CVE-2026-62747 Windows Device Association Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-62747 US
Výsledky hledání
59
CVE-2026-62696 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
Integer underflow (wrap or wraparound) in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
EPSS 0.03 CVE-2026-62696 US
CVE-2026-65796 Windows iSCSI Target Service Denial of Service Vulnerability
Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-65796 US
CVE-2026-64906 Microsoft Access Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-64906 Microsoft US
CVE-2026-62898 Microsoft QUIC Information Disclosure Vulnerability
Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-62898 Microsoft US
CVE-2026-62871 .NET Elevation of Privilege Vulnerability
Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-62871 US
CVE-2026-70354 .NET Core Remote Code Execution Vulnerability
Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-70354 US
CVE-2026-62902 .NET Information Disclosure Vulnerability
Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-62902 US
CVE-2026-62897 .NET Framework Remote Code Execution Vulnerability
Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-62897 US
CVE-2026-62688 Windows MIDI Service Module Elevation of Privileges Vulnerability
Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-62688 US
CVE-2026-62913 Microsoft Exchange Server Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-62913 Microsoft US
CVE-2026-61359 Windows Storage Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-61359 US
CVE-2026-62695 Windows Storage Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-62695 US
CVE-2026-61346 Windows Graphics Kernel Elevation of Privilege Vulnerability
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-61346 US
CVE-2026-50523 Microsoft PowerShell Remote Code Execution Vulnerability
Improper neutralization of special elements used in a command ('command injection') in Microsoft PowerShell allows an authorized attacker to execute code locally.
EPSS 0.00 CVSS 7.8 CVE-2026-50523 Microsoft US
CVE-2026-70338 Microsoft PowerShell Security Feature Bypass Vulnerability
Improper control of generation of code ('code injection') in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.
EPSS 0.00 CVE-2026-70338 Microsoft US
CVE-2026-59119 PowerShell Elevation of Privilege Vulnerability
Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-59119 Microsoft US
CVE-2026-59126 Windows Event Logging Service Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Event Logging Service allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-59126 US
CVE-2026-68821 Windows Package Manager Elevation of Privilege Vulnerability
Improper privilege management in Windows Package Manager allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-68821 US
CVE-2026-65671 Remote Access API Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-65671 US
CVE-2026-62777 Windows License Manager Elevation of Privilege Vulnerability
Missing authentication for critical function in Windows License Manager allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-62777 US
CVE-2026-62755 Windows DHCP Client Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-62755 US
CVE-2026-62746 Win32k Information Disclosure Vulnerability
Buffer over-read in Windows Win32K allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-62746 US
CVE-2026-61347 Windows Event Logging Service Information Disclosure Vulnerability
Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-61347 US
CVE-2026-59124 Microsoft High Performance Computing (HPC) Pack Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft High Performance Computing (HPC) Pack allows an unauthorized attacker to execute code over a network.
EPSS 0.02 CVE-2026-59124 Microsoft US
CVE-2026-65767 Microsoft Teams for Android and iOS Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Teams for Android allows an authorized attacker to perform spoofing over a network.
EPSS 0.00 CVE-2026-65767 Microsoft US
CVE-2026-57104 Azure Storage Explorer Elevation of Privilege Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Azure Storage Explorer allows an unauthorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-57104 US
CVE-2026-65769 Microsoft Teams iOS Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Microsoft Teams Mobile allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-65769 Microsoft US
CVE-2026-65768 Microsoft Teams Remote Code Execution Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Teams for Android allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-65768 Microsoft US
CVE-2026-63518 Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-63518 Microsoft US
CVE-2026-62886 .NET Elevation of Privilege Vulnerability
Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-62886 US
CVE-2026-58612 PowerShell Information Disclosure Vulnerability
Server-side request forgery (ssrf) in Microsoft PowerShell Core allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-58612 Microsoft US
CVE-2026-70337 Microsoft PowerShell Remote Code Execution Vulnerability
Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70337 Microsoft US
CVE-2026-63513 Microsoft Office Graphics Component Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-63513 Microsoft US
CVE-2026-63519 Microsoft Office Graphics Component Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-63519 Microsoft US
CVE-2026-66807 Microsoft Office Graphics Component Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-66807 Microsoft US
CVE-2026-62722 Windows Bind Filter Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-62722 US
CVE-2025-2309 HDF5 Type Conversion Logic H5T__bit_copy heap-based overflow
Information published.
