provider Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-69627 Windows Remote Desktop Licensing Service Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-69860 Windows Imaging Component Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-69712 Windows Key Distribution Center Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-69527 Windows USB Mass Storage Class Driver Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-72962 Windows USB Video Driver Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-71353 Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-71351 Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-72930 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-72939 Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability Tuesday September 8th, 2026
CVE-2026-72944 Role: Windows Fax Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-72946 Microsoft Storage Port Driver Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-72943 Windows Deployment Services Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-72945 Windows Task Scheduler Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-72958 Windows Credential Guard Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-72963 Windows Modern Execution Server Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-71343 Windows Remote Access Connection Manager Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-68825 Windows Bind Filter Driver Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-68837 Windows File History Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-68844 Windows Storage Spaces Controller Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-68877 Windows Storage Spaces Controller Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-68887 Windows Message Queuing Queue Manager Denial of Service Vulnerability Tuesday September 8th, 2026
CVE-2026-69293 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69355 Microsoft Exchange Server Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-69380 Microsoft Exchange Server Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69382 Microsoft Exchange Server Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-71341 Windows Partition Management Driver Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-72926 Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-70584 Windows Core Messaging Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69890 Windows Virtual Trusted Platform Module Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-70342 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-58600 HEVC Video Extensions Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-70351 Microsoft WebP Image Extension Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-70562 Windows Audio Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-70564 Windows Print Spooler Components Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-70582 Windows Management Instrumentation Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-70585 Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-70587 Windows Remote Desktop Protocol Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-71336 Windows Work Folder Service Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-71330 Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-71333 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-71337 Windows Storage Management Provider Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-71332 Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-71334 Windows NFS Portmapper Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-71338 Windows Failover Cluster Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-71340 Windows File History Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69525 Remote Desktop Services Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-69621 Role: Windows Fax Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69394 Windows Audio Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-68824 Connected User Experiences and Telemetry Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-68830 Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-68835 Windows Print Spooler Components Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-68847 Connected User Experiences and Telemetry Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-68849 Windows Bluetooth Port Driver Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-68845 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-68897 Microsoft Standard XPS Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-68878 Windows Fast FAT Driver Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-68881 Microsoft Standard XPS Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-68890 Microsoft Standard XPS Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69271 Microsoft Standard XPS Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-68892 Microsoft Standard XPS Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-68893 Remote Desktop Licensing Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69281 Windows License Manager Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69267 Windows Connected User Experiences and Telemetry Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-69276 Microsoft UxTheme Library (uxtheme.dll) Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-69292 Remote Desktop Gateway Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69307 Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69279 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69324 Windows Performance Monitor Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-62744 Microsoft Windows Media Foundation Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-66308 Skype for Business and Lync Denial of Service Vulnerability Tuesday September 8th, 2026
CVE-2026-62895 Azure Arc SQL Server Extension Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69341 Windows Image Acquisition Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69522 .NET and Visual Studio Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-57098 Microsoft Remote Desktop App for Windows Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-62801 Microsoft PowerShell Security Feature Bypass Vulnerability Tuesday September 8th, 2026
CVE-2026-55007 Microsoft Exchange Server Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-50349 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69296 Windows Device Association Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69336 Microsoft Standard XPS Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69516 Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69470 Connected User Experiences and Telemetry Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69432 Volume Manager Driver Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69513 Windows Error Reporting Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69455 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69451 Windows Management Instrumentation Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69450 Windows Error Reporting Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69472 Windows Devices Human Interface Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69468 Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69481 Windows Enterprise App Management Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69494 Windows Event Logging Service Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-69495 Windows Event Logging Service Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-69496 Windows Compressed Folder Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-69517 Windows Wireless Networking Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69500 Windows Image Acquisition Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69507 Microsoft Windows Search Component Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-69514 Remote Desktop Services Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-69448 Windows Bluetooth Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69429 Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-69368 Windows Overlay Filter Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69339 Windows MIDI Service Module Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-69338 Remote Desktop Gateway Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69347 Windows Fast FAT Driver Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-69345 Microsoft Standard XPS Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-69377 Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69349 Windows Management Instrumentation Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-69362 Windows Error Reporting Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69359 Active Directory Domain Services Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69367 Microsoft Standard XPS Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-69389 Windows Storage Management Provider Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69371 Windows Overlay Filter Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69423 Windows USB Video Driver Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69391 Windows Broker Infrastructure Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69390 Windows Spaceport.sys Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-69401 Audio Video Control Transport Protocol Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69413 Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69418 Volume Manager Driver Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69408 Microsoft Windows Media Foundation Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-69420 Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69436 Windows Error Reporting Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69443 Windows Device Health Attestation (DHA) Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-83999 Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-84001 Windows Key Distribution Center Denial of Service Vulnerability Tuesday September 8th, 2026
CVE-2026-85880 Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-56198 Microsoft Trace Data Helper Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-62810 Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-62762 Windows Active Directory Domain Services Denial of Service Vulnerability Tuesday September 8th, 2026
CVE-2026-62813 Windows Active Directory Domain Services Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-62697 Windows Push Notifications Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-56172 Windows VHD miniport driver Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-66816 Microsoft SQL Server Security Feature Bypass Vulnerability Tuesday September 8th, 2026
CVE-2026-62706 Microsoft Windows Media Foundation Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-83979 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-72947 Windows File History Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-72949 Windows SMB Server Network Transport Driver (srvnet.sys) Denial of Service Vulnerability Tuesday September 8th, 2026
CVE-2026-70019 Windows Compressed Folder Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-69573 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-72937 Windows Storage Port Driver Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-69492 Windows Partition Management Driver Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-83955 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-83986 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-83969 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-83988 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-83974 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-83975 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-83976 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-83991 Windows Cloud Files Mini Filter Driver Tampering Vulnerability Tuesday September 8th, 2026
CVE-2026-83996 Windows Error Reporting Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69294 Microsoft COM for Windows Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-69280 Windows Push Notifications Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69269 Microsoft Standard XPS Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69270 Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69277 Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69305 Microsoft Windows Search Component Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69286 Windows USB Audio Class Driver Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-69275 Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69299 Microsoft COM for Windows Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69283 Windows CD-ROM Driver Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69289 Windows Setup Files Cleanup Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69314 Windows Device Association Broker Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-68894 Windows Error Reporting Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69300 Windows Push Notifications Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69321 Windows Power Dependency Coordinator Tampering Vulnerability Tuesday September 8th, 2026
CVE-2026-69303 Push Message Routing Service Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-69313 Microsoft Standard XPS Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69315 Windows License Manager Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-69308 Microsoft Standard XPS Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-69318 Windows Imaging Component Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-69317 Windows Remote Desktop Client Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-69316 Windows Overlay Filter Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-69319 Windows USB Video Driver Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69322 Microsoft Windows Search Component Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-68895 Internet Storage Name Service Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-68842 Windows MIDI Service Module Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-68831 Windows Defender Firewall Service Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-68843 Microsoft Office Word Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-68839 Windows USB Mass Storage Class Driver Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-68848 Windows Print Spooler Components Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-68876 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-68874 Windows Program Compatibility Assistant Service Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-68873 Windows Program Compatibility Assistant Service Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-68885 Microsoft Standard XPS Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69469 Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-68888 Microsoft Standard XPS Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-68889 Microsoft Standard XPS Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-68891 Microsoft Standard XPS Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-69272 Microsoft Standard XPS Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-83952 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-68886 Windows Network Connection Broker Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-69797 Microsoft Office PowerPoint Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-69804 Microsoft Office SharePoint Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-69846 Windows Secure Kernel Mode Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-72978 Active Directory Federation Services (AD FS) Denial of Service Vulnerability Tuesday September 8th, 2026
