Vendor CVEs
Microsoft
All CVEs
18,147 total · sorted by risk| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-96863 | Med | 0.44 | 6.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack. | ||
| CVE-2026-96231 | Hig | 0.44 | 7.8 | 0.00 | Oct 13, 2026 | Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-96225 | Hig | 0.44 | 7.8 | 0.00 | Oct 13, 2026 | Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-88143 | Med | 0.44 | 6.7 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85333 | Med | 0.44 | 6.7 | 0.00 | Oct 13, 2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85323 | Med | 0.44 | 6.8 | 0.00 | Oct 13, 2026 | Weak authentication in Network Device Enrollment Service (NDES) allows an authorized attacker to perform spoofing over a network. | ||
| CVE-2026-83895 | Med | 0.44 | 6.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an unauthorized attacker to elevate privileges with a physical attack. | ||
| CVE-2026-83776 | Med | 0.44 | 6.8 | 0.00 | Oct 13, 2026 | Out-of-bounds read in Microsoft Bluetooth Driver allows an unauthorized attacker to elevate privileges with a physical attack. | ||
| CVE-2026-83706 | Med | 0.44 | 6.7 | 0.00 | Oct 13, 2026 | Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83573 | Med | 0.44 | 6.8 | 0.00 | Oct 13, 2026 | Integer overflow or wraparound in Windows Kernel Mode Driver allows an unauthorized attacker to elevate privileges with a physical attack. | ||
| CVE-2026-70165 | Med | 0.44 | 6.7 | 0.00 | Oct 13, 2026 | Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69958 | Med | 0.44 | 6.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack. | ||
| CVE-2026-69947 | Med | 0.44 | 6.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack. | ||
| CVE-2026-69902 | Med | 0.44 | 6.7 | 0.00 | Oct 13, 2026 | Untrusted pointer dereference in Windows NTFS allows an authorized attacker to execute code locally. | ||
| CVE-2026-59116 | Med | 0.44 | 6.8 | 0.00 | Oct 13, 2026 | Use of a broken or risky cryptographic algorithm in Windows Remote Desktop allows an unauthorized attacker to bypass a security feature over a network. | ||
| CVE-2026-103578 | Med | 0.44 | 6.8 | 0.00 | Oct 13, 2026 | Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack. | ||
| CVE-2026-102229 | Med | 0.44 | 6.8 | 0.01 | Oct 13, 2026 | Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an authorized attacker to disclose information over a network. | ||
| CVE-2026-102206 | Med | 0.44 | 6.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Portable Device MTP Driver allows an unauthorized attacker to elevate privileges with a physical attack. | ||
| CVE-2026-102188 | Med | 0.44 | 6.8 | 0.00 | Oct 13, 2026 | Untrusted pointer dereference in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack. | ||
| CVE-2026-78451 | Med | 0.44 | 6.8 | 0.00 | Sep 8, 2026 | Untrusted pointer dereference in Microsoft Windows SCSI Class System File allows an unauthorized attacker to elevate privileges with a physical attack. | ||
| CVE-2026-77892 | Med | 0.44 | 6.8 | 0.00 | Sep 8, 2026 | No cwe for this issue in Windows Boot Manager allows an unauthorized attacker to elevate privileges with a physical attack. | ||
| CVE-2026-72999 | Med | 0.44 | 6.8 | 0.00 | Sep 8, 2026 | Out-of-bounds read in Windows USB Hub Driver allows an unauthorized attacker to elevate privileges with a physical attack. | ||
| CVE-2026-72985 | Med | 0.44 | 6.8 | 0.00 | Sep 8, 2026 | Heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized attacker to elevate privileges with a physical attack. | ||
| CVE-2026-72948 | Med | 0.44 | 6.7 | 0.00 | Sep 8, 2026 | Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-72935 | Med | 0.44 | 6.7 | 0.00 | Sep 8, 2026 | Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-72927 | Med | 0.44 | 6.7 | 0.00 | Sep 8, 2026 | Heap-based buffer overflow in Winsock allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-71350 | Med | 0.44 | 6.8 | 0.00 | Sep 8, 2026 | Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack. | ||
| CVE-2026-71349 | Med | 0.44 | 6.8 | 0.00 | Sep 8, 2026 | Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack. | ||
