CVE-2026-83769 Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability
Use after free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-83769 Microsoft US
Výsledky hledání
· zachyceno
· zachyceno
CVE-2026-70163 Microsoft OpenSSH for Windows Denial of Service Vulnerability
Allocation of resources without limits or throttling in OpenSSH for Windows allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-70163 Microsoft US
· zachyceno
CVE-2026-70086 Microsoft Windows Search Component Elevation of Privilege Vulnerability
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-70086 Microsoft US
· zachyceno
CVE-2026-83868 Microsoft Bluetooth Driver Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-83868 Microsoft US
· zachyceno
CVE-2026-83847 Microsoft Account Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-83847 Microsoft US
· zachyceno
CVE-2026-83776 Windows Bluetooth Driver Elevation of Privilege Vulnerability
Out-of-bounds read in Microsoft Bluetooth Driver allows an unauthorized attacker to elevate privileges with a physical attack.
EPSS 0.01 CVE-2026-83776 Microsoft US
· zachyceno
CVE-2026-83760 Microsoft Bluetooth Driver Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Bluetooth Driver allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-83760 Microsoft US
· zachyceno
CVE-2026-83754 Microsoft OpenSSH for Windows Remote Code Execution Vulnerability
Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-83754 Microsoft US
· zachyceno
CVE-2026-83722 Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability
Use after free in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-83722 Microsoft US
· zachyceno
CVE-2026-83704 Microsoft Windows Search Component Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-83704 Microsoft US
· zachyceno
CVE-2026-83681 Microsoft PowerToys Tampering Vulnerability
Weak authentication in Microsoft PowerToys allows an authorized attacker to perform tampering locally.
EPSS 0.00 CVE-2026-83681 Microsoft US
· zachyceno
CVE-2026-83578 Microsoft PowerShell Remote Code Execution Vulnerability
Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-83578 Microsoft US
· zachyceno
CVE-2026-83575 Windows Search Service Elevation of Privilege Vulnerability
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-83575 Microsoft US
· zachyceno
CVE-2026-67625 Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-67625 Microsoft US
· zachyceno
CVE-2026-70278 Microsoft Windows Media Foundation Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-70278 Microsoft US
· zachyceno
CVE-2026-70156 Microsoft Windows Search Component Elevation of Privilege Vulnerability
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-70156 Microsoft US
· zachyceno
CVE-2026-70177 Microsoft Windows Search Component Elevation of Privilege Vulnerability
Numeric truncation error in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-70177 Microsoft US
· zachyceno
CVE-2026-70150 Microsoft Windows Search Component Elevation of Privilege Vulnerability
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-70150 Microsoft US
· zachyceno
CVE-2026-70173 Microsoft Windows Search Component Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-70173 Microsoft US
· zachyceno
CVE-2026-70141 Microsoft Windows Search Component Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-70141 Microsoft US
· zachyceno
CVE-2026-70136 Microsoft Windows Search Component Elevation of Privilege Vulnerability
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-70136 Microsoft US
· zachyceno
CVE-2026-70115 Microsoft Windows Search Component Elevation of Privilege Vulnerability
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-70115 Microsoft US
· zachyceno
CVE-2026-70123 Microsoft Graphics Component Elevation of Privilege Vulnerability
Numeric truncation error in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-70123 Microsoft US
· zachyceno
CVE-2026-69978 Microsoft Windows VMSwitch Denial of Service Vulnerability
Null pointer dereference in Windows VMSwitch allows an authorized attacker to deny service locally.