CVE-2026-77495 Windows Imaging Component Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-72983 Internet Connection Sharing (ICS) Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-69476 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69778 Microsoft Office Access Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-69787 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69579 Windows Message Queuing Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-77489 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-77492 Windows Storage Port Driver Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-77500 Windows Device Association Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69767 Microsoft Office PowerPoint Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-81381 GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-69518 Windows Remote Desktop Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-69583 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69589 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69580 Windows Biometric Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69604 Windows Audio Service Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69641 Microsoft Exchange Server Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69678 Microsoft Office PowerPoint Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-69716 Microsoft Office SharePoint Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-69734 Microsoft Office Word Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-69742 Microsoft Office Publisher Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-69724 Microsoft Office SharePoint Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-69719 Microsoft Office Word Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-69683 Microsoft Office SharePoint Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-69529 Microsoft Office Access Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-77493 Windows Graphics Component Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-78508 Windows CD-ROM Driver Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-78513 Microsoft Office PowerPoint Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-78509 Microsoft Office Outlook Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-78515 Microsoft Office Excel Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-80093 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-80097 Microsoft Authenticator Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-81349 Azure HDInsight Ambari Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-81355 Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-81380 GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-78518 Microsoft Office Excel Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-78502 Microsoft Office Word Information Disclosure Vulnerability Tuesday September 8th, 2026
CVE-2026-77896 Windows Remote Desktop Client Denial of Service Vulnerability Tuesday September 8th, 2026
CVE-2026-69268 Microsoft Office SharePoint Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-69273 Microsoft Office SharePoint Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-69282 Microsoft Office SharePoint Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-77899 Windows Security Center Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-77908 Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-78439 Microsoft Office Graphics Component Remote Code Execution Vulnerability Tuesday September 8th, 2026
CVE-2026-69501 Windows Secure Kernel Mode Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-77904 Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability Tuesday September 8th, 2026
CVE-2026-50376 Windows Remote Desktop Client Information Disclosure Vulnerability Friday September 4th, 2026
CVE-2026-69306 Visual Studio Code Security Feature Bypass Vulnerability Wednesday September 2nd, 2026
CVE-2026-50376 Windows Remote Desktop Client Information Disclosure Vulnerability Wednesday September 2nd, 2026
CVE-2026-70335 GitHub Copilot and Visual Studio Code Elevation of Privilege Vulnerability Wednesday September 2nd, 2026
CVE-2026-69278 Visual Studio Code Security Feature Bypass Vulnerability Wednesday September 2nd, 2026
CVE-2026-58650 Visual Studio Code Security Feature Bypass Vulnerability Wednesday September 2nd, 2026
CVE-2026-26174 Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability Monday August 31st, 2026
CVE-2026-50462 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Monday August 31st, 2026
CVE-2026-62889 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Monday August 31st, 2026
CVE-2026-68821 Windows Package Manager Elevation of Privilege Vulnerability Saturday August 29th, 2026
Chromium: CVE-2026-79178 Incorrect authorization in Web Authentication (Passkeys & Security Keys) Friday August 28th, 2026
Chromium: CVE-2026-79108 UI misrepresentation in Web Authentication (Passkeys & Security Keys) Friday August 28th, 2026
Chromium: CVE-2026-79126 Incorrect provision of specified functionality in Proxy Friday August 28th, 2026
CVE-2026-65813 Microsoft Exchange Server Elevation of Privilege Vulnerability Friday August 28th, 2026
CVE-2026-70309 Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability Friday August 28th, 2026
Chromium: CVE-2026-79289 Improper control of a resource through its lifetime in Workers Friday August 28th, 2026
Chromium: CVE-2026-79226 Improper privilege management in Regional Capabilities Friday August 28th, 2026
Chromium: CVE-2026-79000 Improper input validation in DeviceBoundSessionCredentials Friday August 28th, 2026
Chromium: CVE-2026-78959 Improper handling of case sensitivity in FileSystem Friday August 28th, 2026
CVE-2026-72984 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Friday August 28th, 2026
CVE-2026-70341 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Friday August 28th, 2026
CVE-2026-66798 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Friday August 28th, 2026
CVE-2026-66323 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Friday August 28th, 2026
CVE-2026-62904 Microsoft Edge (Chromium-based) Information Disclosure Vulnerability Friday August 28th, 2026
CVE-2026-58616 Copilot Chat (Microsoft Edge) Information Disclosure Vulnerability Friday August 28th, 2026
Chromium: CVE-2026-79083 Improper enforcement of behavioral workflow in Media Friday August 28th, 2026
Chromium: CVE-2026-79010 Operation on a resource after expiration or release in Network Friday August 28th, 2026
CVE-2026-50351 Windows Audio Compression Manager (ACM) Elevation of Privilege Vulnerability Thursday August 27th, 2026
CVE-2026-50435 Windows Overlay Filter Elevation of Privilege Vulnerability Thursday August 27th, 2026
CVE-2026-65660 Microsoft SharePoint Server Remote Code Execution Vulnerability Thursday August 27th, 2026
CVE-2026-66804 Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability Thursday August 27th, 2026
CVE-2026-68819 Windows Network File System Denial of Service Vulnerability Wednesday August 26th, 2026
CVE-2026-49183 Windows Clipboard Server Elevation of Privilege Vulnerability Tuesday August 25th, 2026
CVE-2026-45639 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability Tuesday August 25th, 2026
CVE-2026-62728 Windows Common Log File System Driver Elevation of Privilege Vulnerability Tuesday August 25th, 2026
CVE-2026-62747 Windows Device Association Service Elevation of Privilege Vulnerability Tuesday August 25th, 2026
CVE-2026-47292 Visual Studio Code MSSQL Extension Remote Code Execution Vulnerability Monday August 24th, 2026
CVE-2026-58547 Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability Friday August 21st, 2026
CVE-2026-49183 Windows Clipboard Server Elevation of Privilege Vulnerability Friday August 21st, 2026
CVE-2026-50466 Microsoft Brokering File System Elevation of Privilege Vulnerability Friday August 21st, 2026
CVE-2026-54981 Visual Studio Code Python Extension Security Feature Bypass Vulnerability Friday August 21st, 2026
CVE-2026-70335 GitHub Copilot and Visual Studio Code Elevation of Privilege Vulnerability Friday August 21st, 2026
CVE-2026-69419 Azure Data Manager for Energy Remote Code Execution Vulnerability Thursday August 20th, 2026
CVE-2026-69855 Microsoft Copilot in Azure Information Disclosure Vulnerability Thursday August 20th, 2026
CVE-2026-69558 Microsoft Partner Center Information Disclosure Vulnerability Thursday August 20th, 2026
CVE-2026-69543 Azure Virtual Machines Elevation of Privilege Vulnerability Thursday August 20th, 2026
CVE-2026-33824 Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability Thursday August 20th, 2026
CVE-2026-71331 Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability Thursday August 20th, 2026
CVE-2026-71331 Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability Thursday August 20th, 2026
CVE-2026-65770 Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability Thursday August 20th, 2026
CVE-2026-62747 Windows Device Association Service Elevation of Privilege Vulnerability Thursday August 20th, 2026
CVE-2026-71331 Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability Thursday August 20th, 2026
CVE-2026-65801 Microsoft Exchange Online Elevation of Privilege Vulnerability Thursday August 20th, 2026
CVE-2026-62703 Windows DWM Core Library Information Disclosure Vulnerability Thursday August 20th, 2026
CVE-2026-65786 Desktop Window Manager Elevation of Privilege Vulnerability Thursday August 20th, 2026
CVE-2026-62728 Windows Common Log File System Driver Elevation of Privilege Vulnerability Thursday August 20th, 2026
CVE-2026-66802 Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability Thursday August 20th, 2026
CVE-2026-42912 Windows Telephony Service Elevation of Privilege Vulnerability Wednesday August 19th, 2026
CVE-2026-50383 Windows Print Spooler Information Disclosure Vulnerability Wednesday August 19th, 2026
CVE-2026-62705 Microsoft Brokering File System Elevation of Privilege Vulnerability Wednesday August 19th, 2026
CVE-2026-70338 Microsoft PowerShell Security Feature Bypass Vulnerability Wednesday August 19th, 2026
CVE-2026-47632 Azure Connected Machine Agent Elevation of Privilege Vulnerability Tuesday August 18th, 2026
CVE-2026-56642 Microsoft Fabric Data Warehouse Remote Code Execution Vulnerability Tuesday August 18th, 2026
CVE-2026-65791 Windows iSCSI Target Service Remote Code Execution Vulnerability Tuesday August 18th, 2026
CVE-2026-66804 Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability Tuesday August 18th, 2026
CVE-2026-56188 Windows Server Network driver Remote Code Execution Vulnerability Monday August 17th, 2026
CVE-2026-63513 Microsoft Office Graphics Component Remote Code Execution Vulnerability Monday August 17th, 2026
CVE-2026-63519 Microsoft Office Graphics Component Remote Code Execution Vulnerability Monday August 17th, 2026
CVE-2026-66807 Microsoft Office Graphics Component Remote Code Execution Vulnerability Monday August 17th, 2026
CVE-2026-62722 Microsoft Brokering File System Elevation of Privilege Vulnerability Monday August 17th, 2026
CVE-2026-59124 Microsoft High Performance Computing (HPC) Pack Remote Code Execution Vulnerability Sunday August 16th, 2026
CVE-2026-48566 Windows DWM Core Library Information Disclosure Vulnerability Friday August 14th, 2026
CVE-2026-49162 Microsoft Brokering File System Elevation of Privilege Vulnerability Friday August 14th, 2026
CVE-2026-59126 Windows Event Logging Service Elevation of Privilege Vulnerability Friday August 14th, 2026
CVE-2026-72970 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Friday August 14th, 2026
CVE-2026-61347 Windows Event Logging Service Information Disclosure Vulnerability Friday August 14th, 2026
CVE-2026-66804 Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability Friday August 14th, 2026
CVE-2026-62913 Microsoft Exchange Server Remote Code Execution Vulnerability Thursday August 13th, 2026
CVE-2026-62688 Windows MIDI Service Module Elevation of Privileges Vulnerability Thursday August 13th, 2026
CVE-2026-65796 Windows iSCSI Target Service Remote Code Execution Vulnerability Thursday August 13th, 2026
CVE-2026-61346 Windows Graphics Kernel Elevation of Privilege Vulnerability Thursday August 13th, 2026
CVE-2026-66804 Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability Thursday August 13th, 2026
CVE-2026-44814 Windows DWM Core Library Information Disclosure Vulnerability Thursday August 13th, 2026
CVE-2026-50342 Windows MIDI Service Module Elevation of Privileges Vulnerability Thursday August 13th, 2026
CVE-2026-45637 Microsoft DWM Core Library Elevation of Privilege Vulnerability Thursday August 13th, 2026
CVE-2026-45592 Windows Internet (wininet.dll) Elevation of Privilege Vulnerability Thursday August 13th, 2026
CVE-2026-45597 Windows UI Automation Manager (uiamanager.dll) Elevation of Privilege Vulnerability Thursday August 13th, 2026
CVE-2026-49162 Microsoft Brokering File System Elevation of Privilege Vulnerability Thursday August 13th, 2026
CVE-2026-45638 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Thursday August 13th, 2026
CVE-2026-45637 Microsoft DWM Core Library Elevation of Privilege Vulnerability Wednesday August 12th, 2026
CVE-2022-41127 Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability Wednesday August 12th, 2026
CVE-2026-50476 Windows Network Connections Service Elevation of Privilege Vulnerability Wednesday August 12th, 2026
CVE-2026-50655 Microsoft Windows Media Foundation Remote Code Execution Vulnerability Wednesday August 12th, 2026
CVE-2026-58538 Windows Bluetooth Service Elevation of Privilege Vulnerability Wednesday August 12th, 2026
CVE-2026-70348 Windows Management Services Denial of Service Vulnerability Wednesday August 12th, 2026
CVE-2026-62913 Microsoft Exchange Server Remote Code Execution Vulnerability Wednesday August 12th, 2026
CVE-2026-62747 Windows Device Association Service Elevation of Privilege Vulnerability Wednesday August 12th, 2026
CVE-2026-62696 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability Wednesday August 12th, 2026
CVE-2026-42976 Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability Wednesday August 12th, 2026
CVE-2026-19169 Insufficient validation of untrusted input in Contextual Tasks Wednesday August 12th, 2026
CVE-2026-62721 Windows User-Mode Power Service (UMPS) Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-62717 Windows Message Queuing Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-62734 Windows Telephony Service Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-62732 Windows Telephony Service Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-62730 Windows Wired AutoConfig Service Information Disclosure Vulnerability Tuesday August 11th, 2026
CVE-2026-62726 Windows Telephony Service Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-62728 Windows Common Log File System Driver Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-70355 Microsoft SharePoint Server Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-62725 Windows Telephony Service Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-62751 Windows Projected File System Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-62775 Windows Container Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability Tuesday August 11th, 2026
CVE-2026-62771 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-61918 Windows Remote Desktop Client Information Disclosure Vulnerability Tuesday August 11th, 2026
CVE-2026-61349 Windows Work Folder Service Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-59126 Windows Event Logging Service Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-59125 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability Tuesday August 11th, 2026
CVE-2026-59122 Windows Telephony Service Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-54981 Visual Studio Code Python Extension Security Feature Bypass Vulnerability Tuesday August 11th, 2026
CVE-2026-42976 Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-72971 Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering Vulnerability Tuesday August 11th, 2026
CVE-2026-70339 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Tuesday August 11th, 2026
CVE-2026-61355 Windows Sensor Data Service Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-62710 Windows Device Association Service Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-62701 Windows Telephony Service Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-62698 Microsoft Digest Authentication Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-61921 Windows Remote Desktop Client Information Disclosure Vulnerability Tuesday August 11th, 2026
CVE-2026-61364 Windows Remote Desktop Services Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-61358 Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-61357 Application Information Services Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-61365 Windows Remote Desktop Services Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-66808 Microsoft SharePoint Server Remote Code Execution Vulnerability Tuesday August 11th, 2026
CVE-2026-66807 Microsoft Office Graphics Component Remote Code Execution Vulnerability Tuesday August 11th, 2026
CVE-2026-66805 Microsoft SharePoint Server Remote Code Execution Vulnerability Tuesday August 11th, 2026
CVE-2026-66802 Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability Tuesday August 11th, 2026
CVE-2026-65796 Windows iSCSI Target Service Denial of Service Vulnerability Tuesday August 11th, 2026
CVE-2026-65791 Windows iSCSI Target Service Remote Code Execution Vulnerability Tuesday August 11th, 2026
CVE-2026-65790 Windows Message Queuing Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-66809 Microsoft Office Graphics Component Information Disclosure Vulnerability Tuesday August 11th, 2026
CVE-2026-6727 MITRE: CVE-2026-6727 TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability Tuesday August 11th, 2026
CVE-2026-62738 Windows Management Instrumentation Information Disclosure Vulnerability Tuesday August 11th, 2026
CVE-2026-71331 Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability Tuesday August 11th, 2026
CVE-2026-70326 Microsoft SharePoint Server Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-56179 Windows Network Address Translation (NAT) Spoofing Vulnerability Tuesday August 11th, 2026
CVE-2026-65679 Windows iSCSI Target Service Remote Code Execution Vulnerability Tuesday August 11th, 2026
CVE-2026-63526 Microsoft Office Graphics Component Remote Code Execution Vulnerability Tuesday August 11th, 2026
CVE-2026-62842 Microsoft Office Graphics Component Information Disclosure Vulnerability Tuesday August 11th, 2026
