CVE-2026-109461 MEDIUM 5.9 Microsoft Identity Client For Nodejs — Origin validation error in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker… 2026-10-16 CVE-2026-80092 MEDIUM 5.3 Microsoft Identity Web — Authentication bypass by assumed-immutable data in Microsoft Identity Web allows an authorized attacker to ele… 2026-10-16 CVE-2026-108426 HIGH 8.8 Microsoft 365 Apps For Enterprise — Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a net… 2026-10-15 CVE-2026-108427 HIGH 8.8 Microsoft 365 Apps For Enterprise — Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a net… 2026-10-15 CVE-2026-108428 HIGH 8.8 Microsoft 365 Apps For Enterprise — Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a net… 2026-10-15 CVE-2026-108429 HIGH 8.8 Microsoft 365 Apps For Enterprise — Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a net… 2026-10-15 CVE-2026-108430 HIGH 8.8 Microsoft 365 Apps For Enterprise — Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a net… 2026-10-15 CVE-2026-108431 HIGH 8.8 Microsoft 365 Apps For Enterprise — Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a ne… 2026-10-15 CVE-2026-108432 HIGH 8.8 Microsoft 365 Apps For Enterprise — Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a net… 2026-10-15 CVE-2026-108433 HIGH 7.8 Microsoft 365 Apps For Enterprise — Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker t… 2026-10-15 CVE-2026-108434 MEDIUM 6.5 Microsoft 365 Apps For Enterprise — Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a net… 2026-10-15 CVE-2026-108435 MEDIUM 6.5 Microsoft 365 Apps For Enterprise — Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information… 2026-10-15 CVE-2026-108436 MEDIUM 6.5 Microsoft 365 Apps For Enterprise — Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a net… 2026-10-15 CVE-2026-108437 HIGH 8.8 Microsoft 365 Apps For Enterprise — Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a net… 2026-10-15 CVE-2026-108438 MEDIUM 6.5 Microsoft 365 Apps For Enterprise — Use after free in Microsoft Office Word allows an unauthorized attacker to disclose information over a network… 2026-10-15 CVE-2026-108439 HIGH 8.8 Microsoft 365 Apps For Enterprise — Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a net… 2026-10-15 CVE-2026-108440 HIGH 8.8 Microsoft 365 Apps For Enterprise — Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a ne… 2026-10-15 CVE-2026-108441 HIGH 8.8 Microsoft 365 Apps For Enterprise — Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a net… 2026-10-15 CVE-2026-108442 HIGH 8.8 Microsoft 365 Apps For Enterprise — Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 2026-10-15 CVE-2026-108443 HIGH 8.8 Microsoft 365 Apps For Enterprise — Off-by-one error in Microsoft Office Word allows an unauthorized attacker to execute code over a network. 2026-10-15 CVE-2026-108444 HIGH 8.8 Microsoft 365 Apps For Enterprise — Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. 2026-10-15 CVE-2026-108445 HIGH 8.8 Microsoft 365 Apps For Enterprise — Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a ne… 2026-10-15 CVE-2026-108446 HIGH 8.8 Microsoft 365 Apps For Enterprise — Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 2026-10-15 CVE-2026-108447 HIGH 8.8 Microsoft 365 Apps For Enterprise — Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a net… 2026-10-15 CVE-2026-108448 HIGH 7.5 Microsoft 365 Apps For Enterprise — Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a … 2026-10-15 CVE-2026-108449 HIGH 8.8 Microsoft 365 Apps For Enterprise — Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a net… 2026-10-15 CVE-2026-108450 HIGH 8.8 Microsoft 365 Apps For Enterprise — Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a net… 2026-10-15 CVE-2026-108451 HIGH 8.8 Microsoft 365 Apps For Enterprise — Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a netwo… 2026-10-15 CVE-2026-108452 HIGH 8.8 Microsoft Sharepoint Server Subscription Edition — Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint … 2026-10-15 CVE-2026-108453 MEDIUM 6.5 Microsoft 365 Apps For Enterprise — Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over… 2026-10-15 CVE-2026-108454 MEDIUM 6.5 Microsoft 365 Apps For Enterprise — Buffer over-read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a… 2026-10-15 CVE-2026-108455 MEDIUM 6.5 Microsoft 365 Apps For Enterprise — Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over… 2026-10-15 CVE-2026-109468 HIGH 7.5 Microsoft Visual Studio 2022 Version 17.14 — Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny s… 2026-10-15 CVE-2026-88164 HIGH 8.8 Microsoft Sharepoint Server Subscription Edition — Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over … 2026-10-14 CVE-2026-100111 HIGH 7.8 Photoshop — Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code exec… 2026-10-13 CVE-2026-100112 HIGH 7.8 Photoshop — Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code exec… 2026-10-13 CVE-2026-100200 HIGH 7 Windows 11 Version 23h2 — Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally. 2026-10-13 CVE-2026-100201 HIGH 7 Windows 10 Version 1809 — Heap-based buffer overflow in Windows Client License Service allows an authorized attacker to elevate privileg… 