CVE-2026-96909 Windows BitLocker Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-96909 US
Výsledky hledání
· zachyceno
· zachyceno
CVE-2026-96858 Windows Security Account Manager Tampering Vulnerability
Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perform tampering locally.
EPSS < 0.01 CVE-2026-96858 US
· zachyceno
CVE-2026-96853 Windows Win32 Kernel Subsystem Information Disclosure Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-96853 US
· zachyceno
CVE-2026-96852 Windows TCP/IP Elevation of Privilege Vulnerability
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-96852 US
· zachyceno
CVE-2026-96854 Windows Device Association Service Information Disclosure Vulnerability
Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-96854 US
· zachyceno
CVE-2026-96843 WebDAV Elevation of Privilege Vulnerability
Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-96843 US
· zachyceno
CVE-2026-96847 WebDAV Elevation of Privilege Vulnerability
Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-96847 US
· zachyceno
CVE-2026-96846 WebDAV Information Disclosure Vulnerability
Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-96846 US
· zachyceno
CVE-2026-96844 Microsoft Bluetooth Driver Elevation of Privilege Vulnerability
Integer underflow (wrap or wraparound) in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges over an adjacent network.
EPSS 0.01 CVE-2026-96844 Microsoft US
· zachyceno
CVE-2026-96850 Windows Modern Device Management (MDM) Information Disclosure Vulnerability
Use of uninitialized resource in Windows Modern Device Management (MDM) allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-96850 US
· zachyceno
CVE-2026-96325 Windows SMB Server Denial of Service Vulnerability
Missing reference to active allocated resource in Windows SMB Server allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-96325 US
· zachyceno
CVE-2026-96324 Microsoft Windows Search Component Elevation of Privilege Vulnerability
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-96324 Microsoft US
· zachyceno
CVE-2026-96321 Remote Desktop Display Driver Information Disclosure Vulnerability
Out-of-bounds read in Remote Desktop Display Driver allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-96321 US
· zachyceno
CVE-2026-96322 Windows Remote Desktop Protocol Elevation of Privilege Vulnerability
Use after free in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-96322 US
· zachyceno
CVE-2026-96323 Windows Update Elevation of Privilege Vulnerability
Use after free in Windows Update allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-96323 US
· zachyceno
CVE-2026-96320 Windows DHCP Server Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-96320 US
· zachyceno
CVE-2026-96303 Microsoft PowerShell Security Feature Bypass Vulnerability
Improperly implemented security check for standard in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature over a network.
EPSS 0.01 CVE-2026-96303 Microsoft US
· zachyceno
CVE-2026-96304 Windows USB Print Driver Elevation of Privilege Vulnerability
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-96304 US
· zachyceno
CVE-2026-96300 RPC Endpoint Mapper Service Denial of Service Vulnerability
Uncontrolled resource consumption in RPC Endpoint Mapper Service allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-96300 US
· zachyceno
CVE-2026-96251 Microsoft PowerShell Remote Code Execution Vulnerability
Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-96251 Microsoft US
· zachyceno
CVE-2026-96252 Active Directory Federation Services (AD FS) Spoofing Vulnerability
Improper verification of cryptographic signature in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
EPSS 0.01 CVE-2026-96252 US
· zachyceno
CVE-2026-96253 Windows USB Print Driver Elevation of Privilege Vulnerability
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-96253 US
· zachyceno
CVE-2026-96254 Windows USB Print Driver Elevation of Privilege Vulnerability
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-96254 US
· zachyceno
CVE-2026-96310 Windows USB Print Driver Elevation of Privilege Vulnerability
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-96310 US
· zachyceno
CVE-2026-96301 Windows USB Print Driver Elevation of Privilege Vulnerability
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-96301 US
· zachyceno
CVE-2026-96250 Windows USB Print Driver Elevation of Privilege Vulnerability
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-96250 US
· zachyceno
CVE-2026-96249 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-96249 US
· zachyceno
CVE-2026-96243 Windows WalletService Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in Windows WalletService allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-96243 US
· zachyceno
CVE-2026-96238 .NET Security Feature Bypass Vulnerability
Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network.
