[CVE_SUBSCRIPTIONS]

Receive alerts for specific vendors, products, or severities

📡 [FLUX RSS CVE]

Subscribe to the CVE feed

7 derniers jours

> FILTERS

> Last 7 Days

STATISTIQUES

Total CVE: 409150
> CVE-2026-70038 [HIGH 8.1]
Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.
> CVE-2026-70035 [HIGH 8.8]
Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network.
> CVE-2026-70033 [HIGH 7.5]
Missing release of memory after effective lifetime in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network.
> CVE-2026-70031 [HIGH 7.5]
Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a network.
> CVE-2026-70027 [HIGH 7.8]
Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
> CVE-2026-70026 [HIGH 7.0]
Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
> CVE-2026-70025 [MEDIUM 5.3]
Use after free in Windows Netlogon allows an authorized attacker to deny service over a network.
> CVE-2026-70024 [CRITICAL 9.8]
Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network.
> CVE-2026-70023 [HIGH 7.8]
Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
> CVE-2026-70021 [HIGH 7.0]
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
> CVE-2026-70017 [MEDIUM 5.5]
Access of resource using incompatible type ('type confusion') in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.
> CVE-2026-70015 [HIGH 7.8]
Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.
> CVE-2026-70014 [HIGH 7.5]
Use after free in Windows Cryptographic Services allows an authorized attacker to execute code over a network.
> CVE-2026-70013 [HIGH 8.1]
Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.
> CVE-2026-70012 [HIGH 7.5]
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
> CVE-2026-70011 [MEDIUM 5.5]
Out-of-bounds read in Windows IP Over USB Service allows an authorized attacker to disclose information locally.
> CVE-2026-70010 [HIGH 7.8]
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
> CVE-2026-70008 [HIGH 7.8]
Integer overflow or wraparound in Windows IP Over USB Service allows an authorized attacker to elevate privileges locally.
> CVE-2026-70007 [HIGH 8.8]
Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network.
> CVE-2026-70006 [HIGH 7.5]
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
> CVE-2026-70005 [MEDIUM 5.9]
Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network.
> CVE-2026-70004 [HIGH 7.5]
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
> CVE-2026-69999 [MEDIUM 5.5]
Out-of-bounds read in Windows Update allows an authorized attacker to disclose information locally.
> CVE-2026-69998 [HIGH 7.5]
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
> CVE-2026-69997 [HIGH 7.5]
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
> CVE-2026-69996 [HIGH 7.5]
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
> CVE-2026-69995 [HIGH 7.5]
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
> CVE-2026-69994 [HIGH 7.5]
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
> CVE-2026-69992 [HIGH 7.5]
Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.
> CVE-2026-69991 [HIGH 7.5]
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
> CVE-2026-69988 [HIGH 7.5]
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
> CVE-2026-69987 [HIGH 7.5]
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
> CVE-2026-69986 [HIGH 7.5]
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
> CVE-2026-69985 [HIGH 8.8]
Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network.
> CVE-2026-69984 [HIGH 7.5]
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
> CVE-2026-69982 [MEDIUM 5.9]
Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network.
> CVE-2026-69979 [MEDIUM 5.5]
Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attacker to bypass a security feature locally.
> CVE-2026-69978 [MEDIUM 5.6]
Null pointer dereference in Windows VMSwitch allows an authorized attacker to deny service locally.
> CVE-2026-69977 [HIGH 7.0]
Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally.
> CVE-2026-69976 [HIGH 7.5]
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
> CVE-2026-69974 [MEDIUM 4.7]
Out-of-bounds read in Desktop Window Manager allows an authorized attacker to disclose information locally.
> CVE-2026-69973 [MEDIUM 6.5]
Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.
> CVE-2026-69971 [MEDIUM 5.5]
Incorrect authorization in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.
> CVE-2026-69970 [HIGH 7.0]
Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
> CVE-2026-69969 [MEDIUM 4.7]
Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to disclose information locally.
> CVE-2026-69968 [MEDIUM 6.5]
Relative path traversal in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.
> CVE-2026-69967 [MEDIUM 5.5]
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally.
> CVE-2026-69966 [HIGH 7.8]
Integer overflow or wraparound in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
> CVE-2026-69964 [HIGH 7.0]
Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
> CVE-2026-69963 [HIGH 7.8]
Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.