14136 entries matching microsoft — updated 2026-11-02 · vulnfeed
| CVE / ID | Title | Severity | CVSS | EPSS | Source | Date |
|---|---|---|---|---|---|---|
| CVE-2026-105769 | kaniko before 1.25.20 can send a Microsoft Entra ID (Azure AD) access token for Azure Resource Manager to an attacker-co | CRITICAL | 9.3 | — | NVD | 2026-11-02 |
| CVE-2026-107759 | The WPO365 | MICROSOFT 365 GRAPH MAILER plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Subje | HIGH | 7.2 | 20%ile | NVD | 2026-10-31 |
| CVE-2026-69446 | Incorrect authorization in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges locally. | MEDIUM | 4.4 | 17%ile | NVD | 2026-10-30 |
| CVE-2023-22793 | A vulnerability allowing an unauthenticated attacker to perform remote code execution (RCE) on servers running the Veeam | CRITICAL | 9.3 | 44%ile | NVD | 2026-10-29 |
| CVE-2026-85890 | Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | HIGH | 8.8 | 48%ile | NVD | 2026-10-29 |
| CVE-2026-85897 | Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a net | HIGH | 8.8 | 48%ile | NVD | 2026-10-29 |
| CVE-2026-88077 | Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges | HIGH | 8.8 | 51%ile | NVD | 2026-10-29 |
| CVE-2026-96192 | Use after free in Microsoft Edge for iOS allows an unauthorized attacker to execute code over a network. | HIGH | 8.8 | 47%ile | NVD | 2026-10-29 |
| CVE-2026-96196 | Incomplete list of disallowed inputs in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a secu | HIGH | 8.8 | 56%ile | NVD | 2026-10-29 |
| CVE-2026-96198 | Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a net | HIGH | 8.8 | 48%ile | NVD | 2026-10-29 |
| CVE-2026-96199 | Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a net | HIGH | 8.8 | 48%ile | NVD | 2026-10-29 |
| CVE-2026-96203 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network. | HIGH | 8.8 | 48%ile | NVD | 2026-10-29 |
| CVE-2026-107239 | A vulnerability allowing a member of the Veeam Virtualization Extensions Users group to perform remote code execution (R | HIGH | 8.8 | 51%ile | NVD | 2026-10-29 |
| CVE-2026-107238 | A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) as the LocalSystem account | HIGH | 8.7 | 39%ile | NVD | 2026-10-29 |
| CVE-2026-85899 | Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges over a network. | HIGH | 8.1 | 51%ile | NVD | 2026-10-29 |
| CVE-2026-96187 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized | HIGH | 7.4 | 44%ile | NVD | 2026-10-29 |
| CVE-2026-88090 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized | MEDIUM | 5.4 | 25%ile | NVD | 2026-10-29 |
| CVE-2026-20942 | Improper restriction of rendered ui layers or frames in Microsoft Edge (Chromium-based) allows an unauthorized attacker | MEDIUM | 4.3 | 51%ile | NVD | 2026-10-29 |
| CVE-2026-85330 | Incorrect authorization in Microsoft Edge for Android allows an unauthorized attacker to bypass a security feature over | MEDIUM | 4.3 | 29%ile | NVD | 2026-10-29 |
| CVE-2026-88078 | Improper verification of cryptographic signature in Microsoft Edge (Chromium-based) allows an unauthorized attacker to p | MEDIUM | 4.3 | 23%ile | NVD | 2026-10-29 |
| CVE-2026-118641 | n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 contains an OData $filter injection vulnerability in th | MEDIUM | 6.9 | 22%ile | NVD | 2026-10-28 |
| CVE-2026-115913 | vLLM: Phi-4 multimodal audio encoder materializes and retains full attention matrices: a single max-length audio OOM-cra | MEDIUM | 6.5 | 26%ile | GitHub | 2026-10-28 |
| CVE-2026-118310 | Improper input validation in Views in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote attacker to po | CRITICAL | 9.6 | 24%ile | NVD | 2026-10-27 |
| CVE-2026-106076 | A vulnerability allowing an authenticated organization-transfer peer to inject SQL into the configuration database of th | CRITICAL | 9.0 | 30%ile | NVD | 2026-10-27 |
| CVE-2026-83831 | Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | HIGH | 8.8 | 56%ile | NVD | 2026-10-27 |
| CVE-2026-85898 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized | HIGH | 8.8 | 56%ile | NVD | 2026-10-27 |
| CVE-2026-118330 | Use after free in Browser in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote attacker to execute arb | HIGH | 8.8 | 27%ile | NVD | 2026-10-27 |
| CVE-2026-106077 | A vulnerability allowing a user with the Veeam Backup for Microsoft 365 Administrator role to read arbitrary files on th | HIGH | 8.3 | 14%ile | NVD | 2026-10-27 |
| CVE-2026-62765 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized | HIGH | 7.5 | 38%ile | NVD | 2026-10-27 |
| CVE-2026-106078 | A vulnerability allowing an unauthenticated attacker to bypass REST API authentication with a forged federation token an | MEDIUM | 6.9 | 18%ile | NVD | 2026-10-27 |
| CVE-2025-64394 | A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installa | MEDIUM | 4.3 | 1%ile | NVD | 2026-10-27 |
| CVE-2026-97229 | Integer Overflow or Wraparound in GitLab | CRITICAL | 10.0 | 98%ile | Microsoft | 2026-10-13 |
| CVE-2026-110264 | Integer Overflow or Wraparound in GitLab | CRITICAL | 10.0 | 72%ile | Microsoft | 2026-10-13 |
| CVE-2026-110063 | VM Inspector for Azure Virtual Machines Elevation of Privilege Vulnerability | CRITICAL | 10.0 | 59%ile | Microsoft | 2026-10-13 |
| CVE-2026-83938 | Azure Kubernetes Configuration Service Elevation of Privilege Vulnerability | CRITICAL | 10.0 | 53%ile | Microsoft | 2026-10-13 |
| CVE-2026-96207 | Microsoft Partner Center Elevation of Privilege Vulnerability | CRITICAL | 10.0 | 52%ile | Microsoft | 2026-10-13 |
| CVE-2026-97785 | AAD App Proxy Elevation of Privilege Vulnerability | CRITICAL | 10.0 | 51%ile | Microsoft | 2026-10-13 |
| CVE-2026-94603 | Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation | CRITICAL | 10.0 | 45%ile | Microsoft | 2026-10-13 |
| CVE-2026-115889 | Wasmtime: Bit-packing in Cranelift compiler causes silent overflow and miscompilation | CRITICAL | 9.9 | 39%ile | Microsoft | 2026-10-13 |
| CVE-2026-77524 | KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication | CRITICAL | 9.9 | 49%ile | Microsoft | 2026-10-13 |
| CVE-2026-94510 | Microsoft Bookings Elevation of Privilege Vulnerability | CRITICAL | 9.9 | 47%ile | Microsoft | 2026-10-13 |
| CVE-2026-115384 | Wasmtime 39.0.0 before 48.0.4 and 49.0.0 before 49.0.2 Stack Buffer Overflow | CRITICAL | 9.9 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-99100 | wifi: p54: validate firmware record lengths | CRITICAL | 9.8 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-56154 | Apache HTTP Server: mod_rewrite use-after-free via %{LA-U:HTTP:...} | CRITICAL | 9.8 | 45%ile | Microsoft | 2026-10-13 |
| CVE-2026-57941 | Apache HTTP Server: mod_http2 use-after-free / wild write via shared session->bbtmp re-entrancy | CRITICAL | 9.8 | 47%ile | Microsoft | 2026-10-13 |
| CVE-2026-59797 | Apache HTTP Server: mod_ssl SSLRequire allows .htaccess ap_expr file-function | CRITICAL | 9.8 | 42%ile | Microsoft | 2026-10-13 |
| CVE-2026-98167 | smb: client: fix server->total_read for compound encrypted PDUs | CRITICAL | 9.8 | 13%ile | Microsoft | 2026-10-13 |
| CVE-2026-98168 | smb: client: fix reparse buffer bounds in cifs_query_reparse_point() | CRITICAL | 9.8 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-98170 | smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs() | CRITICAL | 9.8 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-98171 | smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs | CRITICAL | 9.8 | 45%ile | Microsoft | 2026-10-13 |
| CVE-2026-98172 | smb: client: fix smbd_connection leak on cifs_get_tcp_session() error | CRITICAL | 9.8 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98174 | smb: client: fix rlist race and missing initialization | CRITICAL | 9.8 | 26%ile | Microsoft | 2026-10-13 |
| CVE-2026-98176 | drm/amdkfd: Avoid integer underflow with ffs in EOP ring size calc | CRITICAL | 9.8 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-98177 | drm/amdkfd: Avoid integer underflow in EOP ring size calculation. | CRITICAL | 9.8 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-98179 | drm/amdgpu: fix rmmio iounmap skipped on device removal | CRITICAL | 9.8 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98180 | drm/msm: RCU-free the scheduler-containing ring and VM objects | CRITICAL | 9.8 | 2%ile | Microsoft | 2026-10-13 |