| CVE-2026-71348 | Med | 0.44 | 6.8 | 0.00 | Sep 8, 2026 | Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack. | ||
| CVE-2026-71339 | Med | 0.44 | 6.7 | 0.00 | Sep 8, 2026 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-71329 | Med | 0.44 | 6.8 | 0.00 | Sep 8, 2026 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack. | ||
| CVE-2026-69566 | Med | 0.44 | 6.8 | 0.00 | Sep 8, 2026 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack. | ||
| CVE-2026-69490 | Med | 0.44 | 6.8 | 0.00 | Sep 8, 2026 | Out-of-bounds read in Windows USB Mass Storage Class Driver allows an unauthorized attacker to elevate privileges with a physical attack. | ||
| CVE-2026-69449 | Med | 0.44 | 6.7 | 0.00 | Sep 8, 2026 | Heap-based buffer overflow in Windows BitLocker allows an authorized attacker to execute code locally. | ||
| CVE-2026-69415 | Med | 0.44 | 6.8 | 0.01 | Sep 8, 2026 | Missing authentication for critical function in Windows DHCP Server allows an authorized attacker to elevate privileges over a network. | ||
| CVE-2026-69373 | Med | 0.44 | 6.7 | 0.00 | Sep 8, 2026 | Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69350 | Med | 0.44 | 6.7 | 0.00 | Sep 8, 2026 | Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-68833 | Med | 0.44 | 6.8 | 0.00 | Sep 8, 2026 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack. | ||
| CVE-2026-65812 | Med | 0.44 | 6.8 | 0.01 | Sep 8, 2026 | Insertion of sensitive information into sent data in Microsoft Teams for Android allows an authorized attacker to disclose information over a network. | ||
| CVE-2026-65680 | Med | 0.44 | 6.7 | 0.00 | Aug 11, 2026 | Improper link resolution before file access ('link following') in Microsoft OneDrive allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70330 | Med | 0.44 | 6.7 | 0.00 | Aug 11, 2026 | Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70304 | Med | 0.44 | 6.7 | 0.00 | Aug 11, 2026 | Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-65799 | Med | 0.44 | 6.7 | 0.00 | Aug 11, 2026 | Integer overflow or wraparound in Windows DNS allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-65798 | Med | 0.44 | 6.7 | 0.00 | Aug 11, 2026 | Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-65797 | Med | 0.44 | 6.7 | 0.00 | Aug 11, 2026 | Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-65795 | Med | 0.44 | 6.7 | 0.00 | Aug 11, 2026 | Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-62909 | Hig | 0.44 | 7.8 | 0.00 | Aug 11, 2026 | Uncaught exception in .NET allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-62886 | Hig | 0.44 | 7.8 | 0.00 | Aug 11, 2026 | Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally. | ||
| CVE-2026-62883 | Med | 0.44 | 6.7 | 0.00 | Aug 11, 2026 | Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-62881 | Med | 0.44 | 6.7 | 0.00 | Aug 11, 2026 | Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. |
- risk 0.44cvss 6.8epss 0.00
Heap-based buffer overflow in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack.
- risk 0.44cvss 7.8epss 0.00
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
- risk 0.44cvss 7.8epss 0.00
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
- risk 0.44cvss 6.7epss 0.00
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
- risk 0.44cvss 6.7epss 0.00
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.
- risk 0.44cvss 6.8epss 0.00
Weak authentication in Network Device Enrollment Service (NDES) allows an authorized attacker to perform spoofing over a network.
- risk 0.44cvss 6.8epss 0.00
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an unauthorized attacker to elevate privileges with a physical attack.
- risk 0.44cvss 6.8epss 0.00
Out-of-bounds read in Microsoft Bluetooth Driver allows an unauthorized attacker to elevate privileges with a physical attack.
- risk 0.44cvss 6.7epss 0.00
Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.
- risk 0.44cvss 6.8epss 0.00
Integer overflow or wraparound in Windows Kernel Mode Driver allows an unauthorized attacker to elevate privileges with a physical attack.
