Vendor CVEs
Microsoft
All CVEs
18,138 total · sorted by risk| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-97807 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-97806 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-97804 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-97803 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-97800 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-97799 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-97798 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-97794 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-97792 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-97009 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | ||
| CVE-2026-97001 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. | ||
| CVE-2026-96997 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Use after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-96996 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. | ||
| CVE-2026-96995 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Stack-based buffer overflow in Microsoft Office Word allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-96953 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally. | ||
| CVE-2026-96950 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-96947 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-96946 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-96933 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-96931 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-96929 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-96928 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-96920 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-96918 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-96916 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-96915 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Integer overflow or wraparound in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-96912 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Use after free in Windows Client License Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-96911 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-96867 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Out-of-bounds read in Windows NTFS allows an authorized attacker to execute code locally. | ||
| CVE-2026-96862 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-96856 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-96847 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-96843 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-96324 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-96318 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Resume allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-96317 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-96312 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-96309 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-96308 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-96306 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Out-of-bounds read in Windows Sysmain Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-96249 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-96244 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-96243 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Improper link resolution before file access ('link following') in Windows WalletService allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-96223 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-96220 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Improper control of generation of code ('code injection') in Windows Assigned Access allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-96217 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-96186 | Hig | 0.51 | 7.8 | 0.02 | Oct 13, 2026 | Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-96118 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-96108 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-88210 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally. |
- risk 0.51cvss 7.8epss 0.00
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
- risk 0.51cvss 7.8epss 0.00
Use after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
- risk 0.51cvss 7.8epss 0.00
Stack-based buffer overflow in Microsoft Office Word allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally.
- risk 0.51cvss 7.8epss 0.00
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Integer overflow or wraparound in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Use after free in Windows Client License Service allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Out-of-bounds read in Windows NTFS allows an authorized attacker to execute code locally.
- risk 0.51cvss 7.8epss 0.00
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows Resume allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Out-of-bounds read in Windows Sysmain Service allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Improper link resolution before file access ('link following') in Windows WalletService allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Improper control of generation of code ('code injection') in Windows Assigned Access allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.02
Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.
Page 74 of 363