Menu

Star on GitHub · 3.5k

2026

90,429 vulnerabilities published in 2026.

Results

90,429· Page 589/1809
7.8
CVE-2026-73015

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

7.8
CVE-2026-73014

Missing authorization in Data Sharing Service Client allows an authorized attacker to elevate privileges locally.

8.8
CVE-2026-73013

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

8.8
CVE-2026-73012

Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a net

7.8
CVE-2026-73011

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

9.8
CVE-2026-73010

Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.

9.8
CVE-2026-73009

Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a

5.5
CVE-2026-73008

Exposure of private personal information to an unauthorized actor in Windows Biometric Service allows an authorized atta

7.8
CVE-2026-73007

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

8.8
CVE-2026-73006

Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a netwo

7.0
CVE-2026-73005

Use after free in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.

5.5
CVE-2026-73004

Missing authentication for critical function in Windows Autopilot allows an authorized attacker to perform tampering loc

7.0
CVE-2026-73003

Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

7.8
CVE-2026-73002

Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

7.8
CVE-2026-73001

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

7.8
CVE-2026-73000

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

6.8
CVE-2026-72999

Out-of-bounds read in Windows USB Hub Driver allows an unauthorized attacker to elevate privileges with a physical attac

7.8
CVE-2026-72997

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

7.8
CVE-2026-72996

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

7.8
CVE-2026-72995

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

7.8
CVE-2026-72994

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

7.8
CVE-2026-72993

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

7.8
CVE-2026-72992

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

7.8
CVE-2026-72991

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

7.8
CVE-2026-72990

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

7.5
CVE-2026-72989

Use of uninitialized resource in Windows Failover Cluster allows an unauthorized attacker to disclose information over a

7.8
CVE-2026-72988

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

8.1
CVE-2026-72987

Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.

8.8
CVE-2026-72986

Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.

6.8
CVE-2026-72985

Heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized attacker to elevate privileges with a ph

9.8
CVE-2026-72983

Use after free in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to execute code over a netwo

9.8
CVE-2026-72982

Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.

8.1
CVE-2026-72981

Use after free in IP Helper allows an unauthorized attacker to execute code over a network.

4.4
CVE-2026-72980

Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally.

9.8
CVE-2026-72979

Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

5.9
CVE-2026-72978

Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthori

6.5
CVE-2026-72977

Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network

5.0
CVE-2026-72976

Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information locally.

6.5
CVE-2026-72975

Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network

6.5
CVE-2026-72974

Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

8.8
CVE-2026-72973

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

8.8
CVE-2026-72972

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

7.8
CVE-2026-72967

Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attacker to elevate privileges loca

5.5
CVE-2026-72966

Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to perform tampering loc

7.8
CVE-2026-72965

Use after free in Windows WebClient Service allows an authorized attacker to elevate privileges locally.

5.5
CVE-2026-72964

Missing authentication for critical function in Windows Internet Connection Sharing (ICS) allows an authorized attacker

7.0
CVE-2026-72963

Use after free in Windows Modern Execution Server allows an authorized attacker to elevate privileges locally.

8.2
CVE-2026-72962

Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

8.2
CVE-2026-72961

Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

8.8
CVE-2026-72960

Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.

Test your stack for 2026issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.

CyberStrike v2 is here — more intelligence, greater reach