2026-10-13 CVE-2026-100202 CRITICAL 9.8 Windows 10 Version 1607 — Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a… 2026-10-13 CVE-2026-100203 HIGH 7 Windows 10 Version 1607 — Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges local… 2026-10-13 CVE-2026-100205 HIGH 7.1 Windows Sysinternals Process Monitor — Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally. 2026-10-13 CVE-2026-100207 HIGH 7.3 Azure Cyclecloud 8.9.1 — Improper neutralization of special elements used in an os command ('os command injection') in Azure CycleCloud… 2026-10-13 CVE-2026-100209 HIGH 8.8 Microsoft 365 Apps For Enterprise — Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 2026-10-13 CVE-2026-100210 HIGH 8.8 Microsoft 365 Apps For Enterprise — Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a ne… 2026-10-13 CVE-2026-100211 HIGH 8.8 Microsoft 365 Apps For Enterprise — Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 2026-10-13 CVE-2026-100212 HIGH 8.8 Microsoft 365 Apps For Enterprise — Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 2026-10-13 CVE-2026-100214 HIGH 8.8 Microsoft Dynamics Nav 2017 — Deserialization of untrusted data in Dynamics Business Central allows an authorized attacker to execute code o… 2026-10-13 CVE-2026-100215 HIGH 7.8 Windows 10 Version 1607 — Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code loc… 2026-10-13 CVE-2026-100216 HIGH 7 Windows 10 Version 1809 — Stack-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. 2026-10-13 CVE-2026-100217 HIGH 7.8 Windows 10 Version 1607 — Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges loca… 2026-10-13 CVE-2026-100218 HIGH 8.1 Windows 10 Version 1607 — Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a networ… 2026-10-13 CVE-2026-100219 CRITICAL 9.8 Windows 11 Version 23h2 — Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network. 2026-10-13 CVE-2026-100220 HIGH 8.8 Windows 10 Version 1607 — Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over… 2026-10-13 CVE-2026-100222 CRITICAL 9.8 Windows 10 Version 1607 — Heap-based buffer overflow in Network Policy Server (NPS) allows an unauthorized attacker to execute code over… 2026-10-13 CVE-2026-100225 HIGH 7 Windows 10 Version 1607 — Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. 2026-10-13 CVE-2026-102186 MEDIUM 4.7 Windows 10 Version 1607 — Untrusted pointer dereference in Windows Network File System allows an authorized attacker to disclose informa… 2026-10-13 CVE-2026-102187 MEDIUM 5.5 Windows 10 Version 1607 — Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally. 2026-10-13 CVE-2026-102188 MEDIUM 6.8 Windows 10 Version 1607 — Untrusted pointer dereference in Windows Storage Port Driver allows an unauthorized attacker to elevate privil… 2026-10-13 CVE-2026-102189 HIGH 7 Windows 11 Version 23h2 — Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. 2026-10-13 CVE-2026-102191 HIGH 7 Windows 11 Version 23h2 — Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. 2026-10-13 CVE-2026-102192 HIGH 7.5 Windows Server 2019 — Integer underflow (wrap or wraparound) in Windows Failover Cluster allows an unauthorized attacker to deny ser… 2026-10-13 CVE-2026-102193 HIGH 7 Windows 10 Version 1809 — Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges local… 2026-10-13 CVE-2026-102194 HIGH 7 Windows 10 Version 1607 — Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. 2026-10-13 CVE-2026-102195 HIGH 7 Windows 11 Version 23h2 — Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges local… 2026-10-13 CVE-2026-102196 HIGH 7.8 Windows 10 Version 1809 — Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges local… 2026-10-13 CVE-2026-102197 HIGH 7 Windows 10 Version 1809 — Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges local… 2026-10-13 CVE-2026-102198 MEDIUM 5.3 Windows 10 Version 1607 — Out-of-bounds read in Windows Remote Desktop Protocol allows an authorized attacker to disclose information ov… 2026-10-13 CVE-2026-102199 MEDIUM 6.5 Windows 10 Version 1607 — Stack-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to deny servic… 2026-10-13 CVE-2026-102201 HIGH 7.8 Windows 10 Version 1809 — Use after free in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges local… 2026-10-13 CVE-2026-102202 HIGH 7.8 Windows 11 Version 23h2 — Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized att… 2026-10-13 CVE-2026-102203 HIGH 8.8 Windows 10 Version 1607 — Access of resource using incompatible type ('type confusion') in RPC Runtime allows an unauthorized attacker t… 2026-10-13 CVE-2026-102204 HIGH 7.8 Windows Subsystem For Linux (Wsl2) — Improper link resolution before file access ('link following') in Windows Subsystem for Linux allows an author… 2026-10-13 CVE-2026-102205 HIGH 7.8 Windows 10 Version 1607 — Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized att… 2026-10-13 CVE-2026-102206 MEDIUM 6.8 Windows 10 Version 1607 — Heap-based buffer overflow in Windows Portable Device MTP Driver allows an unauthorized attacker to elevate pr… 2026-10-13 CVE-2026-102207 HIGH 7 Windows 10 Version 1607 — Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel … 2026-10-13 CVE-2026-102208 HIGH 7 Windows 10 Version 1607 — Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. 