CVE-2026-62911 Microsoft Exchange Server Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-62888 Windows DWM Core Library Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-62832 Windows User Profile Service Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-65680 Microsoft OneDrive for MacOS Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-65681 Windows iSCSI Target Service Denial of Service Vulnerability Tuesday August 11th, 2026
CVE-2026-65673 Microsoft Entra Connect Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-64921 Microsoft SharePoint Server Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-64901 Microsoft SharePoint Server Remote Code Execution Vulnerability Tuesday August 11th, 2026
CVE-2026-62740 Windows Imaging Component Information Disclosure Vulnerability Tuesday August 11th, 2026
CVE-2026-62729 Windows Telephony Service Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-62748 Windows Telephony Service Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-62724 Windows Telephony Service Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-62723 Windows Telephony Service Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-62722 Windows Bind Filter Driver Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-62719 Windows Message Queuing Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-62713 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-62707 Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-62705 Windows Bind Filter Driver Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-62703 Windows DWM Core Library Information Disclosure Vulnerability Tuesday August 11th, 2026
CVE-2026-62699 Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution Vulnerability Tuesday August 11th, 2026
CVE-2026-62696 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-62693 Windows MIDI Service Module Elevation of Privileges Vulnerability Tuesday August 11th, 2026
CVE-2026-62690 Windows Push Notifications Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-62688 Windows MIDI Service Module Elevation of Privileges Vulnerability Tuesday August 11th, 2026
CVE-2026-62777 Windows License Manager Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-62816 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability Tuesday August 11th, 2026
CVE-2026-62795 Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability Tuesday August 11th, 2026
CVE-2026-62784 Microsoft Local Security Authority Server (lsasrv) Remote Code Execution Vulnerability Tuesday August 11th, 2026
CVE-2026-62785 Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability Tuesday August 11th, 2026
CVE-2026-62774 Windows Graphics Kernel Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-62772 Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-62758 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-62783 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-62747 Windows Device Association Service Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-61936 Windows Defender Firewall Service Security Feature Bypass Vulnerability Tuesday August 11th, 2026
CVE-2026-62818 Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability Tuesday August 11th, 2026
CVE-2026-63520 Microsoft SharePoint Server Remote Code Execution Vulnerability Tuesday August 11th, 2026
CVE-2026-59128 Windows Encrypting File System (EFS) Information Disclosure Vulnerability Tuesday August 11th, 2026
CVE-2026-59124 Microsoft High Performance Computing (HPC) Pack Remote Code Execution Vulnerability Tuesday August 11th, 2026
CVE-2026-49179 Windows Active Directory Domain Services Remote Code Execution Vulnerability Tuesday August 11th, 2026
CVE-2026-54984 Windows Imaging Component Remote Code Execution Vulnerability Tuesday August 11th, 2026
CVE-2026-40375 Microsoft Dynamics Business Central Information Disclosure Vulnerability Tuesday August 11th, 2026
CVE-2026-63514 Microsoft SharePoint Server Remote Code Execution Vulnerability Tuesday August 11th, 2026
CVE-2026-62837 Microsoft SharePoint Server Information Disclosure Vulnerability Tuesday August 11th, 2026
CVE-2026-62827 Microsoft SharePoint Server Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-56174 Windows Narrator Braille Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-50472 Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-59133 Microsoft High Performance Computing (HPC) Pack Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-61934 Windows Bind Filter Driver Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-61923 Windows Display Enhancement Service Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-61933 Windows DWM Core Library Information Disclosure Vulnerability Tuesday August 11th, 2026
CVE-2026-61932 Windows DWM Core Library Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-62692 Windows Remote Desktop Services Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-61927 Windows Bind Filter Driver Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-61924 Windows Remote Desktop Client Information Disclosure Vulnerability Tuesday August 11th, 2026
CVE-2026-61366 Windows Network Connection Broker Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-61367 Windows Remote Desktop Services Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-59135 Microsoft Windows Search Component Information Disclosure Vulnerability Tuesday August 11th, 2026
CVE-2026-61356 Windows Remote Desktop Services Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-61348 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-61347 Windows Event Logging Service Information Disclosure Vulnerability Tuesday August 11th, 2026
CVE-2026-61353 Windows Telephony Service Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-61346 Windows Graphics Kernel Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-61345 Microsoft Remote Registry Service Denial of Service Vulnerability Tuesday August 11th, 2026
CVE-2026-59137 Windows Event Logging Service Information Disclosure Vulnerability Tuesday August 11th, 2026
CVE-2026-59136 Microsoft COM for Windows Information Disclosure Vulnerability Tuesday August 11th, 2026
CVE-2026-59138 Microsoft Remote Registry Service Denial of Service Vulnerability Tuesday August 11th, 2026
CVE-2026-62819 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Tuesday August 11th, 2026
CVE-2026-66301 Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability Tuesday August 11th, 2026
CVE-2026-70307 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-68821 Windows Package Manager Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-68820 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-66804 Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-70335 GitHub Copilot and Visual Studio Code Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-63517 Microsoft Office Graphics Component Information Disclosure Vulnerability Tuesday August 11th, 2026
CVE-2026-63513 Microsoft Office Graphics Component Remote Code Execution Vulnerability Tuesday August 11th, 2026
CVE-2026-54123 Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability Tuesday August 11th, 2026
CVE-2026-62915 Microsoft Exchange Server Security Feature Bypass Vulnerability Tuesday August 11th, 2026
CVE-2026-62913 Microsoft Exchange Server Remote Code Execution Vulnerability Tuesday August 11th, 2026
CVE-2026-62910 Microsoft Exchange Server Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-62894 Windows DWM Core Library Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-62893 Windows Deployment Services TFTP Server Remote Code Execution Vulnerability Tuesday August 11th, 2026
CVE-2026-62892 Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-62889 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Tuesday August 11th, 2026
CVE-2026-63519 Microsoft Office Graphics Component Remote Code Execution Vulnerability Tuesday August 11th, 2026
CVE-2026-65815 Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability Tuesday August 11th, 2026
CVE-2026-65814 Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-65813 Microsoft Exchange Server Elevation of Privilege Vulnerability Tuesday August 11th, 2026
CVE-2026-65665 Microsoft SharePoint Server Remote Code Execution Vulnerability Tuesday August 11th, 2026
CVE-2026-65664 Microsoft Office Graphics Component Remote Code Execution Vulnerability Tuesday August 11th, 2026
CVE-2026-65663 Microsoft SharePoint Server Remote Code Execution Vulnerability Tuesday August 11th, 2026
CVE-2026-65658 Microsoft SharePoint Server Remote Code Execution Vulnerability Tuesday August 11th, 2026
CVE-2026-3087 shutil.unpack_archive() doesn't check for Windows absolute paths in ZIPs Tuesday August 11th, 2026
CVE-2024-57888 workqueue: Do not warn when cancelling WQ_MEM_RECLAIM work from !WQ_MEM_RECLAIM worker Tuesday August 11th, 2026
CVE-2024-57899 wifi: mac80211: fix mbss changed flags corruption on 32 bit systems Tuesday August 11th, 2026
CVE-2025-2308 HDF5 Scale-Offset Filter H5Z__scaleoffset_decompress_one_byte heap-based overflow Tuesday August 11th, 2026
CVE-2025-21682 eth: bnxt: always recalculate features after XDP clearing, fix null-deref Tuesday August 11th, 2026
CVE-2024-52005 The sideband payload is passed unfiltered to the terminal in git Tuesday August 11th, 2026
CVE-2025-37945 net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY Tuesday August 11th, 2026
CVE-2024-57898 wifi: cfg80211: clear link ID from bitmap during link delete after clean up Tuesday August 11th, 2026
CVE-2025-37852 drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create() Tuesday August 11th, 2026
CVE-2025-37879 9p/net: fix improper handling of bogus negative read/write replies Tuesday August 11th, 2026
CVE-2025-37878 perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init Tuesday August 11th, 2026
CVE-2025-37861 scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue Tuesday August 11th, 2026
CVE-2026-64654 GitHub CLI: Terminal escape sequence injection in multiple `gh` commands Tuesday August 11th, 2026
CVE-2026-20338 ClamAV ZIP File Format Processing Memory Corruption Vulnerability Tuesday August 11th, 2026
CVE-2026-68216 media: pwc: Return queued buffers on start_streaming() failure Tuesday August 11th, 2026
CVE-2026-20337 ClamAV ZIP File Format Processing Memory Corruption Vulnerability Tuesday August 11th, 2026
CVE-2026-20339 ClamAV PESpin File Format Processing Integer Overflow Vulnerability Tuesday August 11th, 2026
CVE-2026-20346 ClamAV PDF File Format Processing Memory Corruption Vulnerability Tuesday August 11th, 2026
CVE-2026-20347 ClamAV Mach-O File Format Processing Memory Corruption Vulnerability Tuesday August 11th, 2026
CVE-2026-68085 Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled Tuesday August 11th, 2026
CVE-2026-20345 ClamAV GPT File Format Processing Memory Corruption Vulnerability Tuesday August 11th, 2026
CVE-2026-68196 wifi: wilc1000: validate assoc response length before subtracting header Tuesday August 11th, 2026
CVE-2026-20348 ClamAV XAR File Format Processing Memory Corruption Vulnerability Tuesday August 11th, 2026
CVE-2026-72568 Redis - Heap Out-of-Bounds Read in Cluster Bus PING Message Handler Tuesday August 11th, 2026
CVE-2026-68370 usb: gadget: dummy_hcd: prevent fifo_req reuse during giveback Tuesday August 11th, 2026
CVE-2026-68359 hwmon: (nzxt-smart2) Stop device IO before calling hid_hw_stop Tuesday August 11th, 2026
CVE-2026-68271 drm/nouveau: fix reversed error cleanup order in ucopy functions Tuesday August 11th, 2026
CVE-2026-68209 media: sun4i-csi: Return queued buffers on start_streaming() failure Tuesday August 11th, 2026
CVE-2026-68373 wifi: at76c50x-usb: avoid length underflow in at76_guess_freq() Tuesday August 11th, 2026
CVE-2026-68324 iommu/intel: Fix out-of-bounds memset in dmar_latency_disable() Tuesday August 11th, 2026
CVE-2026-68322 rds: Fix inet6_addr_lst NULL dereference when IPv6 is disabled Tuesday August 11th, 2026
CVE-2026-68084 staging: vme_user: fix location monitor leak in tsi148 bridge Tuesday August 11th, 2026
CVE-2026-68360 hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop Tuesday August 11th, 2026
CVE-2026-68377 net/sched: act_tunnel_key: Defer dst_release to RCU callback Tuesday August 11th, 2026
CVE-2026-68124 mctp: serial: handle zero-length frames to prevent rx buffer overflow Tuesday August 11th, 2026
CVE-2026-68126 mac802154: hold an interface reference across the scan worker Tuesday August 11th, 2026
CVE-2026-68245 drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() Tuesday August 11th, 2026
CVE-2026-68416 mtd: fix double free and WARN_ON in add_mtd_device() error paths Tuesday August 11th, 2026
CVE-2026-68361 hwmon: (corsair-psu) Stop device IO before calling hid_hw_stop Tuesday August 11th, 2026
CVE-2026-68212 media: saa7134: Fix a possible memory leak in saa7134_video_init1 Tuesday August 11th, 2026
CVE-2026-68093 KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug Tuesday August 11th, 2026
CVE-2026-68401 firmware: arm_ffa: Fix out-of-bound writes in ffa_setup_and_transmit() Tuesday August 11th, 2026
CVE-2026-68326 wifi: mwifiex: bound uAP association event IEs to the event buffer Tuesday August 11th, 2026
CVE-2026-68117 tipc: clear sock->sk on the failed-insert path in tipc_sk_create() Tuesday August 11th, 2026
CVE-2026-68293 net/mlx5: Fix MCIA register buffer overflow on 32 dword reads Tuesday August 11th, 2026
CVE-2026-68106 drm/amdgpu: fix division by zero with invalid uvd dimensions Tuesday August 11th, 2026
CVE-2026-68349 wifi: carl9170: fix buffer overflow in rx_stream failover path Tuesday August 11th, 2026
CVE-2026-68103 drm/amdgpu: reject mapping a reserved doorbell to a new queue Tuesday August 11th, 2026
CVE-2026-68294 net: qrtr: restrict socket creation to the initial network namespace Tuesday August 11th, 2026
CVE-2026-68301 net: hsr: fix memory leak on slave unregistration by removing synced VLANs Tuesday August 11th, 2026
CVE-2026-68335 rds: drop incoming messages that cross network namespace boundaries Tuesday August 11th, 2026
CVE-2026-68160 ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() Tuesday August 11th, 2026
CVE-2026-68402 wifi: cfg80211: bound element ID read when checking non-inheritance Tuesday August 11th, 2026
CVE-2026-68329 iommu/amd: Wait for completion instead of returning early in iommu_completion_wait() Tuesday August 11th, 2026
CVE-2026-68367 usb: gadget: f_tcm: synchronize delayed set_alt with teardown Tuesday August 11th, 2026
CVE-2026-68368 usb: gadget: f_ncm: validate datagram bounds in ncm_unwrap_ntb() Tuesday August 11th, 2026
CVE-2026-68164 mm/damon/core: disallow overlapping input ranges for damon_set_regions() Tuesday August 11th, 2026
CVE-2026-68309 wifi: mt76: connac: fix possible NULL-pointer deref in mt76_connac_mcu_uni_bss_he_tlv() Tuesday August 11th, 2026
CVE-2026-68142 geneve: require CAP_NET_ADMIN in the device netns for changelink Tuesday August 11th, 2026
CVE-2026-68257 drm/amdkfd: fix 32-bit overflow in CWSR total size calculation Tuesday August 11th, 2026
CVE-2026-68279 drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply parsers Tuesday August 11th, 2026
CVE-2026-68336 bonding: fix devconf_all NULL dereference when IPv6 is disabled Tuesday August 11th, 2026
CVE-2026-68392 Bluetooth: mgmt: fix locking in unpair_device/disconnect_sync Tuesday August 11th, 2026
CVE-2026-68099 ksmbd: restore DACL size on check_add_overflow() to avoid malformed ACL Tuesday August 11th, 2026
CVE-2026-68426 xfrm: fix stale skb->prev after async crypto steals a GSO segment Tuesday August 11th, 2026
CVE-2026-68357 watchdog: pretimeout: Fix UAF in watchdog_unregister_governor() Tuesday August 11th, 2026
CVE-2026-68320 sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid Tuesday August 11th, 2026
CVE-2026-68223 media: meson: vdec: Fix memory leak in error path of vdec_open Tuesday August 11th, 2026
CVE-2026-68199 wifi: ath6kl: fix OOB access from firmware ADDBA window size Tuesday August 11th, 2026
CVE-2026-68404 wifi: cfg80211: use wiphy work for socket owner autodisconnect Tuesday August 11th, 2026
CVE-2026-68408 wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock Tuesday August 11th, 2026
CVE-2026-68088 usb: gadget: function: rndis: add length check to response query Tuesday August 11th, 2026
CVE-2026-68207 media: ti: vpe: unwind v4l2 device registration on probe error Tuesday August 11th, 2026
CVE-2026-68138 net/sched: serialize qdisc_rtab_list against concurrent get/put Tuesday August 11th, 2026
CVE-2026-68422 btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots() Tuesday August 11th, 2026
CVE-2026-68156 libceph: refresh auth->authorizer_buf{,_len} after authorizer update Tuesday August 11th, 2026
CVE-2026-68259 drm/amdkfd: Check bounds in allocate_event_notification_slot Tuesday August 11th, 2026
CVE-2026-68299 vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets Tuesday August 11th, 2026
CVE-2026-68231 media: airspy: Return queued buffers on start_streaming() failure Tuesday August 11th, 2026
CVE-2026-68205 media: v4l2-fwnode: Fix subdev owner overwritten in v4l2_async_register_subdev_sensor() Tuesday August 11th, 2026
CVE-2026-68131 rbd: Reset positive result codes to zero in object map update path Tuesday August 11th, 2026
CVE-2026-68159 libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE Tuesday August 11th, 2026