- risk 0.44cvss 6.7epss 0.00
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
- risk 0.44cvss 6.8epss 0.00
Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack.
- risk 0.44cvss 6.8epss 0.00
Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack.
- risk 0.44cvss 6.7epss 0.00
Untrusted pointer dereference in Windows NTFS allows an authorized attacker to execute code locally.
- risk 0.44cvss 6.8epss 0.00
Use of a broken or risky cryptographic algorithm in Windows Remote Desktop allows an unauthorized attacker to bypass a security feature over a network.
- risk 0.44cvss 6.8epss 0.00
Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.
- risk 0.44cvss 6.8epss 0.01
Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an authorized attacker to disclose information over a network.
- risk 0.44cvss 6.8epss 0.00
Heap-based buffer overflow in Windows Portable Device MTP Driver allows an unauthorized attacker to elevate privileges with a physical attack.
- risk 0.44cvss 6.8epss 0.00
Untrusted pointer dereference in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack.
- risk 0.44cvss 6.8epss 0.00
Untrusted pointer dereference in Microsoft Windows SCSI Class System File allows an unauthorized attacker to elevate privileges with a physical attack.
- risk 0.44cvss 6.8epss 0.00
No cwe for this issue in Windows Boot Manager allows an unauthorized attacker to elevate privileges with a physical attack.
- risk 0.44cvss 6.8epss 0.00
Out-of-bounds read in Windows USB Hub Driver allows an unauthorized attacker to elevate privileges with a physical attack.
- risk 0.44cvss 6.8epss 0.00
Heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized attacker to elevate privileges with a physical attack.
- risk 0.44cvss 6.7epss 0.00
Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally.
- risk 0.44cvss 6.7epss 0.00
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
- risk 0.44cvss 6.7epss 0.00
Heap-based buffer overflow in Winsock allows an authorized attacker to elevate privileges locally.
- risk 0.44cvss 6.8epss 0.00
Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack.
- risk 0.44cvss 6.8epss 0.00
Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack.
- risk 0.44cvss 6.8epss 0.00
Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack.
- risk 0.44cvss 6.7epss 0.00
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
- risk 0.44cvss 6.8epss 0.00
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack.
- risk 0.44cvss 6.8epss 0.00
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack.
- risk 0.44cvss 6.8epss 0.00
Out-of-bounds read in Windows USB Mass Storage Class Driver allows an unauthorized attacker to elevate privileges with a physical attack.
- risk 0.44cvss 6.7epss 0.00
Heap-based buffer overflow in Windows BitLocker allows an authorized attacker to execute code locally.
- risk 0.44cvss 6.8epss 0.01
Missing authentication for critical function in Windows DHCP Server allows an authorized attacker to elevate privileges over a network.
- risk 0.44cvss 6.7epss 0.00
Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
- risk 0.44cvss 6.7epss 0.00
Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
- risk 0.44cvss 6.8epss 0.00
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack.
- risk 0.44cvss 6.8epss 0.01
Insertion of sensitive information into sent data in Microsoft Teams for Android allows an authorized attacker to disclose information over a network.
- risk 0.44cvss 6.7epss 0.00
Improper link resolution before file access ('link following') in Microsoft OneDrive allows an authorized attacker to elevate privileges locally.
- risk 0.44cvss 6.7epss 0.00
Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.
- risk 0.44cvss 6.7epss 0.00
Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.
- risk 0.44cvss 6.7epss 0.00
Integer overflow or wraparound in Windows DNS allows an authorized attacker to elevate privileges locally.
- risk 0.44cvss 6.7epss 0.00
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
- risk 0.44cvss 6.7epss 0.00
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
- risk 0.44cvss 6.7epss 0.00
Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally.
- risk 0.44cvss 7.8epss 0.00
Uncaught exception in .NET allows an authorized attacker to elevate privileges locally.
- risk 0.44cvss 7.8epss 0.00
Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.
- risk 0.44cvss 6.7epss 0.00
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
- risk 0.44cvss 6.7epss 0.00
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
Page 191 of 363