2026-10-13 CVE-2026-102209 HIGH 7 Windows 11 Version 26h1 — Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges… 2026-10-13 CVE-2026-102210 CRITICAL 9.8 Windows 10 Version 1809 — Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a netw… 2026-10-13 CVE-2026-102211 HIGH 7 Windows 10 Version 1607 — Use after free in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate… 2026-10-13 CVE-2026-102214 HIGH 8.8 Windows 10 Version 1607 — Use after free in Windows Hyper-V allows an authorized attacker to execute code locally. 2026-10-13 CVE-2026-102215 HIGH 7.8 Windows 10 Version 1607 — Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized att… 2026-10-13 CVE-2026-102216 HIGH 7.8 Windows 10 Version 1607 — Access of resource using incompatible type ('type confusion') in Windows StateRepository API allows an authori… 2026-10-13 CVE-2026-102217 HIGH 8.8 Windows 10 Version 1607 — Improper resolution of path equivalence in WebDAV allows an authorized attacker to elevate privileges over a n… 2026-10-13 CVE-2026-102218 HIGH 7.8 Windows 10 Version 1607 — Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized att… 2026-10-13 CVE-2026-102220 HIGH 7.8 Windows 10 Version 1607 — Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally. 2026-10-13 CVE-2026-102221 MEDIUM 4.4 Windows 10 Version 1607 — No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locall… 2026-10-13 CVE-2026-102225 HIGH 8.8 Windows 10 Version 1607 — Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network. 2026-10-13 CVE-2026-102226 HIGH 8.8 Microsoft Dynamics Nav 2018 — Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central al… 2026-10-13 CVE-2026-102227 HIGH 7.8 Windows 10 Version 1607 — Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute co… 2026-10-13 CVE-2026-102229 MEDIUM 6.8 Visual Studio Code — Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an… 2026-10-13 CVE-2026-102231 HIGH 7.7 Visual Studio Code — Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a secu… 2026-10-13 CVE-2026-102232 HIGH 7 Visual Studio Code — Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature loc… 2026-10-13 CVE-2026-102233 HIGH 7.8 Visual Studio Code — Missing authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature local… 2026-10-13 CVE-2026-102234 HIGH 7.4 Visual Studio Code — Reliance on untrusted inputs in a security decision in Visual Studio Code allows an unauthorized attacker to b… 2026-10-13 CVE-2026-102235 HIGH 8.8 Visual Studio Code — Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to execute code … 2026-10-13 CVE-2026-102238 CRITICAL 9.6 Visual Studio Code — Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an… 2026-10-13 CVE-2026-102849 HIGH 8.8 Microsoft 365 Apps For Enterprise — Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a n… 2026-10-13 CVE-2026-102850 HIGH 8.8 Microsoft 365 Apps For Enterprise — Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a n… 2026-10-13 CVE-2026-102851 MEDIUM 6.1 Visual Studio Code — Incorrect privilege assignment in Visual Studio Code allows an authorized attacker to bypass a security featur… 2026-10-13 CVE-2026-102855 HIGH 8.8 Microsoft 365 Apps For Enterprise — Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a ne… 2026-10-13 CVE-2026-102856 HIGH 8.8 Microsoft 365 Apps For Enterprise — Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a ne… 2026-10-13 CVE-2026-102857 HIGH 8.8 Microsoft 365 Apps For Enterprise — Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a ne… 2026-10-13 CVE-2026-102858 HIGH 8.8 Microsoft Office 365 For Mac — Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code over a … 2026-10-13 CVE-2026-102859 MEDIUM 4.6 Microsoft Sharepoint Server Subscription Edition — Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office Share… 2026-10-13 CVE-2026-102860 HIGH 8.8 Microsoft Sharepoint Server Subscription Edition — Improper access control in Microsoft Office SharePoint allows an authorized attacker to elevate privileges ove… 2026-10-13 CVE-2026-102861 HIGH 8.8 Microsoft Sharepoint Server Subscription Edition — Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over … 2026-10-13 CVE-2026-102862 HIGH 8.8 Microsoft Sharepoint Server Subscription Edition — Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges ove… 2026-10-13 CVE-2026-102863 HIGH 8.8 Microsoft Sharepoint Server Subscription Edition — Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized … 2026-10-13 CVE-2026-102864 MEDIUM 4.6 Microsoft Sharepoint Server Subscription Edition — Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office Share… 2026-10-13 CVE-2026-102865 MEDIUM 6.5 Microsoft Sharepoint Server Subscription Edition — Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information o… 2026-10-13 CVE-2026-102866 HIGH 8.1 Microsoft Sharepoint Server Subscription Edition — Improper verification of cryptographic signature in Microsoft Office SharePoint allows an unauthorized attacke… 2026-10-13 CVE-2026-102867 MEDIUM 6.5 Microsoft 365 Apps For Enterprise — Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a net… 2026-10-13 CVE-2026-102869 HIGH 8.8 Microsoft .Net Framework 3.5 And 4.6.2/4.7/4.7.1/4.7.2 — Access of resource using incompatible type ('type confusion') in .NET and Visual Studio allows an unauthorized… 2026-10-13 CVE-2026-102870 HIGH 8.8 Microsoft Visual Studio 2022 Version 17.14 — Improper control of generation of code ('code injection') in ASP.NET Core allows an unauthorized attacker to e… 2026-10-13 CVE-2026-103553 HIGH 7.8 Windows 10 Version 1607 — Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to elevate privileges … 2026-10-13 CVE-2026-103554 HIGH 7 Windows 10 Version 1809 — Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges local… 2026-10-13 CVE-2026-103555 HIGH 7 Windows 10 Version 1607 — Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate… 2026-10-13 CVE-2026-103558 HIGH 7.5 Windows 10 Version 1607 — Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service o… 2026-10-13 CVE-2026-103560 MEDIUM 5.5 Windows Server 2012 — Improper authorization in DNS Server allows an authorized attacker to perform tampering locally. 2026-10-13 CVE-2026-103565 HIGH 7 Windows 10 Version 1809 — Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges local… 2026-10-13 CVE-2026-103567 MEDIUM 5.5 Windows 10 Version 1809 — Buffer over-read in Windows Broadcast DVR User Service allows an authorized attacker to disclose information l… 2026-10-13 CVE-2026-103568 HIGH 7.8 Windows 10 Version 1607 — Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credent… 2026-10-13 CVE-2026-103569 HIGH 7.5 Windows 10 Version 1607 — Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information over a net… 2026-10-13 CVE-2026-103572 HIGH 8.8 Microsoft Visual Studio 2022 Version 17.14 — Improper control of generation of code ('code injection') in Visual Studio Tools for Applications and SQL Serv… 2026-10-13 CVE-2026-103575 HIGH 8.8 Windows 10 Version 1607 — Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. 2026-10-13 CVE-2026-103576 MEDIUM 6.5 Windows 10 Version 1607 — Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an … 2026-10-13 CVE-2026-103577 HIGH 7.5 Windows 11 Version 23h2 — Insecure default variable initialization in Microsoft QUIC allows an unauthorized attacker to bypass a securit… 2026-10-13 CVE-2026-103578 MEDIUM 6.8 Windows 11 Version 26h1 — Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges with a p… 2026-10-13 CVE-2026-103821 HIGH 7.8 Substance 3d Designer — Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbitrary code… 2026-10-13 CVE-2026-103822 MEDIUM 5.5 Substance 3d Designer — Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sen… 2026-10-13 CVE-2026-103823 MEDIUM 5.5 Substance 3d Designer — Substance3D - Designer is affected by a Stack-based Buffer Overflow vulnerability that could result in an appl… 2026-10-13 CVE-2026-103824 MEDIUM 5.5 Substance 3d Designer — Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an applica… 2026-10-13 CVE-2026-103825 MEDIUM 5.5 Substance 3d Designer — Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sen… 2026-10-13 CVE-2026-103826 MEDIUM 5.5 Substance 3d Designer — Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an applica… 2026-10-13 CVE-2026-103827 MEDIUM 5.5 Substance 3d Designer — Substance3D - Designer is affected by a Stack-based Buffer Overflow vulnerability that could result in an appl… 2026-10-13 CVE-2026-103828 MEDIUM 5.5 Substance 3d Designer — Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an applica… 2026-10-13 CVE-2026-103829 MEDIUM 5.5 Substance 3d Designer — Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an applica… 2026-10-13 CVE-2026-104346 HIGH 7.8 Photoshop — Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code exec… 2026-10-13 CVE-2026-104347 HIGH 7.8 Photoshop — Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code exec… 2026-10-13 CVE-2026-104348 HIGH 7.8 Photoshop — Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary cod… 2026-10-13 CVE-2026-105003 HIGH 7.8 Windows 10 Version 1607 — Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally. 2026-10-13 CVE-2026-105004 HIGH 7.8 Windows 10 Version 1607 — Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. 2026-10-13 CVE-2026-105005 HIGH 8.1 Windows 11 Version 26h1 — Out-of-bounds write in Windows Schannel allows an unauthorized attacker to execute code over a network. 2026-10-13 CVE-2026-105006 MEDIUM 6.4 Windows 10 Version 1607 — Use after free in HID class driver allows an unauthorized attacker to elevate privileges with a physical attac… 2026-10-13 CVE-2026-105007 HIGH 8.8 Windows 10 Version 1607 — An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.… 2026-10-13 CVE-2026-105008 CRITICAL 9 Windows 10 Version 1607 — No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a network. 2026-10-13 CVE-2026-105009 HIGH 7.5 Windows Server 2012 — Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elevate privil… 2026-10-13 CVE-2026-105010 CRITICAL 9.8 Windows 10 Version 1607 — Use after free in Microsoft Windows Search Component allows an unauthorized attacker to elevate privileges ove… 2026-10-13 CVE-2026-105013 HIGH 7.4 Microsoft Sharepoint Server Subscription Edition — Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code… 2026-10-13 CVE-2026-105016 CRITICAL 9.8 .Net 10.0 — Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network. 