CVE-2026-97779 Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97779 Microsoft US
Výsledky hledání
· zachyceno
· zachyceno
CVE-2026-97007 Microsoft Office Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97007 Microsoft US
· zachyceno
CVE-2026-97748 Microsoft Office Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97748 Microsoft US
· zachyceno
CVE-2026-96960 .NET Denial of Service Vulnerability
Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-96960 US
· zachyceno
CVE-2026-96959 .NET Denial of Service Vulnerability
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-96959 US
· zachyceno
CVE-2026-96958 .NET Denial of Service Vulnerability
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-96958 US
· zachyceno
CVE-2026-96957 .NET Security Feature Bypass Vulnerability
Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.
EPSS 0.01 CVE-2026-96957 US
· zachyceno
CVE-2026-95943 Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability
Double free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-95943 US
· zachyceno
CVE-2026-96952 Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-96952 Microsoft US
· zachyceno
CVE-2026-96953 Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution Vulnerability
Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally.
EPSS < 0.01 CVE-2026-96953 US
· zachyceno
CVE-2026-96950 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-96950 US
· zachyceno
CVE-2026-96949 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-96949 US
· zachyceno
CVE-2026-96948 Windows Client Side Caching driver (csc.sys) Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally.
EPSS 0.01 CVE-2026-96948 US
· zachyceno
CVE-2026-96947 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-96947 US
· zachyceno
CVE-2026-96946 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-96946 US
· zachyceno
CVE-2026-96945 Windows Failover Cluster Denial of Service Vulnerability
Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-96945 US
· zachyceno
CVE-2026-96944 Windows Storage Information Disclosure Vulnerability
Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally.
EPSS 0.01 CVE-2026-96944 US
· zachyceno
CVE-2026-96202 Windows Raw Image Extension Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-96202 US
· zachyceno
CVE-2026-21413 Raw Image Extension Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-21413 US
· zachyceno
CVE-2026-88094 Azure Storage Library Elevation of Privilege Vulnerability
Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Storage Library allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-88094 US
· zachyceno
CVE-2026-96939 Servicing Stack Updates Elevation of Privilege Vulnerability
Time-of-check time-of-use (toctou) race condition in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-96939 US
· zachyceno
CVE-2026-96938 Windows Distributed File System (DFS) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-96938 US
· zachyceno
CVE-2026-96937 Microsoft Windows Search Component Elevation of Privilege Vulnerability
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-96937 Microsoft US
· zachyceno
CVE-2026-85866 Windows ALPC Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows ALPC allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-85866 US
· zachyceno
CVE-2026-69675 Windows Network File System Information Disclosure Vulnerability
Out-of-bounds read in Windows Network File System allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-69675 US
· zachyceno
CVE-2026-96926 Role: DNS Server Tampering Vulnerability
Missing authorization in DNS Server allows an authorized attacker to perform tampering locally.
EPSS < 0.01 CVE-2026-96926 US
· zachyceno
CVE-2026-96929 Windows Kernel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-96929 US
· zachyceno
CVE-2026-96931 Windows NTFS Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-96931 US
· zachyceno
CVE-2026-96932 Windows Embedded Mode Service Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-96932 US
· zachyceno
CVE-2026-96934 Windows DHCP Server Remote Code Execution Vulnerability
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-96934 US
· zachyceno
CVE-2026-96930 Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability
Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-96930 US
· zachyceno
CVE-2026-96927 Windows NTFS Information Disclosure Vulnerability
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-96927 US
· zachyceno
CVE-2026-96933 Windows COM+ Event System Service Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-96933 US
· zachyceno
CVE-2026-96924 Windows OLE Remote Code Execution Vulnerability
Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-96924 US
· zachyceno
CVE-2026-96925 Windows NTFS Information Disclosure Vulnerability
Integer underflow (wrap or wraparound) in Windows NTFS allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-96925 US
· zachyceno
CVE-2026-96923 Windows Workstation Service Elevation of Privilege Vulnerability
Use after free in Windows Workstation Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-96923 US
· zachyceno
CVE-2026-96919 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-96919 US
· zachyceno
CVE-2026-96918 Windows NTFS Elevation of Privilege Vulnerability
Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-96918 US
· zachyceno
CVE-2026-96917 Windows PCI Bus Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-96917 US
· zachyceno
CVE-2026-96914 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-96914 US
· zachyceno
CVE-2026-96915 Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-96915 US
· zachyceno
CVE-2026-96913 Windows Kernel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-96913 US
· zachyceno
CVE-2026-96912 Windows Client License Service Elevation of Privilege Vulnerability
Use after free in Windows Client License Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-96912 US
· zachyceno
CVE-2026-96910 Microsoft Windows Search Component Information Disclosure Vulnerability
Untrusted pointer dereference in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-96910 Microsoft US
· zachyceno
CVE-2026-96911 Microsoft Windows Search Component Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
EPSS 0.01 CVE-2026-96911 Microsoft US
· zachyceno
CVE-2026-96916 Windows NTFS Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-96916 US
· zachyceno
CVE-2026-96909 Windows BitLocker Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-96909 US
· zachyceno
CVE-2026-96858 Windows Security Account Manager Tampering Vulnerability
Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perform tampering locally.
EPSS < 0.01 CVE-2026-96858 US
· zachyceno
CVE-2026-96853 Windows Win32 Kernel Subsystem Information Disclosure Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-96853 US
· zachyceno
CVE-2026-96852 Windows TCP/IP Elevation of Privilege Vulnerability
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-96852 US
· zachyceno
CVE-2026-96854 Windows Device Association Service Information Disclosure Vulnerability
Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-96854 US
· zachyceno
CVE-2026-96843 WebDAV Elevation of Privilege Vulnerability
Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-96843 US
· zachyceno
CVE-2026-96847 WebDAV Elevation of Privilege Vulnerability
Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-96847 US
· zachyceno
CVE-2026-96846 WebDAV Information Disclosure Vulnerability
Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-96846 US
· zachyceno
CVE-2026-96844 Microsoft Bluetooth Driver Elevation of Privilege Vulnerability
Integer underflow (wrap or wraparound) in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges over an adjacent network.
EPSS 0.01 CVE-2026-96844 Microsoft US
· zachyceno
CVE-2026-96850 Windows Modern Device Management (MDM) Information Disclosure Vulnerability
Use of uninitialized resource in Windows Modern Device Management (MDM) allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-96850 US
· zachyceno
CVE-2026-96325 Windows SMB Server Denial of Service Vulnerability
Missing reference to active allocated resource in Windows SMB Server allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-96325 US
· zachyceno
CVE-2026-96324 Microsoft Windows Search Component Elevation of Privilege Vulnerability
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-96324 Microsoft US
· zachyceno
CVE-2026-96321 Remote Desktop Display Driver Information Disclosure Vulnerability
Out-of-bounds read in Remote Desktop Display Driver allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-96321 US
· zachyceno
CVE-2026-96322 Windows Remote Desktop Protocol Elevation of Privilege Vulnerability
Use after free in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-96322 US