CVE-2026-97801 .NET Framework Tampering Vulnerability
Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering over a network.
EPSS 0.01 CVE-2026-97801 US
Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering over a network.
EPSS 0.01 CVE-2026-97801 US
Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network.
EPSS 0.01 CVE-2026-108463 US
Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-108471 US
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-108136 Microsoft US
Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-108135 US
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-108134 US
Release of invalid pointer or reference in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-108133 US
Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-108132 US
No cwe for this issue in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
EPSS 0.01 CVE-2026-108131 US
Heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-108130 US
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-108129 US
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-108128 US
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-108127 US
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97844 US
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97843 US
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97842 US
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97841 US
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97840 US
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97839 US
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97838 US
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97837 US
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97836 US
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97835 US
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97834 US
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97833 US
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97832 US
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97831 US
Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-97830 US
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97829 US
Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97828 US
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97827 US
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97826 US
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97825 US
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97824 US
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97823 US
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97822 US
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97821 US
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97820 US
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97819 US
Heap-based buffer overflow in DNS Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97817 US
Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97816 Microsoft US
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97815 US
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97814 US
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97813 US
Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-97812 US
Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-97811 Microsoft US
Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-97810 US
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-97809 US
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-97808 US
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-97807 US
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-97806 US
Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97805 US
Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-97804 US
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-97803 US
Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-96113 US
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-105013 Microsoft US
Improperly controlled sequential memory allocation in .NET allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-92707 US
A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET web application. A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the .NET application. The update addresses the vulnerability by correcting how the .NET web application handles web requests.
EPSS 0.01 CVE-2026-70162 Microsoft US
Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-97799 US
Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-97798 US