CVE-2026-68398 ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF Tuesday August 11th, 2026
CVE-2026-68215 media: radio-si476x: Unregister v4l2_device on probe failure Tuesday August 11th, 2026
CVE-2026-68280 drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS() Tuesday August 11th, 2026
CVE-2026-68413 wifi: ipw2100: fix potential memory leak in ipw2100_pci_init_one() Tuesday August 11th, 2026
CVE-2026-68222 media: msi2500: Return queued buffers on start_streaming() failure Tuesday August 11th, 2026
CVE-2026-68414 wifi: cfg80211: cancel sched scan results work on unregister Tuesday August 11th, 2026
CVE-2026-68277 drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply parsers Tuesday August 11th, 2026
CVE-2026-68389 Bluetooth: hci_qca: Clear memdump state on invalid dump size Tuesday August 11th, 2026
CVE-2026-68100 ksmbd: validate num_subauth when copying ACE in set_ntacl_dacl Tuesday August 11th, 2026
CVE-2026-68158 libceph: Fix multiplication overflow in decode_new_up_state_weight() Tuesday August 11th, 2026
CVE-2026-68278 drm/dp/mst: fix buffer overflows in sideband chunk accumulation Tuesday August 11th, 2026
CVE-2026-68220 media: nxp: imx8-isi: Add missing v4l2_subdev_cleanup() in crossbar and pipe Tuesday August 11th, 2026
CVE-2026-68234 drm/amdgpu: fix bo->pin leaking in amdgpu_bo_create_reserved Tuesday August 11th, 2026
CVE-2026-68125 mac802154: llsec: reject frames shorter than the authentication tag Tuesday August 11th, 2026
CVE-2026-68145 iomap: fix out-of-bounds bitmap_set() with zero-length range Tuesday August 11th, 2026
CVE-2026-68366 usb: gadget: uvc: clamp SEND_RESPONSE length to the response buffer Tuesday August 11th, 2026
CVE-2026-68176 tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev Tuesday August 11th, 2026
CVE-2026-68355 wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get() Tuesday August 11th, 2026
CVE-2026-68185 LoongArch: Move jump_label_init() before parse_early_param() Tuesday August 11th, 2026
CVE-2026-68297 tipc: fix u16 MTU truncation in media and bearer MTU validation Tuesday August 11th, 2026
CVE-2026-68395 ata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registered Tuesday August 11th, 2026
CVE-2026-68338 net/packet: avoid fanout hook re-registration after unregister Tuesday August 11th, 2026
CVE-2026-68130 ksmbd: defer destroy_previous_session() until after NTLM authentication Tuesday August 11th, 2026
CVE-2026-68350 wifi: carl9170: fix OOB read from off-by-two in TX status handler Tuesday August 11th, 2026
CVE-2026-72522 libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop because low surrogates are treated the same as high surrogates during Unicode processing in the *_toUtf16 functions. Tuesday August 11th, 2026
CVE-2026-68312 cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths Tuesday August 11th, 2026
CVE-2026-68306 wifi: mt76: mt7996: fix possible NULL-pointer deref in mt7996_mcu_sta_bfer_eht() Tuesday August 11th, 2026
CVE-2026-68397 net/iucv: take a reference on the socket found in afiucv_hs_rcv() Tuesday August 11th, 2026
CVE-2026-68148 fscrypt: Add missing superblock check in find_or_insert_direct_key() Tuesday August 11th, 2026
CVE-2026-68197 wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper Tuesday August 11th, 2026
CVE-2026-15534 Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in S_regmatch Tuesday August 11th, 2026
CVE-2026-68315 sctp: validate stream count in sctp_process_strreset_inreq() Tuesday August 11th, 2026
CVE-2026-68362 wifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_begin Tuesday August 11th, 2026
CVE-2026-68427 gpu: host1x: Fix use-after-free in host1x_bo_clear_cached_mappings Tuesday August 11th, 2026
CVE-2026-68286 drop_monitor: perform u64_stats updates under IRQ-disabled section Tuesday August 11th, 2026
CVE-2026-68352 wifi: ath6kl: fix OOB read from firmware IE lengths in connect event Tuesday August 11th, 2026
CVE-2026-68391 Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds Tuesday August 11th, 2026
CVE-2026-68351 wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read Tuesday August 11th, 2026
CVE-2026-68308 wifi: mt76: mt7996: check pointer returned by mt76_connac_get_he_phy_cap() Tuesday August 11th, 2026
CVE-2026-68187 exec: fix unsigned loop counter wrap in transfer_args_to_stack() Tuesday August 11th, 2026
CVE-2026-68353 wifi: ath6kl: fix OOB read from firmware num_msg in TX complete handler Tuesday August 11th, 2026
CVE-2026-68256 drm/amd/display: detect_link_and_local_sink: DP alt mode timeout path leaks prev_sink reference Tuesday August 11th, 2026
CVE-2026-68289 tipc: fix integer overflow in tipc_recvmsg() and tipc_recvstream() Tuesday August 11th, 2026
CVE-2026-68171 arm64: syscall: Ensure saved x0 is kept in-sync with tracer updates Tuesday August 11th, 2026
CVE-2026-68388 smb/client: handle overlapping allocated ranges in fallocate Tuesday August 11th, 2026
CVE-2026-65819 gopacket: Multiple layer decoders panic on crafted packets (out-of-bounds/underflow) enabling unauthenticated remote DoS via DecodingLayerParser Tuesday August 11th, 2026
CVE-2026-68363 wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request Tuesday August 11th, 2026
CVE-2026-71557 go-git: Malicious reference names may modify files outside the reference storage Tuesday August 11th, 2026
CVE-2026-68127 ila: reload IPv6 header after pskb_may_pull in checksum adjust Tuesday August 11th, 2026
CVE-2026-54332 GoPacket's sFlow ExtendedGatewayFlow decoder: unbounded attacker-controlled allocation (104-byte UDP datagram -> up to 16 GiB make) -> unauthenticated remote DoS Tuesday August 11th, 2026
CVE-2026-43871 Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TCompactProtocol varint byte-count limit Tuesday August 11th, 2026
CVE-2026-55969 Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: integer overflow in TProtocol::checkReadBytesAvailable() Tuesday August 11th, 2026
CVE-2026-61477 Libvirt: libvirt: newline injection in network xml dns txt/srv fields allows dnsmasq config directive injection Tuesday August 11th, 2026
CVE-2026-68235 drm/amd/display: dce100: skip non-DP stream encoders for DP MST Tuesday August 11th, 2026
CVE-2026-64539 Bluetooth: eir: Fix stack OOB write when prepending the Flags AD Tuesday August 11th, 2026
CVE-2026-68412 wifi: cfg80211: Fix an error handling path in cfg80211_wext_siwscan() Tuesday August 11th, 2026
CVE-2026-71497 jsoup: Cleaner may expose markup with custom raw-text elements Tuesday August 11th, 2026
CVE-2026-64655 GitHub CLI: Attestation Verification Bypass via Unescaped Regex Metacharacters in SAN Matching Tuesday August 11th, 2026
CVE-2026-64525 xfrm: move policy_bydst RCU sync from per-netns .exit to .pre_exit Tuesday August 11th, 2026
CVE-2026-68183 firmware: stratix10-svc: fix memory leaks and list corruption bugs Tuesday August 11th, 2026
CVE-2026-64652 GitHub CLI: Partial token disclosure in `gh auth status` output Tuesday August 11th, 2026
CVE-2026-68186 binfmt_misc: set have_execfd only once the interpreter is opened Tuesday August 11th, 2026
CVE-2026-64653 GitHub CLI: Unescaped variable components in request URLs could allow path traversal Tuesday August 11th, 2026
CVE-2026-68258 drm/amdkfd: Check bounds on CRIU restore queue type and mqd size Tuesday August 11th, 2026
CVE-2026-64513 KVM: x86: Unconditionally recompute CR8 intercept on PPR update Tuesday August 11th, 2026
CVE-2021-34474 Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability Monday August 10th, 2026
CVE-2021-36946 Microsoft Dynamics Business Central Cross-site Scripting Vulnerability Monday August 10th, 2026
CVE-2024-38225 Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability Monday August 10th, 2026
CVE-2021-40440 Microsoft Dynamics Business Central Cross-site Scripting Vulnerability Monday August 10th, 2026
CVE-2024-21380 Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability Monday August 10th, 2026
CVE-2025-29821 Microsoft Dynamics Business Central Information Disclosure Vulnerability Monday August 10th, 2026
CVE-2026-50357 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability Monday August 10th, 2026
CVE-2026-40417 Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability Monday August 10th, 2026
CVE-2026-56145 Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service Monday August 10th, 2026
CVE-2026-64189 netfilter: ipset: fix race between dump and ip_set_list resize Monday August 10th, 2026
CVE-2026-64206 Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock Monday August 10th, 2026
CVE-2026-64190 net: team: fix NULL pointer dereference in team_xmit during mode change Monday August 10th, 2026
CVE-2026-64205 i2c: i801: fix hardware state machine corruption in error path Monday August 10th, 2026
CVE-2026-64192 bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized Monday August 10th, 2026
CVE-2026-26199 Buffer underflow in `H5Iget_name `/`H5G_get_name` if size is zero Monday August 10th, 2026
CVE-2026-26197 Array full size, element count, and element size are not checked to make sure they match in H5Odtype.c Monday August 10th, 2026
CVE-2026-38752 A stack overflow in the evaluate() function (editors/awk.c) of BusyBox commit 371fe9 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AWK script. Monday August 10th, 2026
CVE-2026-38753 A use-after-free in the awk_sub() function (editors/awk.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AWK script. Monday August 10th, 2026
CVE-2026-64082 riscv: Fix register corruption from uninitialized cregs on error Monday August 10th, 2026
CVE-2026-63974 Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close Monday August 10th, 2026
CVE-2026-63999 ethtool: rss: fix indir_table and hkey leak on get_rxfh failure Monday August 10th, 2026
CVE-2026-64584 usb: gadget: f_midi: cancel pending IN work before freeing the midi object Sunday August 9th, 2026
CVE-2026-64583 usb: gadget: udc: bdc: free IRQ and drain func_wake_notify before teardown Sunday August 9th, 2026
CVE-2026-64604 KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode Sunday August 9th, 2026
CVE-2026-64590 dma-buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST warning Sunday August 9th, 2026
CVE-2026-64569 mpls: fix NULL deref in mpls_valid_fib_dump_req() on CONFIG_INET=n Sunday August 9th, 2026
CVE-2026-64572 ipv4: fib: free fib_alias with kfree_rcu() on insert error path Sunday August 9th, 2026
CVE-2026-64580 xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() Sunday August 9th, 2026
CVE-2026-64579 xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert Sunday August 9th, 2026
CVE-2026-64571 wifi: p54: validate RX frame length in p54_rx_eeprom_readback() Sunday August 9th, 2026
CVE-2026-64578 ksmbd: validate compound request size before reading StructureSize2 Sunday August 9th, 2026
CVE-2026-64565 Input: ims-pcu - fix heap-buffer-overflow in ims_pcu_process_data() Sunday August 9th, 2026
CVE-2026-64564 sctp: don't free the ASCONF's own transport in DEL-IP processing Sunday August 9th, 2026
CVE-2026-64561 KVM: x86: Check for invalid/obsolete root *after* making MMU pages available Sunday August 9th, 2026
CVE-2026-64560 posix-cpu-timers: Prevent UAF caused by non-leader exec() race Sunday August 9th, 2026
CVE-2026-15788 WCOW cache mount source selector resolves NTFS junctions outside of cache root Sunday August 9th, 2026
CVE-2026-26081 HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEW_TOKEN format. HAProxy Enterprise and ALOHA are also affected. Sunday August 9th, 2026
CVE-2026-26080 HAProxy Community Edition 3.2.x through 3.3.x before 3.3.3 can enter a loop or crash because varint is mishandled. HAProxy Enterprise and ALOHA are also affected. Sunday August 9th, 2026
CVE-2026-15588 Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering Sunday August 9th, 2026
CVE-2026-62994 CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin Sunday August 9th, 2026
CVE-2026-63136 Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service Sunday August 9th, 2026
CVE-2026-63263 Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service Sunday August 9th, 2026
CVE-2026-63140 Reachable Assertion in Elasticsearch Leading to Denial of Service Sunday August 9th, 2026
CVE-2026-71227 Libkcapi: infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout return Sunday August 9th, 2026
CVE-2026-71226 Libkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio path Sunday August 9th, 2026
CVE-2026-71225 Libkcapi: iv reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries Sunday August 9th, 2026
CVE-2026-68081 KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state Sunday August 9th, 2026
CVE-2026-34502 Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client Sunday August 9th, 2026
CVE-2026-34501 Apache Portable Runtime Utility: Heap buffer overflow in APR redis client Sunday August 9th, 2026
CVE-2026-34191 Apache Portable Runtime Utility: SQL Injection in apr_dbd_oracle Sunday August 9th, 2026
CVE-2025-49506 Apache Portable Runtime Utility: apr_password_validate() vulnerable to timing attack Sunday August 9th, 2026
CVE-2026-47243 Kata guest escape: runtime-rs guest-root to host-root escape via virtiofs Sunday August 9th, 2026
CVE-2026-64676 Kata Containers: Unauthorized mem-agent ttRPC methods let an untrusted host tamper with confidential-guest memory Sunday August 9th, 2026
CVE-2026-50540 Kata Containers: Config Path Annotation Arbitrary File Loading Sunday August 9th, 2026
CVE-2026-44943 remote limited file-write as root via discovery in open-iscsi Saturday August 8th, 2026
CVE-2026-32597 PyJWT accepts unknown `crit` header extensions (RFC 7515 §4.1.11 MUST violation) Saturday August 8th, 2026
CVE-2026-48524 PyJWT: PyJWKClient unbounded JWKS endpoint requests via attacker-controlled kid values (DoS) Saturday August 8th, 2026
CVE-2025-62725 Docker Compose Vulnerable to Path Traversal via OCI Artifact Layer Annotations Saturday August 8th, 2026
CVE-2026-44508 Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-43618. Reason: This candidate is a duplicate of CVE-2026-43618. Notes: All CVE users should reference CVE-2026-43618 instead of this candidate. Saturday August 8th, 2026
CVE-2026-44510 Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-43620. Reason: This candidate is a duplicate of CVE-2026-43620. Notes: All CVE users should reference CVE-2026-43620 instead of this candidate. Saturday August 8th, 2026
CVE-2026-44509 Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-43619. Reason: This candidate is a duplicate of CVE-2026-43619. Notes: All CVE users should reference CVE-2026-43619 instead of this candidate. Saturday August 8th, 2026
CVE-2026-12080 Qemu-kvm: qemu-guest-agent: local privilege escalation via symlink attack in guest-ssh-add-authorized-keys Saturday August 8th, 2026
CVE-2019-9192 In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion Friday August 7th, 2026
CVE-2019-9924 rbash in Bash before 4.4-beta2 did not prevent the shell user from modifying BASH_CMDS, thus allowing the user to execute any command with the permissions of the shell. Friday August 7th, 2026
CVE-2010-4052 Stack consumption vulnerability in the regcomp implementation in the GNU C Library (aka glibc or libc6) through 2.11.3, and 2.12.x through 2.12.2, allows context-dependent attackers to cause a denial of service (resource exhaustion) via a regular expression containing adjacent repetition operators, as demonstrated by a {10,}{10,}{10,}{10,} sequence in the proftpd.gnu.c exploit for ProFTPD. Friday August 7th, 2026
CVE-2019-6706 Lua 5.3.5 has a use-after-free in lua_upvaluejoin in lapi.c. For example a crash outcome might be achieved by an attacker who is able to trigger a debug.upvaluejoin call in which the arguments have certain relationships. Friday August 7th, 2026
CVE-2018-6829 cipher/elgamal.c in Libgcrypt through 1.8.2, when used to encrypt messages directly, improperly encodes plaintexts, which allows attackers to obtain sensitive information by reading ciphertext data (i.e., it does not have semantic security in face of a ciphertext-only attack). The Decisional Diffie-Hellman (DDH) assumption does not hold for Libgcrypt's ElGamal implementation. Friday August 7th, 2026
CVE-2018-1128 It was found that cephx authentication protocol did not verify ceph clients correctly and was vulnerable to replay attack. Any attacker having access to ceph cluster network who is able to sniff packets on network can use this vulnerability to authenticate with ceph service and perform actions allowed by ceph service. Ceph branches master, mimic, luminous and jewel are believed to be vulnerable. Friday August 7th, 2026
CVE-2018-5407 Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'. Friday August 7th, 2026
CVE-2016-2568 pkexec, when used with --user nonpriv, allows local users to escape to the parent session Friday August 7th, 2026
CVE-2007-3205 The parse_str function in (1) PHP, (2) Hardened-PHP, and (3) Suhosin, when called without a second parameter, might allow remote attackers to overwrite arbitrary variables by specifying variable names and values in the string to be parsed. NOTE: it is not clear whether this is a design limitation of the function or a bug in PHP, although it is likely to be regarded as a bug in Hardened-PHP and Suhosin. Friday August 7th, 2026
CVE-2026-63508 Microsoft Planetary Computer Pro Elevation of Privilege Vulnerability Thursday August 6th, 2026
