| CVE-2026-80124 |
|
09.09.2026 |
5.5 |
| CVE-2026-80177 |
|
09.09.2026 |
6.5 |
| CVE-2026-80055 |
|
09.09.2026 |
4.4 |
| CVE-2026-15398 |
Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) <= 4.1.22 - Authenticated (Subscriber+) Missing Authorization to Order Completion / Free Ticket Redemption |
09.09.2026 |
4.3 |
| CVE-2026-17149 |
myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program <= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wrapper' Shortcode Attribute |
09.09.2026 |
6.4 |
| CVE-2026-19778 |
WPMR Google Feed Manager for WooCommerce <= 2.23.7 - Authenticated (Administrator+) SQL Injection via 'feed' Parameter |
09.09.2026 |
6.5 |
| CVE-2026-75927 |
PublishPress Capabilities <= 2.50.0 - Authenticated (Editor+) Privilege Escalation to Fresh-Install Default Capability Grant |
09.09.2026 |
7.2 |
| CVE-2026-19729 |
Keycloak-services: keycloak-services: incomplete fix for arbitrary filesystem path probing via keystore parameters |
09.09.2026 |
|
| CVE-2026-19802 |
Checkout Custom Fields Builder for WooCommerce <= 1.1.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation via 'plugin' Parameter |
09.09.2026 |
4.3 |
| CVE-2025-7062 |
Stored Cross-Site Scripting via file upload in H5P module (h5p-nodejs-library) of Lumi Education |
09.09.2026 |
|
| CVE-2026-19855 |
Spam protection, Honeypot, Anti-Spam by CleanTalk < 6.87 - Unauthenticated Arbitrary Shortcode Execution via Comment Text |
09.09.2026 |
6.5 |
| CVE-2026-80440 |
Hustle < 7.8.14.2 - Unauthenticated Arbitrary Shortcode Execution via Success Message Placeholders |
09.09.2026 |
4.8 |
| CVE-2026-83537 |
WP Express Checkout < 2.5.0 - Unauthenticated Payment Bypass via wpec_process_empty_payment |
09.09.2026 |
5.3 |
| CVE-2026-85117 |
Contact Form 7 Captcha 0.1.7 - 0.1.8 - Unauthenticated Arbitrary Shortcode Execution via Form Field Repopulation |
09.09.2026 |
6.5 |
| CVE-2026-87747 |
Ragic|Enterprise Cloud Database - Arbitrary File Read |
09.09.2026 |
|
| CVE-2025-15690 |
Content Mask 1.7.1 - 1.8.5.5 - Contributor+ Stored XSS via Post Scripts and Styles |
09.09.2026 |
|
| CVE-2026-13144 |
WP Travel < 12.0.2 - Unauthenticated Arbitrary Booking Payment Reset |
09.09.2026 |
|
| CVE-2026-13146 |
WP Travel < 12.0.2 - Unauthenticated Booking Payment State Tampering via IDOR |
09.09.2026 |
|
| CVE-2026-14962 |
ELEX WooCommerce Request a Quote < 2.4.1 - Unauthenticated SQLi via variation_id |
09.09.2026 |
|
| CVE-2026-16960 |
Loops & Logic < 4.3.0 - Unauthenticated User Data and Site Option Disclosure |
09.09.2026 |
|
| CVE-2026-18042 |
WP Travel < 12.0.2 - Unauthenticated Arbitrary Booking Cancellation |
09.09.2026 |
|
| CVE-2026-75861 |
Ultimate Gift Cards for WooCommerce < 3.2.10 - Subscriber+ Gift Card Theft and Destruction via Unauthorized Redemption |
09.09.2026 |
|
| CVE-2026-80339 |
Payment Plugins for Stripe WooCommerce < 4.0.12 - Unauthenticated Customer PII Disclosure via order-pay |
09.09.2026 |
|
| CVE-2026-80340 |
Payment Plugins for PayPal WooCommerce < 2.0.26 - Unauthenticated Customer PII Disclosure via order-pay |
09.09.2026 |
|
| CVE-2026-80341 |
Payment Plugins for PayPal WooCommerce < 2.0.26 - Subscriber+ Stored Payment Method Assignment via IDOR |
09.09.2026 |
|
| CVE-2026-81021 |
SupportCandy 3.2.9 - 3.5.2 - Unauthenticated Ticket Attachment Disclosure |
09.09.2026 |
|
| CVE-2026-81022 |
SupportCandy 3.3.6 - 3.5.2 - Unauthenticated Ticket Content Disclosure via Auth Code Leak |
09.09.2026 |
|
| CVE-2026-81741 |
Groundhogg < 4.7.2 - Open Redirect via 'redirect_to' Parameter |
09.09.2026 |
|
| CVE-2026-82184 |
WPLP Cookie Consent < 4.4.2 - Unauthenticated IAB TCF Consent Option Update |
09.09.2026 |
|
| CVE-2026-82185 |
WPLP Cookie Consent < 4.4.2 - Subscriber+ Banner Settings Overwrite and A/B Test Data Reset |
09.09.2026 |
|
| CVE-2026-82848 |
Masteriyo LMS 1.3.1 - 2.3.3 - Unauthenticated Course Enrollment Disclosure |
09.09.2026 |
|
| CVE-2026-83541 |
Sina Extension for Elementor 3.7.1 - 3.10.3 - Contributor+ Stored XSS via Table Widget |
09.09.2026 |
|
| CVE-2026-84068 |
Quentn WP 1.2.13 - 1.2.14 - Unauthenticated SQLi via 'qntn_wp' Parameter |
09.09.2026 |
|
| CVE-2026-84113 |
Quentn WP < 1.2.15 - Admin+ SQLi via 'orderby'/'order' Parameter |
09.09.2026 |
|
| CVE-2026-84222 |
Kirki 6.2.1 - 6.2.5 - Unauthenticated Non-Public Post Content Disclosure via 'kirki_data' Parameter |
09.09.2026 |
|
| CVE-2026-85037 |
Sunshine Photo Cart < 3.7 - Unauthenticated Price Manipulation via IDOR |
09.09.2026 |
|
| CVE-2026-85132 |
WPLP Cookie Consent 4.0.2 - 4.4.1 - Subscriber+ Cookie Scan Schedule Disclosure via gcc_get_schedule_scan |
09.09.2026 |
|
| CVE-2026-85133 |
WPLP Cookie Consent < 4.4.2 - Subscriber+ Missing Authorization via Multiple Settings AJAX Actions |
09.09.2026 |
|
| CVE-2026-85418 |
Orbit Fox < 3.0.9 - Contributor+ Stored XSS via Beaver Builder Pricing Table Widget |
09.09.2026 |
|
| CVE-2026-19946 |
Awesome Support <= 6.3.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Denial via 'user_id' Parameter |
09.09.2026 |
4.3 |
| CVE-2026-75905 |
WP Recipe Maker <= 10.8.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Recipe Ownership Takeover and Unpublishing via '[wprm-recipe]' Shortcode |
09.09.2026 |
4.3 |
| CVE-2026-76009 |
Next-Cart Store to WooCommerce Migration <= 3.9.8 - Unauthenticated Authentication Bypass via Default '__token__' Fallback in REST Migration Endpoint |
09.09.2026 |
8.1 |
| CVE-2026-83593 |
WPBot <= 8.7.3 - Unauthenticated Stored Cross-Site Scripting via 'conversation' Parameter |
09.09.2026 |
7.2 |
| CVE-2026-84908 |
WPFunnels <= 3.12.13 - Missing Authorization to Unauthenticated Arbitrary Product Price Manipulation via 'wpfnl_load_payment' AJAX Action |
09.09.2026 |
5.3 |
| CVE-2026-8615 |
ilGhera Reviso Exporter for WooCommerce <= 1.2.3 - Missing Authorization to Authenticated (Subscriber+) Agreement Grant Token Deletion via disconnect_callback Function |
09.09.2026 |
4.3 |
| CVE-2026-21085 |
|
09.09.2026 |
|
| CVE-2026-21086 |
|
09.09.2026 |
|
| CVE-2026-21087 |
|
09.09.2026 |
|
| CVE-2026-21088 |
|
09.09.2026 |
|
| CVE-2026-21089 |
|
09.09.2026 |
|
| CVE-2026-21090 |
|
09.09.2026 |
|
| CVE-2026-21091 |
|
09.09.2026 |
|
| CVE-2026-21092 |
|
09.09.2026 |
|
| CVE-2026-21093 |
|
09.09.2026 |
|
| CVE-2026-21094 |
|
09.09.2026 |
|
| CVE-2026-21095 |
|
09.09.2026 |
|
| CVE-2026-21096 |
|
09.09.2026 |
|
| CVE-2026-21097 |
|
09.09.2026 |
|
| CVE-2026-21098 |
|
09.09.2026 |
|
| CVE-2026-21099 |
|
09.09.2026 |
|
| CVE-2026-21100 |
|
09.09.2026 |
|
| CVE-2026-21101 |
|
09.09.2026 |
|
| CVE-2026-21102 |
|
09.09.2026 |
|
| CVE-2026-21103 |
|
09.09.2026 |
|
| CVE-2026-21104 |
|
09.09.2026 |
|
| CVE-2026-21105 |
|
09.09.2026 |
|
| CVE-2026-21106 |
|
09.09.2026 |
|
| CVE-2026-21107 |
|
09.09.2026 |
|
| CVE-2026-21108 |
|
09.09.2026 |
|
| CVE-2026-21109 |
|
09.09.2026 |
|
| CVE-2026-21110 |
|
09.09.2026 |
|
| CVE-2026-21111 |
|
09.09.2026 |
|
| CVE-2026-21112 |
|
09.09.2026 |
|
| CVE-2026-21113 |
|
09.09.2026 |
|
| CVE-2026-11821 |
Eventin <= 4.1.17 - Missing Authorization to Authenticated (Subscriber+) Notification Flow Management via notification-flow REST API Endpoint |
09.09.2026 |
5.4 |
| CVE-2026-19945 |
WP Crowdfunding <= 2.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'first_name' Parameter |
09.09.2026 |
6.4 |
| CVE-2026-87732 |
|
09.09.2026 |
6.2 |
| CVE-2026-87733 |
|
09.09.2026 |
6.2 |
| CVE-2026-87734 |
|
09.09.2026 |
7.5 |
| CVE-2026-87735 |
|
09.09.2026 |
4.3 |
| CVE-2026-87736 |
|
09.09.2026 |
4.3 |
| CVE-2026-87737 |
|
09.09.2026 |
5.9 |
| CVE-2026-12855 |
H19WMIHandlerSmm: unvalidated memory boundary could result in arbitrary code execution. |
09.09.2026 |
8.2 |
| CVE-2026-41987 |
|
09.09.2026 |
6.2 |
| CVE-2026-49309 |
|
09.09.2026 |
4.8 |
| CVE-2026-49313 |
|
09.09.2026 |
5.5 |
| CVE-2026-49315 |
|
09.09.2026 |
7.1 |
| CVE-2026-6485 |
UEFI BIOS embedded Shell can be used to bypass Secure Boot |
09.09.2026 |
8.2 |
| CVE-2026-81646 |
|
09.09.2026 |
5.9 |
| CVE-2026-81647 |
|
09.09.2026 |
5.3 |
| CVE-2026-11363 |
Ninja Forms <= 3.14.6 - Authenticated (Administrator+) PHP Object Injection via Form Import |
09.09.2026 |
6.6 |
| CVE-2026-17553 |
Shopping Cart & eCommerce Store <= 5.9.3 - Authenticated (Store Manager+) Privilege Escalation to ec_ajax_save_page_default_options AJAX Action |
09.09.2026 |
7.2 |
| CVE-2026-19797 |
User Access Manager <= 2.3.18 - Reflected Cross-Site Scripting via 'tab_group_section' Parameter |
09.09.2026 |
6.1 |
| CVE-2026-19800 |
Mail Mint <= 1.31.0 - Authenticated (Custom+) SQL Injection via 'status' Parameter |
09.09.2026 |
4.9 |
| CVE-2026-19944 |
WP Crowdfunding <= 2.2.1 - Authenticated (Shop Manager+) SQL Injection via 'wpneo_reward' Post Meta |
09.09.2026 |
4.9 |
| CVE-2026-57825 |
|
09.09.2026 |
5.7 |
| CVE-2026-75966 |
Podlove Podcast Publisher <= 4.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'episode_contributor[..][..][comment]' Parameter |
09.09.2026 |
6.4 |
| CVE-2026-77186 |
My Calendar <= 3.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'fallback' Shortcode Attribute |
09.09.2026 |
6.4 |
| CVE-2026-77187 |
My Calendar <= 3.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'before' and 'after' Shortcode Attributes |
09.09.2026 |
6.4 |
| CVE-2026-7804 |
Product Filter for WooCommerce by WBW <= 3.4.2 - Reflected Cross-Site Scripting via 'wpf_fid' Parameter |
09.09.2026 |
6.1 |
| CVE-2026-84293 |
Repeater Fields for Gravity Forms <= 3.0.4 - Unauthenticated Stored Cross-Site Scripting via Repeated Multi-Input Sub-Field Values |
09.09.2026 |
7.2 |
| CVE-2026-49310 |
|
09.09.2026 |
8.6 |
| CVE-2026-49311 |
|
09.09.2026 |
6.2 |
| CVE-2026-49312 |
|
09.09.2026 |
4 |
| CVE-2026-49314 |
|
09.09.2026 |
7.3 |
| CVE-2026-81644 |
|
09.09.2026 |
4.3 |
| CVE-2026-12956 |
Eventin <= 4.1.22 - Missing Authorization to Unauthenticated Arbitrary Order Creation and Status Manipulation via 'status' Parameter |
09.09.2026 |
5.3 |
| CVE-2026-13359 |
Contact Form to DB by BestWebSoft <= 1.7.5 - Unauthenticated Stored Cross-Site Scripting via cntctfrm_contact_dropdown Parameter |
09.09.2026 |
7.2 |
| CVE-2026-13709 |
Graphina <= 3.1.11 - Authenticated (Author+) Stored Cross-Site Scripting via 'iq_tree_tree_chart_template' Widget Setting |
09.09.2026 |
6.4 |
| CVE-2026-14505 |
Tanium addressed a path traversal vulnerability in Tanium Data Service. |
09.09.2026 |
6.6 |
| CVE-2026-14892 |
Tanium addressed an improper access controls vulnerability in Tanium Server. |
09.09.2026 |
4.3 |
| CVE-2026-15406 |
Eventin <= 4.1.22 - Authenticated (Custom+) Local File Inclusion via 'event_layout' Parameter |
09.09.2026 |
7.5 |
| CVE-2026-15667 |
Eventin <= 4.1.22 - Authenticated (Contirbutor+) Local File Inclusion via 'event_layout' Parameter |
09.09.2026 |
7.5 |
| CVE-2026-76801 |
FireBox <= 3.1.10 - Authenticated (Author+) Remote Code Execution to Privilege Escalation |
09.09.2026 |
8.8 |
| CVE-2026-87019 |
Tanium addressed an improper access controls vulnerability in Comply. |
09.09.2026 |
4.3 |
| CVE-2026-87021 |
Tanium addressed an unauthorized code execution vulnerability in Comply. |
09.09.2026 |
7.2 |
| CVE-2026-87023 |
Tanium addressed a path traversal vulnerability in Comply. |
09.09.2026 |
8.5 |
| CVE-2026-87025 |
Tanium addressed an improper access controls vulnerability in Comply. |
09.09.2026 |
5.4 |
| CVE-2026-87030 |
Tanium addressed a path traversal vulnerability in Comply. |
09.09.2026 |
8.5 |
| CVE-2026-87032 |
Tanium addressed an information disclosure vulnerability in Tanium Server. |
09.09.2026 |
4.3 |
| CVE-2026-87033 |
Tanium addressed an improper access controls vulnerability in Comply. |
09.09.2026 |
5.4 |
| CVE-2026-87034 |
Tanium addressed a SQL injection vulnerability in Comply. |
09.09.2026 |
8.3 |
| CVE-2026-87035 |
Tanium addressed an information disclosure vulnerability in Comply. |
09.09.2026 |
4.3 |
| CVE-2026-87036 |
Tanium addressed an improper access controls vulnerability in Comply. |
09.09.2026 |
8.1 |
| CVE-2026-87037 |
Tanium addressed an improper access controls vulnerability in Comply. |
09.09.2026 |
5.4 |
| CVE-2026-87046 |
Tanium addressed an improper access controls vulnerability in Comply. |
09.09.2026 |
4.3 |
| CVE-2026-87047 |
Tanium addressed an improper access controls vulnerability in Comply. |
09.09.2026 |
6.3 |
| CVE-2026-87048 |
Tanium addressed an improper access controls vulnerability in Comply. |
09.09.2026 |
5.4 |
| CVE-2026-87072 |
Tanium addressed an improper access controls vulnerability in Comply. |
09.09.2026 |
7.1 |
| CVE-2026-87073 |
Tanium addressed an improper access controls vulnerability in Comply. |
09.09.2026 |
6.5 |
| CVE-2026-87075 |
Tanium addressed an improper access controls vulnerability in Comply. |
09.09.2026 |
8.1 |
| CVE-2026-87084 |
Tanium addressed a server-side request forgery vulnerability in Enforce. |
09.09.2026 |
7.7 |
| CVE-2026-87088 |
Tanium addressed an unauthorized code execution vulnerability in Enforce. |
09.09.2026 |
7 |
| CVE-2026-87083 |
tile-ai tilelang Kernel Cache kernel_cache.py KernelCache._load_kernel_from_disk deserialization |
09.09.2026 |
|
| CVE-2026-87724 |
|
09.09.2026 |
6.5 |
| CVE-2026-87429 |
|
09.09.2026 |
|
| CVE-2026-87430 |
|
09.09.2026 |
|
| CVE-2026-87431 |
|
09.09.2026 |
|
| CVE-2026-87432 |
|
09.09.2026 |
|
| CVE-2026-87433 |
|
09.09.2026 |
|
| CVE-2026-87434 |
|
09.09.2026 |
|
| CVE-2026-87435 |
|
09.09.2026 |
|
| CVE-2026-87436 |
|
09.09.2026 |
|
| CVE-2026-87437 |
|
09.09.2026 |
|
| CVE-2026-87438 |
|
09.09.2026 |
|
| CVE-2026-87439 |
|
09.09.2026 |
|
| CVE-2026-87440 |
|
09.09.2026 |
|
| CVE-2026-87441 |
|
09.09.2026 |
|
| CVE-2026-87442 |
|
09.09.2026 |
|
| CVE-2026-87443 |
|
09.09.2026 |
|
| CVE-2026-87444 |
|
09.09.2026 |
|
| CVE-2026-87445 |
|
09.09.2026 |
|
| CVE-2026-87446 |
|
09.09.2026 |
|
| CVE-2026-87447 |
|
09.09.2026 |
|
| CVE-2026-87448 |
|
09.09.2026 |
|
| CVE-2026-87449 |
|
09.09.2026 |
|
| CVE-2026-87450 |
|
09.09.2026 |
|
| CVE-2026-87451 |
|
09.09.2026 |
|
| CVE-2026-87452 |
|
09.09.2026 |
|
| CVE-2026-87453 |
|
09.09.2026 |
|
| CVE-2026-87454 |
|
09.09.2026 |
|
| CVE-2026-87455 |
|
09.09.2026 |
|
| CVE-2026-87456 |
|
09.09.2026 |
|
| CVE-2026-87457 |
|
09.09.2026 |
|
| CVE-2026-87458 |
|
09.09.2026 |
|
| CVE-2026-87459 |
|
09.09.2026 |
|
| CVE-2026-87460 |
|
09.09.2026 |
|
| CVE-2026-87461 |
|
09.09.2026 |
|
| CVE-2026-87462 |
|
09.09.2026 |
|
| CVE-2026-87463 |
|
09.09.2026 |
|
| CVE-2026-87464 |
|
09.09.2026 |
|
| CVE-2026-87465 |
|
09.09.2026 |
|
| CVE-2026-87466 |
|
09.09.2026 |
|
| CVE-2026-87467 |
|
09.09.2026 |
|
| CVE-2026-87468 |
|
09.09.2026 |
|
| CVE-2026-87469 |
|
09.09.2026 |
|
| CVE-2026-87470 |
|
09.09.2026 |
|
| CVE-2026-87471 |
|
09.09.2026 |
|
| CVE-2026-87472 |
|
09.09.2026 |
|
| CVE-2026-87473 |
|
09.09.2026 |
|
| CVE-2026-87474 |
|
09.09.2026 |
|
| CVE-2026-87475 |
|
09.09.2026 |
|
| CVE-2026-87476 |
|
09.09.2026 |
|
| CVE-2026-87477 |
|
09.09.2026 |
|
| CVE-2026-87478 |
|
09.09.2026 |
|
| CVE-2026-87479 |
|
09.09.2026 |
|
| CVE-2026-87480 |
|
09.09.2026 |
|
| CVE-2026-87481 |
|
09.09.2026 |
|
| CVE-2026-87482 |
|
09.09.2026 |
|
| CVE-2026-87483 |
|
09.09.2026 |
|
| CVE-2026-87484 |
|
09.09.2026 |
|
| CVE-2026-87485 |
|
09.09.2026 |
|
| CVE-2026-87486 |
|
09.09.2026 |
|
| CVE-2026-87487 |
|
09.09.2026 |
|
| CVE-2026-87488 |
|
09.09.2026 |
|
| CVE-2026-87489 |
|
09.09.2026 |
|
| CVE-2026-87490 |
|
09.09.2026 |
|
| CVE-2026-87491 |
|
09.09.2026 |
|
| CVE-2026-87492 |
|
09.09.2026 |
|
| CVE-2026-87493 |
|
09.09.2026 |
|
| CVE-2026-87494 |
|
09.09.2026 |
|
| CVE-2026-87495 |
|
09.09.2026 |
|
| CVE-2026-87496 |
|
09.09.2026 |
|
| CVE-2026-87497 |
|
09.09.2026 |
|
| CVE-2026-87498 |
|
09.09.2026 |
|
| CVE-2026-87499 |
|
09.09.2026 |
|
| CVE-2026-87500 |
|
09.09.2026 |
|
| CVE-2026-87501 |
|
09.09.2026 |
|
| CVE-2026-87502 |
|
09.09.2026 |
|
| CVE-2026-87503 |
|
09.09.2026 |
|
| CVE-2026-87504 |
|
09.09.2026 |
|
| CVE-2026-87505 |
|
09.09.2026 |
|
| CVE-2026-87506 |
|
09.09.2026 |
|
| CVE-2026-87507 |
|
09.09.2026 |
|
| CVE-2026-87508 |
|
09.09.2026 |
|
| CVE-2026-87509 |
|
09.09.2026 |
|
| CVE-2026-87510 |
|
09.09.2026 |
|
| CVE-2026-87511 |
|
09.09.2026 |
|
| CVE-2026-87512 |
|
09.09.2026 |
|
| CVE-2026-87513 |
|
09.09.2026 |
|
| CVE-2026-87514 |
|
09.09.2026 |
|
| CVE-2026-87515 |
|
09.09.2026 |
|
| CVE-2026-87516 |
|
09.09.2026 |
|
| CVE-2026-87517 |
|
09.09.2026 |
|
| CVE-2026-87518 |
|
09.09.2026 |
|
| CVE-2026-87519 |
|
09.09.2026 |
|
| CVE-2026-87520 |
|
09.09.2026 |
|
| CVE-2026-87521 |
|
09.09.2026 |
|
| CVE-2026-87522 |
|
09.09.2026 |
|
| CVE-2026-87523 |
|
09.09.2026 |
|
| CVE-2026-87524 |
|
09.09.2026 |
|
| CVE-2026-87525 |
|
09.09.2026 |
|
| CVE-2026-87526 |
|
09.09.2026 |
|
| CVE-2026-87527 |
|
09.09.2026 |
|
| CVE-2026-87528 |
|
09.09.2026 |
|
| CVE-2026-87529 |
|
09.09.2026 |
|
| CVE-2026-87530 |
|
09.09.2026 |
|
| CVE-2026-87531 |
|
09.09.2026 |
|
| CVE-2026-87532 |
|
09.09.2026 |
|
| CVE-2026-87533 |
|
09.09.2026 |
|
| CVE-2026-87534 |
|
09.09.2026 |
|
| CVE-2026-87535 |
|
09.09.2026 |
|
| CVE-2026-87536 |
|
09.09.2026 |
|
| CVE-2026-87537 |
|
09.09.2026 |
|
| CVE-2026-87538 |
|
09.09.2026 |
|
| CVE-2026-87539 |
|
09.09.2026 |
|
| CVE-2026-87540 |
|
09.09.2026 |
|
| CVE-2026-87541 |
|
09.09.2026 |
|
| CVE-2026-87542 |
|
09.09.2026 |
|
| CVE-2026-87543 |
|
09.09.2026 |
|
| CVE-2026-87544 |
|
09.09.2026 |
|
| CVE-2026-87545 |
|
09.09.2026 |
|
| CVE-2026-87546 |
|
09.09.2026 |
|
| CVE-2026-87547 |
|
09.09.2026 |
|
| CVE-2026-87548 |
|
09.09.2026 |
|
| CVE-2026-87549 |
|
09.09.2026 |
|
| CVE-2026-87550 |
|
09.09.2026 |
|
| CVE-2026-87551 |
|
09.09.2026 |
|
| CVE-2026-87552 |
|
09.09.2026 |
|
| CVE-2026-87553 |
|
09.09.2026 |
|
| CVE-2026-87554 |
|
09.09.2026 |
|
| CVE-2026-87555 |
|
09.09.2026 |
|
| CVE-2026-87556 |
|
09.09.2026 |
|
| CVE-2026-87557 |
|
09.09.2026 |
|
| CVE-2026-87558 |
|
09.09.2026 |
|
| CVE-2026-87559 |
|
09.09.2026 |
|
| CVE-2026-87560 |
|
09.09.2026 |
|
| CVE-2026-87561 |
|
09.09.2026 |
|
| CVE-2026-87562 |
|
09.09.2026 |
|
| CVE-2026-87563 |
|
09.09.2026 |
|
| CVE-2026-87564 |
|
09.09.2026 |
|
| CVE-2026-87565 |
|
09.09.2026 |
|
| CVE-2026-87566 |
|
09.09.2026 |
|
| CVE-2026-87567 |
|
09.09.2026 |
|
| CVE-2026-87568 |
|
09.09.2026 |
|
| CVE-2026-87569 |
|
09.09.2026 |
|
| CVE-2026-87570 |
|
09.09.2026 |
|
| CVE-2026-87571 |
|
09.09.2026 |
|
| CVE-2026-87572 |
|
09.09.2026 |
|
| CVE-2026-87573 |
|
09.09.2026 |
|
| CVE-2026-87574 |
|
09.09.2026 |
|
| CVE-2026-87575 |
|
09.09.2026 |
|
| CVE-2026-87576 |
|
09.09.2026 |
|
| CVE-2026-87577 |
|
09.09.2026 |
|
| CVE-2026-87578 |
|
09.09.2026 |
|
| CVE-2026-87579 |
|
09.09.2026 |
|
| CVE-2026-87580 |
|
09.09.2026 |
|
| CVE-2026-87581 |
|
09.09.2026 |
|
| CVE-2026-87582 |
|
09.09.2026 |
|
| CVE-2026-87583 |
|
09.09.2026 |
|
| CVE-2026-87584 |
|
09.09.2026 |
|
| CVE-2026-87585 |
|
09.09.2026 |
|
| CVE-2026-87586 |
|
09.09.2026 |
|
| CVE-2026-87587 |
|
09.09.2026 |
|
| CVE-2026-87588 |
|
09.09.2026 |
|
| CVE-2026-87589 |
|
09.09.2026 |
|
| CVE-2026-87590 |
|
09.09.2026 |
|
| CVE-2026-87591 |
|
09.09.2026 |
|
| CVE-2026-87592 |