EPSS 0.00 CVE-2025-2309 US
CVE-2025-2308 HDF5 Scale-Offset Filter H5Z__scaleoffset_decompress_one_byte heap-based overflow
Information published.
EPSS 0.00 CVE-2025-2308 US
CVE-2024-52005 The sideband payload is passed unfiltered to the terminal in git
Information published.
EPSS 0.01 CVE-2024-52005 US
CVE-2026-64654 GitHub CLI: Terminal escape sequence injection in multiple `gh` commands
Information published.
EPSS 0.01 CVE-2026-64654 GitHub US
CVE-2026-20338 ClamAV ZIP File Format Processing Memory Corruption Vulnerability
Information published.
EPSS 0.00 CVE-2026-20338 ClamAV US
CVE-2026-20337 ClamAV ZIP File Format Processing Memory Corruption Vulnerability
Information published.
EPSS 0.01 CVE-2026-20337 ClamAV US
CVE-2026-20339 ClamAV PESpin File Format Processing Integer Overflow Vulnerability
Information published.
EPSS 0.00 CVE-2026-20339 ClamAV US
CVE-2026-20346 ClamAV PDF File Format Processing Memory Corruption Vulnerability
Information published.
EPSS 0.00 CVE-2026-20346 ClamAV US
CVE-2026-20347 ClamAV Mach-O File Format Processing Memory Corruption Vulnerability
Information published.
EPSS 0.00 CVE-2026-20347 ClamAV US
CVE-2026-20345 ClamAV GPT File Format Processing Memory Corruption Vulnerability
Information published.
EPSS 0.00 CVE-2026-20345 ClamAV US
CVE-2026-20348 ClamAV XAR File Format Processing Memory Corruption Vulnerability
Information published.
EPSS 0.00 CVE-2026-20348 ClamAV US
CVE-2026-72568 Redis - Heap Out-of-Bounds Read in Cluster Bus PING Message Handler
Information published.
EPSS 0.00 CVE-2026-72568 Redis US
CVE-2026-68386 bpf, sockmap: Reject unhashed UDP sockets on sockmap update
Information published.
EPSS 0.00 CVE-2026-68386 US
CVE-2026-68284 bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg()
Information published.
EPSS 0.00 CVE-2026-68284 US
CVE-2026-72522 libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop because low surrogates are treated the same as high surrogates during Unicode processing in the *_toUtf16 functions.
Information published.
EPSS 0.00 CVE-2026-72522 libexpat US
CVE-2026-66484 Path Traversal in GNU cpio
Information published.
EPSS 0.00 CVE-2026-66484 GNU US
CVE-2026-66485 Uncontrolled Memory Allocation in GNU cpio
Information published.
EPSS 0.00 CVE-2026-66485 GNU US
CVE-2026-66486 Improper Output Encoding in GNU cpio
Information published.
EPSS 0.00 CVE-2026-66486 US
CVE-2026-15534 Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in S_regmatch
Information published.
EPSS 0.00 CVE-2026-15534 Perl US
CVE-2026-64655 GitHub CLI: Attestation Verification Bypass via Unescaped Regex Metacharacters in SAN Matching
Information published.
EPSS 0.00 CVE-2026-64655 US
CVE-2026-64652 GitHub CLI: Partial token disclosure in `gh auth status` output
Information published.
EPSS 0.00 CVE-2026-64652 GitHub US
CVE-2026-64653 GitHub CLI: Unescaped variable components in request URLs could allow path traversal
Information published.
EPSS 0.01 CVE-2026-64653 GitHub US
1
CVE-2026-54876 Client-Side Memory Leak in OCSP Response Checking
Information published.
EPSS 0.00 CVE-2026-54876 US