| CVE-2026-98181 | drm/gud: fix out-of-bounds write in gud_plane_atomic_check() | CRITICAL | 9.8 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98186 | wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length | CRITICAL | 9.8 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98187 | wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST | CRITICAL | 9.8 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98188 | wifi: p54: validate curve data length in the calibration curve converters | CRITICAL | 9.8 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98191 | wifi: wlcore: release runtime PM ref on regdomain config failure | CRITICAL | 9.8 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98192 | wifi: wcn36xx: Fix potential use-after-free in TX ack timer teardown | CRITICAL | 9.8 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98193 | wifi: libipw: reject TKIP frames without a full MIC | CRITICAL | 9.8 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98199 | hwmon: (pmbus/core) increase number of phases and add new mask | CRITICAL | 9.8 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98203 | Input: soc_button_array - check btns_desc->package.count | CRITICAL | 9.8 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98206 | Input: cyttsp5 - clamp the HID report size before memcpy | CRITICAL | 9.8 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98207 | mmc: spi: reset bytes_xfered before retrying CRC failures | CRITICAL | 9.8 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98209 | mmc: sdhci-of-aspeed: Remove children before releasing SDC resources | CRITICAL | 9.8 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-98211 | mmc: mmci: Fix use-after-free in busy-timeout work | CRITICAL | 9.8 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-98212 | mmc: hsq: Fix use-after-free in retry work | CRITICAL | 9.8 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-98214 | selinux: recheck intermediate backing files on mprotect() | CRITICAL | 9.8 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-98215 | selinux: preserve user SID across nested backing files | CRITICAL | 9.8 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-98217 | IB/mlx4: Fix use-after-free on pkey sysfs registration failure | CRITICAL | 9.8 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98221 | KEYS: trusted: Fix tpm2_load_cmd() boundary check | CRITICAL | 9.8 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98222 | KEYS: encrypted: fix integer overflow of datablob_len | CRITICAL | 9.8 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98232 | scsi: core: Validate MODE SENSE lengths in scsi_cdl_enable() | CRITICAL | 9.8 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98233 | net/packet: clear RX owner on VNET header error | CRITICAL | 9.8 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98238 | net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() | CRITICAL | 9.8 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98249 | arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc | CRITICAL | 9.8 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98251 | openvswitch: avoid reallocating confirmed conntrack labels | CRITICAL | 9.8 | 2%ile | Microsoft | 2026-10-13 |
| CVE-2026-98252 | RDMA/core: fix refcount bug in iwpm_get_nlmsg_request() | CRITICAL | 9.8 | 2%ile | Microsoft | 2026-10-13 |
| CVE-2026-98253 | RDMA/ucma: Serialize join and leave on copy_to_user failure | CRITICAL | 9.8 | 2%ile | Microsoft | 2026-10-13 |
| CVE-2026-98254 | swiotlb: use the adjusted address for the highmem page lookup | CRITICAL | 9.8 | 2%ile | Microsoft | 2026-10-13 |
| CVE-2026-98255 | tcp: exclude old ACKs from tcp fast path | CRITICAL | 9.8 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98263 | ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type | CRITICAL | 9.8 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98269 | btrfs: abort transaction on failure to update inode for hole punching and reflinking | CRITICAL | 9.8 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98270 | drm/amdgpu: check ras and obj before dereference | CRITICAL | 9.8 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98272 | net: mvpp2: prevent buffer overflow in page_pool allocation | CRITICAL | 9.8 | 9%ile | Microsoft | 2026-10-13 |
| CVE-2026-98275 | net: ethernet: cortina: Ack RX overrun interrupt correctly | CRITICAL | 9.8 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98279 | btrfs: handle lack of space when cleaning up verity items | CRITICAL | 9.8 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98282 | powerpc/iommu: Fix the overflow validation in iommu_tce_check_ioba | CRITICAL | 9.8 | 2%ile | Microsoft | 2026-10-13 |
| CVE-2026-98283 | KVM: PPC: Book3S HV: fix use-after-free in kvmhv_emulate_tlbie_all_lpid() | CRITICAL | 9.8 | 2%ile | Microsoft | 2026-10-13 |
| CVE-2026-98287 | pppoatm: ensure a writable skb header and linear data | CRITICAL | 9.8 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98288 | net: stmmac: fix TSO header length truncation | CRITICAL | 9.8 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-98289 | af_unix: Unify scc_index when finalising SCC in __unix_walk_scc(). | CRITICAL | 9.8 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98292 | Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access | CRITICAL | 9.8 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-98295 | Bluetooth: coredump: Quiesce dump work on unregister | CRITICAL | 9.8 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98298 | dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() | CRITICAL | 9.8 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-98301 | net: bridge: mst: move switchdev call outside rcu | CRITICAL | 9.8 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-98303 | ipv4: icmp: reject RTN_UNREACHABLE input routes in icmp_route_lookup | CRITICAL | 9.8 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-98304 | net: bcmgenet: restore the hardware filters on open | CRITICAL | 9.8 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98308 | ALSA: hda: trace PCM open only after assigning a stream | CRITICAL | 9.8 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98311 | wifi: virt_wifi: don't transfer operstate before register | CRITICAL | 9.8 | 3%ile | Microsoft | 2026-10-13 |
| CVE-2026-98316 | ALSA: bcd2000: Fix race between rawmidi and disconnect | CRITICAL | 9.8 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98317 | neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS. | CRITICAL | 9.8 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98319 | drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr | CRITICAL | 9.8 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-98320 | netfilter: flowtable: hold reference on ct until flow is released | CRITICAL | 9.8 | 3%ile | Microsoft | 2026-10-13 |
| CVE-2026-98321 | netfilter: nf_nat: unregister and release hooks on error | CRITICAL | 9.8 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98322 | netfilter: nft_nat: fully initialise new_addr in netmap setup | CRITICAL | 9.8 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-98323 | RDMA/siw: Bound fragmented header copies by the remaining length | CRITICAL | 9.8 | 44%ile | Microsoft | 2026-10-13 |
| CVE-2026-98326 | wifi: mac80211: mesh: release the channel if start fails | CRITICAL | 9.8 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-98327 | wifi: mac80211: mesh: reset the CSA state when leaving | CRITICAL | 9.8 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98328 | wifi: mac80211: add HE 6 GHz capability in the scan elems len | CRITICAL | 9.8 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-98329 | wifi: mac80211: don't allow injecting frames wider than the chanctx | CRITICAL | 9.8 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98330 | wifi: cfg80211: get the wiphy out of a dying network namespace | CRITICAL | 9.8 | 2%ile | Microsoft | 2026-10-13 |
| CVE-2026-98331 | wifi: mac80211: unlist vifs when their netdev is unregistered | CRITICAL | 9.8 | 3%ile | Microsoft | 2026-10-13 |
| CVE-2026-98332 | wifi: mac80211: only operate on TDLS peers in the TDLS code | CRITICAL | 9.8 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-98333 | wifi: mac80211: reset the LED state when ifup fails | CRITICAL | 9.8 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-98335 | wifi: mac80211: abort chanswitch when leaving a mesh | CRITICAL | 9.8 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98336 | wifi: mac80211: don't offload TC setup on AP_VLAN interfaces | CRITICAL | 9.8 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98337 | wifi: mac80211: don't start a ROC while scanning | CRITICAL | 9.8 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98338 | wifi: cfg80211: ibss: ref BSS entry for joined event | CRITICAL | 9.8 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-98339 | wifi: cfg80211: don't filter by BSS type when removing stale entries | CRITICAL | 9.8 | 21%ile | Microsoft | 2026-10-13 |
| CVE-2026-98340 | wifi: cfg80211: only group hidden BSSes with beacon entries | CRITICAL | 9.8 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98341 | wifi: cfg80211: don't free driver-owned scan requests | CRITICAL | 9.8 | 2%ile | Microsoft | 2026-10-13 |
