Menu

Star on GitHub · 3.5k

2026

90,429 vulnerabilities published in 2026.

Results

90,429· Page 588/1809
7.0
CVE-2026-77897

Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally.

6.5
CVE-2026-77896

Integer overflow or wraparound in Remote Desktop Client allows an unauthorized attacker to deny service over a network.

7.5
CVE-2026-77895

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

7.0
CVE-2026-77894

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows

7.5
CVE-2026-77893

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

6.8
CVE-2026-77892

No cwe for this issue in Windows Boot Manager allows an unauthorized attacker to elevate privileges with a physical atta

6.4
CVE-2026-77891

Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally.

7.5
CVE-2026-77890

Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to

7.5
CVE-2026-77889

Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to

7.5
CVE-2026-77888

Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to

6.4
CVE-2026-77887

Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally.

7.5
CVE-2026-77886

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

8.1
CVE-2026-77505

Use after free in DNS Server allows an unauthorized attacker to execute code over a network.

8.8
CVE-2026-77504

Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

8.4
CVE-2026-77503

Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.

7.5
CVE-2026-77502

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

7.5
CVE-2026-77501

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

7.8
CVE-2026-77500

Release of invalid pointer or reference in Windows Device Association Service allows an authorized attacker to elevate p

7.5
CVE-2026-77499

Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to

7.5
CVE-2026-77498

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

8.8
CVE-2026-77495

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

7.5
CVE-2026-77494

Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to

9.8
CVE-2026-77493

Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

5.5
CVE-2026-77492

Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally.

5.5
CVE-2026-77491

Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally.

7.8
CVE-2026-77489

Null pointer dereference in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

5.5
CVE-2026-77488

Integer underflow (wrap or wraparound) in SQL Server allows an authorized attacker to disclose information locally.

8.8
CVE-2026-77487

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.

8.8
CVE-2026-77486

Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a network.

7.0
CVE-2026-77485

Use after free in SQL Server allows an authorized attacker to elevate privileges locally.

8.8
CVE-2026-77484

Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.

8.8
CVE-2026-77483

Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network.

8.8
CVE-2026-77482

Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.

8.8
CVE-2026-77481

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

8.8
CVE-2026-77480

Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a netw

7.4
CVE-2026-76196

Photoshop Mobile is affected by a Session Fixation vulnerability that could result in privilege escalation. An attacker

8.2
CVE-2026-76191

Animate is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in a

6.5
CVE-2026-73029

Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.

8.8
CVE-2026-73028

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.

7.8
CVE-2026-73026

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

9.8
CVE-2026-73025

Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security feature over a network.

7.8
CVE-2026-73024

Heap-based buffer overflow in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to elevate privil

8.8
CVE-2026-73023

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

7.0
CVE-2026-73022

Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

7.8
CVE-2026-73021

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

7.8
CVE-2026-73020

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

4.3
CVE-2026-73019

Improper resolution of path equivalence in Windows URL Moniker allows an unauthorized attacker to bypass a security feat

8.8
CVE-2026-73018

Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.

7.5
CVE-2026-73017

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to execute code locally.

8.8
CVE-2026-73016

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a networ

Test your stack for 2026issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.

CyberStrike v2 is here — more intelligence, greater reach