Menu

Star on GitHub · 3.4k

2026

90,429 vulnerabilities published in 2026.

Results

34,765 of 90,429· Page 211/696
8.1
CVE-2026-72981

Use after free in IP Helper allows an unauthorized attacker to execute code over a network.

8.8
CVE-2026-72973

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

8.8
CVE-2026-72972

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

7.8
CVE-2026-72967

Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attacker to elevate privileges loca

7.8
CVE-2026-72965

Use after free in Windows WebClient Service allows an authorized attacker to elevate privileges locally.

7.0
CVE-2026-72963

Use after free in Windows Modern Execution Server allows an authorized attacker to elevate privileges locally.

8.2
CVE-2026-72962

Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

8.2
CVE-2026-72961

Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

8.8
CVE-2026-72960

Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.

8.8
CVE-2026-72959

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access

8.2
CVE-2026-72958

Double free in Windows Credential Guard allows an authorized attacker to elevate privileges locally.

7.8
CVE-2026-72957

Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally.

7.5
CVE-2026-72954

Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network.

7.8
CVE-2026-72953

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

7.0
CVE-2026-72952

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally.

8.8
CVE-2026-72950

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access

7.5
CVE-2026-72949

Null pointer dereference in Windows SMB Server Network Transport Driver (srvnet.sys) allows an unauthorized attacker to

7.8
CVE-2026-72946

Heap-based buffer overflow in Storage Port Driver allows an authorized attacker to elevate privileges locally.

7.8
CVE-2026-72944

Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.

7.5
CVE-2026-72943

Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network.

7.8
CVE-2026-72941

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

8.8
CVE-2026-72940

Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over a network.

8.1
CVE-2026-72936

Use after free in Windows SMB Client allows an unauthorized attacker to execute code over a network.

8.8
CVE-2026-72933

Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code ove

7.5
CVE-2026-72932

Buffer over-read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a

7.0
CVE-2026-72930

Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to execute code locally.

7.8
CVE-2026-72929

Improper validation of integrity check value in Windows Installer allows an authorized attacker to elevate privileges lo

7.5
CVE-2026-72928

Use after free in Windows DNS allows an authorized attacker to execute code over a network.

7.0
CVE-2026-72926

Use after free in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally.

7.5
CVE-2026-72923

The OpenAPI.NET SDK contains a useful object model for OpenAPI documents in .NET along with common serializers to extrac

7.0
CVE-2026-71353

Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges loca

8.8
CVE-2026-71352

Integer underflow (wrap or wraparound) in Windows Remote Access Connection Manager allows an authorized attacker to exec

7.0
CVE-2026-71351

Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges loca

7.8
CVE-2026-71345

Out-of-bounds write in Windows Spaceport.sys allows an authorized attacker to execute code locally.

7.8
CVE-2026-71343

Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to execute code loc

7.0
CVE-2026-71342

Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

7.0
CVE-2026-71340

Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally.

7.8
CVE-2026-71337

Stack-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges l

8.8
CVE-2026-71336

Integer overflow or wraparound in Windows Work Folder Service allows an authorized attacker to execute code over a netwo

7.8
CVE-2026-71334

Heap-based buffer overflow in Windows NFS Portmapper allows an authorized attacker to elevate privileges locally.

7.0
CVE-2026-71333

Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

7.0
CVE-2026-71332

Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges lo

7.5
CVE-2026-71330

Exposure of sensitive system information to an unauthorized control sphere in Windows Services for NFS ONCRPC XDR Driver

8.8
CVE-2026-71328

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

7.5
CVE-2026-70587

Improper null termination in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information ove

8.8
CVE-2026-70586

Heap-based buffer overflow in Windows Paint allows an unauthorized attacker to execute code over a network.

7.0
CVE-2026-70585

Use after free in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to execute code locally.

7.8
CVE-2026-70584

Access of resource using incompatible type ('type confusion') in Windows Core Messaging allows an authorized attacker to

7.8
CVE-2026-70583

Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally.

7.8
CVE-2026-70581

Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Test your stack for 2026issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.

Watch the demo →