EPSS < 0.01 CVE-2026-96238 US
· zachyceno
CVE-2026-96237 .NET Remote Code Execution Vulnerability
Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-96237 US
· zachyceno
CVE-2026-96235 .NET Remote Code Execution Vulnerability
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-96235 US
· zachyceno
CVE-2026-96234 .NET Information Disclosure Vulnerability
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.
EPSS < 0.01 CVE-2026-96234 US
· zachyceno
CVE-2026-96232 .NET Information Disclosure Vulnerability
Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-96232 US
· zachyceno
CVE-2026-96230 ASP.NET Core Remote Code Execution Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in ASP.NET Core allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-96230 US
· zachyceno
CVE-2026-96229 .NET Information Disclosure Vulnerability
Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-96229 US
· zachyceno
CVE-2026-96233 ASP.NET Core Denial of Service Vulnerability
Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-96233 US
· zachyceno
CVE-2026-96225 .NET Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-96225 US
· zachyceno
CVE-2026-96231 .NET Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-96231 US
· zachyceno
CVE-2026-85363 .NET Framework Elevation of Privilege Vulnerability
Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-85363 US
· zachyceno
CVE-2026-84008 .NET Denial of Service Vulnerability
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-84008 US
· zachyceno
CVE-2026-83520 .NET Remote Code Execution Vulnerability
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-83520 US
· zachyceno
CVE-2026-70035 .NET Framework Remote Code Execution Vulnerability
Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70035 US
· zachyceno
CVE-2026-70007 .NET Framework Remote Code Execution Vulnerability
Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70007 US
· zachyceno
CVE-2026-96206 Windows Subsystem for Linux Information Disclosure Vulnerability
Use of uninitialized resource in Windows Subsystem for Linux allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-96206 US
· zachyceno
CVE-2026-96188 Microsoft PowerToys Elevation of Privilege Vulnerability
External control of system or configuration setting in Microsoft PowerToys allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-96188 Microsoft US
· zachyceno
CVE-2026-96186 Microsoft Windows Media Foundation Elevation of Privilege Vulnerability
Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.
EPSS 0.02 CVE-2026-96186 Microsoft US
· zachyceno
CVE-2026-96044 Microsoft Office SharePoint Elevation of Privilege Vulnerability
No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-96044 Microsoft US
· zachyceno
CVE-2026-70343 Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft MPEG-2 Video Extension allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70343 Microsoft US
· zachyceno
CVE-2026-94520 Microsoft SQL Server Denial of Service Vulnerability
Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-94520 Microsoft US
· zachyceno
CVE-2026-94512 SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-94512 US
· zachyceno
CVE-2026-88207 Microsoft Office PowerPoint Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-88207 Microsoft US
· zachyceno
CVE-2026-88210 Microsoft Office Word Security Feature Bypass Vulnerability
Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.
EPSS < 0.01 CVE-2026-88210 Microsoft US
· zachyceno
CVE-2026-88206 Microsoft Office SharePoint Elevation of Privilege Vulnerability
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-88206 Microsoft US
· zachyceno
CVE-2026-88203 Microsoft Office PowerPoint Information Disclosure Vulnerability
Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-88203 Microsoft US
· zachyceno
CVE-2026-88195 Microsoft Office Excel Information Disclosure Vulnerability
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-88195 Microsoft US
· zachyceno
CVE-2026-88190 Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-88190 Microsoft US
· zachyceno
CVE-2026-88192 Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-88192 Microsoft US
· zachyceno
CVE-2026-88183 Microsoft Office PowerPoint Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-88183 Microsoft US
· zachyceno
CVE-2026-88186 Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-88186 Microsoft US
· zachyceno
CVE-2026-88185 Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-88185 Microsoft US