Menu

Star on GitHub · 3.4k

2026

90,429 vulnerabilities published in 2026.

Results

33,533 of 90,429· Page 280/671
5.5
CVE-2026-62796

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.

5.5
CVE-2026-62793

Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.

5.5
CVE-2026-62786

Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.

6.5
CVE-2026-62782

Out-of-bounds read in Windows SMB Client allows an unauthorized attacker to disclose information over a network.

5.5
CVE-2026-62775

Incorrect authorization in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to d

6.7
CVE-2026-62769

Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.

5.3
CVE-2026-62757

Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to bypass a securit

6.5
CVE-2026-62750

Partial string comparison in Windows HTTP Protocol Stack allows an unauthorized attacker to perform tampering over an ad

5.5
CVE-2026-62746

Buffer over-read in Windows Win32K allows an authorized attacker to disclose information locally.

6.5
CVE-2026-62745

Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information ov

5.5
CVE-2026-62743

Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.

6.5
CVE-2026-62742

Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information ov

5.5
CVE-2026-62740

Use of uninitialized resource in Windows Imaging Component allows an authorized attacker to disclose information locally

5.5
CVE-2026-62738

Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.

5.5
CVE-2026-62730

Buffer over-read in Windows Wired AutoConfig Service allows an authorized attacker to disclose information locally.

6.5
CVE-2026-62720

Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information ov

6.5
CVE-2026-62718

Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information ov

6.5
CVE-2026-62716

Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information ov

6.5
CVE-2026-62715

Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information ov

6.5
CVE-2026-62714

Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information ov

5.5
CVE-2026-62709

Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally.

6.4
CVE-2026-62708

Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.

5.5
CVE-2026-62703

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.

6.8
CVE-2026-62702

Null pointer dereference in Windows Graphics Kernel allows an unauthorized attacker to deny service over a network.

6.8
CVE-2026-62699

Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to exe

5.5
CVE-2026-61936

Missing authorization in Windows Defender Firewall Service allows an authorized attacker to bypass a security feature lo

5.5
CVE-2026-61933

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.

5.5
CVE-2026-61928

Cleartext storage of sensitive information in Windows Hello allows an authorized attacker to perform tampering locally.

6.5
CVE-2026-61924

Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

6.5
CVE-2026-61921

Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

6.6
CVE-2026-61920

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an aut

6.5
CVE-2026-61918

Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

5.0
CVE-2026-61368

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information locally.

5.5
CVE-2026-61360

Untrusted pointer dereference in Windows GDI allows an authorized attacker to disclose information locally.

4.6
CVE-2026-61350

Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.

5.5
CVE-2026-61347

Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.

6.5
CVE-2026-61345

Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a netwo

6.5
CVE-2026-59138

Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a netwo

5.5
CVE-2026-59137

Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information loc

5.5
CVE-2026-59136

Use of uninitialized resource in Microsoft COM for Windows allows an authorized attacker to disclose information locally

5.5
CVE-2026-59135

Weak authentication in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.

5.6
CVE-2026-59131

No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally.

5.6
CVE-2026-59130

No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally.

5.5
CVE-2026-59128

Out-of-bounds read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally

6.5
CVE-2026-58639

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over

5.5
CVE-2026-54123

Exposure of sensitive information to an unauthorized actor in Microsoft Defender for Endpoint allows an authorized attac

5.4
CVE-2026-48483

TypeBot is a chatbot builder tool. Prior to version 3.17.0, Typebot's WhatsApp status forwarding feature stores a worksp

5.5
CVE-2026-48446

CAI Content Credentials is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

6.2
CVE-2026-48445

CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an applicati

6.2
CVE-2026-48444

CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an applicati

Test your stack for 2026issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.

Watch the demo →