Untrusted pointer dereference in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack.
EPSS < 0.01 CVE-2026-102188 US
Untrusted pointer dereference in Windows Network File System allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-102186 US
Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-102187 US
Out-of-bounds read in Windows Network File System allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-96209 US
Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack.
EPSS 0.01 CVE-2026-88226 US
Improper restriction of communication channel to intended endpoints in Windows Security Center allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70212 US
Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70023 US
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-100225 US
Heap-based buffer overflow in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-100222 US
Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-69506 US
Untrusted pointer dereference in RPC Runtime allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-88219 US
Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-100220 US
Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-100219 Microsoft US
Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-100218 US
Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-100217 US
Stack-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-100216 US
Deserialization of untrusted data in Dynamics Business Central allows an authorized attacker to execute code over a network.
EPSS 0.02 CVE-2026-100214 Microsoft US
Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-108396 US
Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-105729 Sysinternals US
Improper control of generation of code ('code injection') in ASP.NET Core allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-102870 US
Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-58280 US
Incorrect privilege assignment in Visual Studio Code allows an authorized attacker to bypass a security feature locally.
EPSS < 0.01 CVE-2026-102851 US
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-100212 Microsoft US
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-100210 Microsoft US
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-100209 Microsoft US
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-100211 Microsoft US
Improper neutralization of special elements used in an os command ('os command injection') in Azure CycleCloud allows an authorized attacker to execute code locally.
EPSS < 0.01 CVE-2026-100207 US
Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-100205 US
Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-100203 US
Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-100202 US
Heap-based buffer overflow in Windows Client License Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-100201 US
Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-100200 US
Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-97793 US
Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-97792 US
Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform tampering locally.
EPSS < 0.01 CVE-2026-97790 US
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-97787 US
Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97788 US
Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-96118 US
Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-96071 US
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97745 Microsoft US
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97768 Microsoft US
Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97772 Microsoft US
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97775 Microsoft US
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97763 Microsoft US
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97741 Microsoft US
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97004 Microsoft US
Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97746 Microsoft US
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97760 Microsoft US
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97742 Microsoft US
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97738 Microsoft US
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97757 Microsoft US
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97011 Microsoft US
Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97762 Microsoft US
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97777 Microsoft US
Use after free in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97743 Microsoft US
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97010 Microsoft US
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97773 Microsoft US
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97769 Microsoft US
Buffer underwrite ('buffer underflow') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97008 Microsoft US
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97756 Microsoft US