VYPR

Vendor CVEs

Microsoft

All CVEs

18,147 total · sorted by risk
  • CVE-2026-96863MedOct 13, 2026
    risk 0.44cvss 6.8epss 0.00

    Heap-based buffer overflow in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack.

  • CVE-2026-96231HigOct 13, 2026
    risk 0.44cvss 7.8epss 0.00

    Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

  • CVE-2026-96225HigOct 13, 2026
    risk 0.44cvss 7.8epss 0.00

    Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

  • CVE-2026-88143MedOct 13, 2026
    risk 0.44cvss 6.7epss 0.00

    Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.

  • CVE-2026-85333MedOct 13, 2026
    risk 0.44cvss 6.7epss 0.00

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.

  • CVE-2026-85323MedOct 13, 2026
    risk 0.44cvss 6.8epss 0.00

    Weak authentication in Network Device Enrollment Service (NDES) allows an authorized attacker to perform spoofing over a network.

  • CVE-2026-83895MedOct 13, 2026
    risk 0.44cvss 6.8epss 0.00

    Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an unauthorized attacker to elevate privileges with a physical attack.

  • CVE-2026-83776MedOct 13, 2026
    risk 0.44cvss 6.8epss 0.00

    Out-of-bounds read in Microsoft Bluetooth Driver allows an unauthorized attacker to elevate privileges with a physical attack.

  • CVE-2026-83706MedOct 13, 2026
    risk 0.44cvss 6.7epss 0.00

    Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.

  • CVE-2026-83573MedOct 13, 2026
    risk 0.44cvss 6.8epss 0.00

    Integer overflow or wraparound in Windows Kernel Mode Driver allows an unauthorized attacker to elevate privileges with a physical attack.

  • CVE-2026-70165MedOct 13, 2026
    risk 0.44cvss 6.7epss 0.00

    Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

  • CVE-2026-69958MedOct 13, 2026
    risk 0.44cvss 6.8epss 0.00

    Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack.

  • CVE-2026-69947MedOct 13, 2026
    risk 0.44cvss 6.8epss 0.00

    Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack.

  • CVE-2026-69902MedOct 13, 2026
    risk 0.44cvss 6.7epss 0.00

    Untrusted pointer dereference in Windows NTFS allows an authorized attacker to execute code locally.

  • CVE-2026-59116MedOct 13, 2026
    risk 0.44cvss 6.8epss 0.00

    Use of a broken or risky cryptographic algorithm in Windows Remote Desktop allows an unauthorized attacker to bypass a security feature over a network.

  • CVE-2026-103578MedOct 13, 2026
    risk 0.44cvss 6.8epss 0.00

    Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.

  • CVE-2026-102229MedOct 13, 2026
    risk 0.44cvss 6.8epss 0.01

    Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an authorized attacker to disclose information over a network.

  • CVE-2026-102206MedOct 13, 2026
    risk 0.44cvss 6.8epss 0.00

    Heap-based buffer overflow in Windows Portable Device MTP Driver allows an unauthorized attacker to elevate privileges with a physical attack.

  • CVE-2026-102188MedOct 13, 2026
    risk 0.44cvss 6.8epss 0.00

    Untrusted pointer dereference in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack.

  • CVE-2026-78451MedSep 8, 2026
    risk 0.44cvss 6.8epss 0.00

    Untrusted pointer dereference in Microsoft Windows SCSI Class System File allows an unauthorized attacker to elevate privileges with a physical attack.

  • CVE-2026-77892MedSep 8, 2026
    risk 0.44cvss 6.8epss 0.00

    No cwe for this issue in Windows Boot Manager allows an unauthorized attacker to elevate privileges with a physical attack.

  • CVE-2026-72999MedSep 8, 2026
    risk 0.44cvss 6.8epss 0.00

    Out-of-bounds read in Windows USB Hub Driver allows an unauthorized attacker to elevate privileges with a physical attack.

  • CVE-2026-72985MedSep 8, 2026
    risk 0.44cvss 6.8epss 0.00

    Heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized attacker to elevate privileges with a physical attack.