CVE-2026-62873 Microsoft 365 Admin Center Elevation of Privilege Vulnerability Thursday August 6th, 2026
CVE-2026-68823 Azure Confidential Ledger Remote Code Execution Vulnerability Thursday August 6th, 2026
CVE-2026-49163 Application Insights Profiler Elevation of Privilege Vulnerability Thursday August 6th, 2026
CVE-2026-59115 Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability Thursday August 6th, 2026
CVE-2026-50516 Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability Thursday August 6th, 2026
CVE-2026-65668 Microsoft Purview eDiscovery Elevation of Privilege Vulnerability Thursday August 6th, 2026
CVE-2026-62836 Azure SQL Managed Instance Elevation of Privilege Vulnerability Thursday August 6th, 2026
CVE-2026-56197 Windows Admin Center (WAC) Remote Code Execution Vulnerability Thursday July 30th, 2026
CVE-2026-50697 Windows Common Log File System Driver Elevation of Privilege Vulnerability Monday July 27th, 2026
CVE-2026-16461 Rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbdump() short-mode version-list formatting Monday July 27th, 2026
CVE-2026-8450 HTTP::Daemon versions before 6.17 for Perl allow OS command injection via send_file() Monday July 27th, 2026
CVE-2026-16277 Rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbaddrlist() Monday July 27th, 2026
CVE-2026-64530 net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle Monday July 27th, 2026
CVE-2026-56163 Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability Thursday July 23rd, 2026
CVE-2026-56160 Azure Red Hat OpenShift (ARO) Elevation of Privilege Vulnerability Thursday July 23rd, 2026
CVE-2026-35425 Azure API Management (APIM) Remote Code Execution Vulnerability Thursday July 23rd, 2026
CVE-2026-58630 Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability Thursday July 23rd, 2026
CVE-2026-54171 Excon: redact additional sensitive/risky headers when following redirects Thursday July 23rd, 2026
CVE-2026-44508 Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-43618. Reason: This candidate is a duplicate of CVE-2026-43618. Notes: All CVE users should reference CVE-2026-43618 instead of this candidate. Thursday July 23rd, 2026
CVE-2026-44510 Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-43620. Reason: This candidate is a duplicate of CVE-2026-43620. Notes: All CVE users should reference CVE-2026-43620 instead of this candidate. Thursday July 23rd, 2026
CVE-2026-44509 Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-43619. Reason: This candidate is a duplicate of CVE-2026-43619. Notes: All CVE users should reference CVE-2026-43619 instead of this candidate. Thursday July 23rd, 2026
CVE-2026-16277 Rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbaddrlist() Thursday July 23rd, 2026
CVE-2026-12080 Qemu-kvm: qemu-guest-agent: local privilege escalation via symlink attack in guest-ssh-add-authorized-keys Thursday July 23rd, 2026
CVE-2026-15788 WCOW cache mount source selector resolves NTFS junctions outside of cache root Thursday July 23rd, 2026
CVE-2026-26081 HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEW_TOKEN format. HAProxy Enterprise and ALOHA are also affected. Thursday July 23rd, 2026
CVE-2026-26080 HAProxy Community Edition 3.2.x through 3.3.x before 3.3.3 can enter a loop or crash because varint is mishandled. HAProxy Enterprise and ALOHA are also affected. Thursday July 23rd, 2026
CVE-2026-15588 Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering Thursday July 23rd, 2026
CVE-2026-50243 'response-ip'/'rpz' can rewrite BOGUS answers instead of returning SERVFAIL Thursday July 23rd, 2026
CVE-2026-41637 Degradation of resolution service from improperly accounted client-terminated DNS-over-QUIC queries Thursday July 23rd, 2026
CVE-2026-50252 Possible cache poisoning attack by mapping source port population per thread Thursday July 23rd, 2026
CVE-2026-50251 Attacker supplied '0.0.0.0'/'::' glue triggers defensive full-cache flush Thursday July 23rd, 2026
CVE-2026-55991 Remote DNS-over-QUIC (DoQ) flow-control assertion failure in libngtcp2 Thursday July 23rd, 2026
CVE-2026-50046 Possible heap use-after-free in an error path when a DoT forwarded query is jostled out Thursday July 23rd, 2026
CVE-2026-14586 Assertion in libngtcp2 when under pressure in high concurrency DNS-over-QUIC environments Thursday July 23rd, 2026
CVE-2026-42955 Extra fix for CVE-2026-40622 to also clamp the TTL of A/AAAA records disallowing a one-time 'ghost domain' delegation renewal via glue records Thursday July 23rd, 2026
CVE-2026-46582 A wildcard replay, as another piece of data, triggers poisoning in the serve expired reply path Thursday July 23rd, 2026
CVE-2026-56444 Degradation of resolution service when 'discard-timeout' and 'serve-expired-client-timeout' are combined in unusual configuration Thursday July 23rd, 2026
CVE-2026-32665 Remote DNS-over-QUIC denial of service due to `quic-size` budget bypass Thursday July 23rd, 2026
CVE-2026-55717 'serve-expired-client-timeout' and 'response-ip' CNAME redirect could lead to a crash Thursday July 23rd, 2026
CVE-2026-44621 Libunbound applications configured with 'unwanted-reply-threshold' could eventually be abruptly terminated Thursday July 23rd, 2026
CVE-2026-56416 Possible heap buffer overflow when validator canonicalizes RDATA that contains domain name Thursday July 23rd, 2026
CVE-2026-55708 Privacy/configuration issue when adding local data in views through 'unbound-control' Thursday July 23rd, 2026
CVE-2026-44690 Cross-zone wildcard cache poisoning via RRSIG.labels manipulation Thursday July 23rd, 2026
CVE-2026-50248 BOGUS configured primary hostname accepted for XFR in auth/rpz zones Thursday July 23rd, 2026
CVE-2026-44687 Off-by-one error in 'harden-below-nxdomain' logic can shadow a stub/forward zone by a legitimate parent's NXDOMAIN Thursday July 23rd, 2026
CVE-2026-62994 CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin Thursday July 23rd, 2026
CVE-2026-63136 Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service Thursday July 23rd, 2026
CVE-2026-63263 Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service Thursday July 23rd, 2026
CVE-2026-63140 Reachable Assertion in Elasticsearch Leading to Denial of Service Thursday July 23rd, 2026
CVE-2026-56145 Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service Thursday July 23rd, 2026
CVE-2026-38752 A stack overflow in the evaluate() function (editors/awk.c) of BusyBox commit 371fe9 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AWK script. Thursday July 23rd, 2026
CVE-2026-38753 A use-after-free in the awk_sub() function (editors/awk.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AWK script. Thursday July 23rd, 2026
CVE-2026-50458 Microsoft Brokering File System Elevation of Privilege Vulnerability Wednesday July 22nd, 2026
CVE-2026-50466 Microsoft Brokering File System Elevation of Privilege Vulnerability Wednesday July 22nd, 2026
CVE-2026-50407 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability Wednesday July 22nd, 2026
CVE-2026-50441 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability Wednesday July 22nd, 2026
CVE-2026-59886 pyasn1: Uncontrolled resource consumption when converting decoded REAL values Wednesday July 22nd, 2026
CVE-2026-59884 pyasn1 BER/CER/DER decoder denial of service via unbounded long-form tag IDs Wednesday July 22nd, 2026
CVE-2026-59885 pyasn1: Quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of service Wednesday July 22nd, 2026
CVE-2026-57215 RabbitMQ: Direct-reply-to binding persistence can lead to unauthorized reply-channel injection and persistent phantom Wednesday July 22nd, 2026
CVE-2026-57216 RabbitMQ: AMQP 1.0, AMQP 0-9-1, Stream Protocol loopback enforcement can lead to remote guest sessions due to listener-address loopback checks Wednesday July 22nd, 2026
CVE-2026-57213 RabbitMQ: Stored XSS federation management plugin via unsanitized consumer_tag rendering Wednesday July 22nd, 2026
CVE-2026-57217 RabbitMQ: Topic authorization can lead to cross-tenant routing-key bypass Wednesday July 22nd, 2026
CVE-2026-57220 RabbitMQ: Stream listener does not enforce configured frame-size limit during authentication, permitting unauth'd mem-exhaust DoS Wednesday July 22nd, 2026
CVE-2026-57219 RabbitMQ: Unauthenticated disclosure of OAuth client credentials via an HTTP API endpoint with certain less common OAuth 2 configurations Wednesday July 22nd, 2026
CVE-2026-15028 Libarchive: heap overflow oob read while parsing a tar archive contains a pax extended header Wednesday July 22nd, 2026
CVE-2026-64188 net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink() Wednesday July 22nd, 2026
CVE-2026-64189 netfilter: ipset: fix race between dump and ip_set_list resize Wednesday July 22nd, 2026
CVE-2026-64206 Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock Wednesday July 22nd, 2026
CVE-2026-64190 net: team: fix NULL pointer dereference in team_xmit during mode change Wednesday July 22nd, 2026
CVE-2026-64205 i2c: i801: fix hardware state machine corruption in error path Wednesday July 22nd, 2026
CVE-2026-64192 bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized Wednesday July 22nd, 2026
CVE-2026-26199 Buffer underflow in `H5Iget_name `/`H5G_get_name` if size is zero Wednesday July 22nd, 2026
CVE-2026-26197 Array full size, element count, and element size are not checked to make sure they match in H5Odtype.c Wednesday July 22nd, 2026
CVE-2026-50462 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Tuesday July 21st, 2026
CVE-2026-3842 Qemu-kvm: hyperv/syndbg: missing mapped-length guard after cpu_physical_memory_map causes host oob write Tuesday July 21st, 2026
CVE-2026-38755 A heap overflow in the evalcommand() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input. Tuesday July 21st, 2026
CVE-2026-38754 A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input. Tuesday July 21st, 2026
CVE-2026-62299 CoreDNS: rewrite-plugin EDNS0 response-revert nil-pointer panic (remote DoS) when a downstream plugin returns a response with no OPT record Tuesday July 21st, 2026
CVE-2026-60081 DBI::ProfileData versions before 1.651 for Perl do not limit the path index Tuesday July 21st, 2026
CVE-2026-15392 DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location Tuesday July 21st, 2026
CVE-2026-60082 DBI versions before 1.651 for Perl do not enforce statement handle consistency with the row Tuesday July 21st, 2026
CVE-2026-15043 DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted <= and >= SQL operators on text Tuesday July 21st, 2026
CVE-2026-57433 Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK record Tuesday July 21st, 2026
CVE-2026-48863 Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service Tuesday July 21st, 2026
CVE-2026-63828 apparmor: mediate the implicit connect of TCP fast open sendmsg Tuesday July 21st, 2026
CVE-2026-42769 Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate Tuesday July 21st, 2026
CVE-2026-38752 A stack overflow in the evaluate() function (editors/awk.c) of BusyBox commit 371fe9 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AWK script. Tuesday July 21st, 2026
CVE-2026-38753 A use-after-free in the awk_sub() function (editors/awk.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AWK script. Tuesday July 21st, 2026
CVE-2026-64082 riscv: Fix register corruption from uninitialized cregs on error Tuesday July 21st, 2026
CVE-2026-63974 Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close Tuesday July 21st, 2026
CVE-2026-63999 ethtool: rss: fix indir_table and hkey leak on get_rxfh failure Tuesday July 21st, 2026
CVE-2026-63979 net/handshake: hand off the pinned file reference to accept_doit Tuesday July 21st, 2026
CVE-2026-64060 netfs: Fix leak of request in netfs_write_begin() error handling Tuesday July 21st, 2026
CVE-2026-63963 usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers Tuesday July 21st, 2026
CVE-2026-63961 usb: typec: altmodes/displayport: validate count before reading Status Update VDO Tuesday July 21st, 2026
CVE-2026-63881 drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger Tuesday July 21st, 2026
CVE-2026-63960 usb: typec: wcove: don't write past struct pd_message in wcove_read_rx_buffer() Tuesday July 21st, 2026
CVE-2026-63964 usb: typec: ucsi: ccg: reject firmware images without a ':' record header Tuesday July 21st, 2026
CVE-2026-64078 netfilter: x_tables: add and use xtables_unregister_table_exit Tuesday July 21st, 2026
CVE-2026-64097 drm/amd/display: Validate GPIO pin LUT table size before iterating Tuesday July 21st, 2026
CVE-2026-64117 wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb Tuesday July 21st, 2026
CVE-2026-63958 usb: typec: ucsi: validate connector number in ucsi_connector_change() Tuesday July 21st, 2026
CVE-2026-63962 usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() Tuesday July 21st, 2026
CVE-2026-63959 usb: typec: tcpm/tcpci_maxim: validate header NDO against RX_BYTE_CNT Tuesday July 21st, 2026
CVE-2026-64138 ksmbd: validate SID in parent security descriptor during ACL inheritance Tuesday July 21st, 2026
CVE-2026-64160 netfs: Fix potential for tearing in ->remote_i_size and ->zero_point Tuesday July 21st, 2026
CVE-2024-35248 Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability Monday July 20th, 2026
CVE-2026-50647 Active Directory Federation Server Denial of Service Vulnerability Monday July 20th, 2026
CVE-2026-50411 Windows Active Directory Federation Services Denial of Service Vulnerability Monday July 20th, 2026
CVE-2026-50355 Windows Active Directory Federation Services Denial of Service Vulnerability Monday July 20th, 2026
CVE-2026-50324 Windows Active Directory Federation Services Denial of Service Vulnerability Monday July 20th, 2026
CVE-2026-50368 Windows Active Directory Federation Services Denial of Service Vulnerability Monday July 20th, 2026
CVE-2026-50304 Windows Active Directory Federation Services Denial of Service Vulnerability Monday July 20th, 2026
CVE-2026-45784 rust-openssl: Potential out-of-bounds write in `CipherCtxRef::cipher_update_inplace` for AES-KW-PAD ciphers Monday July 20th, 2026
CVE-2026-53382 media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si Monday July 20th, 2026
CVE-2026-63828 apparmor: mediate the implicit connect of TCP fast open sendmsg Monday July 20th, 2026
CVE-2026-53385 vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write Monday July 20th, 2026
CVE-2026-63812 f2fs: fix incorrect FI_NO_EXTENT handling in __destroy_extent_node() Monday July 20th, 2026
CVE-2026-63798 irqchip/imgpdc: Fix resource leak, add missing chained handler cleanup on remove Monday July 20th, 2026
CVE-2026-63794 KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path Monday July 20th, 2026
CVE-2026-53391 NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr Monday July 20th, 2026
CVE-2026-53384 serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails Monday July 20th, 2026
CVE-2026-63807 KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level Monday July 20th, 2026
CVE-2026-63829 net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink Monday July 20th, 2026
CVE-2026-63858 netfilter: nf_tables: add hook transactions for device deletions Monday July 20th, 2026
CVE-2026-63871 Bluetooth: ISO: Fix data-race on iso_pi fields in hci_get_route calls Monday July 20th, 2026
CVE-2026-53368 f2fs: fix fsck inconsistency caused by incorrect nat_entry flag usage Monday July 20th, 2026
CVE-2026-63806 KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned() Monday July 20th, 2026
CVE-2026-53403 fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var Monday July 20th, 2026
CVE-2026-63811 f2fs: read COW data with the original inode during atomic write Monday July 20th, 2026
CVE-2026-53402 fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font() Monday July 20th, 2026
CVE-2026-63825 gcov: use atomic counter updates to fix concurrent access crashes Monday July 20th, 2026
CVE-2026-62299 CoreDNS: rewrite-plugin EDNS0 response-revert nil-pointer panic (remote DoS) when a downstream plugin returns a response with no OPT record Saturday July 18th, 2026
CVE-2026-62309 CoreDNS: proxyproto plugin panics on PPv2 datagram with non-UDP transport — single 28-byte packet remote DoS Saturday July 18th, 2026
CVE-2026-59886 pyasn1: Uncontrolled resource consumption when converting decoded REAL values Friday July 17th, 2026
CVE-2026-59884 pyasn1 BER/CER/DER decoder denial of service via unbounded long-form tag IDs Friday July 17th, 2026
CVE-2026-59885 pyasn1: Quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of service Friday July 17th, 2026
CVE-2026-60081 DBI::ProfileData versions before 1.651 for Perl do not limit the path index Friday July 17th, 2026
CVE-2026-15392 DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location Friday July 17th, 2026
CVE-2026-60082 DBI versions before 1.651 for Perl do not enforce statement handle consistency with the row Friday July 17th, 2026
CVE-2026-15043 DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted <= and >= SQL operators on text Friday July 17th, 2026
CVE-2026-57433 Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK record Friday July 17th, 2026
CVE-2026-15709 Soupwebsocketextensiondeflate: libsoup: libsoup: websocket permessage-deflate unbounded decompression remote denial of service Friday July 17th, 2026