| CVE-2026-98345 | wifi: cfg80211: check IP header size in cfg80211_classify8021d() | CRITICAL | 9.8 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98348 | wifi: libipw: reject too-short association responses | CRITICAL | 9.8 | 16%ile | Microsoft | 2026-10-13 |
| CVE-2026-98351 | wifi: virt_wifi: free skb when disconnected | CRITICAL | 9.8 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98352 | RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted | CRITICAL | 9.8 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-98353 | RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables | CRITICAL | 9.8 | 4%ile | Microsoft | 2026-10-13 |
| CVE-2026-98362 | clk: scpi: bound-check DVFS index in scpi_dvfs_recalc_rate | CRITICAL | 9.8 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98363 | firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS | CRITICAL | 9.8 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98365 | RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access | CRITICAL | 9.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-98368 | esp: downgrade zerocopy managed frags before mutating skb frags | CRITICAL | 9.8 | 2%ile | Microsoft | 2026-10-13 |
| CVE-2026-98370 | xfrm: fix compat ALLOCSPI request use-after-free | CRITICAL | 9.8 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-99078 | net/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry | CRITICAL | 9.8 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-99079 | net/mlx5e: Prevent stale XSK buffer release on refill retry | CRITICAL | 9.8 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-100202 | Windows Message Queuing Queue Manager Remote Code Execution Vulnerability | CRITICAL | 9.8 | 66%ile | Microsoft | 2026-10-13 |
| CVE-2026-100219 | Microsoft QUIC Remote Code Execution Vulnerability | CRITICAL | 9.8 | 66%ile | Microsoft | 2026-10-13 |
| CVE-2026-100222 | Network Policy Server (NPS) Remote Code Execution Vulnerability | CRITICAL | 9.8 | 65%ile | Microsoft | 2026-10-13 |
| CVE-2026-102210 | Windows Text Shaping Remote Code Execution Vulnerability | CRITICAL | 9.8 | 62%ile | Microsoft | 2026-10-13 |
| CVE-2026-105010 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | CRITICAL | 9.8 | 62%ile | Microsoft | 2026-10-13 |
| CVE-2026-105016 | Microsoft QUIC Remote Code Execution Vulnerability | CRITICAL | 9.8 | 77%ile | Microsoft | 2026-10-13 |
| CVE-2026-21413 | Raw Image Extension Remote Code Execution Vulnerability | CRITICAL | 9.8 | 72%ile | Microsoft | 2026-10-13 |
| CVE-2026-69634 | Windows iSCSI Remote Code Execution Vulnerability | CRITICAL | 9.8 | 61%ile | Microsoft | 2026-10-13 |
| CVE-2026-69639 | Windows libarchive Remote Code Execution Vulnerability | CRITICAL | 9.8 | 61%ile | Microsoft | 2026-10-13 |
| CVE-2026-69705 | Windows iSCSI Remote Code Execution Vulnerability | CRITICAL | 9.8 | 62%ile | Microsoft | 2026-10-13 |
| CVE-2026-69883 | Windows iSCSI Remote Code Execution Vulnerability | CRITICAL | 9.8 | 61%ile | Microsoft | 2026-10-13 |
| CVE-2026-69886 | Windows Imaging Component Remote Code Execution Vulnerability | CRITICAL | 9.8 | 61%ile | Microsoft | 2026-10-13 |
| CVE-2026-70024 | Windows Internet Information Services Remote Code Execution Vulnerability | CRITICAL | 9.8 | 62%ile | Microsoft | 2026-10-13 |
| CVE-2026-70096 | Windows Rich Text Edit Control Remote Code Execution Vulnerability | CRITICAL | 9.8 | 65%ile | Microsoft | 2026-10-13 |
| CVE-2026-70147 | Microsoft PostScript Printer Driver Remote Code Execution Vulnerability | CRITICAL | 9.8 | 65%ile | Microsoft | 2026-10-13 |
| CVE-2026-70153 | Microsoft PostScript Printer Driver Remote Code Execution Vulnerability | CRITICAL | 9.8 | 65%ile | Microsoft | 2026-10-13 |
| CVE-2026-70157 | Windows System Information Console Remote Code Execution Vulnerability | CRITICAL | 9.8 | 65%ile | Microsoft | 2026-10-13 |
| CVE-2026-70242 | Microsoft Office Outlook Remote Code Execution Vulnerability | CRITICAL | 9.8 | 75%ile | Microsoft | 2026-10-13 |
| CVE-2026-70291 | Microsoft Office Outlook Remote Code Execution Vulnerability | CRITICAL | 9.8 | 71%ile | Microsoft | 2026-10-13 |
| CVE-2026-70300 | Microsoft Office Word Remote Code Execution Vulnerability | CRITICAL | 9.8 | 66%ile | Microsoft | 2026-10-13 |
| CVE-2026-77900 | Azure App Service Remote Code Execution Vulnerability | CRITICAL | 9.8 | 54%ile | Microsoft | 2026-10-13 |
| CVE-2026-83517 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | CRITICAL | 9.8 | 65%ile | Microsoft | 2026-10-13 |
| CVE-2026-83519 | Windows Error Reporting Remote Code Execution Vulnerability | CRITICAL | 9.8 | 65%ile | Microsoft | 2026-10-13 |
| CVE-2026-83578 | Microsoft PowerShell Remote Code Execution Vulnerability | CRITICAL | 9.8 | 65%ile | Microsoft | 2026-10-13 |
| CVE-2026-83693 | Windows Error Reporting Remote Code Execution Vulnerability | CRITICAL | 9.8 | 66%ile | Microsoft | 2026-10-13 |
| CVE-2026-83748 | Windows Error Reporting Remote Code Execution Vulnerability | CRITICAL | 9.8 | 60%ile | Microsoft | 2026-10-13 |
| CVE-2026-83770 | Windows Text Shaping Remote Code Execution Vulnerability | CRITICAL | 9.8 | 66%ile | Microsoft | 2026-10-13 |
| CVE-2026-83780 | Windows CCFFilter Driver Remote Code Execution Vulnerability | CRITICAL | 9.8 | 65%ile | Microsoft | 2026-10-13 |
| CVE-2026-83782 | Windows Shell Remote Code Execution Vulnerability | CRITICAL | 9.8 | 63%ile | Microsoft | 2026-10-13 |
| CVE-2026-83869 | Windows Domain Name Service Remote Code Execution Vulnerability | CRITICAL | 9.8 | 57%ile | Microsoft | 2026-10-13 |
| CVE-2026-83910 | RPC Runtime Library Remote Code Execution Vulnerability | CRITICAL | 9.8 | 65%ile | Microsoft | 2026-10-13 |
| CVE-2026-83935 | Microsoft XML Remote Code Execution Vulnerability | CRITICAL | 9.8 | 60%ile | Microsoft | 2026-10-13 |
| CVE-2026-84015 | Remote Access Point-to-Point Protocol (PPP) EAP-TLS Remote Code Execution Vulnerability | CRITICAL | 9.8 | 59%ile | Microsoft | 2026-10-13 |
| CVE-2026-85792 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | CRITICAL | 9.8 | 59%ile | Microsoft | 2026-10-13 |
| CVE-2026-85806 | Network Policy Server (NPS) Remote Code Execution Vulnerability | CRITICAL | 9.8 | 60%ile | Microsoft | 2026-10-13 |
| CVE-2026-85809 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | CRITICAL | 9.8 | 60%ile | Microsoft | 2026-10-13 |
| CVE-2026-85814 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | CRITICAL | 9.8 | 60%ile | Microsoft | 2026-10-13 |
| CVE-2026-85928 | Windows Volume Manager Extension Driver Remote Code Execution Vulnerability | CRITICAL | 9.8 | 50%ile | Microsoft | 2026-10-13 |
| CVE-2026-88102 | Microsoft Failover Cluster Remote Code Execution Vulnerability | CRITICAL | 9.8 | 50%ile | Microsoft | 2026-10-13 |
| CVE-2026-88131 | Microsoft Dataverse Remote Code Execution Vulnerability | CRITICAL | 9.8 | 69%ile | Microsoft | 2026-10-13 |
| CVE-2026-88156 | Microsoft Office Outlook Remote Code Execution Vulnerability | CRITICAL | 9.8 | 68%ile | Microsoft | 2026-10-13 |
| CVE-2026-88178 | Microsoft Office PowerPoint Remote Code Execution Vulnerability | CRITICAL | 9.8 | 62%ile | Microsoft | 2026-10-13 |
| CVE-2026-96096 | Windows Media Player Remote Code Execution Vulnerability | CRITICAL | 9.8 | 52%ile | Microsoft | 2026-10-13 |
| CVE-2026-96113 | Windows Domain Name Service Remote Code Execution Vulnerability | CRITICAL | 9.8 | 59%ile | Microsoft | 2026-10-13 |
| CVE-2026-96219 | Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability | CRITICAL | 9.8 | 59%ile | Microsoft | 2026-10-13 |
| CVE-2026-96320 | Windows DHCP Server Remote Code Execution Vulnerability | CRITICAL | 9.8 | 64%ile | Microsoft | 2026-10-13 |
| CVE-2026-96864 | Microsoft Failover Cluster Virtual Driver Remote Code Execution Vulnerability | CRITICAL | 9.8 | 50%ile | Microsoft | 2026-10-13 |
| CVE-2026-96909 | Windows BitLocker Remote Code Execution Vulnerability | CRITICAL | 9.8 | 62%ile | Microsoft | 2026-10-13 |
| CVE-2026-96924 | Windows OLE Remote Code Execution Vulnerability | CRITICAL | 9.8 | 63%ile | Microsoft | 2026-10-13 |
| CVE-2026-96934 | Windows DHCP Server Remote Code Execution Vulnerability | CRITICAL | 9.8 | 61%ile | Microsoft | 2026-10-13 |
| CVE-2026-97016 | Microsoft Office Outlook Remote Code Execution Vulnerability | CRITICAL | 9.8 | 68%ile | Microsoft | 2026-10-13 |
| CVE-2026-97749 | Microsoft Office Outlook Remote Code Execution Vulnerability | CRITICAL | 9.8 | 68%ile | Microsoft | 2026-10-13 |
| CVE-2026-97805 | Windows Partition Management Driver Remote Code Execution Vulnerability | CRITICAL | 9.8 | 64%ile | Microsoft | 2026-10-13 |
| CVE-2026-97814 | Windows Text Shaping Remote Code Execution Vulnerability | CRITICAL | 9.8 | 65%ile | Microsoft | 2026-10-13 |
| CVE-2026-97815 | Windows Error Reporting Remote Code Execution Vulnerability | CRITICAL | 9.8 | 59%ile | Microsoft | 2026-10-13 |
| CVE-2026-97816 | Microsoft OpenSSH for Windows Remote Code Execution Vulnerability | CRITICAL | 9.8 | 63%ile | Microsoft | 2026-10-13 |