|
09.09.2026 |
|
| CVE-2026-87593 |
|
09.09.2026 |
|
| CVE-2026-87594 |
|
09.09.2026 |
|
| CVE-2026-87595 |
|
09.09.2026 |
|
| CVE-2026-87596 |
|
09.09.2026 |
|
| CVE-2026-87597 |
|
09.09.2026 |
|
| CVE-2026-87598 |
|
09.09.2026 |
|
| CVE-2026-87599 |
|
09.09.2026 |
|
| CVE-2026-87600 |
|
09.09.2026 |
|
| CVE-2026-87601 |
|
09.09.2026 |
|
| CVE-2026-87602 |
|
09.09.2026 |
|
| CVE-2026-87603 |
|
09.09.2026 |
|
| CVE-2026-87604 |
|
09.09.2026 |
|
| CVE-2026-87605 |
|
09.09.2026 |
|
| CVE-2026-87606 |
|
09.09.2026 |
|
| CVE-2026-87607 |
|
09.09.2026 |
|
| CVE-2026-87608 |
|
09.09.2026 |
|
| CVE-2026-87609 |
|
09.09.2026 |
|
| CVE-2026-87610 |
|
09.09.2026 |
|
| CVE-2026-87611 |
|
09.09.2026 |
|
| CVE-2026-87612 |
|
09.09.2026 |
|
| CVE-2026-87613 |
|
09.09.2026 |
|
| CVE-2026-87614 |
|
09.09.2026 |
|
| CVE-2026-87615 |
|
09.09.2026 |
|
| CVE-2026-87616 |
|
09.09.2026 |
|
| CVE-2026-87617 |
|
09.09.2026 |
|
| CVE-2026-87618 |
|
09.09.2026 |
|
| CVE-2026-87619 |
|
09.09.2026 |
|
| CVE-2026-87620 |
|
09.09.2026 |
|
| CVE-2026-87621 |
|
09.09.2026 |
|
| CVE-2026-87622 |
|
09.09.2026 |
|
| CVE-2026-87623 |
|
09.09.2026 |
|
| CVE-2026-87624 |
|
09.09.2026 |
|
| CVE-2026-87625 |
|
09.09.2026 |
|
| CVE-2026-87626 |
|
09.09.2026 |
|
| CVE-2026-87627 |
|
09.09.2026 |
|
| CVE-2026-87628 |
|
09.09.2026 |
|
| CVE-2026-87629 |
|
09.09.2026 |
|
| CVE-2026-87630 |
|
09.09.2026 |
|
| CVE-2026-87631 |
|
09.09.2026 |
|
| CVE-2026-87632 |
|
09.09.2026 |
|
| CVE-2026-87633 |
|
09.09.2026 |
|
| CVE-2026-87634 |
|
09.09.2026 |
|
| CVE-2026-87635 |
|
09.09.2026 |
|
| CVE-2026-87636 |
|
09.09.2026 |
|
| CVE-2026-87637 |
|
09.09.2026 |
|
| CVE-2026-87638 |
|
09.09.2026 |
|
| CVE-2026-87639 |
|
09.09.2026 |
|
| CVE-2026-87640 |
|
09.09.2026 |
|
| CVE-2026-87641 |
|
09.09.2026 |
|
| CVE-2026-87642 |
|
09.09.2026 |
|
| CVE-2026-87643 |
|
09.09.2026 |
|
| CVE-2026-87644 |
|
09.09.2026 |
|
| CVE-2026-87645 |
|
09.09.2026 |
|
| CVE-2026-87646 |
|
09.09.2026 |
|
| CVE-2026-87647 |
|
09.09.2026 |
|
| CVE-2026-87648 |
|
09.09.2026 |
|
| CVE-2026-87649 |
|
09.09.2026 |
|
| CVE-2026-87650 |
|
09.09.2026 |
|
| CVE-2026-87651 |
|
09.09.2026 |
|
| CVE-2026-87652 |
|
09.09.2026 |
|
| CVE-2026-87653 |
|
09.09.2026 |
|
| CVE-2026-87654 |
|
09.09.2026 |
|
| CVE-2026-87655 |
|
09.09.2026 |
|
| CVE-2026-87656 |
|
09.09.2026 |
|
| CVE-2026-87657 |
|
09.09.2026 |
|
| CVE-2026-87658 |
|
09.09.2026 |
|
| CVE-2026-19201 |
Denial of Service via Unbounded Recursion in go-attestation Windows SIPA Parser |
08.09.2026 |
|
| CVE-2026-53939 |
OpenIDC/cjose uses all-zero Content Encryption Key for AES-CBC-HMAC JWE encryption |
08.09.2026 |
9.1 |
| CVE-2026-53938 |
OpenIDC/cjose has a heap buffer overflow in AES Key Wrap decryption (A128KW/A192KW/A256KW) |
08.09.2026 |
8.2 |
| CVE-2026-53937 |
MCP Kotlin SDK's unbounded line buffer in StdioServerTransport/StdioClientTransport leads to memory exhaustion (DoS) |
08.09.2026 |
6.2 |
| CVE-2026-18090 |
Gdk-pixbuf: gdk-pixbuf: heap out-of-bounds read in uncompress() via crafted icns rle block |
08.09.2026 |
|
| CVE-2026-47680 |
Source controller: Improper path handling allows traversal |
08.09.2026 |
|
| CVE-2026-53581 |
ntp: write path traversal |
08.09.2026 |
9 |
| CVE-2026-86564 |
Dpdk: dpdk: missing length validation before reading command_data in virtio-net control queue handler |
08.09.2026 |
|
| CVE-2026-53637 |
Sylius: Cart FormComponent allows modification or deletion of an already-completed order |
08.09.2026 |
6.5 |
| CVE-2026-53638 |
Sylius: Channel-based payment method restriction bypass on shop account orders API endpoint |
08.09.2026 |
4.3 |
| CVE-2026-53639 |
Sylius: IDOR on Shop Payment Request API endpoints |
08.09.2026 |
|
| CVE-2026-55250 |
Maravel-Framework Token Replay Vulnerability via Premature JWT Blacklist Eviction in Tagged Caches |
08.09.2026 |
|
| CVE-2026-53933 |
Maravel-Framework Vulnerable to Side-Channel Information Disclosure (Error Oracle) via Dynamic Route Fuzzing |
08.09.2026 |
|
| CVE-2026-81904 |
Concrete CMS before 9.5.3 is vulnerable to Missing Authorization in Stack/Container Sub-Block Asset Registration |
08.09.2026 |
|
| CVE-2026-86075 |
n8n: Unauthenticated Persistent Storage Exhaustion via OAuth Dynamic Client Registration Endpoint |
08.09.2026 |
|
| CVE-2026-86076 |
n8n: Expression Sandbox Escape in Editor-UI Enables Stored Cross-User JavaScript Execution |
08.09.2026 |
|
| CVE-2026-86077 |
n8n: Anonymous Approval-Gate Bypass via Reused resumeToken over the Chat WebSocket |
08.09.2026 |
|
| CVE-2026-86078 |
n8n: Prototype Pollution via Workflow Structure Summary Can Lead to Denial of Service |
08.09.2026 |
|
| CVE-2026-86079 |
n8n: Path Injection in Elasticsearch and ElasticSecurity Nodes via Unencoded Identifiers |
08.09.2026 |
|
| CVE-2026-86080 |
n8n: GitHub Trigger 422 Reuse Path Skips Webhook Secret Storage, Causing Signature Verification to Fail-Open |
08.09.2026 |
|
| CVE-2026-86081 |
n8n: Regular Expression Denial of Service in the Default Blocked-File-Pattern Match via a Git Node Clone Path |
08.09.2026 |
|
| CVE-2026-86082 |
n8n: Domain-Restriction Bypass via Unguarded Model-Search Endpoint in OpenAI Chat Model Node |
08.09.2026 |
|
| CVE-2026-49153 |
|
08.09.2026 |
|
| CVE-2026-49154 |
|
08.09.2026 |
|
| CVE-2026-49155 |
|
08.09.2026 |
|
| CVE-2026-49156 |
|
08.09.2026 |
|
| CVE-2026-86083 |
n8n: Expression Sandbox Escape via Shared Builtin Tampering and Code-Printer Injection Leads to Code Execution |
08.09.2026 |
|
| CVE-2026-86084 |
n8n: Disabled OIDC SSO Endpoints Remain Active and Issue Valid Sessions |
08.09.2026 |
|
| CVE-2026-86085 |
n8n: Cross-Tenant Project-Member PII Disclosure via Missing Per-Project Scope Check on Role Assignment Endpoints |
08.09.2026 |
|
| CVE-2026-86993 |
n8n: Log Streaming Event Destinations Decrypt Generic-Auth Credentials Without Ownership Check |
08.09.2026 |
|
| CVE-2026-86994 |
n8n: Cross-User Active Workflow ID and Lifecycle Event Disclosure via Missing userId Filter |
08.09.2026 |
|
| CVE-2026-86995 |
n8n: Git Node branch.<name>.remote Config Key Bypasses Sandbox Path Restriction, Enabling Local Git Repository Read |
08.09.2026 |
|
| CVE-2026-86996 |
n8n: Agent Workflow Tool Bypasses Sub-Workflow Caller Policy |
08.09.2026 |
|
| CVE-2026-45219 |
|
08.09.2026 |
|
| CVE-2026-45220 |
|
08.09.2026 |
|
| CVE-2026-7809 |
|
08.09.2026 |
|
| CVE-2026-78738 |
|
08.09.2026 |
|
| CVE-2026-78741 |
|
08.09.2026 |
|
| CVE-2026-78742 |
|
08.09.2026 |
|
| CVE-2026-78971 |
|
08.09.2026 |
|
| CVE-2026-30754 |
|
08.09.2026 |
|
| CVE-2026-79588 |
|
08.09.2026 |
|
| CVE-2026-79907 |
Acrobat Reader | Double Free (CWE-415) |
09.09.2026 |
7.8 |
| CVE-2026-79908 |
Acrobat Reader | Out-of-bounds Write (CWE-787) |
09.09.2026 |
7.8 |
| CVE-2026-79909 |
Acrobat Reader | Use After Free (CWE-416) |
09.09.2026 |
7.8 |
| CVE-2026-79910 |
Acrobat Reader | Out-of-bounds Read (CWE-125) |
08.09.2026 |
5.5 |
| CVE-2026-80159 |
Acrobat Reader | Untrusted Search Path (CWE-426) |
08.09.2026 |
4 |
| CVE-2026-80160 |
Acrobat Reader | Out-of-bounds Read (CWE-125) |
08.09.2026 |
5.5 |
| CVE-2026-80161 |
Acrobat Reader | Access of Resource Using Incompatible Type ('Type Confusion') (CWE-843) |
08.09.2026 |
7.8 |
| CVE-2026-80162 |
Acrobat Reader | Use After Free (CWE-416) |
08.09.2026 |
5.5 |
| CVE-2026-81973 |
Acrobat Reader | Use After Free (CWE-416) |
09.09.2026 |
7.8 |
| CVE-2026-81975 |
Acrobat Reader | Use After Free (CWE-416) |
09.09.2026 |
7.8 |
| CVE-2026-81976 |
Acrobat Reader | Use After Free (CWE-416) |
09.09.2026 |
7.8 |
| CVE-2026-81977 |
Acrobat Reader | Integer Underflow (Wrap or Wraparound) (CWE-191) |
08.09.2026 |
5.5 |
| CVE-2026-81978 |
Acrobat Reader | Out-of-bounds Read (CWE-125) |
08.09.2026 |
5.5 |
| CVE-2026-81979 |
Acrobat Reader | Out-of-bounds Write (CWE-787) |
09.09.2026 |
7.8 |
| CVE-2026-81980 |
Acrobat Reader | Out-of-bounds Write (CWE-787) |
09.09.2026 |
7.8 |
| CVE-2026-81981 |
Acrobat Reader | Out-of-bounds Write (CWE-787) |
08.09.2026 |
7.8 |
| CVE-2026-81982 |
Acrobat Reader | Out-of-bounds Read (CWE-125) |
08.09.2026 |
5.5 |
| CVE-2026-81983 |
Acrobat Reader | Out-of-bounds Write (CWE-787) |
09.09.2026 |
7.8 |
| CVE-2026-81984 |
Acrobat Reader | Use After Free (CWE-416) |
08.09.2026 |
5.5 |
| CVE-2026-81985 |
Acrobat Reader | Use After Free (CWE-416) |
09.09.2026 |
7.8 |
| CVE-2026-81986 |
Acrobat Reader | Use After Free (CWE-416) |
09.09.2026 |
7.8 |
| CVE-2026-81987 |
Acrobat Reader | Integer Overflow or Wraparound (CWE-190) |
08.09.2026 |
7.8 |
| CVE-2026-81988 |
Acrobat Reader | Use After Free (CWE-416) |
09.09.2026 |
7.8 |
| CVE-2026-81989 |
Acrobat Reader | Use After Free (CWE-416) |
09.09.2026 |
7.8 |
| CVE-2026-81990 |
Acrobat Reader | Use After Free (CWE-416) |
09.09.2026 |
7.8 |
| CVE-2026-81991 |
Acrobat Reader | Out-of-bounds Read (CWE-125) |
08.09.2026 |
5.5 |
| CVE-2026-81992 |
Acrobat Reader | Heap-based Buffer Overflow (CWE-122) |
08.09.2026 |
7.8 |
| CVE-2026-81993 |
Acrobat Reader | Heap-based Buffer Overflow (CWE-122) |
08.09.2026 |
5.5 |
| CVE-2026-81994 |
Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321) |
08.09.2026 |
8.2 |
| CVE-2026-81996 |
Acrobat Reader | Incorrect Authorization (CWE-863) |
09.09.2026 |
8.8 |
| CVE-2026-81997 |
Acrobat Reader | Incorrect Authorization (CWE-863) |
08.09.2026 |
6.3 |
| CVE-2026-82001 |
Acrobat Reader | Uncontrolled Resource Consumption (CWE-400) |
08.09.2026 |
5.5 |
| CVE-2026-19625 |
IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities |
08.09.2026 |
5.3 |
| CVE-2026-19651 |
IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities |
08.09.2026 |
7.4 |
| CVE-2026-77827 |
Maono Link local privilege escalation |
08.09.2026 |
7.1 |
| CVE-2026-78622 |
Improper Link Resolution in Okta Verify for Windows Uninstaller Data Removal |
08.09.2026 |
6 |
| CVE-2026-78629 |
Improper Authentication Verification in the Okta Hyperdrive Agent MFA Response Handling |
08.09.2026 |
5.6 |
| CVE-2026-78630 |
Improper Input Neutralization in Okta Access Gateway SNMP Configuration Processing |
08.09.2026 |
6.7 |
| CVE-2026-78631 |
Improper Restriction of Sensitive Information in Okta Hyperdrive Agent Logging |
08.09.2026 |
5.3 |
| CVE-2026-78635 |
Improper Input Validation in the Okta Privileged Access SSH Client URL Handler Argument |
08.09.2026 |
5 |
| CVE-2026-81192 |
OpenTelemetry.Resources.Host vulnerable to arbitrary code execution via local PATH hijacking on macOS |
08.09.2026 |
7 |
| CVE-2026-84685 |
Improper Cache Isolation in auth0/react-native-auth0 SDK Web Platform Credential Management |
08.09.2026 |
6.5 |
| CVE-2026-85981 |
Unauthenticated Localhost Admin Panel in Auth0 AD/LDAP Connector |
08.09.2026 |
6.7 |
| CVE-2026-85982 |
Stored Cross-Site Scripting (XSS) in Auth0 AD/LDAP Connector |
08.09.2026 |
9 |
| CVE-2026-85983 |
Local Privilege Escalation in Auth0 AD/LDAP Connector |
08.09.2026 |
7.8 |
| CVE-2026-86819 |
Waves Central local privilege escalation via Improper XPC Client Authentication in macOS |
08.09.2026 |
|
| CVE-2026-19872 |
HTML::FormHandler versions before 0.410000 for Perl allow cross-site scripting via a submitted value rendered unescaped in an error message |
08.09.2026 |
|
| CVE-2026-52486 |
|
08.09.2026 |
|
| CVE-2026-78545 |
Improper Input Sanitization in Okta Access Gateway Application Label Configuration |
08.09.2026 |
6.6 |
| CVE-2026-78550 |
Improper Input Handling in Okta Access Gateway Management Console Exception Handler |
08.09.2026 |
6.6 |
| CVE-2026-78552 |
Validation Bypass in Okta Access Gateway Custom Directives |
08.09.2026 |
6 |
| CVE-2026-78560 |
Improper Authentication Validation in Okta Access Gateway Pass-Through Authentication Source |
08.09.2026 |
4.8 |
| CVE-2026-78574 |
Improper Assembly Resolution in Okta Hyperdrive Integration Plugin Registry Handling |
08.09.2026 |
7.5 |
| CVE-2026-78579 |
Improper Input Sanitization in Okta Access Gateway LDAP Datastore Filter Interpolation |
08.09.2026 |
6.8 |
| CVE-2026-78620 |
Improper Path Validation in Okta Access Gateway Kerberos Configuration Handling |
08.09.2026 |
5.9 |
| CVE-2026-78623 |
Improper Handling of SAML Assertion Attributes in Okta Access Gateway Advanced Mode Datastores |
08.09.2026 |
7.7 |
| CVE-2026-78624 |
Improper Path Validation in Okta Access Gateway Backup and Restore Functionality |
08.09.2026 |
4.9 |
| CVE-2026-78625 |
Insufficient Validation of Dashboard Application Labels in Okta Access Gateway Dashboard Site Configuration |
08.09.2026 |
6.7 |
| CVE-2026-78626 |
Improper Input Sanitization in Okta Access Gateway Protected Rules |
08.09.2026 |
8.1 |
| CVE-2026-78627 |
Improper Credential Protection in Okta Hyperdrive Integration Installer Logging |
08.09.2026 |
7.3 |
| CVE-2026-78834 |
|
08.09.2026 |
|
| CVE-2026-84197 |
|
08.09.2026 |
|
| CVE-2026-85484 |
HTML::FormHandler versions before 0.410002 for Perl render option group labels and radio button labels into HTML without escaping |
08.09.2026 |
|
| CVE-2026-85485 |
HTML::FormHandler versions before 0.410002 for Perl render some error messages into HTML without escaping |
08.09.2026 |
|
| CVE-2026-85630 |
HTML::FormHandler versions before 0.410002 for Perl render field attributes into HTML without escaping using the process_attrs method |
08.09.2026 |
|
| CVE-2026-86810 |
Open-Web-Analytics Controller Controller.php checkCapabilityAndAuthenticateUser improper authentication |
08.09.2026 |
|
| CVE-2025-64542 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2025-64584 |
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2025-64588 |
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2025-64589 |
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2025-64610 |
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2025-64618 |
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2025-64830 |
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2025-64838 |
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2025-64854 |
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2025-64866 |
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2025-64868 |
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-19232 |
Adobe Experience Manager | Incorrect Authorization (CWE-863) |
08.09.2026 |
9.9 |
| CVE-2026-19479 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-19612 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-19644 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-19713 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-27227 |
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-71356 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-71357 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-71388 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-71440 |
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-71565 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-72626 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-72627 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75629 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75635 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75636 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75637 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75639 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75640 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75642 |
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75643 |
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75644 |
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75646 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75647 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75651 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75652 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75657 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75659 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75660 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75661 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75666 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75667 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75668 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75669 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75670 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75671 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75672 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75674 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75675 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75677 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75678 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75679 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75680 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75681 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75683 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75685 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75687 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75690 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75691 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75692 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75693 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75694 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75695 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75696 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75700 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75701 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75702 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75704 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75705 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75706 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75707 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75708 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75709 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75710 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75711 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75712 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75713 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75714 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75715 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75716 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75717 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75718 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75719 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75720 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75722 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75724 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75725 |
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75726 |
Adobe Experience Manager | Improper Input Validation (CWE-20) |
08.09.2026 |
3.5 |
| CVE-2026-75727 |
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75729 |
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75730 |
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75731 |