2026-10-13 CVE-2026-105591 HIGH 8.8 Microsoft 365 Apps For Enterprise — Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a n… 2026-10-13 CVE-2026-105592 HIGH 7.5 Microsoft 365 Apps For Enterprise — Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a n… 2026-10-13 CVE-2026-105593 HIGH 8.8 Microsoft 365 Apps For Enterprise — Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a n… 2026-10-13 CVE-2026-105595 HIGH 8.8 Microsoft 365 Apps For Enterprise — Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to execute code over a network. 2026-10-13 CVE-2026-105596 HIGH 8.8 Microsoft 365 Apps For Enterprise — Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a n… 2026-10-13 CVE-2026-105597 HIGH 8.8 Microsoft 365 Apps For Enterprise — Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a n… 2026-10-13 CVE-2026-105598 HIGH 8.8 Microsoft 365 Apps For Enterprise — Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a n… 2026-10-13 CVE-2026-105599 HIGH 7.5 Microsoft 365 Apps For Enterprise — Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over… 2026-10-13 CVE-2026-105713 MEDIUM 5.7 Microsoft Sharepoint Server Subscription Edition — Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spo… 2026-10-13 CVE-2026-105714 HIGH 7.5 Microsoft 365 Apps For Enterprise — Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a n… 2026-10-13 CVE-2026-105715 HIGH 7.5 Microsoft 365 Apps For Enterprise — Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code over a… 2026-10-13 CVE-2026-105716 HIGH 8.8 Microsoft 365 Apps For Enterprise — Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a n… 2026-10-13 CVE-2026-105717 HIGH 8.8 Microsoft 365 Apps For Enterprise — Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a n… 2026-10-13 CVE-2026-105718 HIGH 8.8 Microsoft 365 Apps For Enterprise — Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 2026-10-13 CVE-2026-105719 MEDIUM 6.5 Microsoft Sharepoint Server Subscription Edition — Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose information… 2026-10-13 CVE-2026-105720 MEDIUM 4.3 Microsoft Sharepoint Server Subscription Edition — Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges ove… 2026-10-13 CVE-2026-105722 HIGH 7 Windows 10 Version 1809 — Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges local… 2026-10-13 CVE-2026-105723 HIGH 7.5 Windows 10 Version 1607 — Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elev… 2026-10-13 CVE-2026-105725 HIGH 7 Windows Security App — Use after free in Windows Security App allows an authorized attacker to elevate privileges locally. 2026-10-13 CVE-2026-105726 MEDIUM 5.5 Microsoft Defender For Endpoint For Windows — Out-of-bounds read in Microsoft Defender allows an authorized attacker to disclose information locally. 2026-10-13 CVE-2026-105727 HIGH 8.8 Microsoft Dynamics Nav 2018 — Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central al… 2026-10-13 CVE-2026-105728 HIGH 7.5 Microsoft Dynamics Nav 2018 — Improper authentication in Dynamics Business Central allows an unauthorized attacker to disclose information o… 2026-10-13 CVE-2026-105729 HIGH 7.1 Windows Sysinternals Process Monitor — Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally. 2026-10-13 CVE-2026-105731 MEDIUM 5.5 Microsoft Office For Android — Use of uninitialized resource in Microsoft Graphics Component allows an authorized attacker to disclose inform… 2026-10-13 CVE-2026-105732 HIGH 7.3 Sysinternals Suite — Stack-based buffer overflow in SysInternals allows an authorized attacker to elevate privileges locally. 2026-10-13 CVE-2026-105733 HIGH 8.8 Windows 10 Version 21h2 — Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally. 2026-10-13 CVE-2026-105896 MEDIUM 5.5 Photoshop — Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application … 2026-10-13 CVE-2026-108127 MEDIUM 6.5 Windows 10 Version 1607 — Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. 2026-10-13 CVE-2026-108128 MEDIUM 6.5 Windows 10 Version 1607 — Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. 2026-10-13 CVE-2026-108129 MEDIUM 6.5 Windows 10 Version 1607 — Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. 2026-10-13 CVE-2026-108130 HIGH 7.8 Windows 11 Version 24h2 — Heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacke… 2026-10-13 CVE-2026-108131 HIGH 7.5 Windows 10 Version 1607 — No cwe for this issue in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perfo… 2026-10-13 CVE-2026-108132 HIGH 7 Windows 10 Version 1607 — Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally. 2026-10-13 CVE-2026-108133 HIGH 7.8 Windows Server 2022 — Release of invalid pointer or reference in Windows Modern Device Management (MDM) allows an authorized attacke… 2026-10-13 CVE-2026-108134 HIGH 7 Windows 11 Version 24h2 — Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally. 2026-10-13 CVE-2026-108135 HIGH 7 Windows 10 Version 21h2 — Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized a… 2026-10-13 CVE-2026-108136 HIGH 7.8 Windows 10 Version 1607 — Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges local… 2026-10-13 CVE-2026-108396 HIGH 7 Windows 10 Version 1809 — Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authoriz… 2026-10-13 CVE-2026-108398 HIGH 8.8 Microsoft .Net Framework 3.5 And 4.6.2/4.7/4.7.1/4.7.2 — Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally. 2026-10-13 CVE-2026-108399 HIGH 7.2 Windows 10 Version 1607 — Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally. 2026-10-13 CVE-2026-108400 HIGH 8.8 Hevc Video Extensions — Integer overflow or wraparound in Microsoft Windows Codecs Library allows an unauthorized attacker to execute … 2026-10-13 CVE-2026-108457 HIGH 8.1 Windows 10 Version 21h2 — Out-of-bounds write in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network. 