Menu

Star on GitHub · 3.4k

2026

90,429 vulnerabilities published in 2026.

Results

33,533 of 90,429· Page 209/671
5.5
CVE-2026-69318

Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally.

5.7
CVE-2026-69317

Out-of-bounds read in Remote Desktop Client allows an authorized attacker to disclose information over a network.

4.7
CVE-2026-69316

Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.

5.5
CVE-2026-69315

Exposure of sensitive system information to an unauthorized control sphere in Windows License Manager allows an authoriz

5.5
CVE-2026-69308

Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.

5.9
CVE-2026-69304

Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny

5.5
CVE-2026-69303

Out-of-bounds read in Push Message Routing Service allows an authorized attacker to disclose information locally.

6.5
CVE-2026-69297

Storing passwords in a recoverable format in Windows DHCP Server allows an authorized attacker to disclose information o

5.5
CVE-2026-69294

Generation of error message containing sensitive information in Microsoft COM for Windows allows an authorized attacker

5.5
CVE-2026-69288

Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally.

5.5
CVE-2026-69286

Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to disclose informatio

6.5
CVE-2026-69267

Insufficient granularity of access control in Windows Connected User Experiences and Telemetry allows an authorized atta

6.5
CVE-2026-68898

Out-of-bounds read in Windows iSCSI allows an unauthorized attacker to deny service over a network.

5.5
CVE-2026-68895

Numeric truncation error in Internet Storage Name Service allows an authorized attacker to disclose information locally.

4.7
CVE-2026-68891

Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.

5.5
CVE-2026-68886

Use after free in Windows Network Connection Broker allows an authorized attacker to disclose information locally.

5.5
CVE-2026-68881

Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.

5.7
CVE-2026-68874

Out-of-bounds read in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose informat

5.5
CVE-2026-68873

Insertion of sensitive information into log file in Windows Program Compatibility Assistant Service allows an authorized

5.5
CVE-2026-68852

Use of uninitialized resource in Microsoft Account allows an authorized attacker to disclose information locally.

5.5
CVE-2026-68851

Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.

4.7
CVE-2026-68849

Out-of-bounds read in Windows Bluetooth Port Driver allows an authorized attacker to disclose information locally.

5.5
CVE-2026-68843

Use after free in Microsoft Office Word allows an authorized attacker to disclose information locally.

5.5
CVE-2026-68842

Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an auth

6.8
CVE-2026-68833

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack.

5.5
CVE-2026-68831

Files or directories accessible to external parties in Windows Defender Firewall Service allows an authorized attacker t

5.5
CVE-2026-68830

Improper link resolution before file access ('link following') in Windows Universal Plug and Play (UPnP) Device Host all

4.9
CVE-2026-68785

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

6.5
CVE-2026-68784

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

6.5
CVE-2026-68781

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

6.5
CVE-2026-68780

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

6.5
CVE-2026-68779

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

6.5
CVE-2026-68778

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

6.5
CVE-2026-68777

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

6.5
CVE-2026-68776

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

6.5
CVE-2026-67648

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

6.5
CVE-2026-67645

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

6.5
CVE-2026-67641

Integer overflow or wraparound in SQL Server allows an authorized attacker to deny service over a network.

6.5
CVE-2026-67633

Out-of-bounds read in SQL Server allows an authorized attacker to deny service over a network.

6.5
CVE-2026-67630

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

6.5
CVE-2026-67629

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

6.5
CVE-2026-67624

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

6.5
CVE-2026-67393

Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.

6.5
CVE-2026-67390

Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.

6.5
CVE-2026-67389

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

6.5
CVE-2026-67386

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

6.5
CVE-2026-67383

Generation of error message containing sensitive information in SQL Server allows an authorized attacker to disclose inf

6.5
CVE-2026-67369

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

6.5
CVE-2026-66816

Insufficient logging in SQL Server allows an authorized attacker to bypass a security feature over a network.

6.8
CVE-2026-65812

Insertion of sensitive information into sent data in Microsoft Teams for Android allows an authorized attacker to disclo

Test your stack for 2026issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.

Watch the demo →