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75733 |
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75734 |
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75735 |
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75736 |
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75737 |
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75738 |
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75739 |
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75740 |
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75741 |
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-75742 |
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-79905 |
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) |
08.09.2026 |
5.4 |
| CVE-2026-84942 |
Stored Cross-Site Scripting via Vega Expression Function Bypass in OpenSearch Dashboards |
08.09.2026 |
8.7 |
| CVE-2026-86464 |
|
08.09.2026 |
|
| CVE-2026-48273 |
ColdFusion | Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') (CWE-95) |
08.09.2026 |
9.9 |
| CVE-2026-75631 |
Photoshop Desktop | Out-of-bounds Write (CWE-787) |
09.09.2026 |
7.8 |
| CVE-2026-75746 |
ColdFusion | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) |
09.09.2026 |
9.1 |
| CVE-2026-75771 |
Photoshop Desktop | Integer Overflow or Wraparound (CWE-190) |
09.09.2026 |
7.8 |
| CVE-2026-75862 |
Photoshop Desktop | Integer Overflow or Wraparound (CWE-190) |
09.09.2026 |
7.8 |
| CVE-2026-75863 |
Photoshop Desktop | Integer Overflow or Wraparound (CWE-190) |
09.09.2026 |
7.8 |
| CVE-2026-75993 |
ColdFusion | Cross-site Scripting (Reflected XSS) (CWE-79) |
08.09.2026 |
8.5 |
| CVE-2026-75998 |
ColdFusion | Improper Access Control (CWE-284) |
08.09.2026 |
7.5 |
| CVE-2026-75999 |
ColdFusion | Improper Input Validation (CWE-20) |
09.09.2026 |
8.4 |
| CVE-2026-76000 |
ColdFusion | Uncontrolled Resource Consumption (CWE-400) |
08.09.2026 |
6.5 |
| CVE-2026-76002 |
ColdFusion | Cross-site Scripting (Reflected XSS) (CWE-79) |
08.09.2026 |
6.1 |
| CVE-2026-76190 |
ColdFusion | Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') (CWE-95) |
08.09.2026 |
8.6 |
| CVE-2026-76199 |
Photoshop Desktop | Uncontrolled Search Path Element (CWE-427) |
09.09.2026 |
8.6 |
| CVE-2026-82005 |
Photoshop Desktop | Out-of-bounds Write (CWE-787) |
09.09.2026 |
7.8 |
| CVE-2026-82006 |
Photoshop Desktop | Heap-based Buffer Overflow (CWE-122) |
09.09.2026 |
7.8 |
| CVE-2026-82007 |
Photoshop Desktop | Integer Overflow or Wraparound (CWE-190) |
09.09.2026 |
7.8 |
| CVE-2026-75990 |
Illustrator | Incorrect Authorization (CWE-863) |
09.09.2026 |
8.6 |
| CVE-2026-75991 |
Illustrator | Improper Input Validation (CWE-20) |
09.09.2026 |
8.6 |
| CVE-2026-75992 |
Illustrator | Out-of-bounds Write (CWE-787) |
09.09.2026 |
7.8 |
| CVE-2026-84869 |
ScreenConnect Client: Guest-to-Host File Execution via File-Transfer Actions |
08.09.2026 |
9.9 |
| CVE-2026-86808 |
moltis-org moltis vault.rs vault_recovery_handler missing authentication |
08.09.2026 |
|
| CVE-2026-28659 |
|
08.09.2026 |
|
| CVE-2026-49883 |
|
08.09.2026 |
|
| CVE-2026-86806 |
opengeos GeoLibre _is_within_roots server-side request forgery |
08.09.2026 |
|
| CVE-2026-86804 |
seakee CPA-Manager-Plus HTTP handler.go CPAResource improper authorization |
08.09.2026 |
|
| CVE-2026-82004 |
Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78) |
08.09.2026 |
10 |
| CVE-2026-66303 |
Skype for Business and Lync Denial of Service Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-66307 |
Skype for Business and Lync Denial of Service Vulnerability |
08.09.2026 |
7.5 |
| CVE-2026-85384 |
Authenticated Stack-Based Buffer Overflow in RE210 AC750 Configuration Import |
08.09.2026 |
|
| CVE-2026-86716 |
Cesanta mJS mjs_tok.c skip_spaces_and_comments heap-based overflow |
08.09.2026 |
|
| CVE-2026-63523 |
Skype for Business Spoofing Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-66302 |
Skype for Business Remote Code Execution Vulnerability |
09.09.2026 |
9.8 |
| CVE-2026-66304 |
Skype for Business Information Disclosure Vulnerability |
08.09.2026 |
7.5 |
| CVE-2026-66305 |
Skype for Business Spoofing Vulnerability |
08.09.2026 |
7.1 |
| CVE-2026-66306 |
Skype for Business Information Disclosure Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-66308 |
Skype for Business and Lync Denial of Service Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-69642 |
Skype for Business Spoofing Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-69646 |
Skype for Business Spoofing Vulnerability |
09.09.2026 |
8.3 |
| CVE-2026-86675 |
itsourcecode Sales and Inventory System us_edit.php sql injection |
08.09.2026 |
|
| CVE-2026-0054 |
|
08.09.2026 |
|
| CVE-2026-0065 |
|
08.09.2026 |
|
| CVE-2026-0084 |
|
08.09.2026 |
|
| CVE-2026-28572 |
|
08.09.2026 |
|
| CVE-2026-28582 |
|
08.09.2026 |
|
| CVE-2026-28583 |
|
08.09.2026 |
|
| CVE-2026-28584 |
|
08.09.2026 |
|
| CVE-2026-28590 |
|
08.09.2026 |
|
| CVE-2026-28593 |
|
08.09.2026 |
|
| CVE-2026-28594 |
|
08.09.2026 |
|
| CVE-2026-28596 |
|
08.09.2026 |
|
| CVE-2026-28599 |
|
08.09.2026 |
|
| CVE-2026-28600 |
|
08.09.2026 |
|
| CVE-2026-28602 |
|
08.09.2026 |
|
| CVE-2026-28603 |
|
08.09.2026 |
|
| CVE-2026-28604 |
|
08.09.2026 |
|
| CVE-2026-28606 |
|
08.09.2026 |
|
| CVE-2026-28607 |
|
08.09.2026 |
|
| CVE-2026-28609 |
|
08.09.2026 |
|
| CVE-2026-28611 |
|
08.09.2026 |
|
| CVE-2026-28612 |
|
08.09.2026 |
|
| CVE-2026-28613 |
|
08.09.2026 |
|
| CVE-2026-28614 |
|
08.09.2026 |
|
| CVE-2026-28616 |
|
08.09.2026 |
|
| CVE-2026-28617 |
|
08.09.2026 |
|
| CVE-2026-28618 |
|
08.09.2026 |
|
| CVE-2026-28620 |
|
08.09.2026 |
|
| CVE-2026-28622 |
|
08.09.2026 |
|
| CVE-2026-28623 |
|
08.09.2026 |
|
| CVE-2026-28624 |
|
08.09.2026 |
|
| CVE-2026-28626 |
|
08.09.2026 |
|
| CVE-2026-28627 |
|
08.09.2026 |
|
| CVE-2026-28630 |
|
08.09.2026 |
|
| CVE-2026-28631 |
|
08.09.2026 |
|
| CVE-2026-28633 |
|
08.09.2026 |
|
| CVE-2026-28634 |
|
08.09.2026 |
|
| CVE-2026-28636 |
|
08.09.2026 |
|
| CVE-2026-28638 |
|
08.09.2026 |
|
| CVE-2026-28639 |
|
08.09.2026 |
|
| CVE-2026-28642 |
|
08.09.2026 |
|
| CVE-2026-28644 |
|
08.09.2026 |
|
| CVE-2026-28650 |
|
08.09.2026 |
|
| CVE-2026-28652 |
|
08.09.2026 |
|
| CVE-2026-28653 |
|
08.09.2026 |
|
| CVE-2026-28655 |
|
08.09.2026 |
|
| CVE-2026-28656 |
|
08.09.2026 |
|
| CVE-2026-28657 |
|
08.09.2026 |
|
| CVE-2026-28658 |
|
08.09.2026 |
|
| CVE-2026-28660 |
|
08.09.2026 |
|
| CVE-2026-28662 |
|
08.09.2026 |
|
| CVE-2026-28663 |
|
08.09.2026 |
|
| CVE-2026-28664 |
|
08.09.2026 |
|
| CVE-2026-28666 |
|
08.09.2026 |
|
| CVE-2026-28668 |
|
08.09.2026 |
|
| CVE-2026-28671 |
|
08.09.2026 |
|
| CVE-2026-45515 |
|
08.09.2026 |
|
| CVE-2026-45519 |
|
08.09.2026 |
|
| CVE-2026-45520 |
|
08.09.2026 |
|
| CVE-2026-45521 |
|
08.09.2026 |
|
| CVE-2026-45525 |
|
08.09.2026 |
|
| CVE-2026-45527 |
|
08.09.2026 |
|
| CVE-2026-45528 |
|
08.09.2026 |
|
| CVE-2026-45531 |
|
08.09.2026 |
|
| CVE-2026-49879 |
|
08.09.2026 |
|
| CVE-2026-49881 |
|
08.09.2026 |
|
| CVE-2026-49882 |
|
08.09.2026 |
|
| CVE-2026-49884 |
|
08.09.2026 |
|
| CVE-2026-49887 |
|
08.09.2026 |
|
| CVE-2026-49895 |
|
08.09.2026 |
|
| CVE-2026-49918 |
|
08.09.2026 |
|
| CVE-2026-49919 |
|
08.09.2026 |
|
| CVE-2026-49921 |
|
08.09.2026 |
|
| CVE-2026-49927 |
|
08.09.2026 |
|
| CVE-2026-49932 |
|
08.09.2026 |
|
| CVE-2026-55256 |
|
08.09.2026 |
|
| CVE-2026-55273 |
|
08.09.2026 |
|
| CVE-2026-55277 |
|
08.09.2026 |
|
| CVE-2026-55285 |
|
08.09.2026 |
|
| CVE-2026-55290 |
|
08.09.2026 |
|
| CVE-2026-55294 |
|
08.09.2026 |
|
| CVE-2026-58820 |
|
08.09.2026 |
|
| CVE-2026-58822 |
|
08.09.2026 |
|
| CVE-2026-58823 |
|
08.09.2026 |
|
| CVE-2026-58839 |
|
08.09.2026 |
|
| CVE-2026-58846 |
|
08.09.2026 |
|
| CVE-2026-58848 |
|
08.09.2026 |
|
| CVE-2026-58874 |
|
08.09.2026 |
|
| CVE-2026-58941 |
|
08.09.2026 |
|
| CVE-2026-76200 |
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) |
09.09.2026 |
9.3 |
| CVE-2026-76201 |
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) |
09.09.2026 |
9.3 |
| CVE-2026-76202 |
Adobe Commerce | Incorrect Authorization (CWE-863) |
09.09.2026 |
8.2 |
| CVE-2026-77108 |
Adobe Commerce | Incorrect Authorization (CWE-863) |
08.09.2026 |
7.5 |
| CVE-2026-77109 |
Adobe Commerce | Incorrect Authorization (CWE-863) |
09.09.2026 |
8.6 |
| CVE-2026-77110 |
Adobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) |
08.09.2026 |
7.6 |
| CVE-2026-77111 |
Adobe Commerce | Incorrect Authorization (CWE-863) |
08.09.2026 |
8.7 |
| CVE-2026-77774 |
Adobe Commerce | Incorrect Authorization (CWE-863) |
08.09.2026 |
8.6 |
| CVE-2026-79721 |
|
08.09.2026 |
|
| CVE-2026-82536 |
Roo-Code 3.54.0 Auto-Approve Bypass via Shell Command Pipe Operator |
08.09.2026 |
|
| CVE-2026-82537 |
Roo-Code 3.54.0 Auto-Approve Bypass via Shell Parser Word-Boundary Mismatch |
08.09.2026 |
|
| CVE-2026-86477 |
|
08.09.2026 |
|
| CVE-2026-86674 |
ningzichun Student Management System login.php session_start session fixiation |
08.09.2026 |
|
| CVE-2026-86673 |
ningzichun Student Management System Database Connection database.php mysqli_connect hard-coded credentials |
08.09.2026 |
|
| CVE-2026-86672 |
ningzichun Student Management System Backup example.7z information disclosure |
08.09.2026 |
|
| CVE-2026-81821 |
AVEVA Pipeline Integrity Monitor Use of hard-coded cryptographic key |
08.09.2026 |
|
| CVE-2026-81822 |
AVEVA Pipeline Integrity Monitor Use of a Broken or Risky Cryptographic Algorithm |
08.09.2026 |
|
| CVE-2026-86074 |
n8n: Instance AI Credential Setup Accepts Unvalidated Probe URL from Fetched Content |
08.09.2026 |
|
| CVE-2026-81823 |
AVEVA Pipeline Integrity Monitor Missing Authorization |
08.09.2026 |
|
| CVE-2026-81824 |
AVEVA Pipeline Integrity Monitor cross-site scripting |
08.09.2026 |
|
| CVE-2026-86670 |
aircheng-org iWebShop-5 Authentication Storage admin.php weak password hash |
08.09.2026 |
|
| CVE-2026-48707 |
InstantCMS vulnerable to SSRF via upload redirect bypass allows internal network service scanning |
08.09.2026 |
3.1 |
| CVE-2026-76196 |
Photoshop Mobile | Session Fixation (CWE-384) |
09.09.2026 |
7.4 |
| CVE-2026-79904 |
Photoshop Mobile | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) |
08.09.2026 |
5 |
| CVE-2026-47297 |
Microsoft SQL Server Remote Code Execution Vulnerability |
08.09.2026 |
8.1 |
| CVE-2026-50349 |
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-54611 |
InstantCMS has Remote Code Execution in package installer |
08.09.2026 |
5.5 |
| CVE-2026-55007 |
Microsoft Exchange Server Remote Code Execution Vulnerability |
09.09.2026 |
8.1 |
| CVE-2026-56172 |
Windows VHD miniport driver Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-56177 |
Windows Server Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-56198 |
Microsoft Trace Data Helper Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-57098 |
Microsoft Remote Desktop App for Windows Information Disclosure Vulnerability |
08.09.2026 |
7.5 |
| CVE-2026-57099 |
ASP.NET Core Denial of Service Vulnerability |
08.09.2026 |
7.5 |
| CVE-2026-58599 |
HEVC Video Extensions Remote Code Execution Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-58600 |
HEVC Video Extensions Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-58611 |
Xbox Gaming Services Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-58649 |
.NET Information Disclosure Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-62694 |
Windows Installer Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-62697 |
Windows Push Notifications Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-62706 |
Microsoft Windows Media Foundation Remote Code Execution Vulnerability |
08.09.2026 |
8.8 |
| CVE-2026-62744 |
Microsoft Windows Media Foundation Remote Code Execution Vulnerability |
08.09.2026 |
8.8 |
| CVE-2026-62759 |
Windows Netlogon Spoofing Vulnerability |
09.09.2026 |
7.5 |
| CVE-2026-62762 |
Windows Active Directory Domain Services Denial of Service Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-62801 |
Microsoft PowerShell Security Feature Bypass Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-62804 |
Microsoft Word Remote Code Execution Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-62810 |
Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-62813 |
Windows Active Directory Domain Services Remote Code Execution Vulnerability |
09.09.2026 |
7.5 |
| CVE-2026-62895 |
Azure Arc SQL Server Extension Elevation of Privilege Vulnerability |
08.09.2026 |
8.8 |
| CVE-2026-64918 |
Microsoft Office Spoofing Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-65669 |
Microsoft SQL Server Elevation of Privilege Vulnerability |
09.09.2026 |
9.6 |
| CVE-2026-65772 |
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability |
08.09.2026 |
8.8 |
| CVE-2026-65812 |
Microsoft Teams for Android Information Disclosure Vulnerability |
08.09.2026 |
6.8 |
| CVE-2026-66814 |
Microsoft SQL Server Elevation of Privilege Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-66816 |
Microsoft SQL Server Security Feature Bypass Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-66818 |
Microsoft SQL Server Elevation of Privilege Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-66819 |
Microsoft SQL Server Elevation of Privilege Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-66820 |
SQL Server Elevation of Privilege Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-67368 |
Microsoft SQL Server Elevation of Privilege Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-67369 |
Microsoft SQL Server Information Disclosure Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-67370 |
Microsoft SQL Server Elevation of Privilege Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-67373 |
Microsoft SQL Server Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-67376 |
Microsoft SQL Server Denial of Service Vulnerability |
08.09.2026 |
7.5 |
| CVE-2026-67378 |
Microsoft SQL Server Remote Code Execution Vulnerability |
09.09.2026 |
8.5 |
| CVE-2026-67379 |
Microsoft SQL Server Remote Code Execution Vulnerability |
09.09.2026 |
8.5 |
| CVE-2026-67380 |
Microsoft SQL Server Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-67381 |
Microsoft SQL Server Elevation of Privilege Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-67383 |
Microsoft SQL Server Information Disclosure Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-67384 |
Microsoft SQL Server Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-67385 |
Microsoft SQL Server Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-67386 |
Microsoft SQL Server Information Disclosure Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-67388 |
Microsoft SQL Server Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-67389 |
Microsoft SQL Server Information Disclosure Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-67390 |
Microsoft SQL Server Information Disclosure Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-67393 |
Microsoft SQL Server Information Disclosure Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-67624 |
Microsoft SQL Server Information Disclosure Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-67629 |
Microsoft SQL Server Information Disclosure Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-67630 |
Microsoft SQL Server Information Disclosure Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-67631 |
Microsoft SQL Server Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-67633 |
Microsoft SQL Server Denial of Service Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-67636 |
Microsoft SQL Server Remote Code Execution Vulnerability |
09.09.2026 |
8.5 |
| CVE-2026-67638 |
Microsoft SQL Server Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-67639 |
Microsoft SQL Server Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-67641 |
Microsoft SQL Server Denial of Service Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-67642 |
Microsoft SQL Server Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-67643 |
Microsoft SQL Server Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-67645 |
Microsoft SQL Server Information Disclosure Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-67648 |
Microsoft SQL Server Information Disclosure Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-68775 |
Microsoft SQL Server Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-68776 |
Microsoft SQL Server Information Disclosure Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-68777 |
Microsoft SQL Server Information Disclosure Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-68778 |
Microsoft SQL Server Information Disclosure Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-68779 |
Microsoft SQL Server Information Disclosure Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-68780 |
Microsoft SQL Server Information Disclosure Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-68781 |
Microsoft SQL Server Information Disclosure Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-68784 |
Microsoft SQL Server Information Disclosure Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-68785 |
Microsoft SQL Server Remote Code Execution Vulnerability |
09.09.2026 |
4.9 |
| CVE-2026-68786 |
Microsoft SQL Server Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-68787 |
Microsoft SQL Server Remote Code Execution Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-68824 |
Connected User Experiences and Telemetry Elevation of Privilege Vulnerability |
08.09.2026 |
7 |
| CVE-2026-68825 |
Windows Bind Filter Driver Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-68827 |
Windows GDI+ Elevation of Privilege Vulnerability |
09.09.2026 |
8 |
| CVE-2026-68828 |
Remote Desktop Client Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-68830 |
Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-68831 |
Windows Defender Firewall Service Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-68832 |
Windows NTFS Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-68833 |
Windows NTFS Remote Code Execution Vulnerability |
08.09.2026 |
6.8 |
| CVE-2026-68834 |
Windows NTFS Elevation of Privilege Vulnerability |
09.09.2026 |
8 |
| CVE-2026-68835 |
Windows Print Spooler Components Elevation of Privilege Vulnerability |
09.09.2026 |
7.1 |
| CVE-2026-68837 |
Windows File History Service Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-68838 |
Windows NTFS Elevation of Privilege Vulnerability |
09.09.2026 |
8 |
| CVE-2026-68839 |
Windows USB Mass Storage Class Driver Remote Code Execution Vulnerability |
08.09.2026 |
9.8 |
| CVE-2026-68840 |
Windows USB Driver Elevation of Privilege Vulnerability |
08.09.2026 |
7 |
| CVE-2026-68841 |
Windows NTFS Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-68842 |
Windows MIDI Service Module Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-68843 |
Microsoft Office Word Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-68844 |
Windows Storage Spaces Controller Remote Code Execution Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-68845 |
Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-68846 |
Windows Kernel Elevation of Privilege Vulnerability |
09.09.2026 |
7.1 |
| CVE-2026-68847 |
Connected User Experiences and Telemetry Elevation of Privilege Vulnerability |
08.09.2026 |
7 |
| CVE-2026-68848 |
Windows Print Spooler Components Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-68849 |
Windows Bluetooth Port Driver Information Disclosure Vulnerability |
08.09.2026 |
4.7 |
| CVE-2026-68850 |
Microsoft Account Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-68851 |
Windows NTFS Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-68852 |
Microsoft Account Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-68873 |
Windows Program Compatibility Assistant Service Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-68874 |
Windows Program Compatibility Assistant Service Information Disclosure Vulnerability |
08.09.2026 |
5.7 |
| CVE-2026-68875 |
Windows NTFS Remote Code Execution Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-68876 |
Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability |
09.09.2026 |
8 |
| CVE-2026-68877 |
Windows Storage Spaces Controller Remote Code Execution Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-68878 |
Windows Fast FAT Driver Elevation of Privilege Vulnerability |
09.09.2026 |
8 |
| CVE-2026-68880 |
Windows Win32k Elevation of Privilege Vulnerability |
09.09.2026 |
8 |
| CVE-2026-68881 |
Microsoft Standard XPS Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-68884 |
Windows Kernel Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-68885 |
Microsoft Standard XPS Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-68886 |
Windows Network Connection Broker Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-68887 |
Windows Message Queuing Queue Manager Denial of Service Vulnerability |
08.09.2026 |
7.5 |
| CVE-2026-68888 |
Microsoft Standard XPS Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-68889 |
Microsoft Standard XPS Elevation of Privilege Vulnerability |
08.09.2026 |
7.1 |
| CVE-2026-68890 |
Microsoft Standard XPS Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-68891 |
Microsoft Standard XPS Information Disclosure Vulnerability |
08.09.2026 |
4.7 |
| CVE-2026-68892 |
Microsoft Standard XPS Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-68893 |
Remote Desktop Licensing Service Elevation of Privilege Vulnerability |
09.09.2026 |
7.1 |
| CVE-2026-68894 |
Windows Error Reporting Elevation of Privilege Vulnerability |
09.09.2026 |
8 |
| CVE-2026-68895 |
Internet Storage Name Service Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-68896 |
Microsoft Windows Search Component Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-68897 |
Microsoft Standard XPS Elevation of Privilege Vulnerability |
08.09.2026 |
7 |
| CVE-2026-68898 |
Windows iSCSI Denial of Service Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-69265 |
Windows NTFS Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-69266 |
Windows DHCP Server Remote Code Execution Vulnerability |
08.09.2026 |
8.8 |
| CVE-2026-69267 |
Windows Connected User Experiences and Telemetry Information Disclosure Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-69268 |
Microsoft Office SharePoint Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-69269 |
Microsoft Standard XPS Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-69270 |
Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-69271 |
Microsoft Standard XPS Elevation of Privilege Vulnerability |
08.09.2026 |
8 |
| CVE-2026-69272 |
Microsoft Standard XPS Elevation of Privilege Vulnerability |
08.09.2026 |
7.1 |
| CVE-2026-69273 |
Microsoft Office SharePoint Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-69274 |
Windows Win32k Elevation of Privilege Vulnerability |
09.09.2026 |
7.1 |
| CVE-2026-69275 |
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-69276 |
Microsoft UxTheme Library (uxtheme.dll) Remote Code Execution Vulnerability |
08.09.2026 |
9.8 |
| CVE-2026-69277 |
Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-69279 |
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-69280 |
Windows Push Notifications Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-69281 |
Windows License Manager Elevation of Privilege Vulnerability |
08.09.2026 |
7 |
| CVE-2026-69282 |
Microsoft Office SharePoint Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-69283 |
Windows CD-ROM Driver Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-69284 |
Windows DCOM Server Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-69285 |
Microsoft Office Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-69286 |
Windows USB Audio Class Driver Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-69287 |
Windows Remote Desktop Services Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-69288 |
Windows GDI+ Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-69289 |
Windows Setup Files Cleanup Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-69290 |
Windows Storage Spaces Controller Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-69291 |
Windows Volume Manager Extension Driver Remote Code Execution Vulnerability |
08.09.2026 |
8.8 |
| CVE-2026-69292 |
Remote Desktop Gateway Service Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-69293 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-69294 |
Microsoft COM for Windows Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-69295 |
Windows USB Driver Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-69296 |
Windows Device Association Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.1 |
| CVE-2026-69297 |
Windows DHCP Server Information Disclosure Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-69298 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-69299 |
Microsoft COM for Windows Elevation of Privilege Vulnerability |
08.09.2026 |
7 |
| CVE-2026-69300 |
Windows Push Notifications Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-69301 |
Windows Win32k Elevation of Privilege Vulnerability |
09.09.2026 |
8 |
| CVE-2026-69303 |
Push Message Routing Service Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-69304 |
ASP.NET Core Denial of Service Vulnerability |
08.09.2026 |
5.9 |
| CVE-2026-69305 |
Microsoft Windows Search Component Elevation of Privilege Vulnerability |
08.09.2026 |
7.1 |
| CVE-2026-69307 |
Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-69308 |
Microsoft Standard XPS Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-69309 |
Windows Print Spooler Components Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-69310 |
Windows DNS Elevation of Privilege Vulnerability |
08.09.2026 |
7 |
| CVE-2026-69311 |
Windows Audio Service Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-69312 |
Windows NTFS Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-69313 |
Microsoft Standard XPS Elevation of Privilege Vulnerability |
08.09.2026 |
7.1 |
| CVE-2026-69314 |
Windows Device Association Broker Service Elevation of Privilege Vulnerability |
09.09.2026 |
7.1 |
| CVE-2026-69315 |
Windows License Manager Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-69316 |
Windows Overlay Filter Information Disclosure Vulnerability |
08.09.2026 |
4.7 |
| CVE-2026-69317 |
Windows Remote Desktop Client Information Disclosure Vulnerability |
08.09.2026 |
5.7 |
| CVE-2026-69318 |
Windows Imaging Component Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-69319 |
Windows USB Video Driver Elevation of Privilege Vulnerability |
08.09.2026 |
7 |
| CVE-2026-69321 |
Windows Power Dependency Coordinator Tampering Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-69322 |
Microsoft Windows Search Component Elevation of Privilege Vulnerability |
08.09.2026 |
8 |
| CVE-2026-69323 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-69324 |
Windows Performance Monitor Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-69325 |
Microsoft JScript Remote Code Execution Vulnerability |
08.09.2026 |
8.1 |
| CVE-2026-69328 |
Windows Storage Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-69329 |
BranchCache Denial of Service Vulnerability |
08.09.2026 |
7.5 |
| CVE-2026-69331 |
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-69332 |
Windows NTFS Elevation of Privilege Vulnerability |
09.09.2026 |
8 |
| CVE-2026-69333 |
Windows Win32k Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-69334 |
Windows Volume Manager Extension Driver Remote Code Execution Vulnerability |
08.09.2026 |
8.8 |
| CVE-2026-69335 |
Windows Win32k Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-69336 |
Microsoft Standard XPS Elevation of Privilege Vulnerability |
08.09.2026 |
7.1 |
| CVE-2026-69337 |
Windows Registry Elevation of Privilege Vulnerability |
09.09.2026 |
7.1 |
| CVE-2026-69338 |
Remote Desktop Gateway Service Elevation of Privilege Vulnerability |
09.09.2026 |
7.1 |
| CVE-2026-69339 |
Windows MIDI Service Module Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-69340 |
Windows NTFS Elevation of Privilege Vulnerability |
09.09.2026 |
7.1 |
| CVE-2026-69341 |
Windows Image Acquisition Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-69342 |
Windows DHCP Server Denial of Service Vulnerability |
08.09.2026 |
7.5 |
| CVE-2026-69343 |
Windows Overlay Filter Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-69344 |
Windows Print Spooler Components Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-69345 |
Microsoft Standard XPS Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-69346 |
Windows Print Spooler Components Elevation of Privilege Vulnerability |
09.09.2026 |
8 |
| CVE-2026-69347 |
Windows Fast FAT Driver Remote Code Execution Vulnerability |
09.09.2026 |
7.4 |
| CVE-2026-69348 |
Windows Win32k Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-69349 |
Windows Management Instrumentation Information Disclosure Vulnerability |
08.09.2026 |
5.7 |
| CVE-2026-69350 |
Windows Overlay Filter Elevation of Privilege Vulnerability |
09.09.2026 |
6.7 |
| CVE-2026-69351 |
Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-69352 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-69353 |
Windows Text Shaping Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-69355 |
Microsoft Exchange Server Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-69356 |
Microsoft Exchange Server Spoofing Vulnerability |
08.09.2026 |
9.3 |
| CVE-2026-69357 |
Windows NDIS Elevation of Privilege Vulnerability |
08.09.2026 |
7.1 |
| CVE-2026-69358 |
Remote Desktop Client Remote Code Execution Vulnerability |
09.09.2026 |
7.1 |
| CVE-2026-69359 |
Active Directory Domain Services Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-69360 |
Microsoft Office Word Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-69361 |
Microsoft Exchange Server Spoofing Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-69362 |
Windows Error Reporting Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-69364 |
Windows Print Spooler Components Elevation of Privilege Vulnerability |
09.09.2026 |
7.1 |
| CVE-2026-69365 |
Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability |
08.09.2026 |
8 |
| CVE-2026-69366 |
Windows Kernel Elevation of Privilege Vulnerability |
09.09.2026 |
7.1 |
| CVE-2026-69367 |
Microsoft Standard XPS Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-69368 |
Windows Overlay Filter Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-69369 |
Windows DNS Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-69371 |
Windows Overlay Filter Elevation of Privilege Vulnerability |
09.09.2026 |
8 |
| CVE-2026-69372 |
Windows Network File System Denial of Service Vulnerability |
08.09.2026 |
5.7 |
| CVE-2026-69373 |
Windows Overlay Filter Elevation of Privilege Vulnerability |
09.09.2026 |
6.7 |
| CVE-2026-69374 |
Windows SMB Server Denial of Service Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-69375 |
Microsoft Exchange Server Tampering Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-69376 |
Microsoft Standard XPS Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-69377 |
Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-69378 |
Microsoft Exchange Server Denial of Service Vulnerability |
08.09.2026 |
7.5 |
| CVE-2026-69379 |
Windows NTFS Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-69380 |
Microsoft Exchange Server Elevation of Privilege Vulnerability |
09.09.2026 |
8.1 |
| CVE-2026-69381 |
Windows Storage Port Driver Information Disclosure Vulnerability |
08.09.2026 |
4.6 |
| CVE-2026-69382 |
Microsoft Exchange Server Information Disclosure Vulnerability |
08.09.2026 |
5.9 |
| CVE-2026-69383 |
Windows Shell Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-69384 |
Virtual Hard Disk (VHD) Miniport Driver Denial of Service Vulnerability |
08.09.2026 |
7.1 |
| CVE-2026-69385 |
Windows TCP/IP Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-69386 |
Microsoft Windows Media Foundation Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-69388 |
Windows Bluetooth Service Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-69389 |
Windows Storage Management Provider Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-69390 |
Windows Spaceport.sys Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-69391 |
Windows Broker Infrastructure Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-69392 |
Windows Shell Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-69393 |
Windows Spaceport.sys Information Disclosure Vulnerability |
08.09.2026 |
5.7 |
| CVE-2026-69394 |
Windows Audio Service Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-69395 |
Active Directory Certificate Services (AD CS) Information Disclosure Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-69396 |
Windows NDIS Elevation of Privilege Vulnerability |
08.09.2026 |
7.1 |
| CVE-2026-69397 |
Microsoft OpenSSH for Windows Remote Code Execution Vulnerability |
09.09.2026 |
7.5 |
| CVE-2026-69398 |
Windows Bluetooth Service Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-69401 |
Audio Video Control Transport Protocol Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-69402 |
Microsoft Office SharePoint Spoofing Vulnerability |
08.09.2026 |
7.3 |
| CVE-2026-69403 |
Windows SMB Server Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-69404 |
Windows TCP/IP Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-69405 |
Windows DHCP Server Denial of Service Vulnerability |
08.09.2026 |
5.7 |
| CVE-2026-69406 |
Windows Kernel Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-69407 |
Volume Manager Driver Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-69408 |
Microsoft Windows Media Foundation Remote Code Execution Vulnerability |
09.09.2026 |
9.8 |
| CVE-2026-69409 |
Microsoft Office SharePoint Information Disclosure Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-69410 |
Windows Win32k Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-69412 |
Windows DHCP Server Remote Code Execution Vulnerability |
08.09.2026 |
8 |
| CVE-2026-69413 |
Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability |
08.09.2026 |
7 |
| CVE-2026-69415 |
Windows DHCP Server Elevation of Privilege Vulnerability |
08.09.2026 |
6.8 |
| CVE-2026-69416 |
Windows DHCP Server Denial of Service Vulnerability |
08.09.2026 |
5.7 |
| CVE-2026-69417 |
Microsoft Office SharePoint Spoofing Vulnerability |
08.09.2026 |
7.3 |
| CVE-2026-69418 |
Volume Manager Driver Elevation of Privilege Vulnerability |
08.09.2026 |
8 |
| CVE-2026-69420 |
Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-69421 |
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-69422 |
Windows USB Video Driver Elevation of Privilege Vulnerability |
08.09.2026 |
7 |
| CVE-2026-69423 |
Windows USB Video Driver Elevation of Privilege Vulnerability |
08.09.2026 |
8 |
| CVE-2026-69424 |
Windows Distributed File System (DFS) Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-69425 |
Windows NTFS Tampering Vulnerability |
08.09.2026 |
4.7 |
| CVE-2026-69426 |
Windows VOLSNAP.SYS Remote Code Execution Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-69427 |
Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability |
08.09.2026 |
8 |
| CVE-2026-69428 |
Windows LDAP - Lightweight Directory Access Protocol Denial of Service Vulnerability |
08.09.2026 |
7.5 |
| CVE-2026-69429 |
Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability |
08.09.2026 |
7.5 |
| CVE-2026-69430 |
Windows Embedded Mode Service Elevation of Privilege Vulnerability |
08.09.2026 |
7 |
| CVE-2026-69431 |
Telnet Client Remote Code Execution Vulnerability |
08.09.2026 |
9.8 |
| CVE-2026-69432 |
Volume Manager Driver Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-69433 |
Windows Error Reporting Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-69434 |
Windows URL Moniker Remote Code Execution Vulnerability |
08.09.2026 |
8.8 |
| CVE-2026-69436 |
Windows Error Reporting Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-69438 |
Microsoft JScript Remote Code Execution Vulnerability |
08.09.2026 |
8.1 |
| CVE-2026-69439 |
.NET and Visual Studio Elevation of Privilege Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-69440 |
Windows MIDI Service Module Elevation of Privileges Vulnerability |
09.09.2026 |
7 |
| CVE-2026-69441 |
Windows Installer Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-69442 |
Microsoft Office Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-69443 |
Windows Device Health Attestation (DHA) Information Disclosure Vulnerability |
08.09.2026 |
7.5 |
| CVE-2026-69444 |
Microsoft Windows Speech Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-69445 |
Windows Compressed Folder Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-69447 |
Windows Audio Service Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-69448 |
Windows Bluetooth Service Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-69449 |
Windows BitLocker Remote Code Execution Vulnerability |
09.09.2026 |
6.7 |
| CVE-2026-69450 |
Windows Error Reporting Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-69451 |
Windows Management Instrumentation Elevation of Privilege Vulnerability |
08.09.2026 |
7.1 |
| CVE-2026-69453 |
Microsoft Windows Search Component Tampering Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-69455 |
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-69456 |
Microsoft Windows Speech Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-69457 |
Windows USB Driver Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-69458 |
Windows BitLocker Elevation of Privilege Vulnerability |
09.09.2026 |
8 |
| CVE-2026-69459 |
Windows Power Dependency Coordinator Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-69460 |
Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability |
08.09.2026 |
7.1 |
| CVE-2026-69461 |
Windows NTFS Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-69462 |
Windows Error Reporting Elevation of Privilege Vulnerability |
09.09.2026 |
8 |
| CVE-2026-69463 |
Windows NTFS Remote Code Execution Vulnerability |
09.09.2026 |
9.8 |
| CVE-2026-69464 |
Microsoft Office SharePoint Elevation of Privilege Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-69465 |
Microsoft Office SharePoint Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-69466 |
Windows Kernel Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-69467 |
Microsoft Graphics Component Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-69468 |
Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability |
08.09.2026 |
7 |
| CVE-2026-69469 |
Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability |
08.09.2026 |
6.6 |
| CVE-2026-69470 |
Connected User Experiences and Telemetry Elevation of Privilege Vulnerability |
08.09.2026 |
7 |
| CVE-2026-69472 |
Windows Devices Human Interface Elevation of Privilege Vulnerability |
08.09.2026 |
7 |
| CVE-2026-69473 |
Windows Kernel Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-69474 |
Windows Overlay Filter Information Disclosure Vulnerability |
08.09.2026 |
4.8 |
| CVE-2026-69475 |
Windows Remote Desktop Services Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-69476 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-69477 |
Microsoft Office Access Remote Code Execution Vulnerability |
09.09.2026 |
7.3 |
| CVE-2026-69478 |
Windows Device Association Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-69479 |
Windows NTFS Remote Code Execution Vulnerability |
09.09.2026 |
8.4 |
| CVE-2026-69480 |
Windows Partition Management Driver Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-69481 |
Windows Enterprise App Management Elevation of Privilege Vulnerability |
08.09.2026 |
8 |
| CVE-2026-69482 |
Windows Error Reporting Tampering Vulnerability |
08.09.2026 |
7.1 |
| CVE-2026-69483 |
Windows Image Acquisition Information Disclosure Vulnerability |
08.09.2026 |
4.7 |
| CVE-2026-69485 |
Remote Desktop Client Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-69488 |
Windows Device Association Service Elevation of Privilege Vulnerability |
08.09.2026 |
7 |
| CVE-2026-69489 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-69490 |
Windows USB Mass Storage Class Driver Elevation of Privilege Vulnerability |
08.09.2026 |
6.8 |
| CVE-2026-69491 |
Microsoft DirectMusic Remote Code Execution Vulnerability |
09.09.2026 |
9.8 |
| CVE-2026-69492 |
Windows Partition Management Driver Elevation of Privilege Vulnerability |
08.09.2026 |
7 |
| CVE-2026-69493 |
Windows Event Logging Service Remote Code Execution Vulnerability |
09.09.2026 |
9.8 |
| CVE-2026-69494 |
Windows Event Logging Service Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-69495 |
Windows Event Logging Service Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-69496 |
Windows Compressed Folder Remote Code Execution Vulnerability |
09.09.2026 |
9.8 |
| CVE-2026-69497 |
Windows DHCP Server Denial of Service Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-69498 |
Windows Win32k Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-69499 |
Windows Imaging Component Remote Code Execution Vulnerability |
08.09.2026 |
8.8 |
| CVE-2026-69500 |
Windows Image Acquisition Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-69501 |
Windows Secure Kernel Mode Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-69503 |
Windows USB Driver Elevation of Privilege Vulnerability |
08.09.2026 |
8 |
| CVE-2026-69504 |
Windows NTFS Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-69505 |
Windows NTFS Elevation of Privilege Vulnerability |
09.09.2026 |
8 |
| CVE-2026-69507 |
Microsoft Windows Search Component Information Disclosure Vulnerability |
08.09.2026 |
5.7 |
| CVE-2026-69508 |
Windows MIDI Service Module Elevation of Privileges Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-69509 |
Role: Windows Fax Service Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-69510 |
Windows DHCP Server Remote Code Execution Vulnerability |
08.09.2026 |
8.1 |
| CVE-2026-69511 |
Microsoft Windows Media Foundation Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-69512 |
Windows Spaceport.sys Elevation of Privilege Vulnerability |
09.09.2026 |
8 |
| CVE-2026-69513 |
Windows Error Reporting Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-69514 |
Remote Desktop Services Remote Code Execution Vulnerability |
09.09.2026 |
7.5 |
| CVE-2026-69516 |
Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-69517 |
Windows Wireless Networking Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-69518 |
Windows Remote Desktop Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-69522 |
.NET and Visual Studio Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-69524 |
Windows Active Directory Domain Services Remote Code Execution Vulnerability |
09.09.2026 |
8.1 |
| CVE-2026-69525 |
Remote Desktop Services Remote Code Execution Vulnerability |
09.09.2026 |
9.8 |
| CVE-2026-69527 |
Windows USB Mass Storage Class Driver Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-69528 |
Windows Shell Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-69529 |
Microsoft Office Access Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-69530 |
Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability |
09.09.2026 |
8.1 |
| CVE-2026-69531 |
Microsoft Windows Speech Tampering Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-69532 |
Windows NTFS Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-69534 |
Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-69535 |
Windows Spaceport.sys Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-69536 |
Remote Desktop Services Remote Code Execution Vulnerability |
09.09.2026 |
7.1 |
| CVE-2026-69538 |
Windows Spaceport.sys Remote Code Execution Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-69539 |
Remote Desktop Services Remote Code Execution Vulnerability |
09.09.2026 |
7.5 |
| CVE-2026-69540 |
Windows Audio Service Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-69541 |
Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability |
08.09.2026 |
7.8 |
| CVE-2026-69542 |
Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-69544 |
Windows SMB Client Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-69546 |
Windows Active Directory Domain Services Remote Code Execution Vulnerability |
09.09.2026 |
8.1 |
| CVE-2026-69547 |
Windows DHCP Server Remote Code Execution Vulnerability |
08.09.2026 |
8.8 |
| CVE-2026-69548 |
Windows RNDIS Information Disclosure Vulnerability |
08.09.2026 |
4.6 |
| CVE-2026-69549 |
Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability |
08.09.2026 |
7 |
| CVE-2026-69551 |
Windows DNS Server Remote Code Execution Vulnerability |
08.09.2026 |
8.8 |
| CVE-2026-69552 |
Windows Print Spooler Components Information Disclosure Vulnerability |
08.09.2026 |
5.7 |
| CVE-2026-69553 |
Windows Hyper-V Elevation of Privilege Vulnerability |
09.09.2026 |
7.1 |
| CVE-2026-69554 |
Microsoft Windows Search Component Tampering Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-69556 |
Microsoft Office Word Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-69559 |
Microsoft Teams for Android Information Disclosure Vulnerability |
08.09.2026 |
5.8 |
| CVE-2026-69560 |
Windows Work Folder Service Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-69561 |
Windows CD-ROM Driver Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-69562 |
Microsoft SQL Server Information Disclosure Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-69563 |
Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-69564 |
Windows Online Certificate Status Protocol (OCSP) Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-69566 |
Windows NTFS Remote Code Execution Vulnerability |
08.09.2026 |
6.8 |
| CVE-2026-69567 |
Windows NTFS Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-69568 |
Storage Spaces Controller Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-69569 |
Windows Print Spooler Components Denial of Service Vulnerability |
08.09.2026 |
5.7 |
| CVE-2026-69571 |
Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-69572 |
Windows SMB Client Information Disclosure Vulnerability |
08.09.2026 |
5.7 |
| CVE-2026-69573 |
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability |
08.09.2026 |
7 |
| CVE-2026-69574 |
Windows Device Association Service Elevation of Privilege Vulnerability |
08.09.2026 |
7 |
| CVE-2026-69575 |
Windows Storage Spaces Controller Elevation of Privilege Vulnerability |
08.09.2026 |
7 |
| CVE-2026-69576 |
Graphic Fonts Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-69578 |
Windows Kernel Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-69579 |
Windows Message Queuing Remote Code Execution Vulnerability |
08.09.2026 |
9.8 |
| CVE-2026-69580 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-69581 |
Windows Device Association Service Elevation of Privilege Vulnerability |
08.09.2026 |
7 |
| CVE-2026-69582 |
Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-69583 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-69584 |
Windows USB Video Driver Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-69585 |
Microsoft Windows Search Component Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-69586 |
Microsoft Windows PDF Remote Code Execution Vulnerability |
08.09.2026 |
9.8 |
| CVE-2026-69587 |
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability |
08.09.2026 |
7.5 |
| CVE-2026-69588 |
Windows TCP/IP Denial of Service Vulnerability |
08.09.2026 |
7.5 |
| CVE-2026-69589 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-69590 |
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
09.09.2026 |
9.8 |
| CVE-2026-69591 |
Windows NTFS Information Disclosure Vulnerability |
08.09.2026 |
5.7 |
| CVE-2026-69592 |
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-69593 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-69594 |
Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-69595 |
Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability |
09.09.2026 |
9.8 |
| CVE-2026-69597 |
Windows HTTP.sys Elevation of Privilege Vulnerability |
09.09.2026 |
7.1 |
| CVE-2026-69598 |
Windows iSCSI Remote Code Execution Vulnerability |
08.09.2026 |
8.8 |
| CVE-2026-69599 |
Remote Desktop Services Remote Code Execution Vulnerability |
09.09.2026 |
7.5 |
| CVE-2026-69600 |
Microsoft Windows Search Component Elevation of Privilege Vulnerability |
08.09.2026 |
7 |
| CVE-2026-69601 |
Microsoft Windows Media Foundation Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-69602 |
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability |
09.09.2026 |
7.1 |
| CVE-2026-69603 |
Windows Hyper-V Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-69604 |
Windows Audio Service Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-69605 |
Microsoft Install Service Elevation of Privilege Vulnerability |
08.09.2026 |
7 |
| CVE-2026-69606 |
Windows Shell Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-69607 |
Windows Deployment Services Remote Code Execution Vulnerability |
09.09.2026 |
7.5 |
| CVE-2026-69608 |
Microsoft Windows Search Component Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-69609 |
Win32k Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-69610 |
Windows Win32k Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-69611 |
Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability |
08.09.2026 |
7 |
| CVE-2026-69612 |
Windows Error Reporting Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-69613 |
Windows Image Acquisition Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-69614 |
Microsoft Office Access Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-69615 |
Microsoft Office SharePoint Spoofing Vulnerability |
08.09.2026 |
3.5 |
| CVE-2026-69616 |
Windows Remote Desktop Services Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-69617 |
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-69618 |
Windows SMB Client Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-69619 |
Windows exFAT File System Elevation of Privilege Vulnerability |
08.09.2026 |
8 |
| CVE-2026-69620 |
Windows DHCP Server Remote Code Execution Vulnerability |
08.09.2026 |
8.1 |
| CVE-2026-69621 |
Role: Windows Fax Service Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-69623 |
Windows HTTP Print Provider Remote Code Execution Vulnerability |
08.09.2026 |
8 |
| CVE-2026-69624 |
Active Directory Certificate Services (AD CS) Tampering Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-69625 |
Connected User Experiences and Telemetry Elevation of Privilege Vulnerability |
08.09.2026 |
8 |
| CVE-2026-69626 |
Microsoft Office Information Disclosure Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-69627 |
Windows Remote Desktop Licensing Service Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-69628 |
Windows iSCSI Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-69629 |
Microsoft Office Outlook Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-69630 |
Windows Win32k Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-69631 |
Windows DNS Denial of Service Vulnerability |
08.09.2026 |
7.5 |
| CVE-2026-69632 |
Microsoft Office Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-69636 |
Microsoft Office SharePoint Information Disclosure Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-69637 |
Windows DHCP Server Denial of Service Vulnerability |
08.09.2026 |
5.7 |
| CVE-2026-69638 |
Windows NTFS Remote Code Execution Vulnerability |
09.09.2026 |
8.4 |
| CVE-2026-69641 |
Microsoft Exchange Server Elevation of Privilege Vulnerability |
09.09.2026 |
9.1 |
| CVE-2026-69643 |
Windows Spaceport.sys Elevation of Privilege Vulnerability |
09.09.2026 |
8 |
| CVE-2026-69645 |
Windows Message Queuing Elevation of Privilege Vulnerability |
08.09.2026 |
7 |
| CVE-2026-69648 |
Windows Notification Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-69649 |
Raw Image Extension Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-69652 |
Windows Win32k Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-69654 |
Windows Accounts Control Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-69669 |
Windows Kernel Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-69671 |
Microsoft Office Word Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-69672 |
Windows DNS Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-69674 |
Windows Modern Device Management (MDM) Security Feature Bypass Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-69676 |
Windows Kerberos Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-69678 |
Microsoft Office PowerPoint Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-69679 |
Windows DHCP Server Denial of Service Vulnerability |
08.09.2026 |
5.7 |
| CVE-2026-69680 |
Windows DNS Spoofing Vulnerability |
08.09.2026 |
8.1 |
| CVE-2026-69681 |
Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability |
08.09.2026 |
8 |
| CVE-2026-69682 |
Windows Host Guardian Service Elevation of Privilege Vulnerability |
08.09.2026 |
7 |
| CVE-2026-69683 |
Microsoft Office SharePoint Information Disclosure Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-69684 |
Windows Error Reporting Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-69685 |
Windows Kerberos Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-69686 |
Microsoft Office Word Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-69687 |
Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-69688 |
Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability |
08.09.2026 |
7.1 |
| CVE-2026-69689 |
Windows Win32k Elevation of Privilege Vulnerability |
09.09.2026 |
8 |
| CVE-2026-69690 |
Microsoft Office SharePoint Spoofing Vulnerability |
08.09.2026 |
4.6 |
| CVE-2026-69691 |
Windows Spaceport.sys Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-69692 |
Windows Audio Service Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-69693 |
Windows Device Association Broker Service Elevation of Privilege Vulnerability |
08.09.2026 |
7 |
| CVE-2026-69694 |
Windows IP Address Management (IPAM) Service Elevation of Privilege Vulnerability |
08.09.2026 |
7 |
| CVE-2026-69706 |
Windows Win32k Elevation of Privilege Vulnerability |
09.09.2026 |
7.1 |
| CVE-2026-69707 |
Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-69708 |
Windows Web Platform Storage Elevation of Privilege Vulnerability |
08.09.2026 |
7 |
| CVE-2026-69709 |
Windows NTFS Remote Code Execution Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-69710 |
Windows Hello Elevation of Privilege Vulnerability |
09.09.2026 |
7.5 |
| CVE-2026-69711 |
Windows Device Association Service Elevation of Privilege Vulnerability |
08.09.2026 |
7 |
| CVE-2026-69712 |
Windows Key Distribution Center Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-69713 |
Windows Secure Boot Security Feature Bypass Vulnerability |
08.09.2026 |
4.4 |
| CVE-2026-69714 |
Windows Device Association Service Elevation of Privilege Vulnerability |
08.09.2026 |
8 |
| CVE-2026-69715 |
Windows Direct Show Remote Code Execution Vulnerability |
08.09.2026 |
9.8 |
| CVE-2026-69716 |
Microsoft Office SharePoint Elevation of Privilege Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-69717 |
Windows Group Policy Elevation of Privilege Vulnerability |
09.09.2026 |
8 |
| CVE-2026-69719 |
Microsoft Office Word Information Disclosure Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-69720 |
Windows MIDI Service Module Elevation of Privileges Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-69722 |
Microsoft Office Word Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-69723 |
Windows Kernel Information Disclosure Vulnerability |
08.09.2026 |
5.7 |
| CVE-2026-69724 |
Microsoft Office SharePoint Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-69725 |
Windows Hello Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-69727 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
8 |
| CVE-2026-69729 |
Windows Credential Providers Remote Code Execution Vulnerability |
08.09.2026 |
8.8 |
| CVE-2026-69730 |
Windows DNS Server Remote Code Execution Vulnerability |
08.09.2026 |
9.8 |
| CVE-2026-69731 |
HID Class Driver Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-69732 |
Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability |
09.09.2026 |
8.1 |
| CVE-2026-69734 |
Microsoft Office Word Information Disclosure Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-69735 |
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-69738 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-69739 |
Microsoft Office Information Disclosure Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-69740 |
Windows Hello Elevation of Privilege Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-69741 |
Windows Spaceport.sys Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-69742 |
Microsoft Office Publisher Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-69744 |
Windows Kerberos Denial of Service Vulnerability |
08.09.2026 |
7.5 |
| CVE-2026-69757 |
Windows TCP/IP Elevation of Privilege Vulnerability |
