[CVE_SUBSCRIPTIONS]

Receive alerts for specific vendors, products, or severities

📡 [FLUX RSS CVE]

Subscribe to the CVE feed

7 derniers jours

> FILTERS

> Last 7 Days

STATISTIQUES

Total CVE: 415466
> CVE-2026-68873 [MEDIUM 5.5]
Insertion of sensitive information into log file in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information locally.
> CVE-2026-68852 [MEDIUM 5.5]
Use of uninitialized resource in Microsoft Account allows an authorized attacker to disclose information locally.
> CVE-2026-68851 [MEDIUM 5.5]
Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.
> CVE-2026-68850 [HIGH 7.8]
Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally.
> CVE-2026-68849 [MEDIUM 4.7]
Out-of-bounds read in Windows Bluetooth Port Driver allows an authorized attacker to disclose information locally.
> CVE-2026-68848 [HIGH 7.8]
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
> CVE-2026-68847 [HIGH 7.0]
Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.
> CVE-2026-68846 [HIGH 7.1]
Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network.
> CVE-2026-68845 [HIGH 7.8]
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
> CVE-2026-68844 [HIGH 7.8]
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally.
> CVE-2026-68843 [MEDIUM 5.5]
Use after free in Microsoft Office Word allows an authorized attacker to disclose information locally.
> CVE-2026-68842 [MEDIUM 5.5]
Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally.
> CVE-2026-68841 [HIGH 7.8]
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
> CVE-2026-68840 [HIGH 7.0]
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Driver allows an authorized attacker to elevate privileges locally.
> CVE-2026-68839 [CRITICAL 9.8]
Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network.
> CVE-2026-68838 [HIGH 8.0]
Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.
> CVE-2026-68837 [HIGH 7.0]
Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally.
> CVE-2026-68835 [HIGH 7.1]
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network.
> CVE-2026-68834 [HIGH 8.0]
Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.
> CVE-2026-68833 [MEDIUM 6.8]
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack.
> CVE-2026-68832 [HIGH 7.8]
Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.
> CVE-2026-68831 [MEDIUM 5.5]
Files or directories accessible to external parties in Windows Defender Firewall Service allows an authorized attacker to disclose information locally.
> CVE-2026-68830 [MEDIUM 5.5]
Improper link resolution before file access ('link following') in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to disclose information locally.
> CVE-2026-68828 [HIGH 8.8]
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
> CVE-2026-68827 [HIGH 8.0]
Integer underflow (wrap or wraparound) in Windows GDI+ allows an authorized attacker to elevate privileges over a network.
> CVE-2026-68825 [HIGH 7.0]
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
> CVE-2026-68824 [HIGH 7.0]
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.
> CVE-2026-68787 [HIGH 7.8]
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.
> CVE-2026-68786 [HIGH 8.8]
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
> CVE-2026-68785 [MEDIUM 4.9]
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
> CVE-2026-68784 [MEDIUM 6.5]
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
> CVE-2026-68781 [MEDIUM 6.5]
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
> CVE-2026-68780 [MEDIUM 6.5]
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
> CVE-2026-68779 [MEDIUM 6.5]
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
> CVE-2026-68778 [MEDIUM 6.5]
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
> CVE-2026-68777 [MEDIUM 6.5]
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
> CVE-2026-68776 [MEDIUM 6.5]
Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.
> CVE-2026-68775 [HIGH 8.8]
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
> CVE-2026-67648 [MEDIUM 6.5]
Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.
> CVE-2026-67645 [MEDIUM 6.5]
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
> CVE-2026-67643 [HIGH 8.8]
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
> CVE-2026-67642 [HIGH 8.8]
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
> CVE-2026-67641 [MEDIUM 6.5]
Integer overflow or wraparound in SQL Server allows an authorized attacker to deny service over a network.
> CVE-2026-67639 [HIGH 8.8]
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
> CVE-2026-67638 [HIGH 8.8]
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
> CVE-2026-67636 [HIGH 8.5]
Out-of-bounds read in SQL Server allows an authorized attacker to execute code over a network.
> CVE-2026-67633 [MEDIUM 6.5]
Out-of-bounds read in SQL Server allows an authorized attacker to deny service over a network.
> CVE-2026-67631 [HIGH 8.8]
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
> CVE-2026-67630 [MEDIUM 6.5]
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
> CVE-2026-67629 [MEDIUM 6.5]
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.