2026

Out-of-bounds read in Capability Access Management Service (camsvc) allows an authorized attacker to disclose informatio

Absolute path traversal in Windows Shell allows an unauthorized attacker to perform spoofing with a physical attack.

Use of a broken or risky cryptographic algorithm in Windows Kerberos allows an authorized attacker to disclose informati

Windows Remote Procedure Call Interface Definition Language (IDL) Elevation of Privilege Vulnerability

Time-of-check time-of-use (toctou) race condition in Windows Ancillary Function Driver for WinSock allows an authorized

Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Managem

Out-of-bounds read in Windows TPM allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to disclose information

Exposure of sensitive information to an unauthorized actor in Tablet Windows User Interface (TWINUI) Subsystem allows an

Concurrent execution using shared resource with improper synchronization ('race condition') in Tablet Windows User Inter

Improper access control in Windows Hyper-V allows an authorized attacker to disclose information locally.

Protection mechanism failure in Windows Remote Assistance allows an unauthorized attacker to bypass a security feature l

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to dis

Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

Exposure of sensitive information to an unauthorized actor in Windows Remote Procedure Call allows an unauthorized attac

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges

Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to di

Insertion of sensitive information into log file in Windows Kernel allows an unauthorized attacker to disclose informati

Improper handling of insufficient permissions or privileges in Windows Error Reporting allows an authorized attacker to

Time-of-check time-of-use (toctou) race condition in Windows Installer allows an authorized attacker to elevate privileg

Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Managem

Concurrent execution using shared resource with improper synchronization ('race condition') in Graphics Kernel allows an

Improper input validation in Windows LDAP - Lightweight Directory Access Protocol allows an authorized attacker to perfo

Access of resource using incompatible type ('type confusion') in Windows Win32K - ICOMP allows an authorized attacker to

Free of memory not on the heap in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate

Time-of-check time-of-use (toctou) race condition in Windows Kernel Memory allows an authorized attacker to elevate priv

Concurrent execution using shared resource with improper synchronization ('race condition') in Printer Association Objec

Exposure of sensitive information to an unauthorized actor in Desktop Windows Manager allows an authorized attacker to d

Incorrect privilege assignment in Windows Hello allows an unauthorized attacker to perform tampering locally.

Missing authentication for critical function in SQL Server allows an authorized attacker to elevate privileges over a ne

Improper access control in Windows Deployment Services allows an unauthorized attacker to execute code over an adjacent

A vulnerability affecting HPE Networking Instant On Access Points has been identified where a device processing a specia

A vulnerability in the router mode configuration of HPE Instant On Access Points exposed certain network configuration d

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of refe

Null pointer dereference in the MsgRegisterEvent() system call could allow an attacker with local access and code execut

An authentication bypass vulnerability in the Tongyu AX1800 Wi-Fi 6 Router with firmware 1.0.0 allows unauthenticated ne

A Server-Side Request Forgery (SSRF) vulnerability [CWE-918] vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.4,

Insecure permissions in Hubert Imoveis e Administracao Ltda Hub v2.0 1.27.3 allows authenticated attackers with low-leve

An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet

Pega Customer Service Framework versions 8.7.0 through 25.1.0 are affected by a Unrestricted file upload vulnerability,

An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] vulnerabi

An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiVoice 7

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of reso

Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU HW to write to

An exposure of sensitive information to an unauthorized actor [CWE-200] vulnerability in Fortinet FortiFone 7.0.0 throug

Dell SupportAssist OS Recovery, versions prior to 5.5.15.1, contain a Creation of Temporary File With Insecure Permissio

Dell SupportAssist OS Recovery, versions prior to 5.5.15.1, contain a Creation of Temporary File With Insecure Permissio

In Eptura Archibus 2024.03.01.109, the "Run script" and "Server File" components of the "Database Update Wizard" are vul

A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS

Intermediate register values of secure workloads can be exfiltrated in workloads scheduled from applications running in