| CVE-2026-111444 | Wheels through 4.1.2 allows SQL injection on MySQL/MariaDB with backslash escaping enabled (NO_BACKSLASH_ESCAPES absent) | CRITICAL | 9.8 | 25%ile | Microsoft | 2026-10-13 |
| CVE-2026-56857 | Root.Mkdir(All) can follow junctions out of the root on Windows in os | CRITICAL | 9.8 | 46%ile | Microsoft | 2026-10-13 |
| CVE-2026-102238 | Visual Studio Code Remote Code Execution Vulnerability | CRITICAL | 9.6 | 57%ile | Microsoft | 2026-10-13 |
| CVE-2026-102304 | Chromium CVE-2026-102304: Use after free | CRITICAL | 9.6 | 25%ile | Microsoft | 2026-10-13 |
| CVE-2026-102306 | Chromium CVE-2026-102306: Use after free | CRITICAL | 9.6 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-102308 | Chromium CVE-2026-102308: Use after free | CRITICAL | 9.6 | 25%ile | Microsoft | 2026-10-13 |
| CVE-2026-102309 | Chromium CVE-2026-102309: Use after free | CRITICAL | 9.6 | 25%ile | Microsoft | 2026-10-13 |
| CVE-2026-102316 | Chromium CVE-2026-102316: Use after free | CRITICAL | 9.6 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-102322 | Chromium CVE-2026-102322: Incorrect Authorization | CRITICAL | 9.6 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-102331 | Chromium CVE-2026-102331: Buffer overflow | CRITICAL | 9.6 | 39%ile | Microsoft | 2026-10-13 |
| CVE-2026-106197 | Chromium CVE-2026-106197: Use after free | CRITICAL | 9.6 | 47%ile | Microsoft | 2026-10-13 |
| CVE-2026-106211 | Chromium CVE-2026-106211: Use after free | CRITICAL | 9.6 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-106227 | Chromium CVE-2026-106227: Use after free | CRITICAL | 9.6 | 39%ile | Microsoft | 2026-10-13 |
| CVE-2026-106234 | Chromium CVE-2026-106234: Use after free | CRITICAL | 9.6 | 25%ile | Microsoft | 2026-10-13 |
| CVE-2026-106237 | Chromium CVE-2026-106237: Information leak | CRITICAL | 9.6 | 16%ile | Microsoft | 2026-10-13 |
| CVE-2026-106239 | Chromium CVE-2026-106239: Integer overflow | CRITICAL | 9.6 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-106241 | Chromium CVE-2026-106241: Incorrect authorization | CRITICAL | 9.6 | 26%ile | Microsoft | 2026-10-13 |
| CVE-2026-106281 | Chromium CVE-2026-106281: Use after free | CRITICAL | 9.6 | 28%ile | Microsoft | 2026-10-13 |
| CVE-2026-106329 | Chromium CVE-2026-106329: Incorrect authorization | CRITICAL | 9.6 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-106358 | Chromium CVE-2026-106358: Use after free | CRITICAL | 9.6 | 47%ile | Microsoft | 2026-10-13 |
| CVE-2026-106375 | Chromium CVE-2026-106375: Incomplete cleanup | CRITICAL | 9.6 | 35%ile | Microsoft | 2026-10-13 |
| CVE-2026-106382 | Chromium CVE-2026-106382: Use after free | CRITICAL | 9.6 | 34%ile | Microsoft | 2026-10-13 |
| CVE-2026-106401 | Chromium CVE-2026-106401: Out of bounds write | CRITICAL | 9.6 | 27%ile | Microsoft | 2026-10-13 |
| CVE-2026-106417 | Chromium CVE-2026-106417: Integer overflow | CRITICAL | 9.6 | 27%ile | Microsoft | 2026-10-13 |
| CVE-2026-110136 | Chromium CVE-2026-110136: Use after free | CRITICAL | 9.6 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-110142 | Chromium CVE-2026-110142: Use after free | CRITICAL | 9.6 | 26%ile | Microsoft | 2026-10-13 |
| CVE-2026-110144 | Chromium CVE-2026-110144: Incorrect authorization | CRITICAL | 9.6 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-110149 | Chromium CVE-2026-110149: Use after free | CRITICAL | 9.6 | 35%ile | Microsoft | 2026-10-13 |
| CVE-2026-110152 | Chromium CVE-2026-110152: Buffer overflow | CRITICAL | 9.6 | 44%ile | Microsoft | 2026-10-13 |
| CVE-2026-110159 | Chromium CVE-2026-110159: Incorrect authorization | CRITICAL | 9.6 | 16%ile | Microsoft | 2026-10-13 |
| CVE-2026-110161 | Chromium CVE-2026-110161: Use after free | CRITICAL | 9.6 | 35%ile | Microsoft | 2026-10-13 |
| CVE-2026-110165 | Chromium CVE-2026-110165: Use after free | CRITICAL | 9.6 | 33%ile | Microsoft | 2026-10-13 |
| CVE-2026-112992 | Chromium CVE-2026-112992: Memory corruption | CRITICAL | 9.6 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-113007 | Chromium CVE-2026-113007: Memory corruption | CRITICAL | 9.6 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-113014 | Chromium CVE-2026-113014: Use after free | CRITICAL | 9.6 | 42%ile | Microsoft | 2026-10-13 |
| CVE-2026-113020 | Chromium CVE-2026-113020: Improper input validation | CRITICAL | 9.6 | 42%ile | Microsoft | 2026-10-13 |
| CVE-2026-113023 | Chromium CVE-2026-113023: Improper input validation | CRITICAL | 9.6 | 42%ile | Microsoft | 2026-10-13 |
| CVE-2026-113056 | Chromium CVE-2026-113056: Memory corruption | CRITICAL | 9.6 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-113072 | Chromium CVE-2026-113072: Memory corruption | CRITICAL | 9.6 | 46%ile | Microsoft | 2026-10-13 |
| CVE-2026-113078 | Chromium CVE-2026-113078: Improper input validation | CRITICAL | 9.6 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-113084 | Chromium CVE-2026-113084: Improper input validation | CRITICAL | 9.6 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-113089 | Chromium CVE-2026-113089: Improper input validation | CRITICAL | 9.6 | 42%ile | Microsoft | 2026-10-13 |
| CVE-2026-113116 | Chromium CVE-2026-113116: Use after free | CRITICAL | 9.6 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-113126 | Chromium CVE-2026-113126: Memory corruption | CRITICAL | 9.6 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-113138 | Chromium CVE-2026-113138: Memory corruption | CRITICAL | 9.6 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-113169 | Chromium CVE-2026-113169: Memory corruption | CRITICAL | 9.6 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-113171 | Chromium CVE-2026-113171: Memory corruption | CRITICAL | 9.6 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-113186 | Chromium CVE-2026-113186: Memory corruption | CRITICAL | 9.6 | 41%ile | Microsoft | 2026-10-13 |
| CVE-2026-113189 | Chromium CVE-2026-113189: Use after free | CRITICAL | 9.6 | 41%ile | Microsoft | 2026-10-13 |
| CVE-2026-113211 | Chromium CVE-2026-113211: Memory corruption | CRITICAL | 9.6 | 39%ile | Microsoft | 2026-10-13 |
| CVE-2026-113222 | Chromium CVE-2026-113222: Use after free | CRITICAL | 9.6 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-113235 | Chromium CVE-2026-113235: Improper input validation | CRITICAL | 9.6 | 42%ile | Microsoft | 2026-10-13 |
| CVE-2026-113252 | Chromium CVE-2026-113252: Improper input validation | CRITICAL | 9.6 | 42%ile | Microsoft | 2026-10-13 |
| CVE-2026-113261 | Chromium CVE-2026-113261: Use after free | CRITICAL | 9.6 | 41%ile | Microsoft | 2026-10-13 |
| CVE-2026-113263 | Chromium CVE-2026-113263: Use after free | CRITICAL | 9.6 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-113270 | Chromium CVE-2026-113270: Use after free | CRITICAL | 9.6 | 41%ile | Microsoft | 2026-10-13 |
| CVE-2026-113283 | Chromium CVE-2026-113283: Memory corruption | CRITICAL | 9.6 | 41%ile | Microsoft | 2026-10-13 |
| CVE-2026-113300 | Chromium CVE-2026-113300: Out of bounds write | CRITICAL | 9.6 | 42%ile | Microsoft | 2026-10-13 |
| CVE-2026-113328 | Chromium CVE-2026-113328: Improper input validation | CRITICAL | 9.6 | 42%ile | Microsoft | 2026-10-13 |
| CVE-2026-113336 | Chromium CVE-2026-113336: Memory corruption | CRITICAL | 9.6 | 42%ile | Microsoft | 2026-10-13 |
| CVE-2026-113342 | Chromium CVE-2026-113342: Memory corruption | CRITICAL | 9.6 | 41%ile | Microsoft | 2026-10-13 |
| CVE-2026-69435 | Azure SRE Agent Elevation of Privilege Vulnerability | CRITICAL | 9.6 | 46%ile | Microsoft | 2026-10-13 |
| CVE-2026-56153 | Apache HTTP Server: mod_charset_lite: Heap overflow in finish_partial_char | CRITICAL | 9.4 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-98573 | net: skbuff: fix pull-bound underflow in skb_checksum_setup_ipv6() | CRITICAL | 9.4 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-88092 | ASP.NET Core Tampering Vulnerability | CRITICAL | 9.4 | 61%ile | Microsoft | 2026-10-13 |
| CVE-2026-99999 | ipv4: validate checksum_start before completing checksum | CRITICAL | 9.3 | 56%ile | Microsoft | 2026-10-13 |
| CVE-2026-70279 | Microsoft Exchange Server Spoofing Vulnerability | CRITICAL | 9.3 | 70%ile | Microsoft | 2026-10-13 |
| CVE-2026-78663 | Double flow control refund on HTTP/2 server streams in net/http | CRITICAL | 9.1 | 50%ile | Microsoft | 2026-10-13 |
| CVE-2026-98621 | net: gue: reject invalid REMCSUM offsets | CRITICAL | 9.1 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-98794 | ipvs: filter some flags received in the backup server | CRITICAL | 9.1 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-105014 | Azure Pipelines Remote Code Execution Vulnerability | CRITICAL | 9.1 | 52%ile | Microsoft | 2026-10-13 |
| CVE-2026-106195 | Chromium CVE-2026-106195: Incorrect authorization | CRITICAL | 9.1 | 25%ile | Microsoft | 2026-10-13 |
| CVE-2026-70188 | ASP.NET Core Security Feature Bypass Vulnerability | CRITICAL | 9.1 | 61%ile | Microsoft | 2026-10-13 |
