[CVE_SUBSCRIPTIONS]

Receive alerts for specific vendors, products, or severities

📡 [FLUX RSS CVE]

Subscribe to the CVE feed

7 derniers jours

> FILTERS

> Last 7 Days

STATISTIQUES

Total CVE: 409138
> CVE-2026-70277 [MEDIUM 5.5]
Out-of-bounds read in Windows Fast FAT Driver allows an unauthorized attacker to disclose information locally.
> CVE-2026-70276 [HIGH 7.0]
Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
> CVE-2026-70275 [HIGH 8.8]
Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network.
> CVE-2026-70274 [HIGH 7.8]
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
> CVE-2026-70273 [HIGH 7.0]
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
> CVE-2026-70272 [HIGH 7.0]
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
> CVE-2026-70271 [HIGH 7.0]
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
> CVE-2026-70270 [MEDIUM 5.5]
Untrusted pointer dereference in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally.
> CVE-2026-70269 [HIGH 8.1]
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
> CVE-2026-70268 [HIGH 8.8]
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
> CVE-2026-70267 [HIGH 7.2]
Inclusion of functionality from untrusted control sphere in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
> CVE-2026-70266 [HIGH 8.8]
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
> CVE-2026-70264 [MEDIUM 5.5]
Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to disclose information locally.
> CVE-2026-70263 [MEDIUM 6.5]
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
> CVE-2026-70262 [HIGH 8.8]
Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a network.
> CVE-2026-70261 [MEDIUM 5.5]
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.
> CVE-2026-70260 [MEDIUM 5.5]
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.
> CVE-2026-70259 [MEDIUM 6.5]
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
> CVE-2026-70258 [HIGH 8.8]
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
> CVE-2026-70257 [HIGH 8.8]
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
> CVE-2026-70256 [HIGH 8.8]
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
> CVE-2026-70255 [HIGH 7.8]
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
> CVE-2026-70254 [HIGH 8.8]
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
> CVE-2026-70253 [HIGH 7.0]
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
> CVE-2026-70252 [HIGH 7.0]
Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
> CVE-2026-70251 [HIGH 7.5]
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
> CVE-2026-70250 [HIGH 8.8]
Use after free in Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network.
> CVE-2026-70249 [HIGH 7.0]
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
> CVE-2026-70248 [MEDIUM 6.5]
Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.
> CVE-2026-70247 [HIGH 7.8]
Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute code locally.
> CVE-2026-70246 [HIGH 8.8]
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
> CVE-2026-70245 [HIGH 7.8]
Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
> CVE-2026-70244 [MEDIUM 6.5]
Out-of-bounds read in DNS Server allows an unauthorized attacker to disclose information over a network.
> CVE-2026-70243 [HIGH 7.0]
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
> CVE-2026-70242 [CRITICAL 9.8]
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
> CVE-2026-70241 [HIGH 7.0]
Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally.
> CVE-2026-70238 [HIGH 7.8]
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
> CVE-2026-70237 [HIGH 7.0]
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
> CVE-2026-70236 [HIGH 7.0]
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
> CVE-2026-70235 [MEDIUM 5.5]
Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally.
> CVE-2026-70234 [MEDIUM 5.5]
Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose information locally.
> CVE-2026-70233 [HIGH 7.8]
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
> CVE-2026-70232 [MEDIUM 5.5]
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.
> CVE-2026-70230 [HIGH 7.0]
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
> CVE-2026-70229 [HIGH 8.1]
Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.
> CVE-2026-70228 [HIGH 7.8]
Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
> CVE-2026-70227 [MEDIUM 5.5]
Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.
> CVE-2026-70225 [HIGH 7.8]
Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
> CVE-2026-70223 [HIGH 7.0]
Use after free in Windows Console Driver allows an authorized attacker to elevate privileges locally.
> CVE-2026-70222 [HIGH 7.8]
Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally.