[CVE_SUBSCRIPTIONS]

Receive alerts for specific vendors, products, or severities

📡 [FLUX RSS CVE]

Subscribe to the CVE feed

7 derniers jours

> FILTERS

> Last 7 Days

STATISTIQUES

Total CVE: 415270
> CVE-2026-78449 [HIGH 8.1]
Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.
> CVE-2026-78448 [HIGH 7.8]
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
> CVE-2026-78447 [HIGH 7.8]
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
> CVE-2026-78446 [MEDIUM 5.3]
Use after free in Windows Distributed File System (DFS) allows an authorized attacker to deny service over a network.
> CVE-2026-78445 [CRITICAL 9.8]
Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network.
> CVE-2026-78444 [HIGH 8.1]
Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.
> CVE-2026-78442 [HIGH 8.8]
Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network.
> CVE-2026-78441 [MEDIUM 6.5]
Out-of-bounds read in Windows OLE DB allows an unauthorized attacker to disclose information over a network.
> CVE-2026-78439 [HIGH 8.8]
Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
> CVE-2026-77911 [MEDIUM 6.5]
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
> CVE-2026-77909 [HIGH 7.7]
Insufficiently protected credentials in Azure CycleCloud allows an authorized attacker to disclose information over a network.
> CVE-2026-77908 [HIGH 8.8]
Improper control of generation of code ('code injection') in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network.
> CVE-2026-77907 [HIGH 8.8]
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
> CVE-2026-77906 [HIGH 8.8]
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
> CVE-2026-77905 [HIGH 7.0]
Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
> CVE-2026-77904 [HIGH 7.8]
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
> CVE-2026-77901 [HIGH 8.8]
Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
> CVE-2026-77899 [HIGH 7.0]
Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally.
> CVE-2026-77898 [HIGH 7.5]
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
> CVE-2026-77897 [HIGH 7.0]
Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally.
> CVE-2026-77896 [MEDIUM 6.5]
Integer overflow or wraparound in Remote Desktop Client allows an unauthorized attacker to deny service over a network.
> CVE-2026-77895 [HIGH 7.5]
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
> CVE-2026-77894 [HIGH 7.0]
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.
> CVE-2026-77893 [HIGH 7.5]
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
> CVE-2026-77892 [MEDIUM 6.8]
No cwe for this issue in Windows Boot Manager allows an unauthorized attacker to elevate privileges with a physical attack.
> CVE-2026-77891 [MEDIUM 6.4]
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally.
> CVE-2026-77890 [HIGH 7.5]
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
> CVE-2026-77889 [HIGH 7.5]
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
> CVE-2026-77888 [HIGH 7.5]
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
> CVE-2026-77887 [MEDIUM 6.4]
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally.
> CVE-2026-77886 [HIGH 7.5]
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
> CVE-2026-77505 [HIGH 8.1]
Use after free in DNS Server allows an unauthorized attacker to execute code over a network.
> CVE-2026-77504 [HIGH 8.8]
Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
> CVE-2026-77503 [HIGH 8.4]
Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.
> CVE-2026-77502 [HIGH 7.5]
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
> CVE-2026-77501 [HIGH 7.5]
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
> CVE-2026-77500 [HIGH 7.8]
Release of invalid pointer or reference in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
> CVE-2026-77499 [HIGH 7.5]
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
> CVE-2026-77498 [HIGH 7.5]
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
> CVE-2026-77495 [HIGH 8.8]
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
> CVE-2026-77494 [HIGH 7.5]
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
> CVE-2026-77493 [CRITICAL 9.8]
Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
> CVE-2026-77492 [MEDIUM 5.5]
Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally.
> CVE-2026-77491 [MEDIUM 5.5]
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally.
> CVE-2026-77489 [HIGH 7.8]
Null pointer dereference in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
> CVE-2026-77488 [MEDIUM 5.5]
Integer underflow (wrap or wraparound) in SQL Server allows an authorized attacker to disclose information locally.
> CVE-2026-77487 [HIGH 8.8]
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.
> CVE-2026-77486 [HIGH 8.8]
Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a network.
> CVE-2026-77485 [HIGH 7.0]
Use after free in SQL Server allows an authorized attacker to elevate privileges locally.
> CVE-2026-77484 [HIGH 8.8]
Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.