| CVE-2026-96252 | Active Directory Federation Services (AD FS) Spoofing Vulnerability | CRITICAL | 9.1 | 47%ile | Microsoft | 2026-10-13 |
| CVE-2026-91403 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE | CRITICAL | 9.1 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-98725 | nvmet-auth: fix out-of-bounds write in nvmet_auth_challenge() | CRITICAL | 9.1 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-105008 | Windows Schannel Spoofing Vulnerability | CRITICAL | 9.0 | 52%ile | Microsoft | 2026-10-13 |
| CVE-2026-85818 | Windows Schannel Spoofing Vulnerability | CRITICAL | 9.0 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-107350 | Authentication bypass via second StartupMessage during SCRAM authentication in PgBouncer | HIGH | 8.8 | 31%ile | Microsoft | 2026-10-13 |
| CVE-2026-86567 | Dpdk: dpdk: vduse handler fails to invalidate vring pointers when iotlb is invalidated, leading to use-after-unmap | HIGH | 8.8 | 4%ile | Microsoft | 2026-10-13 |
| CVE-2026-89091 | Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code exe | HIGH | 8.8 | 41%ile | Microsoft | 2026-10-13 |
| CVE-2026-93546 | Apache HTTP Server: mod_dav_fs namespace overflow | HIGH | 8.8 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-98981 | namespace: unhash a dentry before detaching the mounts on it | HIGH | 8.8 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-99082 | KVM: x86: Use active memslots for the per-vCPU MMIO cache | HIGH | 8.8 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-100209 | Microsoft Office Excel Remote Code Execution Vulnerability | HIGH | 8.8 | 61%ile | Microsoft | 2026-10-13 |
| CVE-2026-100210 | Microsoft Office Excel Remote Code Execution Vulnerability | HIGH | 8.8 | 61%ile | Microsoft | 2026-10-13 |
| CVE-2026-100211 | Microsoft Office Excel Remote Code Execution Vulnerability | HIGH | 8.8 | 61%ile | Microsoft | 2026-10-13 |
| CVE-2026-100212 | Microsoft Office Excel Remote Code Execution Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-10-13 |
| CVE-2026-100214 | Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability | HIGH | 8.8 | 81%ile | Microsoft | 2026-10-13 |
| CVE-2026-100220 | Windows Media Video Decoder Remote Code Execution Vulnerability | HIGH | 8.8 | 61%ile | Microsoft | 2026-10-13 |
| CVE-2026-102203 | RPC Runtime Remote Code Execution Vulnerability | HIGH | 8.8 | 58%ile | Microsoft | 2026-10-13 |
| CVE-2026-102214 | Windows Hyper-V Remote Code Execution Vulnerability | HIGH | 8.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-102217 | WebDAV Elevation of Privilege Vulnerability | HIGH | 8.8 | 70%ile | Microsoft | 2026-10-13 |
| CVE-2026-102225 | Windows Text Shaping Remote Code Execution Vulnerability | HIGH | 8.8 | 59%ile | Microsoft | 2026-10-13 |
| CVE-2026-102226 | Dynamics Business Central Elevation of Privilege Vulnerability | HIGH | 8.8 | 64%ile | Microsoft | 2026-10-13 |
| CVE-2026-102235 | Visual Studio Code Remote Code Execution Vulnerability | HIGH | 8.8 | 54%ile | Microsoft | 2026-10-13 |
| CVE-2026-102299 | Chromium CVE-2026-102299: Type confusion | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-102302 | Chromium CVE-2026-102302: Buffer overflow | HIGH | 8.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-102321 | Chromium CVE-2026-102321: Type confusion | HIGH | 8.8 | 27%ile | Microsoft | 2026-10-13 |
| CVE-2026-102323 | Chromium CVE-2026-102323: Type confusion | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-102326 | Chromium CVE-2026-102326: Type confusion | HIGH | 8.8 | 26%ile | Microsoft | 2026-10-13 |
| CVE-2026-102328 | Chromium CVE-2026-102328: Type confusion | HIGH | 8.8 | 26%ile | Microsoft | 2026-10-13 |
| CVE-2026-102849 | Microsoft Office Access Remote Code Execution Vulnerability | HIGH | 8.8 | 56%ile | Microsoft | 2026-10-13 |
| CVE-2026-102850 | Microsoft Office Access Remote Code Execution Vulnerability | HIGH | 8.8 | 56%ile | Microsoft | 2026-10-13 |
| CVE-2026-102855 | Microsoft Office Visio Remote Code Execution Vulnerability | HIGH | 8.8 | 56%ile | Microsoft | 2026-10-13 |
| CVE-2026-102856 | Microsoft Office Visio Remote Code Execution Vulnerability | HIGH | 8.8 | 59%ile | Microsoft | 2026-10-13 |
| CVE-2026-102857 | Microsoft Office Visio Remote Code Execution Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-10-13 |
| CVE-2026-102858 | Microsoft Office OneNote Remote Code Execution Vulnerability | HIGH | 8.8 | 58%ile | Microsoft | 2026-10-13 |
| CVE-2026-102860 | Microsoft Office SharePoint Elevation of Privilege Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-10-13 |
| CVE-2026-102861 | Microsoft Office SharePoint Elevation of Privilege Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-10-13 |
| CVE-2026-102862 | Microsoft Office SharePoint Elevation of Privilege Vulnerability | HIGH | 8.8 | 56%ile | Microsoft | 2026-10-13 |
| CVE-2026-102863 | Microsoft Office SharePoint Elevation of Privilege Vulnerability | HIGH | 8.8 | 64%ile | Microsoft | 2026-10-13 |
| CVE-2026-102869 | .NET and Visual Studio Elevation of Privilege Vulnerability | HIGH | 8.8 | 58%ile | Microsoft | 2026-10-13 |
| CVE-2026-102870 | ASP.NET Core Remote Code Execution Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-10-13 |
| CVE-2026-103572 | Visual Studio Tools for Applications and SQL Server Management Studio Remote Code Execution Vulnerability | HIGH | 8.8 | 63%ile | Microsoft | 2026-10-13 |
| CVE-2026-103575 | Remote Desktop Client Remote Code Execution Vulnerability | HIGH | 8.8 | 58%ile | Microsoft | 2026-10-13 |
| CVE-2026-105007 | Windows NDIS Elevation of Privilege Vulnerability | HIGH | 8.8 | 58%ile | Microsoft | 2026-10-13 |
| CVE-2026-105591 | Microsoft Office Access Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-10-13 |
| CVE-2026-105593 | Microsoft Office Access Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-10-13 |
| CVE-2026-105595 | Microsoft Office Access Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-10-13 |
| CVE-2026-105596 | Microsoft Office Access Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-10-13 |
| CVE-2026-105597 | Microsoft Office Access Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-10-13 |
| CVE-2026-105598 | Microsoft Office Access Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-10-13 |
| CVE-2026-105716 | Microsoft Office Access Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-10-13 |
| CVE-2026-105717 | Microsoft Office Access Remote Code Execution Vulnerability | HIGH | 8.8 | 59%ile | Microsoft | 2026-10-13 |
| CVE-2026-105718 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 8.8 | 61%ile | Microsoft | 2026-10-13 |
| CVE-2026-105727 | Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability | HIGH | 8.8 | 64%ile | Microsoft | 2026-10-13 |
| CVE-2026-105733 | Windows Hyper-V Remote Code Execution Vulnerability | HIGH | 8.8 | 26%ile | Microsoft | 2026-10-13 |
| CVE-2026-106190 | Chromium CVE-2026-106190: Use after free | HIGH | 8.8 | 31%ile | Microsoft | 2026-10-13 |
| CVE-2026-106193 | Chromium CVE-2026-106193: Use after free | HIGH | 8.8 | 34%ile | Microsoft | 2026-10-13 |
| CVE-2026-106200 | Chromium CVE-2026-106200: Use after free | HIGH | 8.8 | 33%ile | Microsoft | 2026-10-13 |
| CVE-2026-106201 | Chromium CVE-2026-106201: Race condition | HIGH | 8.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-106203 | Chromium CVE-2026-106203: Incomplete cleanup | HIGH | 8.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-106204 | Chromium CVE-2026-106204: Use after free | HIGH | 8.8 | 30%ile | Microsoft | 2026-10-13 |
| CVE-2026-106207 | Chromium CVE-2026-106207: Race condition | HIGH | 8.8 | 27%ile | Microsoft | 2026-10-13 |
| CVE-2026-106212 | Chromium CVE-2026-106212: Incorrect authorization | HIGH | 8.8 | 27%ile | Microsoft | 2026-10-13 |
| CVE-2026-106220 | Chromium CVE-2026-106220: Information leak | HIGH | 8.8 | 26%ile | Microsoft | 2026-10-13 |
| CVE-2026-106225 | Chromium CVE-2026-106225: Missing authorization | HIGH | 8.8 | 25%ile | Microsoft | 2026-10-13 |
| CVE-2026-106235 | Chromium CVE-2026-106235: Use after free | HIGH | 8.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-106240 | Chromium CVE-2026-106240: Type confusion | HIGH | 8.8 | 46%ile | Microsoft | 2026-10-13 |
| CVE-2026-106248 | Chromium CVE-2026-106248: Use after free | HIGH | 8.8 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-106249 | Chromium CVE-2026-106249: Incorrect authorization | HIGH | 8.8 | 16%ile | Microsoft | 2026-10-13 |
| CVE-2026-106252 | Chromium CVE-2026-106252: Incorrect comparison | HIGH | 8.8 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-106255 | Chromium CVE-2026-106255: Race condition | HIGH | 8.8 | 15%ile | Microsoft | 2026-10-13 |
| CVE-2026-106256 | Chromium CVE-2026-106256: Information leak | HIGH | 8.8 | 18%ile | Microsoft | 2026-10-13 |
| CVE-2026-106257 | Chromium CVE-2026-106257: Use after free | HIGH | 8.8 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-106268 | Chromium CVE-2026-106268: Use after free | HIGH | 8.8 | 33%ile | Microsoft | 2026-10-13 |
