CVE-2026-78455 Xbox Information Disclosure Vulnerability
Out-of-bounds read in Xbox allows an unauthorized attacker to disclose information with a physical attack.
EPSS 0.01 CVE-2026-78455 US
Out-of-bounds read in Xbox allows an unauthorized attacker to disclose information with a physical attack.
EPSS 0.01 CVE-2026-78455 US
Integer underflow (wrap or wraparound) in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-78453 Microsoft US
Untrusted pointer dereference in Microsoft Windows SCSI Class System File allows an unauthorized attacker to elevate privileges with a physical attack.
EPSS < 0.01 CVE-2026-78451 Microsoft US
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-78448 US
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-78447 US
Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-78450 US
Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-78444 Microsoft US
Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-78449 US
Use after free in Windows Distributed File System (DFS) allows an authorized attacker to deny service over a network.
EPSS < 0.01 CVE-2026-78446 US
Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-78445 US
Out-of-bounds read in Windows OLE DB allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-78441 US
Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-78442 US
Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-69562 Microsoft US
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-77911 Microsoft US
Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-77905 US
Improper authentication in Spring Cloud Azure allows an unauthorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-69854 US
Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-77901 Microsoft US
Integer underflow (wrap or wraparound) in SQL Server allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-77488 Microsoft US
Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-77486 Microsoft US
Use after free in SQL Server allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-77485 US
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-77487 US
Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.
EPSS 0.02 CVE-2026-77484 Microsoft US
Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-77483 US
Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-77480 US
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-73028 US
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-71328 US
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to execute code locally.
EPSS < 0.01 CVE-2026-73017 US
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-73016 Microsoft US
Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security feature over a network.
EPSS 0.01 CVE-2026-73025 US
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-73013 US
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-73023 US
Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-73010 Microsoft US
Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-73006 Microsoft US
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-73009 US
Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-73012 US
Missing authentication for critical function in Windows Autopilot allows an authorized attacker to perform tampering locally.
EPSS < 0.01 CVE-2026-73004 US
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-73026 US
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-73007 US
Heap-based buffer overflow in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-73024 US
Use after free in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-73005 US
Exposure of private personal information to an unauthorized actor in Windows Biometric Service allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-73008 US
Missing authorization in Data Sharing Service Client allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-73014 US
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-73011 US
Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-73022 US
Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-73003 US
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-73015 US
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-73021 US
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-73001 US
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-73000 US
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-73020 US
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-73002 US
Out-of-bounds read in Windows USB Hub Driver allows an unauthorized attacker to elevate privileges with a physical attack.
EPSS < 0.01 CVE-2026-72999 US
Improper resolution of path equivalence in Windows URL Moniker allows an unauthorized attacker to bypass a security feature over a network.
EPSS 0.01 CVE-2026-73019 US
Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-73018 US
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-72997 US
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-72996 US
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-72994 US
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-72993 US
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-72992 US
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-72991 US