CVE-2026-15712 Soupclientmessageiohttp2: libsoup3: libsoup: http/2 goaway frame parsing heap buffer over-read via invalid nul-termination assumption Friday July 17th, 2026
CVE-2026-15714 Libsoup: soupmultipartinputstream: libsoup: out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary string Friday July 17th, 2026
CVE-2026-15713 Libsoup: soupcache: libsoup: http/2 frame window exhaustion remote denial of service via memory leak Friday July 17th, 2026
CVE-2026-15711 Libsoup: soupwebsocketconnection: libsoup: websocket remote denial of service via oversized control frame protocol violation Friday July 17th, 2026
CVE-2026-48863 Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service Friday July 17th, 2026
CVE-2026-56171 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability Thursday July 16th, 2026
CVE-2026-50368 Windows Active Directory Federation Services Denial of Service Vulnerability Thursday July 16th, 2026
CVE-2026-50411 Windows Active Directory Federation Services Denial of Service Vulnerability Thursday July 16th, 2026
CVE-2026-50355 Windows Active Directory Federation Services Denial of Service Vulnerability Thursday July 16th, 2026
CVE-2026-50324 Windows Active Directory Federation Services Denial of Service Vulnerability Thursday July 16th, 2026
CVE-2026-50647 Active Directory Federation Server Denial of Service Vulnerability Thursday July 16th, 2026
CVE-2026-50304 Windows Active Directory Federation Services Denial of Service Vulnerability Thursday July 16th, 2026
CVE-2026-59831 GitHub CLI `gh codespace jupyter` could allow remote code execution when connecting to a malicious Codespace Thursday July 16th, 2026
CVE-2026-45637 Microsoft DWM Core Library Elevation of Privilege Vulnerability Wednesday July 15th, 2026
CVE-2026-50375 DirectX Graphics Kernel Elevation of Privilege Vulnerability Wednesday July 15th, 2026
CVE-2026-58209 NATS Server: MQTT retained and QoS replay bypass subscribe deny filters Wednesday July 15th, 2026
CVE-2026-58250 NATS Server: Pre-auth server crash via double INFO in leafnode handshake Wednesday July 15th, 2026
CVE-2026-58208 NATS Server: MQTT-over-WebSocket Path Can Crash WebSocket-Only JetStream Servers Before MQTT Is Enabled Wednesday July 15th, 2026
CVE-2026-58207 NATS Server: Remote crash via integer overflow in Connz pagination Wednesday July 15th, 2026
CVE-2026-43966 HTTP Response Splitting via Non-VCHAR Bytes in cow_http_struct_hd:escape_string/2 Wednesday July 15th, 2026
CVE-2026-44839 RabbitMQ: Unsanitized vhost names allow for XSS in management UI Wednesday July 15th, 2026
CVE-2025-44904 hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5VM_memcpyvv function. Wednesday July 15th, 2026
CVE-2026-15308 Incremental HTMLParser feed() allows CPU-exhaustion DoS via repeated unterminated markup declarations Wednesday July 15th, 2026
CVE-2026-57215 RabbitMQ: Direct-reply-to binding persistence can lead to unauthorized reply-channel injection and persistent phantom Wednesday July 15th, 2026
CVE-2026-57216 RabbitMQ: AMQP 1.0, AMQP 0-9-1, Stream Protocol loopback enforcement can lead to remote guest sessions due to listener-address loopback checks Wednesday July 15th, 2026
CVE-2026-57213 RabbitMQ: Stored XSS federation management plugin via unsanitized consumer_tag rendering Wednesday July 15th, 2026
CVE-2026-57217 RabbitMQ: Topic authorization can lead to cross-tenant routing-key bypass Wednesday July 15th, 2026
CVE-2026-57220 RabbitMQ: Stream listener does not enforce configured frame-size limit during authentication, permitting unauth'd mem-exhaust DoS Wednesday July 15th, 2026
CVE-2026-57219 RabbitMQ: Unauthenticated disclosure of OAuth client credentials via an HTTP API endpoint with certain less common OAuth 2 configurations Wednesday July 15th, 2026
CVE-2026-59831 GitHub CLI `gh codespace jupyter` could allow remote code execution when connecting to a malicious Codespace Wednesday July 15th, 2026
CVE-2026-15028 Libarchive: heap overflow oob read while parsing a tar archive contains a pax extended header Wednesday July 15th, 2026
CVE-2026-59875 node-tar: Uncaught Exception DoS via NUL byte in PAX path/linkpath records Wednesday July 15th, 2026
CVE-2026-13221 Perl versions through 5.43.9 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perl_study_chunk Wednesday July 15th, 2026
CVE-2026-57432 Perl versions through 5.43.10 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack Wednesday July 15th, 2026
CVE-2026-54115 Windows Message Queuing (MSMQ) Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-54121 Active Directory Certificate Services Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-50655 Microsoft Windows Media Foundation Remote Code Execution Vulnerability Tuesday July 14th, 2026
CVE-2026-50647 Active Directory Federation Server Denial of Service Vulnerability Tuesday July 14th, 2026
CVE-2026-50657 Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability Tuesday July 14th, 2026
CVE-2026-50658 Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-50667 Windows Common Log File System Driver Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-50668 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-54126 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability Tuesday July 14th, 2026
CVE-2026-55010 Minecraft Bedrock Dedicated Server Remote Code Execution Vulnerability Tuesday July 14th, 2026
CVE-2026-50444 Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-50447 Windows Message Queuing Service (MSMQ) Remote Code Execution Vulnerability Tuesday July 14th, 2026
CVE-2026-50362 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability Tuesday July 14th, 2026
CVE-2026-50411 Windows Active Directory Federation Services Denial of Service Vulnerability Tuesday July 14th, 2026
CVE-2026-50453 Windows USB Audio Class Driver Information Disclosure Vulnerability Tuesday July 14th, 2026
CVE-2026-50458 Microsoft Brokering File System Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-50476 Windows Network Connections Service Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-50450 Windows Network Connections Service Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-50431 Windows Quality of Service (QoS) Packet Scheduler Information Disclosure Vulnerability Tuesday July 14th, 2026
CVE-2026-50462 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-50441 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-50439 Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability Tuesday July 14th, 2026
CVE-2026-50432 Window Virtual Filtering Platform (VFP) Denial of Service Vulnerability Tuesday July 14th, 2026
CVE-2026-50470 Windows Network Policy Server SNMP Information Disclosure Vulnerability Tuesday July 14th, 2026
CVE-2026-50497 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability Tuesday July 14th, 2026
CVE-2026-50498 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-50505 Windows Message Queuing Service (MSMQ) Remote Code Execution Vulnerability Tuesday July 14th, 2026
CVE-2026-50491 Code Integrity DLL (ci.dll) Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-50492 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability Tuesday July 14th, 2026
CVE-2026-50501 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability Tuesday July 14th, 2026
CVE-2026-50496 Windows Network Policy Server SNMP Information Disclosure Vulnerability Tuesday July 14th, 2026
CVE-2026-50504 Windows Remote Desktop Client Information Disclosure Vulnerability Tuesday July 14th, 2026
CVE-2026-50509 Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-50483 Windows Graphics Component Information Disclosure Vulnerability Tuesday July 14th, 2026
CVE-2026-50480 Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-50502 Windows Event Logging Service Remote Code Execution Vulnerability Tuesday July 14th, 2026
CVE-2026-50455 Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability Tuesday July 14th, 2026
CVE-2026-57968 Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-57088 Extensible Storage Engine (ESENT) Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-57093 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-57096 Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-57973 Windows Subsystem for Linux (WSL2) Kernel Tampering Vulnerability Tuesday July 14th, 2026
CVE-2026-57092 Microsoft Windows VMSwitch Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-57982 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability Tuesday July 14th, 2026
CVE-2026-58528 Windows USB Audio Class Driver Information Disclosure Vulnerability Tuesday July 14th, 2026
CVE-2026-58530 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability Tuesday July 14th, 2026
CVE-2026-58538 Windows Bluetooth Service Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-57087 Microsoft Windows Media Foundation Remote Code Execution Vulnerability Tuesday July 14th, 2026
CVE-2026-58535 Windows Remote Desktop Client Information Disclosure Vulnerability Tuesday July 14th, 2026
CVE-2026-56649 Windows Network File System Remote Code Execution Vulnerability Tuesday July 14th, 2026
CVE-2026-56647 Windows Remote Access Service Infrastructure Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-57083 Windows Media Photo Codec Information Disclosure Vulnerability Tuesday July 14th, 2026
CVE-2026-57089 Windows SMB Server Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability Tuesday July 14th, 2026
CVE-2026-56650 Windows Network File System Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-57090 Microsoft Windows Media Foundation Remote Code Execution Vulnerability Tuesday July 14th, 2026
CVE-2026-57094 Microsoft Windows Media Foundation Remote Code Execution Vulnerability Tuesday July 14th, 2026
CVE-2026-57091 Windows File History Service Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-58533 Windows Remote Desktop Client Information Disclosure Vulnerability Tuesday July 14th, 2026
CVE-2026-58546 Windows Remote Desktop Client Information Disclosure Vulnerability Tuesday July 14th, 2026
CVE-2026-56178 Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-58637 Windows Client-Side Caching Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-58628 Windows Wireless Network Manager Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-58632 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-58619 Windows Sensor Data Service Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-56181 Windows Network Address Translation (NAT) Spoofing Vulnerability Tuesday July 14th, 2026
CVE-2026-58529 Windows Active Directory Federation Services (ADFS) Information Disclosure Vulnerability Tuesday July 14th, 2026
CVE-2026-58626 Windows Remote Desktop Services Remote Code Execution Vulnerability Tuesday July 14th, 2026
CVE-2026-58539 Windows Remote Desktop Client Information Disclosure Vulnerability Tuesday July 14th, 2026
CVE-2026-58547 Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-58537 Microsoft NAT Helper Components (ipnathlp.dll) Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-58534 Windows Input Method Editor (IME) Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-58536 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-58613 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-58544 Windows Management Services Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-58543 Universal Print Management Service Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-58541 Microsoft DWM Core Library Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-56642 Microsoft Fabric Data Warehouse Remote Code Execution Vulnerability Tuesday July 14th, 2026
CVE-2026-56197 Windows Admin Center (WAC) Remote Code Execution Vulnerability Tuesday July 14th, 2026
CVE-2026-55051 Microsoft SharePoint Server Information Disclosure Vulnerability Tuesday July 14th, 2026
CVE-2026-55040 Microsoft SharePoint Server Security Feature Bypass Vulnerability Tuesday July 14th, 2026
CVE-2026-56196 Windows Admin Center (WAC) Remote Code Execution Vulnerability Tuesday July 14th, 2026
CVE-2026-56183 Windows MIDI Service Module Elevation of Privileges Vulnerability Tuesday July 14th, 2026
CVE-2026-56187 Windows MIDI Service Module Elevation of Privileges Vulnerability Tuesday July 14th, 2026
CVE-2026-50359 Microsoft XML Core Services Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-56188 Windows Server Network driver Remote Code Execution Vulnerability Tuesday July 14th, 2026
CVE-2026-56189 Microsoft Windows Media Foundation Remote Code Execution Vulnerability Tuesday July 14th, 2026
CVE-2026-41109 GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability Tuesday July 14th, 2026
CVE-2026-55944 Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability Tuesday July 14th, 2026
CVE-2026-50466 Microsoft Brokering File System Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-50451 Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-57976 Windows Active Directory Domain Services Denial of Service Vulnerability Tuesday July 14th, 2026
CVE-2026-57979 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability Tuesday July 14th, 2026
CVE-2026-55014 Windows Remote Help Defense Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-58601 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability Tuesday July 14th, 2026
CVE-2026-58602 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-58609 Windows Graphics Component Remote Code Execution Vulnerability Tuesday July 14th, 2026
CVE-2026-58610 Microsoft Windows Media Foundation Remote Code Execution Vulnerability Tuesday July 14th, 2026
CVE-2026-55144 Windows Cryptography API: Next Generation (CNG) Tampering Vulnerability Tuesday July 14th, 2026
CVE-2026-56155 Active Directory Federation Services Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-56164 Microsoft SharePoint Server Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-50694 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Tuesday July 14th, 2026
CVE-2026-58631 Windows Admin Center (WAC) Remote Code Execution Vulnerability Tuesday July 14th, 2026
CVE-2026-45646 OData for ASP.NET and ASP.NET Core Denial of Service Vulnerability Tuesday July 14th, 2026
CVE-2026-49178 Windows Active Directory Domain Services Remote Code Execution Vulnerability Tuesday July 14th, 2026
CVE-2026-49180 Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability Tuesday July 14th, 2026
CVE-2026-47632 Azure Monitor Agent Metrics Extension Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-49790 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-49791 Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-49792 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability Tuesday July 14th, 2026
CVE-2026-44800 Windows Push Notifications Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-34348 Windows Event Logging Service Information Disclosure Vulnerability Tuesday July 14th, 2026
CVE-2026-40378 Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability Tuesday July 14th, 2026
CVE-2026-49794 Windows USB Audio Class Driver Information Disclosure Vulnerability Tuesday July 14th, 2026
CVE-2026-49170 Windows StateRepository API Server file Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-49165 Microsoft Windows App Store Information Disclosure Vulnerability Tuesday July 14th, 2026
CVE-2026-49784 Microsoft Windows App Store Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-50506 OData for ASP.NET and ASP.NET Core Denial of Service Vulnerability Tuesday July 14th, 2026
CVE-2026-47282 GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability Tuesday July 14th, 2026
CVE-2026-49166 Windows Print Configuration Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-49164 Windows Active Directory Domain Services Remote Code Execution Vulnerability Tuesday July 14th, 2026
CVE-2026-54983 Windows Active Directory Federation Services Denial of Service Vulnerability Tuesday July 14th, 2026
CVE-2026-42900 Microsoft Windows App Store Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-42982 Windows Secure Kernel Mode Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-34346 Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability Tuesday July 14th, 2026
CVE-2026-49162 Microsoft Brokering File System Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-48572 Windows App Package Installer Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-48571 Windows App Package Installer Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-50663 Game: Age of Empires II: Definitive Edition Remote Code Execution Vulnerability Tuesday July 14th, 2026
CVE-2026-50695 Windows Active Directory Federation Services Denial of Service Vulnerability Tuesday July 14th, 2026
CVE-2026-54995 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability Tuesday July 14th, 2026
CVE-2026-55003 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability Tuesday July 14th, 2026
CVE-2026-54109 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability Tuesday July 14th, 2026
CVE-2026-55006 Microsoft Exchange Server Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-55009 Microsoft Exchange Server Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-54982 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability Tuesday July 14th, 2026
CVE-2026-54992 Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability Tuesday July 14th, 2026