2026-10-13 CVE-2026-108458 HIGH 8.8 Windows 10 Version 1607 — Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. 2026-10-13 CVE-2026-108460 HIGH 8.1 Windows 10 Version 1607 — Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network. 2026-10-13 CVE-2026-108461 HIGH 7 Windows 10 Version 1809 — Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges local… 2026-10-13 CVE-2026-108462 MEDIUM 5.5 Windows 10 Version 1607 — Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authori… 2026-10-13 CVE-2026-108463 HIGH 8.8 Windows 11 Version 24h2 — Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to bypass a sec… 2026-10-13 CVE-2026-108464 HIGH 7 Windows 10 Version 1607 — Use after free in Software Protection Platform (SPP) allows an authorized attacker to elevate privileges local… 2026-10-13 CVE-2026-108465 HIGH 7 Windows 10 Version 1809 — Use after free in Windows Update Delivery Optimization allows an authorized attacker to elevate privileges loc… 2026-10-13 CVE-2026-108466 MEDIUM 5.3 Windows 10 Version 1607 — Out-of-bounds read in Windows Kernel allows an unauthorized attacker to deny service over a network. 2026-10-13 CVE-2026-108467 HIGH 8.8 Windows 10 Version 1607 — Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an authorized attacker to execute cod… 2026-10-13 CVE-2026-108468 HIGH 7 Windows 10 Version 1607 — Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. 2026-10-13 CVE-2026-108471 HIGH 8.8 Windows 10 Version 1809 — Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized atta… 2026-10-13 CVE-2026-109453 HIGH 7 Windows 10 Version 1607 — Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate… 2026-10-13 CVE-2026-110144 CRITICAL 9.6 Chrome — Incorrect authorization in Mojo in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker… 2026-10-13 CVE-2026-110150 MEDIUM 5.5 Chrome — Privilege elevation in Installer in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacke… 2026-10-13 CVE-2026-49785 HIGH 7.8 Windows 10 Version 1607 — Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security featu… 2026-10-13 CVE-2026-58280 HIGH 7.5 .Net 10.0 — Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network. 2026-10-13 CVE-2026-59116 MEDIUM 6.8 Windows 10 Version 1607 — Use of a broken or risky cryptographic algorithm in Windows Remote Desktop allows an unauthorized attacker to … 2026-10-13 CVE-2026-61931 HIGH 7.8 Windows 10 Version 1809 — Use after free in Windows Perception Simulation Service allows an authorized attacker to elevate privileges lo… 2026-10-13 CVE-2026-62687 MEDIUM 5.5 Windows 10 Version 21h2 — Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized a… 2026-10-13 CVE-2026-62840 HIGH 7 Linux 3p (Third Party) Distros — Time-of-check time-of-use (toctou) race condition in Linux Kernel allows an authorized attacker to elevate pri… 2026-10-13 CVE-2026-62879 MEDIUM 5.5 Windows 10 Version 1809 — Missing authentication for critical function in Windows SmartScreen allows an authorized attacker to perform t… 2026-10-13 CVE-2026-65674 HIGH 8.8 Microsoft Sql Server 2019 (Gdr) — Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network. 2026-10-13 CVE-2026-66822 MEDIUM 5.9 .Net 10.0 — Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose informat… 2026-10-13 CVE-2026-67625 HIGH 8.5 Microsoft Sql Server 2017 (Gdr) — Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. 2026-10-13 CVE-2026-67626 MEDIUM 6.5 Microsoft Sql Server 2022 (Gdr) — Uncontrolled resource consumption in SQL Server allows an authorized attacker to deny service over a network. 2026-10-13 CVE-2026-67628 MEDIUM 4.9 Microsoft Sql Server 2017 (Gdr) — Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. 2026-10-13 CVE-2026-68836 HIGH 7.8 Windows 10 Version 1607 — Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally… 2026-10-13 CVE-2026-68883 HIGH 8.5 Microsoft Sql Server 2017 (Gdr) — Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network. 2026-10-13 CVE-2026-69326 HIGH 8.8 Windows 10 Version 1607 — Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network. 2026-10-13 CVE-2026-69354 HIGH 7.8 Windows 10 Version 1607 — Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges loca… 2026-10-13 CVE-2026-69363 HIGH 8 Windows 10 Version 1607 — Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over… 2026-10-13 CVE-2026-69370 HIGH 8.8 Visual Studio Code — Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allo… 2026-10-13 CVE-2026-69387 HIGH 7 Windows 10 Version 1607 — Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally. 2026-10-13 CVE-2026-69452 HIGH 7.1 Windows 10 Version 1607 — Use after free in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a… 2026-10-13 CVE-2026-69454 HIGH 7.5 Windows Server 2019 — Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unau… 2026-10-13 CVE-2026-69471 HIGH 7.8 Windows 10 Version 1607 — Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. 