EPSS 0.00 CVE-2026-69978 Microsoft US
· zachyceno
CVE-2026-69970 Kernel Streaming Service Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-69970 Microsoft US
· zachyceno
CVE-2026-69964 Kernel Streaming Service Driver Elevation of Privilege Vulnerability
Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-69964 Microsoft US
· zachyceno
CVE-2026-69966 Kernel Streaming Service Driver Elevation of Privilege Vulnerability
Integer overflow or wraparound in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-69966 Microsoft US
· zachyceno
CVE-2026-69963 Kernel Streaming Service Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-69963 Microsoft US
· zachyceno
CVE-2026-69909 Microsoft COM for Windows Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-69909 Microsoft US
· zachyceno
CVE-2026-105731 Microsoft Office Graphics Component Information Disclosure Vulnerability
Use of uninitialized resource in Microsoft Graphics Component allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-105731 Microsoft US
· zachyceno
CVE-2026-105726 Microsoft Defender Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Defender allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-105726 Microsoft US
· zachyceno
CVE-2026-105719 Microsoft SharePoint Server Information Disclosure Vulnerability
Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-105719 Microsoft US
· zachyceno
CVE-2026-105718 Microsoft Excel Remote Code Execution Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-105718 Microsoft US
· zachyceno
CVE-2026-105717 Microsoft Office Access Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-105717 Microsoft US
· zachyceno
CVE-2026-108467 Microsoft PostScript Printer Driver Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-108467 Microsoft US
· zachyceno
CVE-2026-105720 Microsoft Office SharePoint Elevation of Privilege Vulnerability
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
EPSS 0.00 CVE-2026-105720 Microsoft US
· zachyceno
CVE-2026-105716 Microsoft Office Access Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-105716 Microsoft US
· zachyceno
CVE-2026-105715 Microsoft Office Word Remote Code Execution Vulnerability
Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-105715 Microsoft US
· zachyceno
CVE-2026-105714 Microsoft Office Access Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-105714 Microsoft US
· zachyceno
CVE-2026-105713 Microsoft Office SharePoint Spoofing Vulnerability
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over an adjacent network.
EPSS 0.00 CVE-2026-105713 Microsoft US
· zachyceno
CVE-2026-94506 Microsoft Office Access Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-94506 Microsoft US
· zachyceno
CVE-2026-105599 Microsoft Office PowerPoint Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-105599 Microsoft US
· zachyceno
CVE-2026-105598 Microsoft Office Access Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-105598 Microsoft US
· zachyceno
CVE-2026-105597 Microsoft Office Access Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-105597 Microsoft US
· zachyceno
CVE-2026-105596 Microsoft Office Access Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-105596 Microsoft US
· zachyceno
CVE-2026-105595 Microsoft Office Access Remote Code Execution Vulnerability
Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-105595 Microsoft US
· zachyceno
CVE-2026-105593 Microsoft Office Access Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-105593 Microsoft US
· zachyceno
CVE-2026-105592 Microsoft Office Access Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-105592 Microsoft US
· zachyceno
CVE-2026-105591 Microsoft Office Access Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-105591 Microsoft US
· zachyceno
CVE-2026-102867 Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-102867 Microsoft US
· zachyceno
CVE-2026-102866 Microsoft Office SharePoint Elevation of Privilege Vulnerability
Improper verification of cryptographic signature in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-102866 Microsoft US
· zachyceno
CVE-2026-102865 Microsoft Office SharePoint Information Disclosure Vulnerability
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-102865 Microsoft US
· zachyceno
CVE-2026-102864 Microsoft Office SharePoint Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
EPSS 0.00 CVE-2026-102864 Microsoft US
· zachyceno
CVE-2026-102863 Microsoft Office SharePoint Elevation of Privilege Vulnerability
Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-102863 Microsoft US
· zachyceno
CVE-2026-102862 Microsoft Office SharePoint Elevation of Privilege Vulnerability
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-102862 Microsoft US
· zachyceno
CVE-2026-102861 Microsoft Office SharePoint Elevation of Privilege Vulnerability
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-102861 Microsoft US
· zachyceno
CVE-2026-102860 Microsoft Office SharePoint Elevation of Privilege Vulnerability
Improper access control in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-102860 Microsoft US
· zachyceno
CVE-2026-102859 Microsoft Office SharePoint Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
EPSS 0.00 CVE-2026-102859 Microsoft US
· zachyceno
CVE-2026-102858 Microsoft Office OneNote Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-102858 Microsoft US
· zachyceno
CVE-2026-102857 Microsoft Office Visio Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-102857 Microsoft US