CVE-2026-54111 Universal Print Management Service Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-54989 Quality Windows Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-50696 Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability Tuesday July 14th, 2026
CVE-2026-50697 Windows Common Log File System Driver Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-55004 Windows Print Configuration Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-54993 Microsoft Windows Media Foundation Remote Code Execution Vulnerability Tuesday July 14th, 2026
CVE-2026-55001 Active Directory Domain Services Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-49793 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability Tuesday July 14th, 2026
CVE-2026-50366 Windows Active Directory Domain Services Denial of Service Vulnerability Tuesday July 14th, 2026
CVE-2026-50355 Windows Active Directory Federation Services Denial of Service Vulnerability Tuesday July 14th, 2026
CVE-2026-50428 Windows Container Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability Tuesday July 14th, 2026
CVE-2026-50371 Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-50317 Windows Operating Systems Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-50430 Windows Push Notification Information Disclosure Vulnerability Tuesday July 14th, 2026
CVE-2026-50310 Windows Human Interface Device Information Disclosure Vulnerability Tuesday July 14th, 2026
CVE-2026-50324 Windows Active Directory Federation Services Denial of Service Vulnerability Tuesday July 14th, 2026
CVE-2026-50312 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-50330 Windows Remote Desktop Client Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-50357 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-50361 Microsoft Brokering File System Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-50335 Windows Operating Systems Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-50434 Windows Push Notification Information Disclosure Vulnerability Tuesday July 14th, 2026
CVE-2026-50369 Windows Remote Desktop Services Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-50469 Windows Projected File System Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-50454 Windows User Interface Core Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-50352 Windows Cryptographic Services Information Disclosure Vulnerability Tuesday July 14th, 2026
CVE-2026-50421 Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-50374 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-50401 Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability Tuesday July 14th, 2026
CVE-2026-50367 Windows Sensor Data Service Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-50445 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability Tuesday July 14th, 2026
CVE-2026-50376 Windows Remote Desktop Client Information Disclosure Vulnerability Tuesday July 14th, 2026
CVE-2026-50405 Windows Filtering Platform Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-50334 Windows Push Notification Information Disclosure Vulnerability Tuesday July 14th, 2026
CVE-2026-50339 Windows Push Notification Information Disclosure Vulnerability Tuesday July 14th, 2026
CVE-2026-50365 Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-50315 Windows Image Acquisition Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-50351 Windows Audio Compression Manager (ACM) Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-50381 Composite Image File System driver (cimfs.sys) Information Disclosure Vulnerability Tuesday July 14th, 2026
CVE-2026-50350 Windows Trusted Runtime Interface Driver Information Disclosure Vulnerability Tuesday July 14th, 2026
CVE-2026-50356 Microsoft Windows App Store Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-50293 Windows Internal Task Bar Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-50342 Windows MIDI Service Module Elevation of Privileges Vulnerability Tuesday July 14th, 2026
CVE-2026-50318 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-50299 Windows Storage Spaces Direct Remote Code Execution Vulnerability Tuesday July 14th, 2026
CVE-2026-49800 Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-49799 Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability Tuesday July 14th, 2026
CVE-2026-49803 Windows AppX Deployment Extensions Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-50326 Windows Unified Consent System Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-50302 Windows Cryptographic Services Security Feature Bypass Vulnerability Tuesday July 14th, 2026
CVE-2026-50407 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-50331 Windows Application Model Core API Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-50343 Microsoft Install Service Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-50396 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-50368 Windows Active Directory Federation Services Denial of Service Vulnerability Tuesday July 14th, 2026
CVE-2026-50304 Windows Active Directory Federation Services Denial of Service Vulnerability Tuesday July 14th, 2026
CVE-2026-50400 Windows App Package Installer Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-50372 Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-50305 Microsoft Brokering File System Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-50329 Microsoft DWM Core Library Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-50363 Windows Push Notifications Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-50392 Windows Secure Kernel Mode Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-50425 Windows Internal System User Profile Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-50393 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability Tuesday July 14th, 2026
CVE-2026-12480 Arbitrary HDF5 File Read via Virtual Dataset Bypass in keras-team/keras Tuesday July 14th, 2026
CVE-2022-4543 A flaw named "EntryBleed" was found in the Linux Kernel Page Table Isolation (KPTI). This issue could allow a local attacker to leak KASLR base via prefetch side-channels based on TLB timing for Intel systems. Monday July 13th, 2026
CVE-2026-59874 node-tar: Negative tar entry size causes infinite loop in archive replace Sunday July 12th, 2026
CVE-2026-15308 Incremental HTMLParser feed() allows CPU-exhaustion DoS via repeated unterminated markup declarations Sunday July 12th, 2026
Chromium: CVE-2026-14382 Insufficient validation of untrusted input in ANGLE Saturday July 11th, 2026
Chromium: CVE-2026-13995 Insufficient validation of untrusted input in Autofill Saturday July 11th, 2026
Chromium: CVE-2026-13994 Inappropriate implementation in Credential Management Saturday July 11th, 2026
Chromium: CVE-2026-13955 Insufficient validation of untrusted input in CustomTabs Saturday July 11th, 2026
Chromium: CVE-2026-13939 Insufficient validation of untrusted input in WebShare Saturday July 11th, 2026
Chromium: CVE-2026-13929 Insufficient validation of untrusted input in DevTools Saturday July 11th, 2026
Chromium: CVE-2026-13926 Insufficient validation of untrusted input in Network Saturday July 11th, 2026
Chromium: CVE-2026-13924 Insufficient validation of untrusted input in WebView Saturday July 11th, 2026
Chromium: CVE-2026-13872 Insufficient validation of untrusted input in WebAppInstalls Saturday July 11th, 2026
Chromium: CVE-2026-13866 Insufficient validation of untrusted input in Input Saturday July 11th, 2026
Chromium: CVE-2026-13863 Insufficient validation of untrusted input in CustomTabs Saturday July 11th, 2026
Chromium: CVE-2026-13856 Insufficient validation of untrusted input in Speech Saturday July 11th, 2026
Chromium: CVE-2026-13852 Insufficient validation of untrusted input in WebAppInstalls Saturday July 11th, 2026
Chromium: CVE-2026-13851 Insufficient validation of untrusted input in WebAppInstalls Saturday July 11th, 2026
Chromium: CVE-2026-13816 Insufficient validation of untrusted input in File Input Saturday July 11th, 2026
Chromium: CVE-2026-14137 Insufficient validation of untrusted input in Chrome for iOS Saturday July 11th, 2026
Chromium: CVE-2026-14066 Insufficient validation of untrusted input in Chrome for iOS Saturday July 11th, 2026
Chromium: CVE-2026-13991 Insufficient validation of untrusted input in Chrome for iOS Saturday July 11th, 2026
Chromium: CVE-2026-13917 Insufficient validation of untrusted input in Chrome for iOS Saturday July 11th, 2026
Chromium: CVE-2026-13908 Insufficient validation of untrusted input in Omnibox Saturday July 11th, 2026
Chromium: CVE-2026-13889 Insufficient validation of untrusted input in WebAuthentication Saturday July 11th, 2026
Chromium: CVE-2026-13850 Insufficient validation of untrusted input in Chrome for iOS Saturday July 11th, 2026
Chromium: CVE-2026-13847 Insufficient validation of untrusted input in Chrome for iOS Saturday July 11th, 2026
Chromium: CVE-2026-13843 Insufficient validation of untrusted input in Chrome for iOS Saturday July 11th, 2026
Chromium: CVE-2026-13813 Insufficient validation of untrusted input in Chrome for iOS Saturday July 11th, 2026
Chromium: CVE-2026-13812 Insufficient validation of untrusted input in Chrome for iOS Saturday July 11th, 2026
Chromium: CVE-2026-13777 Insufficient validation of untrusted input in iOSWeb Saturday July 11th, 2026
Chromium: CVE-2026-13791 Insufficient validation of untrusted input in Downloads Saturday July 11th, 2026
Chromium: CVE-2026-14401 Insufficient validation of untrusted input in ANGLE Saturday July 11th, 2026
Chromium: CVE-2026-14412 Insufficient validation of untrusted input in ANGLE Saturday July 11th, 2026
Chromium: CVE-2026-14411 Insufficient validation of untrusted input in ANGLE Saturday July 11th, 2026
CVE-2026-58281 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Saturday July 11th, 2026
CVE-2026-54908 Pion DTLS: Denial of service via panic while parsing a crafted ECDHE_PSK ServerKeyExchange message Saturday July 11th, 2026
CVE-2026-54886 SSH SFTP server denial of service via extended channel data infinite loop Saturday July 11th, 2026
CVE-2026-45570 go-git: Improper single-quote escaping in go-git SSH transport Saturday July 11th, 2026
CVE-2026-45571 go-git: Crafted repositories may modify main and submodule .git directories Saturday July 11th, 2026
CVE-2024-7598 Network restriction bypass via race condition during namespace termination Saturday July 11th, 2026
CVE-2026-56000 xorg-x11-server / xwayland GLX contextTags Use-After-Free in CommonMakeCurrent() Saturday July 11th, 2026
CVE-2026-58209 NATS Server: MQTT retained and QoS replay bypass subscribe deny filters Saturday July 11th, 2026
CVE-2026-58250 NATS Server: Pre-auth server crash via double INFO in leafnode handshake Saturday July 11th, 2026
CVE-2026-58208 NATS Server: MQTT-over-WebSocket Path Can Crash WebSocket-Only JetStream Servers Before MQTT Is Enabled Saturday July 11th, 2026
CVE-2026-58207 NATS Server: Remote crash via integer overflow in Connz pagination Saturday July 11th, 2026
CVE-2026-59869 js-yaml: YAML merge-key chains can force quadratic CPU consumption Saturday July 11th, 2026
CVE-2026-59890 setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) on macOS APFS/HFS+ Saturday July 11th, 2026
CVE-2026-59930 Mistune toc / TableOfContents directive: heading IDs use predictable `toc_N` numbering with no slugification, allowing collision with attacker-controlled `id="toc_N"` content Saturday July 11th, 2026
CVE-2026-59922 Mistune plugins/formatting: quadratic-time parsing on long runs of `~~x~~`, `==x==`, and `^^x^^` markers (strikethrough / mark / insert) Saturday July 11th, 2026
CVE-2026-59925 inline_parser: quadratic-time parsing on long runs of `**x**` and `***x***` emphasis pairs Saturday July 11th, 2026
CVE-2026-59926 Mistune: XSS via unescaped class option in Admonition directive Saturday July 11th, 2026
CVE-2026-59928 Mistune block_parser: quadratic-time parsing on long lists of repeated reference-link definitions Saturday July 11th, 2026
CVE-2026-14740 DBI versions before 1.650 for Perl read one byte out-of-bounds in preparse when deleting an initial SQL comment Saturday July 11th, 2026
CVE-2026-14380 DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile Saturday July 11th, 2026
CVE-2026-14739 DBI versions before 1.650 for Perl have a heap overflow when preparsing SQL statements with an extreme number of placeholders Saturday July 11th, 2026
CVE-2026-59998 sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if the server is in Windows Active Directory. Saturday July 11th, 2026
CVE-2026-20243 ClamAV ALZ Archive Processing Denial of Service Vulnerability Saturday July 11th, 2026
CVE-2026-20217 ClamAV PESpin File Format Processing Out-of-Bounds Memory Corruption Vulnerability Saturday July 11th, 2026
CVE-2026-20216 ClamAV InstallShield File Format Processing Resource Exhaustion Vulnerability Saturday July 11th, 2026
CVE-2026-20215 ClamAV 7Zip File Format Processing Out-of-Bounds Memory Corruption Vulnerability Saturday July 11th, 2026
CVE-2026-20214 ClamAV FSG File Format Processing Out-of-Bounds Memory Corruption Vulnerability Saturday July 11th, 2026
CVE-2026-20213 ClamAV PE File Format Processing Out-of-Bounds Memory Corruption Vulnerability Saturday July 11th, 2026
CVE-2026-59818 etcd: gRPC client listener does not enforce `--client-crl-file` certificate revocation Friday July 10th, 2026
CVE-2026-54891 Plaintext APPLICATION_DATA injected during TLS handshake delivered to client application post-handshake in ssl Thursday July 9th, 2026
CVE-2026-55952 TLS 1.3 server denial of service via malformed ClientHello pre-shared key extension Thursday July 9th, 2026
CVE-2026-53359 KVM: x86: Fix shadow paging use-after-free due to unexpected role Thursday July 9th, 2026
CVE-2026-14355 ext/openssl: Memory corruption in openssl_encrypt with AES-WRAP-PAD Thursday July 9th, 2026
CVE-2026-46252 regulator: core: fix locking in regulator_resolve_supply() error path Thursday July 9th, 2026
CVE-2026-53332 slimbus: qcom-ngd-ctrl: Register callbacks after creating the ngd Thursday July 9th, 2026
CVE-2026-53345 KVM: Don't WARN if memory is dirtied without a vCPU when the VM is dying Thursday July 9th, 2026
CVE-2026-23278 netfilter: nf_tables: always walk all pending catchall elements Thursday July 9th, 2026
CVE-2026-58055 nghttp2 nghttpx - HTTP Request/Response Smuggling via Upgrade Request with Content-Length Thursday July 9th, 2026
CVE-2025-61727 Improper application of excluded DNS name constraints when verifying wildcard names in crypto/x509 Thursday July 9th, 2026
CVE-2026-47241 Net::IMAP: Denial of Service via incomplete raw argument validation Thursday July 9th, 2026
CVE-2025-58188 Panic when validating certificates with DSA public keys in crypto/x509 Thursday July 9th, 2026
CVE-2025-61724 Excessive CPU consumption in Reader.ReadResponse in net/textproto Thursday July 9th, 2026
CVE-2026-46140 Bluetooth: btmtk: validate WMT event SKB length before struct access Thursday July 9th, 2026
CVE-2026-46331 net/sched: fix pedit partial COW leading to page cache corruption Thursday July 9th, 2026
CVE-2026-54908 Pion DTLS: Denial of service via panic while parsing a crafted ECDHE_PSK ServerKeyExchange message Thursday July 9th, 2026
CVE-2026-38969 ruby webrick through v1.9.2 WEBrick reparses trailer Content-Length into canonical request state, enabling request smuggling. Thursday July 9th, 2026
CVE-2026-38968 ntopng through 6.6 is vulnerable to Predictable Session Identifier which can lead to Session Hijacking. HTTP session identifiers in src/HTTPserver.cpp use weak time-seeded pseudo-randomness during session creation. As a result, fresh authenticated logins can receive deterministic or colliding session cookies under attacker-controlled timing. Thursday July 9th, 2026
CVE-2026-14191 WinRAR / UnRAR RAR5 recovery-volume (.rev) out-of-bounds heap write in RecVolumes5::ReadHeader Thursday July 9th, 2026
CVE-2026-53269 netfilter: synproxy: add mutex to guard hook reference counting Thursday July 9th, 2026
CVE-2026-56000 xorg-x11-server / xwayland GLX contextTags Use-After-Free in CommonMakeCurrent() Thursday July 9th, 2026
CVE-2026-56001 libXfont2 BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow Thursday July 9th, 2026
CVE-2026-60002 ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the client side.) Thursday July 9th, 2026
CVE-2026-59999 In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not. Thursday July 9th, 2026
CVE-2026-60000 sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive authentication attempts) because MaxAuthTries was mishandled for GSSAPIAuthentication. Thursday July 9th, 2026
CVE-2026-60001 sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay. Thursday July 9th, 2026
CVE-2026-59995 sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when "sftp server:/path ." is used with an attacker-controlled server. Thursday July 9th, 2026
CVE-2026-59996 scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when the copy occurs between two remote destinations. Thursday July 9th, 2026
CVE-2026-59997 internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important if a later command-line argument would have helped to ensure the intended security properties of an SFTP connection. Thursday July 9th, 2026
