[CVE_SUBSCRIPTIONS]

Receive alerts for specific vendors, products, or severities

📡 [FLUX RSS CVE]

Subscribe to the CVE feed

7 derniers jours

> FILTERS

> Last 7 Days

STATISTIQUES

Total CVE: 409150
> CVE-2026-70112 [HIGH 7.8]
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to execute code locally.
> CVE-2026-70111 [HIGH 8.1]
Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges over a network.
> CVE-2026-70110 [HIGH 7.8]
Stack-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.
> CVE-2026-70109 [HIGH 7.8]
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.
> CVE-2026-70108 [HIGH 7.8]
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
> CVE-2026-70106 [HIGH 7.8]
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
> CVE-2026-70104 [HIGH 7.8]
Untrusted pointer dereference in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
> CVE-2026-70103 [HIGH 7.8]
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
> CVE-2026-70102 [HIGH 7.8]
Use after free in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
> CVE-2026-70097 [MEDIUM 5.6]
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to perform spoofing locally.
> CVE-2026-70096 [CRITICAL 9.8]
Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network.
> CVE-2026-70095 [HIGH 7.5]
Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.
> CVE-2026-70093 [HIGH 7.8]
Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally.
> CVE-2026-70092 [HIGH 7.8]
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.
> CVE-2026-70090 [MEDIUM 5.5]
Use of uninitialized resource in Windows Netlogon allows an authorized attacker to disclose information locally.
> CVE-2026-70089 [HIGH 8.8]
Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code over a network.
> CVE-2026-70087 [MEDIUM 5.5]
Incorrect authorization in DNS Server allows an authorized attacker to bypass a security feature locally.
> CVE-2026-70086 [HIGH 7.0]
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
> CVE-2026-70085 [MEDIUM 5.5]
Missing authorization in DNS Server allows an authorized attacker to perform tampering locally.
> CVE-2026-70084 [MEDIUM 5.5]
Improper access control in Windows Projected File System allows an authorized attacker to disclose information locally.
> CVE-2026-70083 [MEDIUM 5.5]
Incorrect authorization in DNS Server allows an authorized attacker to perform tampering locally.
> CVE-2026-70082 [HIGH 7.5]
Uncaught exception in Windows DNS allows an unauthorized attacker to deny service over a network.
> CVE-2026-70079 [HIGH 7.5]
Improper enforcement of behavioral workflow in Windows DNS allows an unauthorized attacker to deny service over a network.
> CVE-2026-70077 [MEDIUM 4.7]
Use after free in Windows Kernel allows an authorized attacker to disclose information locally.
> CVE-2026-70076 [HIGH 7.0]
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
> CVE-2026-70075 [MEDIUM 4.4]
Time-of-check time-of-use (toctou) race condition in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally.
> CVE-2026-70074 [MEDIUM 5.5]
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally.
> CVE-2026-70072 [MEDIUM 6.5]
Allocation of resources without limits or throttling in Windows Netlogon allows an authorized attacker to deny service over a network.
> CVE-2026-70071 [MEDIUM 5.5]
Improper verification of cryptographic signature in DNS Server allows an authorized attacker to perform tampering locally.
> CVE-2026-70069 [HIGH 8.8]
Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network.
> CVE-2026-70068 [HIGH 8.8]
Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an unauthorized attacker to elevate privileges over a network.
> CVE-2026-70067 [HIGH 7.0]
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
> CVE-2026-70066 [HIGH 7.0]
Use after free in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
> CVE-2026-70064 [HIGH 7.8]
Integer underflow (wrap or wraparound) in Windows Kerberos allows an authorized attacker to elevate privileges locally.
> CVE-2026-70063 [MEDIUM 4.7]
Out-of-bounds read in Windows Kernel allows an authorized attacker to disclose information locally.
> CVE-2026-70062 [HIGH 8.1]
Double free in Windows Libarchive allows an unauthorized attacker to execute code over a network.
> CVE-2026-70060 [HIGH 7.8]
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
> CVE-2026-70059 [HIGH 7.8]
Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.
> CVE-2026-70058 [HIGH 7.5]
Out-of-bounds write in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
> CVE-2026-70057 [MEDIUM 5.5]
Incorrect authorization in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to bypass a security feature locally.
> CVE-2026-70056 [HIGH 7.0]
Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally.
> CVE-2026-70055 [MEDIUM 5.5]
Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic Services allows an authorized attacker to disclose information locally.
> CVE-2026-70054 [HIGH 7.8]
Heap-based buffer overflow in Windows NetBIOS allows an authorized attacker to elevate privileges locally.
> CVE-2026-70052 [HIGH 7.8]
Integer overflow or wraparound in Windows PowerShell allows an authorized attacker to execute code locally.
> CVE-2026-70051 [HIGH 7.8]
Access of resource using incompatible type ('type confusion') in Windows SmartScreen allows an authorized attacker to elevate privileges locally.
> CVE-2026-70049 [HIGH 8.0]
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over an adjacent network.
> CVE-2026-70048 [HIGH 7.8]
Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
> CVE-2026-70045 [HIGH 7.0]
Use after free in Windows Work Folders allows an authorized attacker to elevate privileges locally.
> CVE-2026-70044 [MEDIUM 5.5]
Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to disclose information locally.
> CVE-2026-70041 [MEDIUM 5.5]
Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally.