| CVE-2026-50483 | Exposure of sensitive information to an unauthorized actor in Microsoft Graphics Component allows an authorized attacker to disclose information locally. | medium | |
| CVE-2026-54120 | Improper input validation in Microsoft Surface allows an authorized attacker to execute code over a network. | high | |
| CVE-2026-64907 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. | high | |
| CVE-2026-59127 | Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-61368 | Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information locally. | medium | |
| CVE-2026-62736 | Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-65772 | Deserialization of untrusted data in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network. | high | |
| CVE-2026-67648 | Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network. | medium | |
| CVE-2026-68889 | Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network. | high | |
| CVE-2026-69336 | Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network. | high | |
| CVE-2026-69579 | Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network. | critical | |
| CVE-2026-69618 | Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information locally. | medium | |
| CVE-2026-69739 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network. | high | |
| CVE-2026-70565 | Use after free in Windows AF_UNIX Socket Provider allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-72995 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-73024 | Heap-based buffer overflow in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-72950 | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine | critical | |
| CVE-2026-70351 | Integer overflow or wraparound in Microsoft WebP Image Extension allows an unauthorized attacker to execute code over a network. | high | |
| CVE-2026-70065 | Missing release of memory after effective lifetime in Windows DHCP Server allows an unauthorized attacker to deny service over a network. | high | |
| CVE-2026-69744 | Null pointer dereference in Windows Kerberos allows an unauthorized attacker to deny service over a network. | high | |
| CVE-2026-80084 | Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network. | medium | |
| CVE-2026-68778 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. | medium | |
| CVE-2026-77898 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. | high | |
| CVE-2026-25254 | Improper authorization leads to Remote Code Execution via SocketIO interface. | critical | |
| CVE-2025-66050 | Vivotek IP7137 camera with firmware version 0200a by default dos not require to provide any password when logging in as an administrator. While it is possible to set up such a password, a user is not informed about such a need. The vendor has not replied to the CNA. Possibly all firmware versions are affected. Since the product has met End-Of-Life phase, a fix is not expected to be released. | critical | |
| CVE-2026-20950 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | high | |
| CVE-2026-20923 | Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-21258 | Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | medium | |
| CVE-2026-24285 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-25166 | Deserialization of untrusted data in Windows System Image Manager allows an authorized attacker to execute code locally. | high | |
| CVE-2026-32087 | Heap-based buffer overflow in Function Discovery Service (fdwsd.dll) allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-32078 | Use after free in Windows Projected File System allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-42830 | Untrusted search path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally. | medium | |
| CVE-2026-40380 | Heap-based buffer overflow in Volume Manager Extension Driver allows an authorized attacker to execute code with a physical attack. | medium | |
| CVE-2026-33380 | A vulnerability in SQL Expressions allows an authenticated attacker to read arbitrary files from the Grafana server's filesystem. Only instances with the sqlExpressions feature toggle enabled are vulnerable. | medium | |
| CVE-2026-42901 | Origin validation error in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network. | critical | |
| CVE-2026-45638 | Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-47288 | Integer overflow or wraparound in Windows Kerberos allows an authorized attacker to execute code over an adjacent network. | high | |
| CVE-2026-48575 | Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. | high | |
| CVE-2026-12246 | NSD version 4.14.0 introduced a bug where a specially crafted APL RR, with an adflength larger than permitted for the address family will overwrite the stack when the zone is written to disk, with a maximum of 111 attacker controlled bytes. | high | |
| CVE-2026-56646 | Exposure of sensitive information to an unauthorized actor in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. | medium | |
| CVE-2026-45646 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. | high | |
| CVE-2026-56170 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. | high | |
| CVE-2026-58279 | Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network. | medium | |
| CVE-2026-55130 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. | high | |
| CVE-2026-47642 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | high | |
| CVE-2026-50524 | Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to deny service over a network. | high | |
| CVE-2026-65656 | Improper neutralization of special elements used in a command ('command injection') in Microsoft Office allows an unauthorized attacker to execute code locally. | high | |
| CVE-2026-63528 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. | medium | |
| CVE-2026-61925 | Incorrect authorization in Windows Installer allows an authorized attacker to elevate privileges locally. | high | |
