Vendor CVEs
Microsoft
All CVEs
18,138 total · sorted by risk| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-88194 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-88193 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Scripting Engine allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-88191 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-88189 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-88188 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-88182 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-88181 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-88180 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-88179 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-88177 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-88168 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-88152 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Use after free in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-88147 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-88135 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Improper access control in WebDAV allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-88134 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-88133 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Improper authorization in Windows Portable Device Enumerator Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-88128 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-88126 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-88118 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Integer overflow or wraparound in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-88109 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-88105 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-88101 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-88100 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-88093 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-88091 | Hig | 0.51 | 7.8 | 0.03 | Oct 13, 2026 | Deserialization of untrusted data in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-88080 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-88074 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-88072 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-88071 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-88070 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-87712 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Use after free in Windows Quality of Service (QoS) Packet Scheduler allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-87711 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-87707 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Fax and Scan Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-87706 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-87702 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Integer overflow or wraparound in Windows Resource Management (MRM) allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-87700 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-87699 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-87695 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-87694 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-87692 | Hig | 0.51 | 7.8 | 0.02 | Oct 13, 2026 | Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-87691 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85945 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85933 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85927 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85915 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85911 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Use after free in Windows StateRepository API allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85908 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85906 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85902 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85901 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. |
- risk 0.51cvss 7.8epss 0.00
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Microsoft Scripting Engine allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Improper access control in WebDAV allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Improper authorization in Windows Portable Device Enumerator Service allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Integer overflow or wraparound in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.03
Deserialization of untrusted data in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Use after free in Windows Quality of Service (QoS) Packet Scheduler allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows Fax and Scan Service allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Integer overflow or wraparound in Windows Resource Management (MRM) allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.02
Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Use after free in Windows StateRepository API allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
Page 75 of 363