| CVE-2026-106269 | Chromium CVE-2026-106269: Use after free | HIGH | 8.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-106274 | Chromium CVE-2026-106274: Incorrect reference resolution | HIGH | 8.8 | 21%ile | Microsoft | 2026-10-13 |
| CVE-2026-106278 | Chromium CVE-2026-106278: Use after free | HIGH | 8.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-106283 | Chromium CVE-2026-106283: Use after free | HIGH | 8.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-106291 | Chromium CVE-2026-106291: Use after free | HIGH | 8.8 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-106308 | Chromium CVE-2026-106308: Incorrect reference resolution | HIGH | 8.8 | 21%ile | Microsoft | 2026-10-13 |
| CVE-2026-106309 | Chromium CVE-2026-106309: Incorrect authorization | HIGH | 8.8 | 16%ile | Microsoft | 2026-10-13 |
| CVE-2026-106314 | Chromium CVE-2026-106314: Incorrect authorization | HIGH | 8.8 | 16%ile | Microsoft | 2026-10-13 |
| CVE-2026-106315 | Chromium CVE-2026-106315: Use after free | HIGH | 8.8 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-106318 | Chromium CVE-2026-106318: Use after free | HIGH | 8.8 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-106334 | Chromium CVE-2026-106334: Information leak | HIGH | 8.8 | 21%ile | Microsoft | 2026-10-13 |
| CVE-2026-106335 | Chromium CVE-2026-106335: Use after free | HIGH | 8.8 | 26%ile | Microsoft | 2026-10-13 |
| CVE-2026-106341 | Chromium CVE-2026-106341: Type confusion | HIGH | 8.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-106342 | Chromium CVE-2026-106342: Information leak | HIGH | 8.8 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-106346 | Chromium CVE-2026-106346: Improper state validation | HIGH | 8.8 | 26%ile | Microsoft | 2026-10-13 |
| CVE-2026-106347 | Chromium CVE-2026-106347: Use after free | HIGH | 8.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-106349 | Chromium CVE-2026-106349: Use after free | HIGH | 8.8 | 26%ile | Microsoft | 2026-10-13 |
| CVE-2026-106350 | Chromium CVE-2026-106350: Incorrect authorization | HIGH | 8.8 | 21%ile | Microsoft | 2026-10-13 |
| CVE-2026-106352 | Chromium CVE-2026-106352: Incorrect authorization | HIGH | 8.8 | 28%ile | Microsoft | 2026-10-13 |
| CVE-2026-106357 | Chromium CVE-2026-106357: Use after free | HIGH | 8.8 | 44%ile | Microsoft | 2026-10-13 |
| CVE-2026-106371 | Chromium CVE-2026-106371: Incorrect authorization | HIGH | 8.8 | 16%ile | Microsoft | 2026-10-13 |
| CVE-2026-106373 | Chromium CVE-2026-106373: Use after free | HIGH | 8.8 | 25%ile | Microsoft | 2026-10-13 |
| CVE-2026-106374 | Chromium CVE-2026-106374: Type confusion | HIGH | 8.8 | 30%ile | Microsoft | 2026-10-13 |
| CVE-2026-106383 | Chromium CVE-2026-106383: Use after free | HIGH | 8.8 | 27%ile | Microsoft | 2026-10-13 |
| CVE-2026-106411 | Chromium CVE-2026-106411: Use after free | HIGH | 8.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-106421 | Chromium CVE-2026-106421: Use after free | HIGH | 8.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-106423 | Chromium CVE-2026-106423: Use after free | HIGH | 8.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-108398 | .NET Framework Security Feature Bypass Vulnerability | HIGH | 8.8 | 56%ile | Microsoft | 2026-10-13 |
| CVE-2026-108400 | HEVC Video Extensions Remote Code Execution Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-10-13 |
| CVE-2026-108426 | Microsoft Office Word Remote Code Execution Vulnerability | HIGH | 8.8 | 49%ile | Microsoft | 2026-10-13 |
| CVE-2026-108427 | Microsoft Office Word Remote Code Execution Vulnerability | HIGH | 8.8 | 50%ile | Microsoft | 2026-10-13 |
| CVE-2026-108428 | Microsoft Office Word Remote Code Execution Vulnerability | HIGH | 8.8 | 50%ile | Microsoft | 2026-10-13 |
| CVE-2026-108429 | Microsoft Office Word Remote Code Execution Vulnerability | HIGH | 8.8 | 50%ile | Microsoft | 2026-10-13 |
| CVE-2026-108430 | Microsoft Office Word Remote Code Execution Vulnerability | HIGH | 8.8 | 50%ile | Microsoft | 2026-10-13 |
| CVE-2026-108431 | Microsoft Office Word Remote Code Execution Vulnerability | HIGH | 8.8 | 50%ile | Microsoft | 2026-10-13 |
| CVE-2026-108432 | Microsoft Office Word Remote Code Execution Vulnerability | HIGH | 8.8 | 50%ile | Microsoft | 2026-10-13 |
| CVE-2026-108437 | Microsoft Office Word Remote Code Execution Vulnerability | HIGH | 8.8 | 50%ile | Microsoft | 2026-10-13 |
| CVE-2026-108439 | Microsoft Office Word Remote Code Execution Vulnerability | HIGH | 8.8 | 50%ile | Microsoft | 2026-10-13 |
| CVE-2026-108440 | Microsoft Office Word Remote Code Execution Vulnerability | HIGH | 8.8 | 50%ile | Microsoft | 2026-10-13 |
| CVE-2026-108441 | Microsoft Office Word Remote Code Execution Vulnerability | HIGH | 8.8 | 50%ile | Microsoft | 2026-10-13 |
| CVE-2026-108442 | Microsoft Office Word Remote Code Execution Vulnerability | HIGH | 8.8 | 50%ile | Microsoft | 2026-10-13 |
| CVE-2026-108443 | Microsoft Office Word Remote Code Execution Vulnerability | HIGH | 8.8 | 50%ile | Microsoft | 2026-10-13 |
| CVE-2026-108444 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 8.8 | 50%ile | Microsoft | 2026-10-13 |
| CVE-2026-108445 | Microsoft Office Word Remote Code Execution Vulnerability | HIGH | 8.8 | 50%ile | Microsoft | 2026-10-13 |
| CVE-2026-108446 | Microsoft Office Excel Remote Code Execution Vulnerability | HIGH | 8.8 | 50%ile | Microsoft | 2026-10-13 |
| CVE-2026-108447 | Microsoft Office Word Remote Code Execution Vulnerability | HIGH | 8.8 | 50%ile | Microsoft | 2026-10-13 |
| CVE-2026-108449 | Microsoft Office Word Remote Code Execution Vulnerability | HIGH | 8.8 | 50%ile | Microsoft | 2026-10-13 |
| CVE-2026-108450 | Microsoft Office Word Remote Code Execution Vulnerability | HIGH | 8.8 | 50%ile | Microsoft | 2026-10-13 |
| CVE-2026-108451 | Microsoft Office Word Remote Code Execution Vulnerability | HIGH | 8.8 | 50%ile | Microsoft | 2026-10-13 |
| CVE-2026-108452 | Microsoft Office SharePoint Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-10-13 |
| CVE-2026-108458 | Remote Desktop Client Remote Code Execution Vulnerability | HIGH | 8.8 | 58%ile | Microsoft | 2026-10-13 |
| CVE-2026-108463 | Windows SmartScreen Security Feature Bypass Vulnerability | HIGH | 8.8 | 62%ile | Microsoft | 2026-10-13 |
| CVE-2026-108467 | Microsoft PostScript Printer Driver Remote Code Execution Vulnerability | HIGH | 8.8 | 63%ile | Microsoft | 2026-10-13 |
| CVE-2026-108471 | Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability | HIGH | 8.8 | 31%ile | Microsoft | 2026-10-13 |
| CVE-2026-110137 | Chromium CVE-2026-110137: Use after free | HIGH | 8.8 | 31%ile | Microsoft | 2026-10-13 |
| CVE-2026-110139 | Chromium CVE-2026-110139: Use after free | HIGH | 8.8 | 22%ile | Microsoft | 2026-10-13 |
| CVE-2026-110140 | Chromium CVE-2026-110140: Type confusion | HIGH | 8.8 | 25%ile | Microsoft | 2026-10-13 |
| CVE-2026-110147 | Chromium CVE-2026-110147: Use after free | HIGH | 8.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-110148 | Chromium CVE-2026-110148: Use after free | HIGH | 8.8 | 30%ile | Microsoft | 2026-10-13 |
| CVE-2026-110151 | Chromium CVE-2026-110151: Use after free | HIGH | 8.8 | 30%ile | Microsoft | 2026-10-13 |
| CVE-2026-110153 | Chromium CVE-2026-110153: Use after free | HIGH | 8.8 | 22%ile | Microsoft | 2026-10-13 |
| CVE-2026-110154 | Chromium CVE-2026-110154: Use after free | HIGH | 8.8 | 22%ile | Microsoft | 2026-10-13 |
| CVE-2026-110155 | Chromium CVE-2026-110155: Buffer overflow | HIGH | 8.8 | 26%ile | Microsoft | 2026-10-13 |
| CVE-2026-110157 | Chromium CVE-2026-110157: Use after free | HIGH | 8.8 | 25%ile | Microsoft | 2026-10-13 |
| CVE-2026-110162 | Chromium CVE-2026-110162: Use after free | HIGH | 8.8 | 25%ile | Microsoft | 2026-10-13 |
| CVE-2026-110163 | Chromium CVE-2026-110163: Use after free | HIGH | 8.8 | 25%ile | Microsoft | 2026-10-13 |
| CVE-2026-110164 | Chromium CVE-2026-110164: Use after free | HIGH | 8.8 | 18%ile | Microsoft | 2026-10-13 |
| CVE-2026-110166 | Chromium CVE-2026-110166: Buffer overflow | HIGH | 8.8 | 22%ile | Microsoft | 2026-10-13 |
| CVE-2026-110167 | Chromium CVE-2026-110167: Use after free | HIGH | 8.8 | 18%ile | Microsoft | 2026-10-13 |
| CVE-2026-110168 | Chromium CVE-2026-110168: Use after free | HIGH | 8.8 | 18%ile | Microsoft | 2026-10-13 |
| CVE-2026-110169 | Chromium CVE-2026-110169: Use after free | HIGH | 8.8 | 18%ile | Microsoft | 2026-10-13 |
| CVE-2026-110171 | Chromium CVE-2026-110171: Use after free | HIGH | 8.8 | 18%ile | Microsoft | 2026-10-13 |
| CVE-2026-110172 | Chromium CVE-2026-110172: Use after free | HIGH | 8.8 | 18%ile | Microsoft | 2026-10-13 |
| CVE-2026-112993 | Chromium CVE-2026-112993: Use after free | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-112994 | Chromium CVE-2026-112994: Memory corruption | HIGH | 8.8 | 44%ile | Microsoft | 2026-10-13 |
| CVE-2026-112995 | Chromium CVE-2026-112995: Use after free | HIGH | 8.8 | 35%ile | Microsoft | 2026-10-13 |
| CVE-2026-112996 | Chromium CVE-2026-112996: Memory corruption | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-112997 | Chromium CVE-2026-112997: Memory corruption | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-112998 | Chromium CVE-2026-112998: Memory corruption | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-112999 | Chromium CVE-2026-112999: Use after free | HIGH | 8.8 | 31%ile | Microsoft | 2026-10-13 |
| CVE-2026-113000 | Chromium CVE-2026-113000: Memory corruption | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113001 | Chromium CVE-2026-113001: Use after free | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113003 | Chromium CVE-2026-113003: Memory corruption | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113004 | Chromium CVE-2026-113004: Memory corruption | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113005 | Chromium CVE-2026-113005: Memory corruption | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113006 | Chromium CVE-2026-113006: Out of bounds read | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113008 | Chromium CVE-2026-113008: Memory corruption | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113009 | Chromium CVE-2026-113009: Use after free | HIGH | 8.8 | 35%ile | Microsoft | 2026-10-13 |
| CVE-2026-113011 | Chromium CVE-2026-113011: Use after free | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113012 | Chromium CVE-2026-113012: Improper input validation | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113013 | Chromium CVE-2026-113013: Memory corruption | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113015 | Chromium CVE-2026-113015: Use after free | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113016 | Chromium CVE-2026-113016: Improper input validation | HIGH | 8.8 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-113017 | Chromium CVE-2026-113017: Use after free | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113018 | Chromium CVE-2026-113018: Memory corruption | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113019 | Chromium CVE-2026-113019: Use after free | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113021 | Chromium CVE-2026-113021: Use after free | HIGH | 8.8 | 47%ile | Microsoft | 2026-10-13 |
| CVE-2026-113022 | Chromium CVE-2026-113022: Memory corruption | HIGH | 8.8 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-113024 | Chromium CVE-2026-113024: Use after free | HIGH | 8.8 | 47%ile | Microsoft | 2026-10-13 |
| CVE-2026-113025 | Chromium CVE-2026-113025: Use after free | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113027 | Chromium CVE-2026-113027: Memory corruption | HIGH | 8.8 | 47%ile | Microsoft | 2026-10-13 |
| CVE-2026-113028 | Chromium CVE-2026-113028: Use after free | HIGH | 8.8 | 35%ile | Microsoft | 2026-10-13 |
| CVE-2026-113029 | Chromium CVE-2026-113029: Improper access control | HIGH | 8.8 | 33%ile | Microsoft | 2026-10-13 |
| CVE-2026-113030 | Chromium CVE-2026-113030: Improper access control | HIGH | 8.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-113031 | Chromium CVE-2026-113031: Memory corruption | HIGH | 8.8 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-113032 | Chromium CVE-2026-113032: Memory corruption | HIGH | 8.8 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-113033 | Chromium CVE-2026-113033: Use after free | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113034 | Chromium CVE-2026-113034: Memory corruption | HIGH | 8.8 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-113036 | Chromium CVE-2026-113036: Memory corruption | HIGH | 8.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-113037 | Chromium CVE-2026-113037: Use after free | HIGH | 8.8 | 41%ile | Microsoft | 2026-10-13 |
| CVE-2026-113039 | Chromium CVE-2026-113039: Use after free | HIGH | 8.8 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-113040 | Chromium CVE-2026-113040: Improper input validation | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113041 | Chromium CVE-2026-113041: Use after free | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113042 | Chromium CVE-2026-113042: Use after free | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113043 | Chromium CVE-2026-113043: Use after free | HIGH | 8.8 | 46%ile | Microsoft | 2026-10-13 |
| CVE-2026-113044 | Chromium CVE-2026-113044: Use after free | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113046 | Chromium CVE-2026-113046: Improper input validation | HIGH | 8.8 | 31%ile | Microsoft | 2026-10-13 |
| CVE-2026-113048 | Chromium CVE-2026-113048: Memory corruption | HIGH | 8.8 | 31%ile | Microsoft | 2026-10-13 |
| CVE-2026-113049 | Chromium CVE-2026-113049: Memory corruption | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113052 | Chromium CVE-2026-113052: Memory corruption | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113053 | Chromium CVE-2026-113053: Use after free | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113055 | Chromium CVE-2026-113055: Type confusion | HIGH | 8.8 | 42%ile | Microsoft | 2026-10-13 |
| CVE-2026-113057 | Chromium CVE-2026-113057: Improper access control | HIGH | 8.8 | 22%ile | Microsoft | 2026-10-13 |
| CVE-2026-113058 | Chromium CVE-2026-113058: Use after free | HIGH | 8.8 | 45%ile | Microsoft | 2026-10-13 |
| CVE-2026-113059 | Chromium CVE-2026-113059: Memory corruption | HIGH | 8.8 | 31%ile | Microsoft | 2026-10-13 |
| CVE-2026-113060 | Chromium CVE-2026-113060: Improper input validation | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113061 | Chromium CVE-2026-113061: Memory corruption | HIGH | 8.8 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-113062 | Chromium CVE-2026-113062: Improper input validation | HIGH | 8.8 | 31%ile | Microsoft | 2026-10-13 |
| CVE-2026-113063 | Chromium CVE-2026-113063: Improper input validation | HIGH | 8.8 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-113064 | Chromium CVE-2026-113064: Memory corruption | HIGH | 8.8 | 31%ile | Microsoft | 2026-10-13 |
| CVE-2026-113065 | Chromium CVE-2026-113065: Use after free | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113067 | Chromium CVE-2026-113067: Use after free | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113068 | Chromium CVE-2026-113068: Use after free | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113069 | Chromium CVE-2026-113069: Memory corruption | HIGH | 8.8 | 31%ile | Microsoft | 2026-10-13 |
| CVE-2026-113071 | Chromium CVE-2026-113071: Use after free | HIGH | 8.8 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-113073 | Chromium CVE-2026-113073: Use after free | HIGH | 8.8 | 41%ile | Microsoft | 2026-10-13 |
| CVE-2026-113074 | Chromium CVE-2026-113074: Use after free | HIGH | 8.8 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-113075 | Chromium CVE-2026-113075: Use after free | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113076 | Chromium CVE-2026-113076: Use after free | HIGH | 8.8 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-113079 | Chromium CVE-2026-113079: Use after free | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113080 | Chromium CVE-2026-113080: Use after free | HIGH | 8.8 | 45%ile | Microsoft | 2026-10-13 |
| CVE-2026-113081 | Chromium CVE-2026-113081: Use after free | HIGH | 8.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-113083 | Chromium CVE-2026-113083: Memory corruption | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113085 | Chromium CVE-2026-113085: Use after free | HIGH | 8.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-113086 | Chromium CVE-2026-113086: Improper input validation | HIGH | 8.8 | 31%ile | Microsoft | 2026-10-13 |
| CVE-2026-113087 | Chromium CVE-2026-113087: Use after free | HIGH | 8.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-113088 | Chromium CVE-2026-113088: Memory corruption | HIGH | 8.8 | 39%ile | Microsoft | 2026-10-13 |
| CVE-2026-113090 | Chromium CVE-2026-113090: Memory corruption | HIGH | 8.8 | 31%ile | Microsoft | 2026-10-13 |
| CVE-2026-113091 | Chromium CVE-2026-113091: Use after free | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113092 | Chromium CVE-2026-113092: Use after free | HIGH | 8.8 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-113093 | Chromium CVE-2026-113093: Memory corruption | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113094 | Chromium CVE-2026-113094: Memory corruption | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113095 | Chromium CVE-2026-113095: Out of bounds read | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113096 | Chromium CVE-2026-113096: Memory corruption | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113097 | Chromium CVE-2026-113097: Use after free | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113099 | Chromium CVE-2026-113099: Improper input validation | HIGH | 8.8 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-113100 | Chromium CVE-2026-113100: Memory corruption | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113101 | Chromium CVE-2026-113101: Use after free | HIGH | 8.8 | 39%ile | Microsoft | 2026-10-13 |