2026-10-13 CVE-2026-69506 MEDIUM 4.7 Windows 10 Version 1607 — Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information local… 2026-10-13 CVE-2026-69521 HIGH 8.8 Windows 10 Version 1607 — Integer overflow or wraparound in Windows iSCSI allows an unauthorized attacker to execute code over a network… 2026-10-13 CVE-2026-69577 HIGH 7.5 Windows Server 2019 — Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unau… 2026-10-13 CVE-2026-69596 HIGH 7 Windows 10 Version 1607 — Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate pri… 2026-10-13 CVE-2026-69633 HIGH 7.8 Windows 10 Version 1607 — Heap-based buffer overflow in Windows Update allows an authorized attacker to elevate privileges locally. 2026-10-13 CVE-2026-69634 CRITICAL 9.8 Windows 10 Version 1607 — Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network. 2026-10-13 CVE-2026-69635 MEDIUM 6.6 Windows 10 Version 1607 — Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges with a phy… 2026-10-13 CVE-2026-69639 CRITICAL 9.8 Windows 10 Version 1809 — Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a networ… 2026-10-13 CVE-2026-69640 MEDIUM 5.3 Windows 10 Version 1607 — Incorrect authorization in Windows Key Distribution Center allows an authorized attacker to bypass a security … 2026-10-13 CVE-2026-69644 MEDIUM 5.5 Windows 10 Version 1607 — Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows an authoriz… 2026-10-13 CVE-2026-69650 HIGH 7.8 Windows 10 Version 1607 — Improper verification of cryptographic signature in Windows Key Distribution Center allows an authorized attac… 2026-10-13 CVE-2026-69651 HIGH 7.5 .Net 10.0 — Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network. 2026-10-13 CVE-2026-69673 HIGH 7.8 Windows 11 Version 23h2 — Improper link resolution before file access ('link following') in Windows Update allows an authorized attacker… 2026-10-13 CVE-2026-69675 MEDIUM 5.5 Windows Server 2012 — Out-of-bounds read in Windows Network File System allows an authorized attacker to disclose information locall… 2026-10-13 CVE-2026-69705 CRITICAL 9.8 Windows 10 Version 1607 — Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network. 2026-10-13 CVE-2026-69718 HIGH 7.8 Windows 11 Version 23h2 — Improper neutralization of special elements used in a command ('command injection') in Windows Update allows a… 2026-10-13 CVE-2026-69721 MEDIUM 5.5 Windows 10 Version 1607 — Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information locally. 2026-10-13 CVE-2026-69733 HIGH 7.8 Windows 11 Version 23h2 — Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally. 2026-10-13 CVE-2026-69736 HIGH 7 Windows 10 Version 1607 — Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credent… 2026-10-13 CVE-2026-69743 HIGH 7 Windows 11 Version 23h2 — Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate pri… 2026-10-13 CVE-2026-69763 HIGH 7 Windows 10 Version 1809 — Use after free in Windows Storage allows an authorized attacker to elevate privileges locally. 2026-10-13 CVE-2026-69765 HIGH 8.8 Windows Server 2025 — Use after free in Windows Storport Miniport Driver allows an unauthorized attacker to execute code over a netw… 2026-10-13 CVE-2026-69766 HIGH 7 Windows 10 Version 1809 — Use after free in Windows Storage allows an authorized attacker to elevate privileges locally. 2026-10-13 CVE-2026-69783 HIGH 7.8 Windows 11 Version 23h2 — External control of file name or path in Windows Update allows an authorized attacker to elevate privileges lo… 2026-10-13 CVE-2026-69789 HIGH 7.5 Windows 10 Version 1607 — Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to … 2026-10-13 CVE-2026-69795 HIGH 7 Windows 10 Version 1809 — Null pointer dereference in Windows Clipboard Server allows an authorized attacker to elevate privileges local… 2026-10-13 CVE-2026-69798 HIGH 7.8 Windows 10 Version 1607 — Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally… 2026-10-13 CVE-2026-69802 HIGH 8.1 Windows Server 2012 — Weak authentication in Network Device Enrollment Service (NDES) allows an unauthorized attacker to execute cod… 2026-10-13 CVE-2026-69830 HIGH 8.1 Windows 10 Version 1607 — Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DHCP Se… 2026-10-13 CVE-2026-69840 HIGH 7 Windows 10 Version 1607 — Use after free in Windows Certificates allows an authorized attacker to elevate privileges locally. 2026-10-13 CVE-2026-69850 HIGH 7.8 Windows 10 Version 1607 — Untrusted pointer dereference in Windows Certificates allows an authorized attacker to elevate privileges loca… 2026-10-13 CVE-2026-69856 HIGH 7 Windows 10 Version 1809 — Use after free in Windows Storage allows an authorized attacker to elevate privileges locally. 2026-10-13 CVE-2026-69867 HIGH 7.8 Windows 10 Version 1607 — Out-of-bounds read in SQLite allows an authorized attacker to elevate privileges locally. 