CVE-2026-105013 Microsoft Office SharePoint Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-105013 Microsoft US
Výsledky hledání
· zachyceno
· zachyceno
CVE-2026-92707 MessagePack-CSharp Denial of Service Vulnerability
Improperly controlled sequential memory allocation in .NET allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-92707 US
· zachyceno
CVE-2026-70162 .NET Denial of Service Vulnerability
A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET web application. A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the .NET application. The update addresses the vulnerability by correcting how the .NET web application handles web requests.
EPSS 0.01 CVE-2026-70162 Microsoft US
· zachyceno
CVE-2026-97799 Windows Audio Service Elevation of Privilege Vulnerability
Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-97799 US
· zachyceno
CVE-2026-97798 Windows Error Reporting Service Elevation of Privilege Vulnerability
Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-97798 US
· zachyceno
CVE-2026-105010 Microsoft Windows Search Component Elevation of Privilege Vulnerability
Use after free in Microsoft Windows Search Component allows an unauthorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-105010 Microsoft US
· zachyceno
CVE-2026-105009 Windows Server Update Service Elevation of Privilege Vulnerability
Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-105009 US
· zachyceno
CVE-2026-105008 Windows Schannel Spoofing Vulnerability
No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.
EPSS 0.01 CVE-2026-105008 US
· zachyceno
CVE-2026-105007 Windows NDIS Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior to copying memory to it. To exploit the vulnerability, in a local attack scenario, an attacker could run a specially crafted application to elevate the attacker's privilege level. An attacker who successfully exploited this vulnerability could run processes in an elevated context. However, an attacker must first gain access to the local…
EPSS 0.01 CVE-2026-105007 US
· zachyceno
CVE-2026-105006 HID Class Driver Elevation of Privilege Vulnerability
Use after free in HID class driver allows an unauthorized attacker to elevate privileges with a physical attack.
EPSS < 0.01 CVE-2026-105006 US
· zachyceno
CVE-2026-105005 Windows Schannel Remote Code Execution Vulnerability
Out-of-bounds write in Windows Schannel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-105005 US
· zachyceno
CVE-2026-105004 Windows Overlay Filter Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-105004 US
· zachyceno
CVE-2026-105003 HID Class Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-105003 US
· zachyceno
CVE-2026-103578 Windows Kernel Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.
EPSS < 0.01 CVE-2026-103578 US
· zachyceno
CVE-2026-103577 Microsoft QUIC Security Feature Bypass Vulnerability
Insecure default variable initialization in Microsoft QUIC allows an unauthorized attacker to bypass a security feature over a network.
EPSS 0.01 CVE-2026-103577 Microsoft US
· zachyceno
CVE-2026-103576 Active Directory Federation Services (AD FS) Spoofing Vulnerability
Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
EPSS 0.01 CVE-2026-103576 US
· zachyceno
CVE-2026-103575 Remote Desktop Client Remote Code Execution Vulnerability
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-103575 US
· zachyceno
CVE-2026-103569 Windows IKE Extension Information Disclosure Vulnerability
Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-103569 US
· zachyceno
CVE-2026-103568 Windows Credential Providers Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Providers allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-103568 US
· zachyceno
CVE-2026-103567 Windows Broadcast DVR User Service Information Disclosure Vulnerability
Buffer over-read in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-103567 US
· zachyceno
CVE-2026-103565 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-103565 US
· zachyceno
CVE-2026-103560 Role: DNS Server Tampering Vulnerability
Improper authorization in DNS Server allows an authorized attacker to perform tampering locally.
