| CVE-2026-32164 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows User Interface Core allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-32204 | External control of file name or path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-28383 | A request to the Grafana plugin resources endpoint can cause unbounded memory allocation by reading the entire request body into memory. An authenticated user can exploit this to trigger an out-of-memory condition, potentially causing a denial of service. | medium | |
| CVE-2026-44814 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally. | medium | |
| CVE-2026-44823 | Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | high | |
| CVE-2026-58299 | Time-of-check time-of-use (toctou) race condition in Microsoft Edge for Android allows an unauthorized attacker to execute code over a network. | high | |
| CVE-2026-35417 | Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-33835 | Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-40398 | Heap-based buffer overflow in Windows Remote Desktop allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-40401 | Windows TCP/IP Denial of Service Vulnerability | high | |
| CVE-2026-40413 | Windows TCP/IP Denial of Service Vulnerability | high | |
| CVE-2026-48571 | Use after free in Windows App Installer allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-54996 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-58277 | Improper authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | high | |
| CVE-2026-55039 | Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | high | |
| CVE-2026-55035 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. | low | |
| CVE-2026-50483 | Exposure of sensitive information to an unauthorized actor in Microsoft Graphics Component allows an authorized attacker to disclose information locally. | medium | |
| CVE-2026-54120 | Improper input validation in Microsoft Surface allows an authorized attacker to execute code over a network. | high | |
| CVE-2026-64907 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. | high | |
| CVE-2026-59127 | Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-61368 | Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information locally. | medium | |
| CVE-2026-62736 | Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-65772 | Deserialization of untrusted data in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network. | high | |
| CVE-2026-67648 | Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network. | medium | |
| CVE-2026-68889 | Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network. | high | |
| CVE-2026-69336 | Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network. | high | |
| CVE-2026-69579 | Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network. | critical | |
| CVE-2026-69618 | Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information locally. | medium | |
| CVE-2026-69739 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network. | high | |
| CVE-2026-70565 | Use after free in Windows AF_UNIX Socket Provider allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-72995 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-73024 | Heap-based buffer overflow in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-72950 | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine | critical | |
| CVE-2026-70351 | Integer overflow or wraparound in Microsoft WebP Image Extension allows an unauthorized attacker to execute code over a network. | high | |
| CVE-2026-70065 | Missing release of memory after effective lifetime in Windows DHCP Server allows an unauthorized attacker to deny service over a network. | high | |
| CVE-2026-69744 | Null pointer dereference in Windows Kerberos allows an unauthorized attacker to deny service over a network. | high | |
| CVE-2026-80084 | Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network. | medium | |
| CVE-2026-68778 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. | medium | |
| CVE-2026-77898 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. | high | |
| CVE-2026-25254 | Improper authorization leads to Remote Code Execution via SocketIO interface. | critical | |
| CVE-2025-66050 | Vivotek IP7137 camera with firmware version 0200a by default dos not require to provide any password when logging in as an administrator. While it is possible to set up such a password, a user is not informed about such a need. The vendor has not replied to the CNA. Possibly all firmware versions are affected. Since the product has met End-Of-Life phase, a fix is not expected to be released. | critical | |
| CVE-2026-20950 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | high | |
| CVE-2026-20923 | Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2025-47380 | Memory corruption while preprocessing IOCTLs in sensors. | high | |
| CVE-2025-47343 | Memory corruption while processing a video session to set video parameters. | high | |
| CVE-2026-20873 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-21247 | Improper input validation in Windows Hyper-V allows an authorized attacker to execute code locally. | high | |
| CVE-2026-26133 | AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network. | high | |
| CVE-2026-21381 | Transient DOS when receiving a service data frame with excessive length during device matching over a neighborhood awareness network protocol connection. | high | |
| CVE-2026-32159 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally. | high | |
