Menu

Star on GitHub · 3.4k

2026

90,429 vulnerabilities published in 2026.

Results

90,429· Page 226/1809
7.0
CVE-2026-85827

Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.

7.0
CVE-2026-85826

Out-of-bounds write in Windows Fast FAT Driver allows an authorized attacker to elevate privileges locally.

7.0
CVE-2026-85825

Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privi

7.0
CVE-2026-85824

Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally.

7.0
CVE-2026-85823

Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally.

7.8
CVE-2026-85822

Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.

6.5
CVE-2026-85821

Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose

7.8
CVE-2026-85820

Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privi

9.0
CVE-2026-85818

Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to perform spoofing

8.8
CVE-2026-85817

Reliance on untrusted inputs in a security decision in Windows PowerShell allows an unauthorized attacker to execute cod

5.7
CVE-2026-85816

Out-of-bounds read in Windows Wi-Fi Driver allows an authorized attacker to disclose information over an adjacent networ

5.5
CVE-2026-85815

Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.

9.8
CVE-2026-85814

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a

5.5
CVE-2026-85812

Files or directories accessible to external parties in Windows Bind Filter Driver allows an authorized attacker to discl

7.5
CVE-2026-85811

Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over an adjacent network.

7.0
CVE-2026-85810

Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally.

9.8
CVE-2026-85809

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access

7.5
CVE-2026-85808

Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service o

7.8
CVE-2026-85807

Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

9.8
CVE-2026-85806

Integer underflow (wrap or wraparound) in Network Policy Server (NPS) allows an unauthorized attacker to execute code ov

6.5
CVE-2026-85805

Improperly implemented security check for standard in Windows PowerShell allows an unauthorized attacker to bypass a sec

7.8
CVE-2026-85804

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

7.0
CVE-2026-85803

Use after free in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.

7.0
CVE-2026-85802

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

7.8
CVE-2026-85800

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

8.1
CVE-2026-85799

Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.

7.2
CVE-2026-85798

Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a

6.5
CVE-2026-85797

Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.

7.8
CVE-2026-85796

Numeric truncation error in Windows Installer allows an authorized attacker to elevate privileges locally.

7.8
CVE-2026-85795

Use after free in Windows Text Services Framework allows an authorized attacker to elevate privileges locally.

5.5
CVE-2026-85794

Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose informa

5.5
CVE-2026-85793

Exposure of sensitive system information to an unauthorized control sphere in Windows Sysmain Service allows an authoriz

9.8
CVE-2026-85792

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access

7.0
CVE-2026-85791

Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges l

5.9
CVE-2026-85790

Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.

6.8
CVE-2026-85747

Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.2, registry/client.(*manifes

7.8
CVE-2026-85377

Access of resource using incompatible type ('type confusion') in Windows CD-ROM Driver allows an authorized attacker to

7.8
CVE-2026-85376

Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

7.8
CVE-2026-85375

Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges

5.5
CVE-2026-85374

Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.

7.8
CVE-2026-85373

Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevat

7.0
CVE-2026-85372

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

8.1
CVE-2026-85371

Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.

7.0
CVE-2026-85370

Use after free in WebDAV allows an authorized attacker to elevate privileges locally.

8.2
CVE-2026-85369

Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

7.8
CVE-2026-85368

Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

7.0
CVE-2026-85367

Use after free in Windows Cash Drawer Protocol Provider allows an authorized attacker to elevate privileges locally.

7.8
CVE-2026-85366

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

7.0
CVE-2026-85365

Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.

7.0
CVE-2026-85364

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Test your stack for 2026issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.

Watch the demo →