EPSS < 0.01 CVE-2026-103560 US
· zachyceno
CVE-2026-103558 Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability
Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-103558 US
· zachyceno
CVE-2026-103555 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-103555 US
· zachyceno
CVE-2026-103554 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-103554 US
· zachyceno
CVE-2026-103553 Windows Partition Management Driver Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-103553 US
· zachyceno
CVE-2026-69922 Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-69922 Microsoft US
· zachyceno
CVE-2026-109453 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-109453 US
· zachyceno
CVE-2026-102869 .NET and Visual Studio Elevation of Privilege Vulnerability
Access of resource using incompatible type ('type confusion') in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-102869 US
· zachyceno
CVE-2026-102226 Dynamics Business Central Elevation of Privilege Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-102226 US
· zachyceno
CVE-2026-102225 Windows Text Shaping Remote Code Execution Vulnerability
Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-102225 US
· zachyceno
CVE-2026-100215 Microsoft Graphics Component Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally.
EPSS 0.01 CVE-2026-100215 Microsoft US
· zachyceno
CVE-2026-102217 WebDAV Elevation of Privilege Vulnerability
Improper resolution of path equivalence in WebDAV allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-102217 US
· zachyceno
CVE-2026-102214 Windows Hyper-V Remote Code Execution Vulnerability
Use after free in Windows Hyper-V allows an authorized attacker to execute code locally.
EPSS < 0.01 CVE-2026-102214 US
· zachyceno
CVE-2026-102220 Windows VHD miniport driver Elevation of Privilege Vulnerability
Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-102220 US
· zachyceno
CVE-2026-102221 Secure Boot Security Feature Bypass Vulnerability
No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
EPSS < 0.01 CVE-2026-102221 US
· zachyceno
CVE-2026-102215 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-102215 US
· zachyceno
CVE-2026-102218 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-102218 US
· zachyceno
CVE-2026-102216 Windows StateRepository API Elevation of Privilege Vulnerability
Access of resource using incompatible type ('type confusion') in Windows StateRepository API allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-102216 US
· zachyceno
CVE-2026-102211 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
Use after free in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-102211 US
· zachyceno
CVE-2026-102210 Windows Text Shaping Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-102210 US
· zachyceno
CVE-2026-102209 Microsoft Graphics Component Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-102209 Microsoft US
· zachyceno
CVE-2026-102208 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-102208 US
· zachyceno
CVE-2026-102207 Windows Kernel Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-102207 US
· zachyceno
CVE-2026-102205 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-102205 US
· zachyceno
CVE-2026-102206 Windows Portable Device MTP Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Portable Device MTP Driver allows an unauthorized attacker to elevate privileges with a physical attack.
EPSS < 0.01 CVE-2026-102206 US
· zachyceno
CVE-2026-102204 Microsoft Microsoft Defender for Endpoint Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-102204 Microsoft US
· zachyceno
CVE-2026-102202 Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability
Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-102202 US
· zachyceno
CVE-2026-102203 RPC Runtime Remote Code Execution Vulnerability
Access of resource using incompatible type ('type confusion') in RPC Runtime allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-102203 US
· zachyceno
CVE-2026-102201 Microsoft Windows Media Foundation Elevation of Privilege Vulnerability
Use after free in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-102201 Microsoft US
· zachyceno
CVE-2026-102199 Microsoft Windows Codecs Library Denial of Service Vulnerability
Stack-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-102199 Microsoft US
· zachyceno
CVE-2026-102198 Windows Remote Desktop Protocol Information Disclosure Vulnerability
Out-of-bounds read in Windows Remote Desktop Protocol allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-102198 US
· zachyceno
CVE-2026-102197 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-102197 US
· zachyceno
CVE-2026-102196 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-102196 US
· zachyceno
CVE-2026-102195 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-102195 US
· zachyceno
CVE-2026-102194 Windows Graphics Kernel Elevation of Privilege Vulnerability
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-102194 US
· zachyceno
CVE-2026-102193 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-102193 US
· zachyceno
CVE-2026-102192 Windows Failover Cluster Denial of Service Vulnerability
Integer underflow (wrap or wraparound) in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-102192 US
· zachyceno
CVE-2026-102191 Windows Storage Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-102191 US
· zachyceno
CVE-2026-102189 Windows Storage Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-102189 US