CVE-2026-58610 Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-58610 Microsoft US
Výsledky hledání
60
CVE-2026-58609 Windows Graphics Component Remote Code Execution Vulnerability
Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-58609 Microsoft US
CVE-2026-58608 Windows Print Spooler Remote Code Execution Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Print Spooler Components allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-58608 US
CVE-2026-58602 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
Use after free in Windows Kernel Mode Driver allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-58602 US
CVE-2026-58601 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-58601 US
CVE-2026-58595 Microsoft Bing App for IOS Spoofing Vulnerability
Improper restriction of rendered ui layers or frames in Microsoft Bing App for IOS allows an unauthorized attacker to perform spoofing over a network.
EPSS 0.01 CVE-2026-58595 Microsoft US
CVE-2026-58526 Windows Storage Elevation of Privilege Vulnerability
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-58526 US
CVE-2026-58279 Azure CycleCloud Elevation of Privilege Vulnerability
Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-58279 US
CVE-2026-55014 Windows Remote Help Defense Elevation of Privilege Vulnerability
Improper access control in Windows Remote Help Defense allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-55014 US
CVE-2026-57979 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-57979 US
CVE-2026-57976 Windows Active Directory Domain Services Denial of Service Vulnerability
Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.
EPSS 0.01 CVSS 6.5 CVE-2026-57976 veřejná správa US
CVE-2026-57969 Azure CycleCloud Elevation of Privilege Vulnerability
Missing authentication for critical function in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-57969 US
CVE-2026-57107 Windows Admin Center Elevation of Privilege Vulnerability
Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-57107 US
CVE-2026-57097 Microsoft XML Security Feature Bypass Vulnerability
Untrusted search path in Microsoft XML allows an unauthorized attacker to bypass a security feature with a physical attack.
EPSS 0.01 CVE-2026-57097 Microsoft US
CVE-2026-56185 Windows Admin Center Information Disclosure Vulnerability
Improper authentication in Windows Admin Center allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-56185 US
CVE-2026-56193 Microsoft Office Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-56193 Microsoft US
CVE-2026-54127 Windows Hyper-V Elevation of Privilege Vulnerability
Use after free in Windows Hyper-V allows an unauthorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-54127 US
CVE-2026-50694 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-50694 US
CVE-2026-56170 ASP.NET Core Denial of Service Vulnerability
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-56170 US
CVE-2026-56169 Windows Admin Center Elevation of Privilege Vulnerability
Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-56169 US
CVE-2026-56164 Microsoft SharePoint Server Elevation of Privilege Vulnerability
Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.
KEV ✓ EPSS 0.27 CVE-2026-56164 Microsoft US
CVE-2026-56155 Active Directory Federation Services Elevation of Privilege Vulnerability
Insufficient granularity of access control in Active Directory Federation Services (AD FS) allows an authorized attacker to elevate privileges locally.
KEV ✓ EPSS 0.00 CVE-2026-56155 US
CVE-2026-55948 Microsoft Excel Remote Code Execution Vulnerability
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-55948 Microsoft US
CVE-2026-55899 Microsoft Excel Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-55899 Microsoft US
CVE-2026-54988 Microsoft Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-54988 Microsoft US
CVE-2026-50678 Microsoft Excel Information Disclosure Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-50678 Microsoft US
CVE-2026-50675 Microsoft Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-50675 Microsoft US
CVE-2026-54108 Microsoft SharePoint Server Spoofing Vulnerability
External control of file name or path in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
EPSS 0.01 CVE-2026-54108 Microsoft US
CVE-2026-50520 Visual Studio Code Remote Code Execution Vulnerability
Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-50520 US
CVE-2026-55144 Windows Cryptography API: Next Generation (CNG) Tampering Vulnerability
Missing cryptographic step in Windows CryptoAPI allows an authorized attacker to perform tampering locally.
EPSS 0.00 CVE-2026-55144 US
CVE-2026-55002 Microsoft SQL Server Elevation of Privilege Vulnerability
External control of file name or path in SQL Server allows an authorized attacker to elevate privileges locally.
EPSS 0.01 CVE-2026-55002 Microsoft US
CVE-2026-54118 Microsoft SQL Server Remote Code Execution Vulnerability
Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-54118 Microsoft US
CVE-2026-54117 Microsoft SQL Server Remote Code Execution Vulnerability
Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-54117 Microsoft US
CVE-2026-50524 .NET Framework Denial of Service Vulnerability
Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-50524 US
CVE-2026-55012 Microsoft Defender Remote Code Execution Vulnerability
Integer overflow or wraparound in Microsoft Defender allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-55012 Microsoft US
CVE-2026-55011 Microsoft Defender Remote Code Execution Vulnerability
Integer underflow (wrap or wraparound) in Microsoft Defender allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-55011 Microsoft US
CVE-2026-50338 Azure Spring Apps Elevation of Privilege Vulnerability
Improper authentication in Azure Spring Apps allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-50338 US
CVE-2026-55009 Microsoft Exchange Server Elevation of Privilege Vulnerability
Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.
EPSS 0.03 CVE-2026-55009 Microsoft US
CVE-2026-55006 Microsoft Exchange Server Elevation of Privilege Vulnerability
Insufficient granularity of access control in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-55006 Microsoft US
CVE-2026-55005 Microsoft Exchange Server Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-55005 Microsoft US
CVE-2026-54122 Windows GDI+ Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-54122 US
CVE-2026-54995 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-54995 US
CVE-2026-55003 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-55003 US
CVE-2026-54999 Windows TCP/IP Remote Code Execution Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an unauthorized attacker to execute code over an adjacent network.
EPSS 0.00 CVE-2026-54999 US
CVE-2026-54997 Windows SMB Information Disclosure Vulnerability
Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-54997 US
CVE-2026-54119 Windows Active Directory Denial of Service Vulnerability
Loop with unreachable exit condition ('infinite loop') in Windows Active Directory allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-54119 veřejná správa US
CVE-2026-54996 Windows USB Print Driver Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-54996 US
CVE-2026-54114 Windows Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-54114 US
CVE-2026-54982 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
Integer underflow (wrap or wraparound) in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network.
EPSS 0.01 CVE-2026-54982 US
CVE-2026-54109 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
Integer overflow or wraparound in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.
EPSS 0.00 CVE-2026-54109 US
CVE-2026-54992 Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-54992 Microsoft US
CVE-2026-55004 Windows Print Configuration Elevation of Privilege Vulnerability
Double free in Microsoft Printer Drivers allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-55004 Microsoft US
CVE-2026-54112 Windows Win32k Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-54112 US
CVE-2026-55001 Active Directory Domain Services Elevation of Privilege Vulnerability
Improper certificate validation in Windows Active Directory allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-55001 veřejná správa US
CVE-2026-54993 Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-54993 Microsoft US
CVE-2026-54986 Windows Win32k Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-54986 US
CVE-2026-54107 Windows Win32k Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-54107 US
CVE-2026-54132 Windows Kernel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.
EPSS 0.00 CVE-2026-54132 US
CVE-2026-54991 Windows USB Print Driver Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-54991 US
CVE-2026-54111 Universal Print Management Service Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-54111 US