09.09.2026 |
7.1 |
| CVE-2026-69758 |
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-69759 |
Microsoft Office Word Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-69760 |
Windows Kerberos Denial of Service Vulnerability |
08.09.2026 |
7.5 |
| CVE-2026-69761 |
Windows TCP/IP Elevation of Privilege Vulnerability |
09.09.2026 |
7.1 |
| CVE-2026-69762 |
Windows Win32k Elevation of Privilege Vulnerability |
09.09.2026 |
8 |
| CVE-2026-69764 |
Microsoft Office Word Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-69767 |
Microsoft Office PowerPoint Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-69768 |
Windows RNDIS Remote Code Execution Vulnerability |
08.09.2026 |
9.8 |
| CVE-2026-69769 |
Windows HTTP Print Provider Remote Code Execution Vulnerability |
08.09.2026 |
9.8 |
| CVE-2026-69770 |
Windows Spaceport.sys Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-69771 |
Windows Container Manager Service Security Feature Bypass Vulnerability |
08.09.2026 |
4.7 |
| CVE-2026-69772 |
Windows Network File System Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-69773 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
8 |
| CVE-2026-69775 |
Windows DWM Core Library Elevation of Privilege Vulnerability |
08.09.2026 |
7.1 |
| CVE-2026-69777 |
Windows DHCP Client Elevation of Privilege Vulnerability |
08.09.2026 |
8 |
| CVE-2026-69778 |
Microsoft Office Access Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-69779 |
Windows Win32k Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-69781 |
Windows DHCP Client Denial of Service Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-69782 |
Windows DNS Server Remote Code Execution Vulnerability |
08.09.2026 |
8.1 |
| CVE-2026-69784 |
Windows Hello Elevation of Privilege Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-69785 |
Windows Smart Card Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-69786 |
Windows Text Shaping Remote Code Execution Vulnerability |
08.09.2026 |
8.1 |
| CVE-2026-69787 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-69790 |
Windows Credential Providers Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-69791 |
Windows Device Association Service Elevation of Privilege Vulnerability |
08.09.2026 |
7 |
| CVE-2026-69792 |
Windows Win32K Security Feature Bypass Vulnerability |
08.09.2026 |
4.7 |
| CVE-2026-69793 |
Windows TCP/IP Security Feature Bypass Vulnerability |
08.09.2026 |
7.5 |
| CVE-2026-69794 |
Windows Encrypting File System (EFS) Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-69797 |
Microsoft Office PowerPoint Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-69799 |
Windows Hello Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-69801 |
Windows Audio Service Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-69803 |
Windows DHCP Server Information Disclosure Vulnerability |
08.09.2026 |
5.9 |
| CVE-2026-69804 |
Microsoft Office SharePoint Remote Code Execution Vulnerability |
09.09.2026 |
7.5 |
| CVE-2026-69805 |
.NET Elevation of Privilege Vulnerability |
09.09.2026 |
7.5 |
| CVE-2026-69806 |
.NET Elevation of Privilege Vulnerability |
08.09.2026 |
7 |
| CVE-2026-69807 |
PowerShell Elevation of Privilege Vulnerability |
09.09.2026 |
8 |
| CVE-2026-69808 |
Win32k Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-69809 |
Windows Active Directory Domain Services Denial of Service Vulnerability |
08.09.2026 |
7.5 |
| CVE-2026-69813 |
Windows DNS Server Remote Code Execution Vulnerability |
08.09.2026 |
8.1 |
| CVE-2026-69814 |
Windows Credential Providers Elevation of Privilege Vulnerability |
08.09.2026 |
7 |
| CVE-2026-69816 |
Windows Accounts Control Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-69817 |
Windows Bluetooth Port Driver Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-69818 |
Windows Win32k Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-69819 |
RPC Runtime Library Remote Code Execution Vulnerability |
08.09.2026 |
9.8 |
| CVE-2026-69820 |
Windows Hello Elevation of Privilege Vulnerability |
09.09.2026 |
8.2 |
| CVE-2026-69821 |
Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-69822 |
Windows Kerberos Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-69824 |
Microsoft Standard XPS Remote Code Execution Vulnerability |
08.09.2026 |
9.8 |
| CVE-2026-69826 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
8 |
| CVE-2026-69827 |
Windows DNS Server Remote Code Execution Vulnerability |
08.09.2026 |
8.1 |
| CVE-2026-69829 |
Windows Shell Remote Code Execution Vulnerability |
09.09.2026 |
9.8 |
| CVE-2026-69832 |
Win32k Information Disclosure Vulnerability |
08.09.2026 |
5.6 |
| CVE-2026-69834 |
Windows ALPC Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-69838 |
Windows Print Spooler Components Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-69839 |
Windows iSCSI Target Service Denial of Service Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-69841 |
Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-69844 |
Windows Win32k Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-69845 |
Windows DHCP Server Remote Code Execution Vulnerability |
08.09.2026 |
9.8 |
| CVE-2026-69846 |
Windows Secure Kernel Mode Elevation of Privilege Vulnerability |
09.09.2026 |
8.2 |
| CVE-2026-69847 |
Windows DHCP Server Remote Code Execution Vulnerability |
08.09.2026 |
8 |
| CVE-2026-69852 |
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
09.09.2026 |
7.5 |
| CVE-2026-69853 |
Win32k Information Disclosure Vulnerability |
08.09.2026 |
4.7 |
| CVE-2026-69854 |
Spring Cloud Azure Elevation of Privilege Vulnerability |
08.09.2026 |
9 |
| CVE-2026-69858 |
Windows DNS Server Remote Code Execution Vulnerability |
08.09.2026 |
8.1 |
| CVE-2026-69859 |
Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability |
08.09.2026 |
7 |
| CVE-2026-69860 |
Windows Imaging Component Remote Code Execution Vulnerability |
08.09.2026 |
8.8 |
| CVE-2026-69862 |
Windows Wireless Wide Area Network Service Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-69864 |
Windows Hello Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-69866 |
Windows Device Association Service Elevation of Privilege Vulnerability |
08.09.2026 |
7 |
| CVE-2026-69874 |
Windows ALPC Elevation of Privilege Vulnerability |
09.09.2026 |
8.2 |
| CVE-2026-69875 |
Windows NTFS Elevation of Privilege Vulnerability |
09.09.2026 |
8 |
| CVE-2026-69876 |
Windows DHCP Server Remote Code Execution Vulnerability |
08.09.2026 |
8 |
| CVE-2026-69878 |
Windows DHCP Server Remote Code Execution Vulnerability |
08.09.2026 |
6.4 |
| CVE-2026-69881 |
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability |
08.09.2026 |
7.5 |
| CVE-2026-69889 |
Windows Bluetooth Service Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-69890 |
Windows Virtual Trusted Platform Module Elevation of Privilege Vulnerability |
09.09.2026 |
7.5 |
| CVE-2026-69891 |
Windows Media Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-69895 |
Windows Spaceport.sys Information Disclosure Vulnerability |
08.09.2026 |
4.7 |
| CVE-2026-69896 |
Windows Error Reporting Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-69900 |
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-69904 |
Microsoft Office SharePoint Information Disclosure Vulnerability |
08.09.2026 |
3.5 |
| CVE-2026-69906 |
Windows Secure Kernel Mode Elevation of Privilege Vulnerability |
09.09.2026 |
8.2 |
| CVE-2026-69907 |
Windows Enterprise App Management Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-69910 |
Windows Hyper-V Remote Code Execution Vulnerability |
09.09.2026 |
9.8 |
| CVE-2026-69911 |
Microsoft Windows Search Component Elevation of Privilege Vulnerability |
08.09.2026 |
7 |
| CVE-2026-69921 |
Windows Print Spooler Components Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-69929 |
Windows DHCP Server Information Disclosure Vulnerability |
08.09.2026 |
5.9 |
| CVE-2026-69930 |
Windows DHCP Server Information Disclosure Vulnerability |
08.09.2026 |
5.9 |
| CVE-2026-69989 |
Windows DNS Server Remote Code Execution Vulnerability |
08.09.2026 |
8.1 |
| CVE-2026-70019 |
Windows Compressed Folder Information Disclosure Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-70065 |
Windows DHCP Server Denial of Service Vulnerability |
08.09.2026 |
7.5 |
| CVE-2026-70091 |
Windows DNS Denial of Service Vulnerability |
08.09.2026 |
5.9 |
| CVE-2026-70124 |
Windows DHCP Server Information Disclosure Vulnerability |
08.09.2026 |
5.9 |
| CVE-2026-70145 |
Microsoft Windows Search Component Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-70203 |
Windows Media Player Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-70283 |
Windows Win32k Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-70289 |
Windows Win32k Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-70290 |
Win32k Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-70296 |
Windows Imaging Component Remote Code Execution Vulnerability |
08.09.2026 |
9.8 |
| CVE-2026-70334 |
Visual Studio Code Security Feature Bypass Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-70342 |
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
09.09.2026 |
8.1 |
| CVE-2026-70351 |
Microsoft WebP Image Extension Remote Code Execution Vulnerability |
08.09.2026 |
8.8 |
| CVE-2026-70562 |
Windows Audio Service Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-70563 |
Windows Shell Spoofing Vulnerability |
09.09.2026 |
8.1 |
| CVE-2026-70564 |
Windows Print Spooler Components Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-70565 |
Windows AF_UNIX Socket Provider Elevation of Privilege Vulnerability |
08.09.2026 |
7 |
| CVE-2026-70567 |
Windows Display Enhancement Service Elevation of Privilege Vulnerability |
08.09.2026 |
7 |
| CVE-2026-70568 |
Windows Defender Firewall Service Elevation of Privilege Vulnerability |
08.09.2026 |
7 |
| CVE-2026-70569 |
Windows Spaceport.sys Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-70570 |
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
09.09.2026 |
7.5 |
| CVE-2026-70572 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-70573 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
7 |
| CVE-2026-70574 |
Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability |
08.09.2026 |
7.8 |
| CVE-2026-70575 |
Windows Schannel Denial of Service Vulnerability |
08.09.2026 |
5.3 |
| CVE-2026-70577 |
Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability |
08.09.2026 |
7 |
| CVE-2026-70578 |
Windows Credential Guard Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-70579 |
Windows Mobile Broadband Information Disclosure Vulnerability |
08.09.2026 |
7.5 |
| CVE-2026-70581 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-70582 |
Windows Management Instrumentation Elevation of Privilege Vulnerability |
08.09.2026 |
6.4 |
| CVE-2026-70583 |
Windows Core Messaging Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-70584 |
Windows Core Messaging Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-70585 |
Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability |
09.09.2026 |
7 |
| CVE-2026-70586 |
Windows Paint Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-70587 |
Windows Remote Desktop Protocol Information Disclosure Vulnerability |
08.09.2026 |
7.5 |
| CVE-2026-71328 |
.NET and Visual Studio Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-71329 |
Windows NTFS Remote Code Execution Vulnerability |
08.09.2026 |
6.8 |
| CVE-2026-71330 |
Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability |
08.09.2026 |
7.5 |
| CVE-2026-71332 |
Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-71333 |
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-71334 |
Windows NFS Portmapper Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-71336 |
Windows Work Folder Service Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-71337 |
Windows Storage Management Provider Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-71338 |
Windows Failover Cluster Elevation of Privilege Vulnerability |
08.09.2026 |
6.4 |
| CVE-2026-71339 |
Windows Installer Elevation of Privilege Vulnerability |
09.09.2026 |
6.7 |
| CVE-2026-71340 |
Windows File History Service Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-71341 |
Windows Partition Management Driver Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-71342 |
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-71343 |
Windows Remote Access Connection Manager Remote Code Execution Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-71345 |
Windows Spaceport.sys Remote Code Execution Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-71348 |
Windows Spaceport.sys Remote Code Execution Vulnerability |
08.09.2026 |
6.8 |
| CVE-2026-71349 |
Windows Spaceport.sys Remote Code Execution Vulnerability |
08.09.2026 |
6.8 |
| CVE-2026-71350 |
Windows Spaceport.sys Remote Code Execution Vulnerability |
08.09.2026 |
6.8 |
| CVE-2026-71351 |
Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-71352 |
Windows Remote Access Connection Manager Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-71353 |
Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-72923 |
Microsoft.OpenApi.YamlReader/Readers vulnerable to denial of service via YAML alias expansion |
08.09.2026 |
7.5 |
| CVE-2026-72926 |
Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-72927 |
Winsock Elevation of Privilege Vulnerability |
09.09.2026 |
6.7 |
| CVE-2026-72928 |
Windows DNS Server Remote Code Execution Vulnerability |
08.09.2026 |
7.5 |
| CVE-2026-72929 |
Windows Installer Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-72930 |
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability |
09.09.2026 |
7 |
| CVE-2026-72931 |
Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability |
08.09.2026 |
4.7 |
| CVE-2026-72932 |
Windows Message Queuing Queue Manager Information Disclosure Vulnerability |
08.09.2026 |
7.5 |
| CVE-2026-72933 |
Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-72935 |
Windows NTFS Elevation of Privilege Vulnerability |
09.09.2026 |
6.7 |
| CVE-2026-72936 |
Windows SMB Client Remote Code Execution Vulnerability |
09.09.2026 |
8.1 |
| CVE-2026-72937 |
Windows Storage Port Driver Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-72938 |
Microsoft Office PowerPoint Information Disclosure Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-72939 |
Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-72940 |
Windows Schannel Remote Code Execution Vulnerability |
08.09.2026 |
8.8 |
| CVE-2026-72941 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-72942 |
Windows Spaceport.sys Information Disclosure Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-72943 |
Windows Deployment Services Remote Code Execution Vulnerability |
09.09.2026 |
7.5 |
| CVE-2026-72944 |
Role: Windows Fax Service Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-72945 |
Windows Task Scheduler Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-72946 |
Microsoft Storage Port Driver Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-72947 |
Windows File History Service Elevation of Privilege Vulnerability |
08.09.2026 |
6.4 |
| CVE-2026-72948 |
Windows DNS Elevation of Privilege Vulnerability |
08.09.2026 |
6.7 |
| CVE-2026-72949 |
Windows SMB Server Network Transport Driver (srvnet.sys) Denial of Service Vulnerability |
08.09.2026 |
7.5 |
| CVE-2026-72950 |
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-72952 |
Windows Spaceport.sys Remote Code Execution Vulnerability |
09.09.2026 |
7 |
| CVE-2026-72953 |
Windows USB Driver Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-72954 |
Windows Deployment Services Remote Code Execution Vulnerability |
09.09.2026 |
7.5 |
| CVE-2026-72956 |
Microsoft Office PowerPoint Information Disclosure Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-72957 |
Windows Deployment Services Remote Code Execution Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-72958 |
Windows Credential Guard Elevation of Privilege Vulnerability |
09.09.2026 |
8.2 |
| CVE-2026-72959 |
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-72960 |
Windows Media Player Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-72961 |
Windows Hyper-V Elevation of Privilege Vulnerability |
09.09.2026 |
8.2 |
| CVE-2026-72962 |
Windows USB Video Driver Elevation of Privilege Vulnerability |
08.09.2026 |
8.2 |
| CVE-2026-72963 |
Windows Modern Execution Server Elevation of Privilege Vulnerability |
08.09.2026 |
7 |
| CVE-2026-72964 |
Windows Internet Connection Sharing (ICS) Tampering Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-72965 |
Windows WebClient Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-72966 |
Windows Remote Access Connection Manager Tampering Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-72967 |
Windows Network Connection Broker Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-72972 |
Microsoft Office Word Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-72973 |
Microsoft Office Word Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-72974 |
Microsoft Office Excel Information Disclosure Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-72975 |
Microsoft Office PowerPoint Information Disclosure Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-72976 |
Microsoft Office Word Information Disclosure Vulnerability |
08.09.2026 |
5 |
| CVE-2026-72977 |
Microsoft Office PowerPoint Information Disclosure Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-72978 |
Active Directory Federation Services (AD FS) Denial of Service Vulnerability |
08.09.2026 |
5.9 |
| CVE-2026-72979 |
Windows DHCP Server Remote Code Execution Vulnerability |
08.09.2026 |
9.8 |
| CVE-2026-72980 |
Windows Hello Security Feature Bypass Vulnerability |
08.09.2026 |
4.4 |
| CVE-2026-72981 |
IP Helper Remote Code Execution Vulnerability |
08.09.2026 |
8.1 |
| CVE-2026-72982 |
Windows Netlogon Remote Code Execution Vulnerability |
09.09.2026 |
9.8 |
| CVE-2026-72983 |
Internet Connection Sharing (ICS) Remote Code Execution Vulnerability |
09.09.2026 |
9.8 |
| CVE-2026-72985 |
Volume Shadow Copy Elevation of Privilege Vulnerability |
08.09.2026 |
6.8 |
| CVE-2026-72986 |
Graphic Fonts Remote Code Execution Vulnerability |
08.09.2026 |
8.8 |
| CVE-2026-72987 |
Windows DNS Remote Code Execution Vulnerability |
08.09.2026 |
8.1 |
| CVE-2026-72988 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-72989 |
Windows Failover Cluster Information Disclosure Vulnerability |
08.09.2026 |
7.5 |
| CVE-2026-72990 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-72991 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-72992 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-72993 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-72994 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-72995 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-72996 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-72997 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-72999 |
