CVE-2026-69345 Microsoft Standard XPS Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-69345 Microsoft US
Výsledky hledání
· zachyceno
· zachyceno
CVE-2026-69347 Windows Fast FAT Driver Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.
EPSS < 0.01 CVE-2026-69347 US
· zachyceno
CVE-2026-69338 Remote Desktop Gateway Service Elevation of Privilege Vulnerability
Use after free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-69338 US
· zachyceno
CVE-2026-69339 Windows MIDI Service Module Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-69339 US
· zachyceno
CVE-2026-69333 Windows Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69333 US
· zachyceno
CVE-2026-69337 Windows Registry Elevation of Privilege Vulnerability
Double free in Windows Registry allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-69337 US
· zachyceno
CVE-2026-69366 Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-69366 US
· zachyceno
CVE-2026-69310 Windows DNS Elevation of Privilege Vulnerability
Use after free in Windows DNS allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69310 US
· zachyceno
CVE-2026-69336 Microsoft Standard XPS Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-69336 Microsoft US
· zachyceno
CVE-2026-69325 Microsoft JScript Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft JScript allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69325 Microsoft US
· zachyceno
CVE-2026-69296 Windows Device Association Service Elevation of Privilege Vulnerability
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-69296 US
· zachyceno
CVE-2026-69279 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69279 US
· zachyceno
CVE-2026-69307 Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69307 US
· zachyceno
CVE-2026-69292 Remote Desktop Gateway Service Elevation of Privilege Vulnerability
Double free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69292 US
· zachyceno
CVE-2026-69276 Microsoft UxTheme Library (uxtheme.dll) Remote Code Execution Vulnerability
Integer underflow (wrap or wraparound) in Microsoft UxTheme Library (uxtheme.dll) allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69276 Microsoft US
· zachyceno
CVE-2026-69267 Windows Connected User Experiences and Telemetry Information Disclosure Vulnerability
Insufficient granularity of access control in Windows Connected User Experiences and Telemetry allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-69267 US
· zachyceno
CVE-2026-69281 Windows License Manager Elevation of Privilege Vulnerability
Use after free in Windows License Manager allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69281 US
· zachyceno
CVE-2026-68893 Remote Desktop Licensing Service Elevation of Privilege Vulnerability
Use after free in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-68893 US
· zachyceno
CVE-2026-68892 Microsoft Standard XPS Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-68892 Microsoft US
· zachyceno
CVE-2026-69271 Microsoft Standard XPS Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-69271 Microsoft US
· zachyceno
CVE-2026-68890 Microsoft Standard XPS Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-68890 Microsoft US
· zachyceno
CVE-2026-68881 Microsoft Standard XPS Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-68881 Microsoft US
· zachyceno
CVE-2026-68884 Windows Kernel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-68884 US
· zachyceno
CVE-2026-68878 Windows Fast FAT Driver Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows Fast FAT Driver allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-68878 US
· zachyceno
CVE-2026-68897 Microsoft Standard XPS Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-68897 Microsoft US
· zachyceno
CVE-2026-68875 Windows NTFS Remote Code Execution Vulnerability
Buffer over-read in Windows NTFS allows an authorized attacker to execute code locally.
EPSS < 0.01 CVE-2026-68875 US
· zachyceno
CVE-2026-68851 Windows NTFS Information Disclosure Vulnerability
Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-68851 US
· zachyceno
CVE-2026-68846 Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-68846 US
· zachyceno
CVE-2026-68845 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-68845 US
· zachyceno
CVE-2026-68849 Windows Bluetooth Port Driver Information Disclosure Vulnerability
Out-of-bounds read in Windows Bluetooth Port Driver allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-68849 US
· zachyceno
CVE-2026-68847 Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-68847 US
· zachyceno
CVE-2026-68841 Windows NTFS Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-68841 US
· zachyceno
CVE-2026-68835 Windows Print Spooler Components Elevation of Privilege Vulnerability
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-68835 US
· zachyceno
CVE-2026-68833 Windows NTFS Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack.
EPSS < 0.01 CVE-2026-68833 US
· zachyceno
CVE-2026-68832 Windows NTFS Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-68832 US
· zachyceno
CVE-2026-68830 Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability
Improper link resolution before file access ('link following') in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-68830 US
· zachyceno
CVE-2026-68824 Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-68824 US
· zachyceno
CVE-2026-68787 Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.
EPSS < 0.01 CVE-2026-68787 Microsoft US
· zachyceno
CVE-2026-68785 Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-68785 Microsoft US
· zachyceno
CVE-2026-68784 Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-68784 Microsoft US
· zachyceno
CVE-2026-68781 Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-68781 Microsoft US
· zachyceno
CVE-2026-67633 Microsoft SQL Server Denial of Service Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-67633 Microsoft US
· zachyceno
CVE-2026-67631 Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-67631 Microsoft US
· zachyceno
CVE-2026-67630 Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-67630 Microsoft US
· zachyceno
CVE-2026-67629 Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-67629 Microsoft US
· zachyceno
CVE-2026-67373 Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-67373 Microsoft US
· zachyceno
CVE-2026-67370 Microsoft SQL Server Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-67370 Microsoft US
· zachyceno
CVE-2026-67368 Microsoft SQL Server Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in SQL Server allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-67368 Microsoft US
· zachyceno
CVE-2026-50349 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-50349 US
· zachyceno
CVE-2026-55007 Microsoft Exchange Server Remote Code Execution Vulnerability
Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-55007 Microsoft US
· zachyceno
CVE-2026-62801 Microsoft PowerShell Security Feature Bypass Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network.
EPSS 0.01 CVE-2026-62801 Microsoft US
· zachyceno
CVE-2026-57098 Microsoft Remote Desktop App for Windows Information Disclosure Vulnerability
Improper verification of cryptographic signature in Windows RDP Client allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-57098 Microsoft US
· zachyceno
CVE-2026-77482 Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-77482 Microsoft US
· zachyceno
CVE-2026-85360 Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85360 US
· zachyceno
CVE-2026-83941 Entra ID Elevation of Privilege Vulnerability
Missing authorization in Entra ID allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-83941 US
· zachyceno
CVE-2026-69782 Windows DNS Server Remote Code Execution Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in DNS Server allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69782 US
· zachyceno
CVE-2026-70091 Windows DNS Denial of Service Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-70091 US
· zachyceno
CVE-2026-69522 .NET and Visual Studio Remote Code Execution Vulnerability
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69522 US
· zachyceno
CVE-2026-69341 Windows Image Acquisition Elevation of Privilege Vulnerability
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69341 US
· zachyceno
CVE-2026-62895 Azure Arc SQL Server Extension Elevation of Privilege Vulnerability
Permissive cross-domain policy with untrusted domains in Azure Arc allows an unauthorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-62895 US