  • CVE-2026-72948MedSep 8, 2026
    risk 0.44cvss 6.7epss 0.00

    Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally.

  • CVE-2026-72935MedSep 8, 2026
    risk 0.44cvss 6.7epss 0.00

    Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

  • CVE-2026-72927MedSep 8, 2026
    risk 0.44cvss 6.7epss 0.00

    Heap-based buffer overflow in Winsock allows an authorized attacker to elevate privileges locally.

  • CVE-2026-71350MedSep 8, 2026
    risk 0.44cvss 6.8epss 0.00

    Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack.

  • CVE-2026-71349MedSep 8, 2026
    risk 0.44cvss 6.8epss 0.00

    Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack.

  • CVE-2026-71348MedSep 8, 2026
    risk 0.44cvss 6.8epss 0.00

    Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack.

  • CVE-2026-71339MedSep 8, 2026
    risk 0.44cvss 6.7epss 0.00

    Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

  • CVE-2026-71329MedSep 8, 2026
    risk 0.44cvss 6.8epss 0.00

    Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack.

  • CVE-2026-69566MedSep 8, 2026
    risk 0.44cvss 6.8epss 0.00

    Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack.

  • CVE-2026-69490MedSep 8, 2026
    risk 0.44cvss 6.8epss 0.00

    Out-of-bounds read in Windows USB Mass Storage Class Driver allows an unauthorized attacker to elevate privileges with a physical attack.

  • CVE-2026-69449MedSep 8, 2026
    risk 0.44cvss 6.7epss 0.00

    Heap-based buffer overflow in Windows BitLocker allows an authorized attacker to execute code locally.

  • CVE-2026-69415MedSep 8, 2026
    risk 0.44cvss 6.8epss 0.01

    Missing authentication for critical function in Windows DHCP Server allows an authorized attacker to elevate privileges over a network.

  • CVE-2026-69373MedSep 8, 2026
    risk 0.44cvss 6.7epss 0.00

    Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

  • CVE-2026-69350MedSep 8, 2026
    risk 0.44cvss 6.7epss 0.00

    Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

  • CVE-2026-68833MedSep 8, 2026
    risk 0.44cvss 6.8epss 0.00

    Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack.

  • CVE-2026-65812MedSep 8, 2026
    risk 0.44cvss 6.8epss 0.01

    Insertion of sensitive information into sent data in Microsoft Teams for Android allows an authorized attacker to disclose information over a network.

  • CVE-2026-65680MedAug 11, 2026
    risk 0.44cvss 6.7epss 0.00

    Improper link resolution before file access ('link following') in Microsoft OneDrive allows an authorized attacker to elevate privileges locally.

  • CVE-2026-70330MedAug 11, 2026
    risk 0.44cvss 6.7epss 0.00

    Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.

  • CVE-2026-70304MedAug 11, 2026
    risk 0.44cvss 6.7epss 0.00

    Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.

  • CVE-2026-65799MedAug 11, 2026
    risk 0.44cvss 6.7epss 0.00

    Integer overflow or wraparound in Windows DNS allows an authorized attacker to elevate privileges locally.

  • CVE-2026-65798MedAug 11, 2026
    risk 0.44cvss 6.7epss 0.00

    Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.

  • CVE-2026-65797MedAug 11, 2026
    risk 0.44cvss 6.7epss 0.00

    Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.

  • CVE-2026-65795MedAug 11, 2026
    risk 0.44cvss 6.7epss 0.00

    Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally.

  • CVE-2026-62909HigAug 11, 2026
    risk 0.44cvss 7.8epss 0.00

    Uncaught exception in .NET allows an authorized attacker to elevate privileges locally.

  • CVE-2026-62886HigAug 11, 2026
    risk 0.44cvss 7.8epss 0.00

    Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.

  • CVE-2026-62883MedAug 11, 2026
    risk 0.44cvss 6.7epss 0.00

    Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.

  • CVE-2026-62881MedAug 11, 2026
    risk 0.44cvss 6.7epss 0.00

    Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.

Page 191 of 363