Windows USB Hub Driver Elevation of Privilege Vulnerability |
08.09.2026 |
6.8 |
| CVE-2026-73000 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-73001 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-73002 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-73003 |
Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability |
08.09.2026 |
7 |
| CVE-2026-73004 |
Windows Autopilot Tampering Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-73005 |
Windows Authentication Methods Elevation of Privilege Vulnerability |
08.09.2026 |
7 |
| CVE-2026-73006 |
DirectWrite Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-73007 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-73008 |
Windows Biometric Service Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-73009 |
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability |
09.09.2026 |
9.8 |
| CVE-2026-73010 |
Microsoft Failover Cluster Remote Code Execution Vulnerability |
08.09.2026 |
9.8 |
| CVE-2026-73011 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-73012 |
Windows Management Services Elevation of Privilege Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-73013 |
Windows Imaging Component Remote Code Execution Vulnerability |
08.09.2026 |
8.8 |
| CVE-2026-73014 |
Data Sharing Service Client Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-73015 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-73016 |
DirectWrite Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-73017 |
Graphics Kernel Remote Code Execution Vulnerability |
08.09.2026 |
7.5 |
| CVE-2026-73018 |
Graphic Fonts Remote Code Execution Vulnerability |
08.09.2026 |
8.8 |
| CVE-2026-73019 |
Windows URL Moniker Security Feature Bypass Vulnerability |
08.09.2026 |
4.3 |
| CVE-2026-73020 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-73021 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-73022 |
Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability |
08.09.2026 |
7 |
| CVE-2026-73023 |
Windows Imaging Component Remote Code Execution Vulnerability |
08.09.2026 |
8.8 |
| CVE-2026-73024 |
Windows Services for NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-73025 |
Windows iSCSI Security Feature Bypass Vulnerability |
09.09.2026 |
9.8 |
| CVE-2026-73026 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-73028 |
SQL Server Elevation of Privilege Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-73029 |
Microsoft SQL Server Information Disclosure Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-76191 |
Animate | Improper Control of Generation of Code ('Code Injection') (CWE-94) |
09.09.2026 |
8.2 |
| CVE-2026-77480 |
SQL Server Elevation of Privilege Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-77481 |
Microsoft SQL Server Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-77482 |
Microsoft SQL Server Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-77483 |
SQL Server Elevation of Privilege Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-77484 |
Microsoft SQL Server Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-77485 |
SQL Server Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-77486 |
Microsoft SQL Server Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-77487 |
SQL Server Elevation of Privilege Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-77488 |
Microsoft SQL Server Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-77489 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-77491 |
Windows GDI Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-77492 |
Windows Storage Port Driver Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-77493 |
Windows Graphics Component Remote Code Execution Vulnerability |
09.09.2026 |
9.8 |
| CVE-2026-77494 |
Windows DHCP Server Denial of Service Vulnerability |
08.09.2026 |
7.5 |
| CVE-2026-77495 |
Windows Imaging Component Remote Code Execution Vulnerability |
08.09.2026 |
8.8 |
| CVE-2026-77498 |
Windows DHCP Server Denial of Service Vulnerability |
08.09.2026 |
7.5 |
| CVE-2026-77499 |
Windows DHCP Server Denial of Service Vulnerability |
08.09.2026 |
7.5 |
| CVE-2026-77500 |
Windows Device Association Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-77501 |
Windows DHCP Server Denial of Service Vulnerability |
08.09.2026 |
7.5 |
| CVE-2026-77502 |
Windows DHCP Server Denial of Service Vulnerability |
08.09.2026 |
7.5 |
| CVE-2026-77503 |
Windows NTFS Elevation of Privilege Vulnerability |
09.09.2026 |
8.4 |
| CVE-2026-77504 |
Microsoft Office Word Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-77505 |
Windows DNS Server Remote Code Execution Vulnerability |
08.09.2026 |
8.1 |
| CVE-2026-77886 |
Windows DHCP Server Denial of Service Vulnerability |
08.09.2026 |
7.5 |
| CVE-2026-77887 |
Windows DHCP Server Remote Code Execution Vulnerability |
08.09.2026 |
6.4 |
| CVE-2026-77888 |
Windows DHCP Server Denial of Service Vulnerability |
08.09.2026 |
7.5 |
| CVE-2026-77889 |
Windows DHCP Server Denial of Service Vulnerability |
08.09.2026 |
7.5 |
| CVE-2026-77890 |
Windows DHCP Server Denial of Service Vulnerability |
08.09.2026 |
7.5 |
| CVE-2026-77891 |
Windows DHCP Server Remote Code Execution Vulnerability |
08.09.2026 |
6.4 |
| CVE-2026-77892 |
Windows Boot Manager Elevation of Privilege Vulnerability |
08.09.2026 |
6.8 |
| CVE-2026-77893 |
Windows DHCP Server Denial of Service Vulnerability |
08.09.2026 |
7.5 |
| CVE-2026-77894 |
Windows Installer Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-77895 |
Windows DHCP Server Denial of Service Vulnerability |
08.09.2026 |
7.5 |
| CVE-2026-77896 |
Windows Remote Desktop Client Denial of Service Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-77897 |
Microsoft Power Automate Desktop Elevation of Privilege Vulnerability |
08.09.2026 |
7 |
| CVE-2026-77898 |
Microsoft Office Remote Code Execution Vulnerability |
09.09.2026 |
7.5 |
| CVE-2026-77899 |
Windows Security Center Elevation of Privilege Vulnerability |
08.09.2026 |
7 |
| CVE-2026-77901 |
Microsoft Office Word Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-77904 |
Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-77905 |
Windows Management Instrumentation Elevation of Privilege Vulnerability |
08.09.2026 |
7 |
| CVE-2026-77906 |
Visual Studio Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-77907 |
Visual Studio Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-77908 |
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability |
08.09.2026 |
8.8 |
| CVE-2026-77909 |
Azure CycleCloud Information Disclosure Vulnerability |
08.09.2026 |
7.7 |
| CVE-2026-77911 |
Microsoft Office Word Information Disclosure Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-78439 |
Microsoft Office Graphics Component Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-78441 |
Windows OLE DB Information Disclosure Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-78442 |
Windows OLE DB Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-78444 |
Microsoft Failover Cluster Remote Code Execution Vulnerability |
08.09.2026 |
8.1 |
| CVE-2026-78445 |
Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability |
09.09.2026 |
9.8 |
| CVE-2026-78446 |
Windows Distributed File System (DFS) Denial of Service Vulnerability |
08.09.2026 |
5.3 |
| CVE-2026-78447 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-78448 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-78449 |
Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability |
08.09.2026 |
8.1 |
| CVE-2026-78450 |
Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability |
09.09.2026 |
8.1 |
| CVE-2026-78451 |
Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability |
08.09.2026 |
6.8 |
| CVE-2026-78452 |
Microsoft Windows SCSI Class System File Information Disclosure Vulnerability |
08.09.2026 |
4.6 |
| CVE-2026-78453 |
Microsoft Windows SCSI Class System File Information Disclosure Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-78454 |
Windows CD-ROM Driver Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-78455 |
Xbox Information Disclosure Vulnerability |
08.09.2026 |
4.3 |
| CVE-2026-78456 |
SQL Server Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-78457 |
Windows Security Health Service Elevation of Privilege Vulnerability |
08.09.2026 |
7 |
| CVE-2026-78461 |
Visual Studio Code Security Feature Bypass Vulnerability |
08.09.2026 |
7.4 |
| CVE-2026-78462 |
Visual Studio Code Security Feature Bypass Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-78463 |
Remote Desktop Client Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-78464 |
Windows MIDI Service Module Elevation of Privileges Vulnerability |
09.09.2026 |
7 |
| CVE-2026-78502 |
Microsoft Office Word Information Disclosure Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-78503 |
Microsoft Office Word Information Disclosure Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-78504 |
Microsoft Office Word Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-78505 |
Microsoft Office Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-78506 |
Microsoft Office Word Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-78507 |
Microsoft Office Word Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-78508 |
Windows CD-ROM Driver Information Disclosure Vulnerability |
08.09.2026 |
4.6 |
| CVE-2026-78509 |
Microsoft Office Outlook Remote Code Execution Vulnerability |
09.09.2026 |
9.8 |
| CVE-2026-78510 |
Microsoft Word Remote Code Execution Vulnerability |
09.09.2026 |
9.8 |
| CVE-2026-78511 |
Microsoft Office Word Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-78512 |
Microsoft Office Word Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-78513 |
Microsoft Office PowerPoint Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-78514 |
Microsoft Office Word Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-78515 |
Microsoft Office Excel Information Disclosure Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-78516 |
Windows Storage Information Disclosure Vulnerability |
08.09.2026 |
4.3 |
| CVE-2026-78517 |
Microsoft Office Word Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-78518 |
Microsoft Office Excel Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-78519 |
Microsoft Office Outlook Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-78520 |
Microsoft Office Outlook Information Disclosure Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-78521 |
Microsoft Office Word Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-78522 |
Microsoft Office Word Information Disclosure Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-78523 |
Windows DNS Server Denial of Service Vulnerability |
08.09.2026 |
5.9 |
| CVE-2026-78524 |
Microsoft Office Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-78525 |
Microsoft Office Outlook Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-78526 |
Microsoft Office Word Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-80073 |
Microsoft Office Outlook Information Disclosure Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-80074 |
Remote Desktop Client Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-80075 |
Windows Work Folders Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-80076 |
Microsoft Office Information Disclosure Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-80077 |
Remote Desktop Client Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-80078 |
Microsoft Office Information Disclosure Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-80079 |
Microsoft Office Word Information Disclosure Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-80080 |
Microsoft Office Word Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-80081 |
Microsoft Office PowerPoint Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-80082 |
Microsoft Office Information Disclosure Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-80083 |
Windows Hyper-V Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-80084 |
Microsoft Office Outlook Information Disclosure Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-80085 |
Microsoft Office Word Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-80086 |
Microsoft Office PowerPoint Information Disclosure Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-80087 |
Microsoft Office Information Disclosure Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-80088 |
Microsoft Office Word Information Disclosure Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-80089 |
Microsoft Office Information Disclosure Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-80090 |
Microsoft Office Word Information Disclosure Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-80091 |
Microsoft Office Information Disclosure Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-80093 |
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
09.09.2026 |
7 |
| CVE-2026-80096 |
Windows Remote Desktop Services Elevation of Privilege Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-80097 |
Microsoft Authenticator Elevation of Privilege Vulnerability |
09.09.2026 |
8.6 |
| CVE-2026-81349 |
Azure HDInsight Ambari Elevation of Privilege Vulnerability |
09.09.2026 |
7.2 |
| CVE-2026-81352 |
Web Media Extensions Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-81353 |
HEIF Image Extensions Remote Code Execution Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-81354 |
Windows Hello Elevation of Privilege Vulnerability |
09.09.2026 |
8.2 |
| CVE-2026-81355 |
Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability |
08.09.2026 |
7.5 |
| CVE-2026-81356 |
Visual Studio Code Security Feature Bypass Vulnerability |
08.09.2026 |
8.2 |
| CVE-2026-81357 |
Visual Studio Code Security Feature Bypass Vulnerability |
08.09.2026 |
8.2 |
| CVE-2026-81376 |
Visual Studio Code Security Feature Bypass Vulnerability |
09.09.2026 |
9.6 |
| CVE-2026-81377 |
Visual Studio Code Tampering Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-81378 |
Visual Studio Code Security Feature Bypass Vulnerability |
08.09.2026 |
8.2 |
| CVE-2026-81379 |
Visual Studio Code Security Feature Bypass Vulnerability |
08.09.2026 |
8.2 |
| CVE-2026-81380 |
GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability |
08.09.2026 |
5.3 |
| CVE-2026-81381 |
GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability |
08.09.2026 |
6.5 |
| CVE-2026-81383 |
Visual Studio Code Information Disclosure Vulnerability |
08.09.2026 |
7.4 |
| CVE-2026-81385 |
Microsoft Office Publisher Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-81386 |
Microsoft Excel Remote Code Execution Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-81387 |
Microsoft Excel Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-81388 |
Microsoft Excel Remote Code Execution Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-81389 |
Microsoft Excel Remote Code Execution Vulnerability |
09.09.2026 |
7 |
| CVE-2026-81390 |
Microsoft Excel Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-81391 |
Microsoft Excel Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-81392 |
Microsoft Excel Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-81393 |
Microsoft Excel Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-81394 |
Microsoft Excel Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-81395 |
Microsoft Excel Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-81396 |
Microsoft Excel Remote Code Execution Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-81397 |
Microsoft Excel Remote Code Execution Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-81398 |
Microsoft Excel Remote Code Execution Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-81399 |
Microsoft Excel Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-81400 |
Microsoft Excel Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-81401 |
Microsoft Excel Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-81947 |
Microsoft Excel Remote Code Execution Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-81948 |
Microsoft Excel Remote Code Execution Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-81949 |
Microsoft Excel Remote Code Execution Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-81950 |
Microsoft Excel Remote Code Execution Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-81951 |
Microsoft Excel Remote Code Execution Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-81952 |
Microsoft Word Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-81953 |
Microsoft Excel Remote Code Execution Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-81954 |
Microsoft Excel Remote Code Execution Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-81955 |
Windows Graphics Component Remote Code Execution Vulnerability |
09.09.2026 |
8.8 |
| CVE-2026-81956 |
Microsoft Excel Remote Code Execution Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-81957 |
Microsoft Excel Remote Code Execution Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-81958 |
Microsoft Excel Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-81959 |
Microsoft Excel Remote Code Execution Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-81960 |
Microsoft Excel Remote Code Execution Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-81963 |
Windows Update Stack Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-83498 |
Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-83501 |
Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-83939 |
Windows Secure Kernel Mode Elevation of Privilege Vulnerability |
09.09.2026 |
8.2 |
| CVE-2026-83940 |
Windows Device Association Service Elevation of Privilege Vulnerability |
08.09.2026 |
7 |
| CVE-2026-83941 |
Entra ID Elevation of Privilege Vulnerability |
08.09.2026 |
9.9 |
| CVE-2026-83942 |
Windows Kernel Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-83948 |
Microsoft Azure CLI Remote Code Execution Vulnerability |
08.09.2026 |
8 |
| CVE-2026-83949 |
Microsoft Office Word Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-83951 |
Microsoft Office Word Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-83952 |
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-83954 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-83955 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-83967 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-83968 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-83969 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-83970 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-83971 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-83972 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-83973 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-83974 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-83975 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-83976 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-83977 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-83978 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-83979 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-83980 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-83981 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-83982 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-83983 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-83985 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-83986 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-83987 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-83988 |