CVE-2026-58525 Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability Wednesday July 8th, 2026
CVE-2026-45638 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Tuesday July 7th, 2026
CVE-2026-39827 Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh Tuesday July 7th, 2026
CVE-2026-25681 Invoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html Tuesday July 7th, 2026
CVE-2026-14647 onnx onnxruntime old.cc convPoolShapeInference_opset19 out-of-bounds Tuesday July 7th, 2026
CVE-2026-12480 Arbitrary HDF5 File Read via Virtual Dataset Bypass in keras-team/keras Tuesday July 7th, 2026
CVE-2026-54891 Plaintext APPLICATION_DATA injected during TLS handshake delivered to client application post-handshake in ssl Tuesday July 7th, 2026
CVE-2026-54886 SSH SFTP server denial of service via extended channel data infinite loop Tuesday July 7th, 2026
CVE-2026-55952 TLS 1.3 server denial of service via malformed ClientHello pre-shared key extension Tuesday July 7th, 2026
Chromium: CVE-2026-14131 Insufficient validation of untrusted input in WebAppInstalls Friday July 3rd, 2026
Chromium: CVE-2026-13797 Insufficient validation of untrusted input in Chromecast Friday July 3rd, 2026
Chromium: CVE-2026-14116 Insufficient validation of untrusted input in DevTools Friday July 3rd, 2026
Chromium: CVE-2026-13794 Insufficient validation of untrusted input in WebAppInstalls Friday July 3rd, 2026
Chromium: CVE-2026-13865 Insufficient validation of untrusted input in Enterprise Friday July 3rd, 2026
Chromium: CVE-2026-14122 Insufficient validation of untrusted input in WebAppInstalls Friday July 3rd, 2026
Chromium: CVE-2026-13942 Insufficient validation of untrusted input in Video Capture Friday July 3rd, 2026
Chromium: CVE-2026-14065 Insufficient validation of untrusted input in PageInfo Friday July 3rd, 2026
Chromium: CVE-2026-14059 Insufficient policy enforcement in Related-Website-Sets Friday July 3rd, 2026
Chromium: CVE-2026-14117 Insufficient validation of untrusted input in DevTools Friday July 3rd, 2026
Chromium: CVE-2026-14060 Insufficient validation of untrusted input in Chromoting Friday July 3rd, 2026
Chromium: CVE-2026-13849 Insufficient validation of untrusted input in Chromoting Friday July 3rd, 2026
Chromium: CVE-2026-13961 Insufficient validation of untrusted input in DevTools Friday July 3rd, 2026
Chromium: CVE-2026-14055 Insufficient validation of untrusted input in Device Trust Friday July 3rd, 2026
Chromium: CVE-2026-13928 Insufficient validation of untrusted input in Enterprise Friday July 3rd, 2026
Chromium: CVE-2026-13921 Insufficient validation of untrusted input in DeviceBoundSessionCredentials Friday July 3rd, 2026
Chromium: CVE-2026-13990 Insufficient validation of untrusted input in DataTransfer Friday July 3rd, 2026
Chromium: CVE-2026-14104 Insufficient validation of untrusted input in WebAppInstalls Friday July 3rd, 2026
Chromium: CVE-2026-13900 Insufficient validation of untrusted input in Chromecast Friday July 3rd, 2026
Chromium: CVE-2026-13829 Insufficient validation of untrusted input in Settings Friday July 3rd, 2026
Chromium: CVE-2026-13824 Insufficient validation of untrusted input in Extensions Friday July 3rd, 2026
Chromium: CVE-2026-14038 Insufficient validation of untrusted input in New Tab Page Friday July 3rd, 2026
Chromium: CVE-2026-14089 Insufficient validation of untrusted input in PopupBlocker Friday July 3rd, 2026
Chromium: CVE-2026-13968 Insufficient validation of untrusted input in DevTools Friday July 3rd, 2026
Chromium: CVE-2026-13891 Insufficient validation of untrusted input in Extensions Friday July 3rd, 2026
Chromium: CVE-2026-14084 Insufficient validation of untrusted input in Chromoting Friday July 3rd, 2026
Chromium: CVE-2026-13806 Insufficient validation of untrusted input in Accessibility Friday July 3rd, 2026
Chromium: CVE-2026-14080 Insufficient validation of untrusted input in TabSwitcher Friday July 3rd, 2026
Chromium: CVE-2026-14023 Insufficient validation of untrusted input in SanitizerAPI Friday July 3rd, 2026
CVE-2026-58276 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Friday July 3rd, 2026
CVE-2026-57986 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Friday July 3rd, 2026
CVE-2026-57981 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Friday July 3rd, 2026
Chromium: CVE-2026-14021 Insufficient validation of untrusted input in StorageAccessAPI Friday July 3rd, 2026
CVE-2026-57984 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Friday July 3rd, 2026
CVE-2026-57983 Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability Friday July 3rd, 2026
CVE-2026-57975 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Friday July 3rd, 2026
CVE-2026-56645 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Friday July 3rd, 2026
CVE-2026-57974 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Friday July 3rd, 2026
CVE-2026-57985 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Friday July 3rd, 2026
CVE-2026-58291 Microsoft Edge (Chromium-based) Information Disclosure Vulnerability Friday July 3rd, 2026
CVE-2026-55945 Microsoft Edge (Chromium-based) Information Disclosure Vulnerability Friday July 3rd, 2026
CVE-2026-58523 Microsoft Edge for Android Security Feature Bypass Vulnerability Friday July 3rd, 2026
CVE-2026-58288 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Friday July 3rd, 2026
CVE-2026-57988 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Friday July 3rd, 2026
CVE-2026-58295 Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability Friday July 3rd, 2026
CVE-2026-58294 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Friday July 3rd, 2026
CVE-2026-58293 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Friday July 3rd, 2026
CVE-2026-58292 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Friday July 3rd, 2026
CVE-2026-58290 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Friday July 3rd, 2026
CVE-2026-58289 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Friday July 3rd, 2026
CVE-2026-57992 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Friday July 3rd, 2026
CVE-2026-58285 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Friday July 3rd, 2026
CVE-2026-58284 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Friday July 3rd, 2026
CVE-2026-58287 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Friday July 3rd, 2026
CVE-2026-57918 libnfs through 6.0.2 before 935b8db has an xid integer underflow in READ_IOVEC in rpc_read_from_socket in lib/socket.c during a connection to a crafted NFS server, when the expected pdu size exceeds the absolute pdu size from the xid/record-marker. Friday July 3rd, 2026
CVE-2026-57231 Podman: Malformed Image can trick podman run into leaking host environment variables into the container Friday July 3rd, 2026
CVE-2026-13322 Kubevirt: virt-handler-rhel9: kubevirt: unbounded virtio-serial readline in virt-handler causes oom denial of service Friday July 3rd, 2026
CVE-2026-58055 nghttp2 nghttpx - HTTP Request/Response Smuggling via Upgrade Request with Content-Length Friday July 3rd, 2026
CVE-2026-58051 libssh2 - Free of Uninitialized Pointer in publickey List Cleanup Friday July 3rd, 2026
CVE-2026-58050 libssh2 - Integer Overflow in publickey Subsystem Attribute Allocation Friday July 3rd, 2026
CVE-2026-53303 f2fs: protect extension_list reading with sb_lock in f2fs_sbi_show() Friday July 3rd, 2026
CVE-2026-53309 ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison Friday July 3rd, 2026
CVE-2026-53320 nilfs2: reject zero bd_oblocknr in nilfs_ioctl_mark_blocks_dirty() Friday July 3rd, 2026
CVE-2026-0864 Configuration Injection via Carriage Return (\r) in write() method Friday July 3rd, 2026
CVE-2026-3195 Qemu-kvm: virtio-snd: heap buffer overflow in virtio_snd_pcm_in_cb (incomplete fix for cve-2024-7730) Friday July 3rd, 2026
CVE-2026-56412 libexpat before 2.8.2 does not consider XML_TOK_DATA_CHARS in doCdataSection and thus lacks handler call depth tracking for various calls from within handlers in cases of a policy violation. Thus, a use-after-free can occur. NOTE: this issue exists because of an incomplete fix for CVE-2026-50219. Friday July 3rd, 2026
CVE-2026-56405 libexpat before 2.8.2 has an integer overflow in getAttributeId. Friday July 3rd, 2026
CVE-2026-56407 libexpat before 2.8.2 has an integer overflow in doProlog that is related to storeEntityValue and entity textLen. Friday July 3rd, 2026
CVE-2026-56406 libexpat before 2.8.2 has an integer overflow in XML_ParseBuffer because it lacked a check that was present in XML_Parse. Friday July 3rd, 2026
CVE-2026-56132 In libexpat before 2.8.2, there is a heap-based buffer overflow in doProlog in xmlparse.c because scaffold backing array reallocation is mishandled when there is data-structure sharing across parsers. Friday July 3rd, 2026
CVE-2026-56131 libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_ResumeParser from within handlers in cases of a policy violation. Thus, a use-after-free can occur (similar to the CVE-2026-50219 situation). Friday July 3rd, 2026
CVE-2026-53046 ksmbd: fix use-after-free from async crypto on Qualcomm crypto engine Friday July 3rd, 2026
CVE-2026-57585 MessagePack: Out-of-bounds read/crash on Unpacker reuse after caught error Friday July 3rd, 2026
CVE-2026-13757 P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing Friday July 3rd, 2026
CVE-2026-53098 wifi: mt76: mt7915: fix use-after-free bugs in mt7915_mac_dump_work() Friday July 3rd, 2026
CVE-2026-12912 Libtiff: libtiff: heap-based buffer overflow via crafted pixarlog-compressed tiff image Friday July 3rd, 2026
CVE-2026-14164 Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack() Friday July 3rd, 2026
CVE-2026-53052 ASoC: qcom: qdsp6: topology: check widget type before accessing data Friday July 3rd, 2026
CVE-2026-14258 Dhcpcd: dhcpcd infinite loop and out-of-bounds read via zero-length ipv6 nd option in router advertisement handling Friday July 3rd, 2026
CVE-2026-55200 libssh2 - Out-of-Bounds Write via Unchecked packet_length in transport.c Friday July 3rd, 2026
CVE-2026-52944 ksmbd: fix FSCTL permission bypass by adding a permission check for FSCTL_SET_SPARSE Friday July 3rd, 2026
CVE-2026-53357 Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() Friday July 3rd, 2026
CVE-2026-56149 Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service Friday July 3rd, 2026
CVE-2026-49090 Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service Friday July 3rd, 2026
CVE-2026-53097 wifi: mt76: mt7996: fix use-after-free bugs in mt7996_mac_dump_work() Friday July 3rd, 2026
CVE-2026-50521 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Thursday July 2nd, 2026
CVE-2026-54998 Microsoft Exchange Online Elevation of Privilege Vulnerability Thursday July 2nd, 2026
CVE-2026-57100 Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability Thursday July 2nd, 2026
CVE-2026-57062 CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to be 12 bytes but 4 bytes is accepted. NOTE: this is related to CVE-2026-34182. Wednesday July 1st, 2026
CVE-2026-13595 Util-linux: util-linux: heap use-after-free in libblkid nested partition probing Wednesday July 1st, 2026
CVE-2026-11625 Bytes::Random::Secure versions through 0.29 for Perl share internal state across forked processes Wednesday July 1st, 2026
CVE-2026-58050 libssh2 - Integer Overflow in publickey Subsystem Attribute Allocation Wednesday July 1st, 2026
CVE-2026-58051 libssh2 - Free of Uninitialized Pointer in publickey List Cleanup Wednesday July 1st, 2026
CVE-2026-6412 Continued acceptance of SHA-1/MD5 digests in certificate processing Wednesday July 1st, 2026
CVE-2026-6092 Encrypt-then-MAC could fall back to MAC-then-Encrypt when HAVE_ENCRYPT_THEN_MAC is configured Wednesday July 1st, 2026
CVE-2026-11310 X.509 trust-chain bypass in wolfSSL_X509_verify_cert() via untrusted intermediate anchoring Wednesday July 1st, 2026
CVE-2026-10097 ML-KEM-1024 x64 AVX2 incomplete cipher text comparison enables IND-CCA2 break and static private-key recovery Wednesday July 1st, 2026
CVE-2026-10098 OCSP CertID serial-number length-confusion in wolfSSL_OCSP_resp_find_status Wednesday July 1st, 2026
CVE-2026-8720 HMAC-BLAKE2 final discards message when key length exceeds block size Wednesday July 1st, 2026
CVE-2026-12340 Out-of-bounds heap read in SM2/SM3 certificate Subject Key Identifier computation Wednesday July 1st, 2026
CVE-2026-10512 X25519 x86_64 assembly final reduction leaves non-canonical field element Wednesday July 1st, 2026
CVE-2026-6091 Partial-chain verification accepts untrusted intermediate as trust anchor Wednesday July 1st, 2026
CVE-2026-6325 Out-of-bounds write in SetSuitesHashSigAlgo on oversized signature algorithms list Wednesday July 1st, 2026
CVE-2026-55958 Renesas TSIP TLS 1.3 transcript buffer out-of-bounds write in tsip_StoreMessage Wednesday July 1st, 2026
CVE-2026-6731 X.509 name constraint bypass via Subject CN treated as a DNS name Wednesday July 1st, 2026
CVE-2026-7511 PKCS7_verify signer confusion allows forged signatures to be accepted Wednesday July 1st, 2026
CVE-2026-6330 ML-KEM ARM64 NEON ciphertext comparison only compares half of the input Wednesday July 1st, 2026
CVE-2026-6094 Heap buffer overread in wc_PKCS7_DecodeEnvelopedData parsing crafted PKCS7 EnvelopedData Wednesday July 1st, 2026
CVE-2026-6678 Integer underflow in wc_PKCS7_DecryptOri handling crafted Other Recipient Info Wednesday July 1st, 2026
CVE-2026-55961 wolfSSL_PKCS7_verify() reports success for degenerate (certs-only) PKCS#7 with no signer Wednesday July 1st, 2026
CVE-2026-6329 PKCS#12 MAC verification uses attacker-controlled comparison length Wednesday July 1st, 2026
CVE-2026-11999 X.509 trust-chain bypass via path-depth exhaustion in wolfSSL_X509_verify_cert() Wednesday July 1st, 2026
CVE-2026-55962 TLS 1.3 post-handshake authentication: server accepts Finished without client Certificate/CertificateVerify Wednesday July 1st, 2026
CVE-2026-55967 AES-GCM streaming APIs do not reject >64 GiB cumulative single messages, enabling counter wrap and keystream reuse Wednesday July 1st, 2026
CVE-2026-11703 Missing SNI/ALPN binding on stateful (session-ID) TLS session resumption Wednesday July 1st, 2026
CVE-2026-55964 Chain intermediate CA:TRUE without keyCertSign accepted as a signing CA (temporary CA exemption) Wednesday July 1st, 2026
CVE-2026-55960 Un-negotiated Raw Public Key (RFC 7250) accepted in place of X.509, bypassing chain validation Wednesday July 1st, 2026
CVE-2026-7532 iPAddress name constraints not enforced when WOLFSSL_IP_ALT_NAME is undefined Wednesday July 1st, 2026
CVE-2026-6291 Bleichenbacher padding oracle in PKCS#7 KTRI RSA PKCS#1 v1.5 decryption Wednesday July 1st, 2026
CVE-2026-57918 libnfs through 6.0.2 before 935b8db has an xid integer underflow in READ_IOVEC in rpc_read_from_socket in lib/socket.c during a connection to a crafted NFS server, when the expected pdu size exceeds the absolute pdu size from the xid/record-marker. Wednesday July 1st, 2026
CVE-2026-57231 Podman: Malformed Image can trick podman run into leaking host environment variables into the container Wednesday July 1st, 2026
CVE-2026-13325 Virt-handler-rhel9: kubevirt: kubevirt: disabletls migration setting removes authentication, exposing unauthenticated virtqemud proxy on all interfaces Wednesday July 1st, 2026
CVE-2026-13218 Kubevirt: kubevirt: symlink following in writetocachedfile allows host file overwrite from virt-launcher Wednesday July 1st, 2026
CVE-2026-13208 Kubevirt: virt-handler-rhel9: kubevirt: virt-handler notify server trusts vmi identity from unauthenticated grpc request body Wednesday July 1st, 2026
CVE-2026-13318 Virt-api-rhel9: kubevirt: kubevirt: ssrf in virt-api port-forward via unvalidated guest-agent-reported ip Wednesday July 1st, 2026
CVE-2026-13322 Kubevirt: virt-handler-rhel9: kubevirt: unbounded virtio-serial readline in virt-handler causes oom denial of service Wednesday July 1st, 2026
CVE-2026-58055 nghttp2 nghttpx - HTTP Request/Response Smuggling via Upgrade Request with Content-Length Wednesday July 1st, 2026
CVE-2026-58014 Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" Wednesday July 1st, 2026
CVE-2026-58013 Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend" Wednesday July 1st, 2026
CVE-2026-58011 Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime Wednesday July 1st, 2026
CVE-2026-58012 Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char() Wednesday July 1st, 2026
CVE-2026-58016 Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml" Wednesday July 1st, 2026
CVE-2026-58015 Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive Wednesday July 1st, 2026
CVE-2026-58010 Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() Wednesday July 1st, 2026
CVE-2026-54371 attr < 2.6.0 Symlink Traversal Privilege Escalation via getfattr/setfattr Wednesday July 1st, 2026
CVE-2026-48779 ws: Memory exhaustion DoS from tiny fragments and data chunks Wednesday July 1st, 2026
CVE-2026-42055 NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability Wednesday July 1st, 2026
CVE-2026-42910 Windows Hotpatch Monitoring Service Elevation of Privilege Vulnerability Tuesday June 30th, 2026
CVE-2026-54371 attr < 2.6.0 Symlink Traversal Privilege Escalation via getfattr/setfattr Tuesday June 30th, 2026
CVE-2026-54369 acl < 2.4.0 Symlink Traversal Privilege Escalation via libacl Functions Tuesday June 30th, 2026