Export limit exceeded: 425868 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 425868 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Search Results (7544 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-95882 1 Microsoft 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more 2026-11-15 9.8 Critical
Stack-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network.
CVE-2026-95938 1 Microsoft 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more 2026-11-15 7 High
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-95947 1 Microsoft 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more 2026-11-15 7.8 High
An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files. The vulnerability could allow elevation of privilege if an attacker can successfully exploit it. An attacker who successfully exploited the vulnerability could gain greater access to sensitive information and system functionality. To exploit the vulnerability, an attacker could run a specially crafted application. The security update addresses the vulnerability by correcting the way that WER handles and executes files.
CVE-2026-95971 1 Microsoft 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more 2026-11-15 7 High
Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-95977 1 Microsoft 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more 2026-11-15 5.5 Medium
Out-of-bounds read in Windows Event Viewer allows an authorized attacker to disclose information locally.
CVE-2026-88231 1 Microsoft 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more 2026-11-14 5.7 Medium
Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information over a network.
CVE-2026-94517 1 Microsoft 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more 2026-11-14 5.5 Medium
Use of uninitialized resource in Kernel Transaction Manager allows an authorized attacker to disclose information locally.
CVE-2026-95935 1 Microsoft 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more 2026-11-14 7.8 High
Integer overflow or wraparound in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-95989 1 Microsoft 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more 2026-11-14 7 High
Use after free in vhdmp.sys allows an authorized attacker to elevate privileges locally.
CVE-2026-96026 1 Microsoft 28 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 25 more 2026-11-14 7 High
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-96048 1 Microsoft 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more 2026-11-14 4.7 Medium
Use of uninitialized resource in Windows Graphics Kernel allows an authorized attacker to disclose information locally.
CVE-2026-96053 1 Microsoft 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more 2026-11-14 7.8 High
Improper neutralization of special elements used in a command ('command injection') in Windows Task Scheduler allows an authorized attacker to elevate privileges locally.
CVE-2026-96059 1 Microsoft 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more 2026-11-14 5.5 Medium
Use after free in HID class driver allows an authorized attacker to disclose information locally.
CVE-2026-85838 1 Microsoft 28 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 25 more 2026-11-14 8.8 High
Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.
CVE-2026-85839 1 Microsoft 28 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 25 more 2026-11-14 8.8 High
Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.
CVE-2026-69327 1 Microsoft 7 Windows Server 2016, Windows Server 2016 (server Core Installation), Windows Server 2019 and 4 more 2026-11-14 7.4 High
Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code locally.
CVE-2026-70231 1 Microsoft 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more 2026-11-14 7 High
Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.
CVE-2026-96031 1 Microsoft 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more 2026-11-14 7.8 High
Out-of-bounds write in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-96072 1 Microsoft 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more 2026-11-14 7 High
Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.
CVE-2026-96085 1 Microsoft 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more 2026-11-14 7.8 High
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.