Windows Biometric Service Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-83989 |
Windows Services for NFS ONCRPC XDR Driver Denial of Service Vulnerability |
08.09.2026 |
7.5 |
| CVE-2026-83990 |
Microsoft Graphics Component Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-83991 |
Windows Cloud Files Mini Filter Driver Tampering Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-83992 |
Windows Imaging Component Remote Code Execution Vulnerability |
08.09.2026 |
8.8 |
| CVE-2026-83995 |
Windows NTFS Elevation of Privilege Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-83996 |
Windows Error Reporting Elevation of Privilege Vulnerability |
08.09.2026 |
8.8 |
| CVE-2026-83997 |
Windows Message Queuing Remote Code Execution Vulnerability |
08.09.2026 |
8.1 |
| CVE-2026-83998 |
Remote Desktop Client Remote Code Execution Vulnerability |
08.09.2026 |
8.8 |
| CVE-2026-83999 |
Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability |
08.09.2026 |
7 |
| CVE-2026-84000 |
Microsoft Graphics Component Remote Code Execution Vulnerability |
08.09.2026 |
7.8 |
| CVE-2026-84001 |
Windows Key Distribution Center Denial of Service Vulnerability |
08.09.2026 |
7.5 |
| CVE-2026-84003 |
Microsoft Authentication Library (MSAL) for Node.js Spoofing Vulnerability |
08.09.2026 |
7.4 |
| CVE-2026-85360 |
Windows Kernel Elevation of Privilege Vulnerability |
08.09.2026 |
7 |
| CVE-2026-85875 |
Microsoft Office Excel Information Disclosure Vulnerability |
08.09.2026 |
5.5 |
| CVE-2026-85877 |
Windows Print Spooler Remote Code Execution Vulnerability |
08.09.2026 |
8.8 |
| CVE-2026-85880 |
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability |
09.09.2026 |
7.8 |
| CVE-2026-86669 |
aircheng-org iWebShop-5 systemseller.php login improper authentication |
08.09.2026 |
|
| CVE-2026-9215 |
A CSRF vulnerability exists in certain NETGEAR XR series devices |
09.09.2026 |
|
| CVE-2026-9216 |
Insufficient input validation vulnerability exists in certain NETGEAR RAX Models |
09.09.2026 |
|
| CVE-2026-82533 |
DeepSeek Harness < 0.1.2-alpha.1 Authentication Bypass via Host Header Spoofing |
08.09.2026 |
|
| CVE-2026-86073 |
n8n: Per-Resource OAuth Consent Bypass via Unbound Refresh Token Resource Substitution |
08.09.2026 |
|
| CVE-2026-81531 |
Unauthenticated Account Information Disclosure in Multiple Omada Controllers |
08.09.2026 |
|
| CVE-2026-52307 |
|
08.09.2026 |
|
| CVE-2026-75156 |
Apache Airflow FAB provider: FAB Azure AD OAuth: id_token issuer/audience not validated — cross-tenant authentication bypass |
08.09.2026 |
|
| CVE-2026-86668 |
aircheng-org iWebShop-5 pic.php uploadFile cross site scripting |
08.09.2026 |
|
| CVE-2026-22575 |
|
08.09.2026 |
4.7 |
| CVE-2026-26084 |
|
08.09.2026 |
8.9 |
| CVE-2026-78216 |
AshLua eval read operations can read field-policy-protected fields via aggregates |
08.09.2026 |
|
| CVE-2026-78230 |
AshAi aggregate tool can read field-policy-protected fields |
08.09.2026 |
|
| CVE-2026-78997 |
|
08.09.2026 |
|
| CVE-2026-84385 |
|
08.09.2026 |
4.9 |
| CVE-2026-84386 |
|
08.09.2026 |
4.7 |
| CVE-2026-84387 |
|
08.09.2026 |
6.7 |
| CVE-2026-84389 |
|
08.09.2026 |
2.8 |
| CVE-2026-84391 |
|
08.09.2026 |
5.9 |
| CVE-2026-84392 |
|
08.09.2026 |
2.5 |
| CVE-2026-84393 |
|
08.09.2026 |
7.3 |
| CVE-2026-82514 |
|
08.09.2026 |
|
| CVE-2026-86667 |
aircheng-org iWebShop-5 member.php member_list sql injection |
08.09.2026 |
|
| CVE-2026-16497 |
|
08.09.2026 |
7.5 |
| CVE-2026-20293 |
Cisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass Vulnerability |
08.09.2026 |
7.1 |
| CVE-2026-47625 |
|
08.09.2026 |
7.5 |
| CVE-2026-79569 |
|
08.09.2026 |
|
| CVE-2026-79570 |
|
08.09.2026 |
|
| CVE-2026-82052 |
$regexFindAll may crash mongod server when byte-matching multi-byte UTF-8 chars |
08.09.2026 |
|
| CVE-2026-82053 |
Improper Session Handling in MongoDB Server LDAP Authorization Integration Leads to Incorrect Role Assignment |
08.09.2026 |
|
| CVE-2026-82054 |
Uncontrolled Resource Consumption in MongoDB Server JSON Pointer Parser Leads to Denial of Service |
08.09.2026 |
|
| CVE-2026-82055 |
Null Pointer Dereference in MongoDB Server 2dsphere Index Key Generation Leads to Denial of Service |
08.09.2026 |
|
| CVE-2026-82056 |
Race Condition in MongoDB Server Text Index Query Parsing Leads to Heap Use-After-Free and Denial of Service |
08.09.2026 |
|
| CVE-2026-82057 |
Type Confusion in MongoDB Server WiredTiger Storage Engine via Custom Collection Configuration Leads to Persistent Denial of Service |
08.09.2026 |
|
| CVE-2026-82058 |
Unhandled Exception in MongoDB Server JSON Schema Validation Error Generation Leads to Denial of Service |
08.09.2026 |
|
| CVE-2026-82059 |
Improper Access Restriction of Internal Aggregation Expression in MongoDB Server Leads to Assertion Failure and Denial of Service |
08.09.2026 |
|
| CVE-2026-82060 |
Insufficient Validation of Shard Key Values in MongoDB Server Leads to Query Operator Injection in Change Stream Post-Image Lookups |
08.09.2026 |
|
| CVE-2026-82061 |
Use-After-Free in MongoDB Server Query Execution Memory Tracking Subsystem Leads to Denial of Service |
08.09.2026 |
|
| CVE-2026-82062 |
Improper Authorization in MongoDB Server applyOps Command Allows Writes to Arbitrary Internal Storage Tables via Feature Gate Bypass |
08.09.2026 |
|
| CVE-2026-82063 |
Use-After-Free in MongoDB Server Cursor Management Component Leads to Denial of Service |
08.09.2026 |
|
| CVE-2026-82064 |
Unauthenticated Denial of Service in MongoDB Server via Assertion Failure in Read Concern Processing on Replica Set Members |
08.09.2026 |
|
| CVE-2026-82065 |
Insufficient Validation of Storage Configuration Options in MongoDB Server Leads to Persistent Denial of Service via Corrupted Metadata |
08.09.2026 |
|
| CVE-2026-82066 |
Heap Out-of-Bounds Read in MongoDB Server Query Planning Component |
08.09.2026 |
|
| CVE-2026-82067 |
Improper Case Sensitivity Handling in MongoDB Server Configuration Validation May Cause Authorization to Remain Disabled at Startup |
08.09.2026 |
|
| CVE-2026-82068 |
Persistent Fatal Assertion Crash in MongoDB Server via Crafted Retryable Write Commands Leads to Denial of Service |
08.09.2026 |
|
| CVE-2026-82069 |
Improper Redaction of Query Literals in MongoDB Server Query Statistics Serialization on Sharded Cluster Router |
08.09.2026 |
|
| CVE-2026-82070 |
Insufficiently Protected Credentials in MongoDB Server Diagnostic Reporting Interface |
08.09.2026 |
|
| CVE-2026-82071 |
Insufficient Validation of Storage Engine Configuration Options in MongoDB Server Leads to Out-of-Bounds Write |
08.09.2026 |
|
| CVE-2026-82073 |
Improper Validation in MongoDB Server Aggregation Framework Allows Authorization Bypass and Unauthorized Collection Access with Atlas Search |
08.09.2026 |
|
| CVE-2026-82074 |
Incorrect Authorization in MongoDB Server Aggregation Framework Allows Unauthorized Read Access to Collection Data |
08.09.2026 |
|
| CVE-2026-82075 |
Uncontrolled Resource Consumption in MongoDB Sharded Cluster Router Allows Unauthenticated Denial of Service |
08.09.2026 |
|
| CVE-2026-82076 |
Integer Overflow in Query Planner Leads to Unbounded Memory Allocation and Denial of Service in MongoDB Server |
08.09.2026 |
|
| CVE-2026-56101 |
OpenBSD ieee80211_crypto_tkip.c TKIP MIC Countermeasure Logic Inversion DoS |
08.09.2026 |
|
| CVE-2026-86666 |
aircheng-org iWebShop-5 pic.php uploadFile unrestricted upload |
08.09.2026 |
|
| CVE-2026-16769 |
RS9116W/SiWx917 plaintext pause encryption request causes DOS |
08.09.2026 |
|
| CVE-2026-86600 |
Workload identity attestation generated before login host validation in Snowflake drivers |
08.09.2026 |
8.2 |
| CVE-2026-86840 |
Bifrost Unauthorized Channel Commission Attribution Allows Commission Diversion |
08.09.2026 |
|
| CVE-2026-16025 |
Improper Payment Validation in PayTR's PayTR Virtual Pos iFrame API (v9x) WHMCS Module |
08.09.2026 |
7.5 |
| CVE-2026-16037 |
Callback Authentication Bypass via Timing Attack in PayTR's PayTR Virtual Pos iFrame API (v9x) WHMCS Module |
08.09.2026 |
7.5 |
| CVE-2026-79572 |
|
08.09.2026 |
|
| CVE-2026-79573 |
|
08.09.2026 |
|
| CVE-2026-79574 |
|
08.09.2026 |
|
| CVE-2026-86718 |
WWBN AVideo Cross-Site Request Forgery via deleteHistory.json.php |
08.09.2026 |
|
| CVE-2026-86719 |
WWBN AVideo CustomizeUser Cross-Site Request Forgery Session Hijacking |
08.09.2026 |
|
| CVE-2026-86720 |
WWBN AVideo Missing Authorization via resendRestreamer.json.php |
08.09.2026 |
|
| CVE-2026-86721 |
AVideo through c3edcc274c Authorization Bypass via Session Cookie |
08.09.2026 |
|
| CVE-2026-86722 |
AVideo Authentication Bypass via SQL Cache Invalidation |
08.09.2026 |
|
| CVE-2026-86723 |
AVideo LoginControl PGP Authentication Bypass via verifyChallenge |
08.09.2026 |
|
| CVE-2026-86724 |
AVideo YPTWallet saveBalance.php Cross-Site Request Forgery |
08.09.2026 |
|
| CVE-2026-86725 |
AVideo SocialMediaPublisher Missing Authorization via add.json.php |
08.09.2026 |
|
| CVE-2026-86726 |
AVideo through 29.0 Information Disclosure via restreamsActive.json.php |
08.09.2026 |
|
| CVE-2026-86727 |
AVideo through 29.0 Information Disclosure via stats.json.php |
08.09.2026 |
|
| CVE-2026-86728 |
AVideo through 29.0 Unauthenticated Disclosure via epg.json.php |
08.09.2026 |
|
| CVE-2026-86729 |
WWBN AVideo Unrestricted Authentication Attempts via get_api_preauthorize |
08.09.2026 |
|
| CVE-2026-86730 |
Craft CMS 5.0.0-RC1 before 5.10.12 Behavior Injection RCE |
08.09.2026 |
|
| CVE-2026-86731 |
Craft CMS 5.0.0-RC1 before 5.10.12 Permission Escalation via UsersController |
08.09.2026 |
|
| CVE-2026-86732 |
Craft CMS before 5.10.12 Remote Code Execution via element-index |
08.09.2026 |
|
| CVE-2026-86733 |
Snipe-IT before 8.7.0 Remote Code Execution via Backup Restore |
08.09.2026 |
|
| CVE-2026-86734 |
Snipe-IT before 8.7.1 Denial of Service via Unbounded Note Field |
08.09.2026 |
|
| CVE-2026-86735 |
snipe-it before 8.7.0 SSRF via IPv6 transition address bypass |
08.09.2026 |
|
| CVE-2026-86736 |
snipe-it before 8.7.0 Checkout Request Counter Integrity Failure |
08.09.2026 |
|
| CVE-2026-86737 |
snipe-it before 8.7.0 Missing Authorization via barcode endpoint |
08.09.2026 |
|
| CVE-2026-86738 |
Snipe-IT before 8.7.0 CSS Injection via Custom CSS |
08.09.2026 |
|
| CVE-2026-86853 |
Repeated external URL scheme launches could potentially cause a denial of service in Firefox for iOS |
08.09.2026 |
|
| CVE-2026-79575 |
|
08.09.2026 |
|
| CVE-2026-79576 |
|
08.09.2026 |
|
| CVE-2026-12647 |
|
09.09.2026 |
9.9 |
| CVE-2026-12645 |
|
09.09.2026 |
9.9 |
| CVE-2026-12646 |
|
09.09.2026 |
9.9 |
| CVE-2026-12648 |
|
09.09.2026 |
8.8 |
| CVE-2026-12650 |
|
09.09.2026 |
9.9 |
| CVE-2026-79571 |
|
08.09.2026 |
|
| CVE-2026-83527 |
|
09.09.2026 |
8.1 |
| CVE-2026-0860 |
Mali GPU Kernel Driver allows access to sensitive kernel information |
08.09.2026 |
|
| CVE-2026-11891 |
Mali GPU Userspace Driver allows access to already freed memory |
08.09.2026 |
|
| CVE-2026-12285 |
Mali GPU Kernel Driver allows access to already freed memory |
08.09.2026 |
|
| CVE-2026-12387 |
Mali GPU Kernel Driver allows access to already freed memory |
08.09.2026 |
|
| CVE-2026-12651 |
|
09.09.2026 |
8.8 |
| CVE-2026-12744 |
|
09.09.2026 |
9.8 |
| CVE-2026-12745 |
|
09.09.2026 |
9.8 |
| CVE-2026-5729 |
Mali GPU Kernel Driver allows access to already freed memory |
08.09.2026 |
|
| CVE-2026-61516 |
Netis NX10 Credential Disclosure via sysinfo Diagnostic Endpoint |
08.09.2026 |
|
| CVE-2026-61517 |
Netis NX10 OS Command Injection via Ping Diagnostic Handler |
08.09.2026 |
|
| CVE-2026-70613 |
|
08.09.2026 |
|
| CVE-2026-70614 |
|
08.09.2026 |
|
| CVE-2026-78837 |
|
08.09.2026 |
|
| CVE-2026-79577 |
|
08.09.2026 |
|
| CVE-2026-7476 |
Mali GPU Kernel Driver allows access to already freed memory |
08.09.2026 |
|
| CVE-2026-7477 |
Mali GPU Kernel Driver allows access to already freed memory |
08.09.2026 |
|
| CVE-2026-84282 |
A Server-Side Request Forgery (SSRF) vulnerability exists in the ONLYOFFICE ownCloud Integration plugin (version 9.12) |
08.09.2026 |
|
| CVE-2026-86665 |
aircheng-org iWebShop-5 update.php index authorization |
08.09.2026 |
|
| CVE-2026-9034 |
Mali GPU Userspace Driver allows access to already freed memory |
08.09.2026 |
|
| CVE-2026-9040 |
Mali GPU Kernel Driver allows denial of service or disclosure of sensitive information |
08.09.2026 |
|
| CVE-2026-0001 |
Mali GPU Kernel Driver allows access to already freed memory |
08.09.2026 |
|
| CVE-2026-18851 |
|
09.09.2026 |
8.8 |
| CVE-2026-33197 |
BDS Module Bypass Secure Boot Advisory |
08.09.2026 |
|
| CVE-2026-86135 |
Dimension CSRF Vulnerability in Database Snapshot Creation Allows Denial of Service |
08.09.2026 |
|
| CVE-2026-33389 |
Disabled and non-configurable certificate/host key validation in Smart Polling in Guardian/CMC before 26.3.0 and Arc before v2.7.0 |
08.09.2026 |
|
| CVE-2026-33391 |
Incorrect authorization in Smart Polling configuration in Guardian/CMC before 26.3.0 |
08.09.2026 |
|
| CVE-2026-33920 |
Cross-site request forgery in the Guardian/CMC login before 26.3.0 |
08.09.2026 |
|
| CVE-2026-33387 |
Insufficient sanitization of Dashboards in Guardian/CMC before 26.3.0 |
08.09.2026 |
|
| CVE-2026-33388 |
Incorrect authorization in Credentials Manager in Guardian/CMC before 26.3.0 |
08.09.2026 |
|
| CVE-2026-79378 |
|
08.09.2026 |
|
| CVE-2026-79376 |
|
08.09.2026 |
|
| CVE-2026-79377 |
|
08.09.2026 |
|
| CVE-2026-79379 |
|
08.09.2026 |
|
| CVE-2026-86644 |
star7th showdoc API Page Save Endpoint editormd.js cross site scripting |
08.09.2026 |
|
| CVE-2026-73309 |
XenForo < 2.3.13 Authentication Bypass via OAuth2 Token Endpoint |
09.09.2026 |
|
| CVE-2026-73310 |
XenForo < 2.3.13 OAuth2 Authorization Code Token Theft via redirect_uri Bypass |
09.09.2026 |
|
| CVE-2026-73311 |
XenForo < 2.3.13 OAuth2 Authorization Code Reuse |
09.09.2026 |
|
| CVE-2026-73312 |
XenForo < 2.3.13 Refresh Token Replay via Expired Access Token |
09.09.2026 |
|
| CVE-2026-73313 |
XenForo < 2.3.13 MFA Bypass via Passkey TFA Provider |
09.09.2026 |
|
| CVE-2026-73314 |
XenForo < 2.3.13 Signature Verification Bypass via PayPal REST Webhook |
09.09.2026 |
|
| CVE-2026-73315 |
XenForo < 2.3.13 SSRF via PayPal REST Webhook Handler |
09.09.2026 |
|
| CVE-2026-73316 |
XenForo < 2.3.13 Payment Replay via PayPal REST Payment Provider |
09.09.2026 |
|
| CVE-2026-73317 |
XenForo < 2.3.13 Missing Authorization via ACP Cache-Rebuild Dispatcher |
09.09.2026 |
|
| CVE-2026-73318 |
XenForo < 2.3.13 Missing Authorization via force-agreement Controller |
09.09.2026 |
|
| CVE-2026-73319 |
XenForo < 2.3.13 XSS via Dynamic Redirect Handler |
09.09.2026 |
|
| CVE-2026-73320 |
XenForo < 2.3.13 Unauthenticated Information Disclosure via Unfurl Endpoint |
09.09.2026 |
|
| CVE-2026-73321 |
XenForo < 2.3.13 Uncontrolled Recursion DoS via BBCode Parser |
09.09.2026 |
|
| CVE-2026-74239 |
XenForo < 2.3.13 Path Traversal via Style Archive Importer on Windows |
09.09.2026 |
|
| CVE-2026-78838 |
|
08.09.2026 |
|
| CVE-2026-75021 |
fastify-cli vulnerable to remote code execution via ignored explicit Inspector bind address |
08.09.2026 |
8.1 |
| CVE-2026-12611 |
|
08.09.2026 |
|
| CVE-2026-11573 |
QDomDocument::toByteArray() crashes when parsing svg file |
08.09.2026 |
|
| CVE-2026-19203 |
|
08.09.2026 |
|
| CVE-2026-62437 |
x86: DMs may cause mem leak by IRQ binding |
08.09.2026 |
|
| CVE-2026-77089 |
Command Center API Authentication Bypass |
09.09.2026 |
|
| CVE-2026-77091 |
DataCube Security Feature Bypass |
08.09.2026 |
|
| CVE-2026-77092 |
Content Extractor Privilege Escalation |
08.09.2026 |
|
| CVE-2026-77097 |
Private Metrics Server Denial of Service |
08.09.2026 |
|
| CVE-2026-77098 |
Private Metrics Server SQL Injection |
08.09.2026 |
|
| CVE-2026-77101 |
CommServe Stack-based Buffer Overflow |
08.09.2026 |
|
| CVE-2026-77102 |
CommServe Denial of Service |
08.09.2026 |
|
| CVE-2026-77103 |
CommServe Information Disclosure |
08.09.2026 |
|
| CVE-2026-77104 |
CommServe Path Traversal |
08.09.2026 |
|
| CVE-2026-77105 |
CommServe Privilege Escalation |
09.09.2026 |
|
| CVE-2026-77106 |
Cvlaunchd Code Execution |
09.09.2026 |
|
| CVE-2026-79602 |
x86: improper handling of HVM emulation return codes |
08.09.2026 |
|
| CVE-2026-79603 |
Unconditionally do TLB flushing ahead of page scrubbing |
08.09.2026 |
|
| CVE-2026-12230 |
LearnPress <= 4.3.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'layout_custom_css' |
08.09.2026 |
6.4 |
| CVE-2026-16502 |
Live Composer <= 2.1.18 - Authenticated (Contributor+) PHP Object Injection via Shortcode |
08.09.2026 |
8.8 |
| CVE-2026-17509 |
WPML Multilingual CMS <= 4.9.5 - Incorrect Authorization to Authenticated (Subscriber+) SQL Injection via ‘elementIds’ |
08.09.2026 |
6.5 |
| CVE-2026-18021 |
Beaver Builder Page Builder <= 2.10.3.1 - Unauthenticated Arbitrary Shortcode Execution |
08.09.2026 |
6.5 |
| CVE-2026-2520 |
Online Scheduling and Appointment Booking System – Bookly <= 27.2 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Plugin Update |
08.09.2026 |
5.4 |
| CVE-2026-3174 |
Event Tickets and Registration <= 5.27.4 - Missing Authorization to Unauthenticated Stripe Credentials Update |
08.09.2026 |
7.5 |
| CVE-2026-74860 |
Libxml2: double-free/uaf in libxml2 python bindings |
08.09.2026 |
|
| CVE-2026-76931 |
Zephyr Project Manager <= 3.3.205 - Authenticated (Custom+) Stored Cross-Site Scripting via 'message' Parameter |
08.09.2026 |
6.4 |
| CVE-2026-77968 |
Hawtio-operator: hawtio-operator: cluster-wide secrets read/write granted to operator serviceaccount |
08.09.2026 |
|
| CVE-2026-78234 |
Hawtio-operator: hawtio-operator: service-ca signing oracle allows arbitrary-cn certificate issuance to namespace edit users |
08.09.2026 |
|
| CVE-2026-80219 |
Hawtio-operator: hawtio-operator: oauthclient created with grantmethod auto and no secret enables oauth token theft |
08.09.2026 |
|
| CVE-2026-86711 |
electerm before 5.3.15 Arbitrary Command Execution via Unvalidated runGlobalAsync IPC Bridge |
08.09.2026 |
|
| CVE-2026-86712 |
SiYuan before 3.8.2 Remote Code Execution via Clipboard |
08.09.2026 |
|
| CVE-2026-86713 |
PX4 Autopilot through 1.17.0 Use-After-Free in load_mon |
08.09.2026 |
|
| CVE-2026-86714 |
PX4 Autopilot through 1.17.0 Stack Buffer Over-read via netman |
08.09.2026 |
|
| CVE-2026-77654 |
Local Privilege Escalation via Misconfigured Sudoers Entry in Horizon Security Analyzer |
08.09.2026 |
|
| CVE-2026-19614 |
XML External Entity (XXE) Injection in CyberELF NanoXML |
08.09.2026 |
|