2026-10-13 CVE-2026-69877 MEDIUM 6.5 Azure Cli — Origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over a network… 2026-10-13 CVE-2026-69880 HIGH 7.8 Windows 10 Version 1809 — Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized a… 2026-10-13 CVE-2026-69882 HIGH 7.8 Windows 11 Version 23h2 — Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally. 2026-10-13 CVE-2026-69883 CRITICAL 9.8 Windows 10 Version 1607 — Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network. 2026-10-13 CVE-2026-69884 HIGH 7.8 Windows 10 Version 1607 — Buffer over-read in Windows GDI allows an authorized attacker to elevate privileges locally. 2026-10-13 CVE-2026-69886 CRITICAL 9.8 Windows 10 Version 1607 — Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a… 2026-10-13 CVE-2026-69898 HIGH 7.8 Windows 10 Version 1809 — Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. 2026-10-13 CVE-2026-69902 MEDIUM 6.7 Windows 10 Version 1607 — Untrusted pointer dereference in Windows NTFS allows an authorized attacker to execute code locally. 2026-10-13 CVE-2026-69905 MEDIUM 5.5 Windows 10 Version 1809 — Missing authorization in Windows AppX Deployment Service allows an authorized attacker to perform tampering lo… 2026-10-13 CVE-2026-69909 HIGH 7.8 Windows 10 Version 1607 — Heap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate privileges lo… 2026-10-13 CVE-2026-69913 HIGH 8.1 Windows 10 Version 1607 — Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network. 2026-10-13 CVE-2026-69914 MEDIUM 5.5 Windows 10 Version 1809 — Out-of-bounds read in Windows AppX Deployment Service allows an authorized attacker to disclose information lo… 2026-10-13 CVE-2026-69915 HIGH 7 Windows 10 Version 1809 — Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally. 2026-10-13 CVE-2026-69916 HIGH 7.8 Windows 10 Version 1607 — Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally. 2026-10-13 CVE-2026-69918 HIGH 8.8 Windows 10 Version 1607 — Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges local… 2026-10-13 CVE-2026-69919 MEDIUM 5.5 Windows 11 Version 24h2 — Out-of-bounds read in Windows Cryptographic Services allows an authorized attacker to disclose information loc… 2026-10-13 CVE-2026-69922 MEDIUM 6.5 Microsoft 365 Apps For Enterprise — Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a ne… 2026-10-13 CVE-2026-69923 HIGH 7.8 Windows 11 Version 24h2 — Uncontrolled search path element in Windows AI allows an authorized attacker to elevate privileges locally. 2026-10-13 CVE-2026-69926 HIGH 7.8 Windows 10 Version 1809 — Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized a… 2026-10-13 CVE-2026-69931 HIGH 7 Windows 10 Version 1809 — Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Storage… 2026-10-13 CVE-2026-69934 HIGH 7.8 Windows 11 Version 23h2 — Integer overflow or wraparound in Windows Spaceport.sys allows an authorized attacker to elevate privileges lo… 2026-10-13 CVE-2026-69935 HIGH 7 Windows 10 Version 1809 — Use after free in Windows Storage allows an authorized attacker to elevate privileges locally. 2026-10-13 CVE-2026-69940 MEDIUM 6.5 Windows 10 Version 1607 — Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a ne… 2026-10-13 CVE-2026-69942 HIGH 7.8 Windows 11 Version 23h2 — Buffer over-read in Windows Overlay Filter allows an authorized attacker to execute code locally. 2026-10-13 CVE-2026-69943 HIGH 8.8 Microsoft Sharepoint Server Subscription Edition — Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint … 2026-10-13 CVE-2026-69945 HIGH 8.8 Windows 10 Version 21h2 — Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate privilege… 2026-10-13 CVE-2026-69947 MEDIUM 6.8 Windows 10 Version 21h2 — Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a ph… 2026-10-13 CVE-2026-69949 HIGH 7.8 Windows 10 Version 1607 — Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges local… 2026-10-13 CVE-2026-69950 HIGH 7.8 Windows 10 Version 1607 — Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. 2026-10-13 CVE-2026-69952 HIGH 7.8 Windows 10 Version 1607 — Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. 2026-10-13 CVE-2026-69953 HIGH 7.8 Windows 10 Version 1607 — Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. 2026-10-13 CVE-2026-69954 MEDIUM 5.5 Windows 10 Version 1607 — Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally. 2026-10-13 CVE-2026-69955 MEDIUM 6.5 Windows 10 Version 1607 — Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a ne… 2026-10-13 CVE-2026-69957 HIGH 7.8 Windows 10 Version 1607 — Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges l… 2026-10-13 CVE-2026-69958 MEDIUM 6.8 Windows 10 Version 1607 — Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a ph… 2026-10-13 CVE-2026-69959 HIGH 7.8 Windows 10 Version 1607 — Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to execute code locally. 2026-10-13 CVE-2026-69963 HIGH 7.8 Windows 10 Version 1607 — Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges … 2026-10-13 CVE-2026-69964 HIGH 7 Windows 10 Version 1607 — Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. 2026-10-13 CVE-2026-69966 HIGH 7.8 Windows 10 Version 1607 — Integer overflow or wraparound in Microsoft Streaming Service allows an authorized attacker to elevate privile… 2026-10-13