Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.
EPSS 0.01 CVE-2026-70199 US
Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70157 US
Heap-based buffer overflow in Network Policy Server (NPS) allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70207 US
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70144 US
Time-of-check time-of-use (toctou) race condition in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally.
EPSS < 0.01 CVE-2026-70075 US
Allocation of resources without limits or throttling in Windows Netlogon allows an authorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-70072 US
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-70074 US
Improper verification of cryptographic signature in DNS Server allows an authorized attacker to perform tampering locally.
EPSS < 0.01 CVE-2026-70071 US
Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70069 US
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70067 US
Use after free in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70066 US
Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic Services allows an authorized attacker to disclose information locally.
EPSS 0.01 CVE-2026-70055 US
Access of resource using incompatible type ('type confusion') in Windows SmartScreen allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70051 US
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70006 US
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70004 US
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70012 US
Out-of-bounds read in Windows Update allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-69999 US
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69998 US
Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69992 US
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69994 US
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69991 US
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69996 US
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69997 US
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69995 US
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69987 US
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69988 US
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69986 US
Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69985 US
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69984 US
Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69880 US
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69856 US
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Storage allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69931 US
Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-62687 US
Missing authentication for critical function in Windows SmartScreen allows an authorized attacker to perform tampering locally.
EPSS < 0.01 CVE-2026-62879 US
Use of a broken or risky cryptographic algorithm in Windows Remote Desktop allows an unauthorized attacker to bypass a security feature over a network.
EPSS < 0.01 CVE-2026-59116 US
Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-97794 US
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97789 US
Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-96096 US
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
EPSS < 0.01 CVE-2026-97783 Microsoft US
Observable discrepancy in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network.
EPSS 0.01 CVE-2026-97782 Microsoft US
Time-of-check time-of-use (toctou) race condition in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-97774 Microsoft US
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97759 Microsoft US
Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97778 Microsoft US
Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97739 Microsoft US
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97765 Microsoft US
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97755 Microsoft US
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97771 Microsoft US
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97770 Microsoft US
Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97767 Microsoft US
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97780 Microsoft US
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97747 Microsoft US
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97761 Microsoft US
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97754 Microsoft US
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97758 Microsoft US
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97752 Microsoft US
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97776 Microsoft US
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97751 Microsoft US
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97003 Microsoft US
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97766 Microsoft US
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97740 Microsoft US