| CVE-2026-113103 | Chromium CVE-2026-113103: Use after free | HIGH | 8.8 | 45%ile | Microsoft | 2026-10-13 |
| CVE-2026-113104 | Chromium CVE-2026-113104: Memory corruption | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113105 | Chromium CVE-2026-113105: Use after free | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113106 | Chromium CVE-2026-113106: Memory corruption | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113107 | Chromium CVE-2026-113107: Use after free | HIGH | 8.8 | 39%ile | Microsoft | 2026-10-13 |
| CVE-2026-113108 | Chromium CVE-2026-113108: Use after free | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113109 | Chromium CVE-2026-113109: Memory corruption | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113110 | Chromium CVE-2026-113110: Memory corruption | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113111 | Chromium CVE-2026-113111: Use after free | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113112 | Chromium CVE-2026-113112: Use after free | HIGH | 8.8 | 31%ile | Microsoft | 2026-10-13 |
| CVE-2026-113113 | Chromium CVE-2026-113113: Use after free | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113114 | Chromium CVE-2026-113114: Use after free | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113115 | Chromium CVE-2026-113115: Use after free | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113117 | Chromium CVE-2026-113117: Improper input validation | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113118 | Chromium CVE-2026-113118: Memory corruption | HIGH | 8.8 | 31%ile | Microsoft | 2026-10-13 |
| CVE-2026-113119 | Chromium CVE-2026-113119: Use after free | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113120 | Chromium CVE-2026-113120: Improper input validation | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113121 | Chromium CVE-2026-113121: Memory corruption | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113123 | Chromium CVE-2026-113123: Use after free | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113124 | Chromium CVE-2026-113124: Memory corruption | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113125 | Chromium CVE-2026-113125: Memory corruption | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113127 | Chromium CVE-2026-113127: Memory corruption | HIGH | 8.8 | 45%ile | Microsoft | 2026-10-13 |
| CVE-2026-113128 | Chromium CVE-2026-113128: Missing authorization | HIGH | 8.8 | 28%ile | Microsoft | 2026-10-13 |
| CVE-2026-113130 | Chromium CVE-2026-113130: Use after free | HIGH | 8.8 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-113131 | Chromium CVE-2026-113131: Memory corruption | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113132 | Chromium CVE-2026-113132: Memory corruption | HIGH | 8.8 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-113133 | Chromium CVE-2026-113133: Memory corruption | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113134 | Chromium CVE-2026-113134: Memory corruption | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113135 | Chromium CVE-2026-113135: Memory corruption | HIGH | 8.8 | 31%ile | Microsoft | 2026-10-13 |
| CVE-2026-113136 | Chromium CVE-2026-113136: Memory corruption | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113140 | Chromium CVE-2026-113140: Use after free | HIGH | 8.8 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-113141 | Chromium CVE-2026-113141: Use after free | HIGH | 8.8 | 35%ile | Microsoft | 2026-10-13 |
| CVE-2026-113143 | Chromium CVE-2026-113143: Memory corruption | HIGH | 8.8 | 27%ile | Microsoft | 2026-10-13 |
| CVE-2026-113145 | Chromium CVE-2026-113145: Memory corruption | HIGH | 8.8 | 39%ile | Microsoft | 2026-10-13 |
| CVE-2026-113146 | Chromium CVE-2026-113146: Memory corruption | HIGH | 8.8 | 35%ile | Microsoft | 2026-10-13 |
| CVE-2026-113147 | Chromium CVE-2026-113147: Improper input validation | HIGH | 8.8 | 44%ile | Microsoft | 2026-10-13 |
| CVE-2026-113148 | Chromium CVE-2026-113148: Memory corruption | HIGH | 8.8 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-113149 | Chromium CVE-2026-113149: Memory corruption | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113150 | Chromium CVE-2026-113150: Memory corruption | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113152 | Chromium CVE-2026-113152: Memory corruption | HIGH | 8.8 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-113153 | Chromium CVE-2026-113153: Memory corruption | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113154 | Chromium CVE-2026-113154: Memory corruption | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113155 | Chromium CVE-2026-113155: Use after free | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113156 | Chromium CVE-2026-113156: Use after free | HIGH | 8.8 | 39%ile | Microsoft | 2026-10-13 |
| CVE-2026-113158 | Chromium CVE-2026-113158: Use after free | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113160 | Chromium CVE-2026-113160: Use after free | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113161 | Chromium CVE-2026-113161: Use after free | HIGH | 8.8 | 47%ile | Microsoft | 2026-10-13 |
| CVE-2026-113162 | Chromium CVE-2026-113162: Improper input validation | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113163 | Chromium CVE-2026-113163: Use after free | HIGH | 8.8 | 45%ile | Microsoft | 2026-10-13 |
| CVE-2026-113164 | Chromium CVE-2026-113164: Memory corruption | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113165 | Chromium CVE-2026-113165: Use after free | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113166 | Chromium CVE-2026-113166: Memory corruption | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113167 | Chromium CVE-2026-113167: Memory corruption | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113168 | Chromium CVE-2026-113168: Use after free | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113170 | Chromium CVE-2026-113170: Use after free | HIGH | 8.8 | 31%ile | Microsoft | 2026-10-13 |
| CVE-2026-113172 | Chromium CVE-2026-113172: Memory corruption | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113173 | Chromium CVE-2026-113173: Improper input validation | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113174 | Chromium CVE-2026-113174: Use after free | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113175 | Chromium CVE-2026-113175: Improper input validation | HIGH | 8.8 | 35%ile | Microsoft | 2026-10-13 |
| CVE-2026-113176 | Chromium CVE-2026-113176: Memory corruption | HIGH | 8.8 | 35%ile | Microsoft | 2026-10-13 |
| CVE-2026-113177 | Chromium CVE-2026-113177: Use after free | HIGH | 8.8 | 35%ile | Microsoft | 2026-10-13 |
| CVE-2026-113179 | Chromium CVE-2026-113179: Use after free | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113180 | Chromium CVE-2026-113180: Memory corruption | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113181 | Chromium CVE-2026-113181: Use after free | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113182 | Chromium CVE-2026-113182: Memory corruption | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113183 | Chromium CVE-2026-113183: Memory corruption | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113184 | Chromium CVE-2026-113184: Memory corruption | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113185 | Chromium CVE-2026-113185: Memory corruption | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113187 | Chromium CVE-2026-113187: Use after free | HIGH | 8.8 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-113188 | Chromium CVE-2026-113188: Memory corruption | HIGH | 8.8 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-113190 | Chromium CVE-2026-113190: Use after free | HIGH | 8.8 | 33%ile | Microsoft | 2026-10-13 |
| CVE-2026-113191 | Chromium CVE-2026-113191: Use after free | HIGH | 8.8 | 33%ile | Microsoft | 2026-10-13 |
| CVE-2026-113192 | Chromium CVE-2026-113192: Memory corruption | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113194 | Chromium CVE-2026-113194: Memory corruption | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113195 | Chromium CVE-2026-113195: Improper input validation | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113197 | Chromium CVE-2026-113197: Use after free | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113198 | Chromium CVE-2026-113198: Use after free | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113200 | Chromium CVE-2026-113200: Use after free | HIGH | 8.8 | 35%ile | Microsoft | 2026-10-13 |
| CVE-2026-113202 | Chromium CVE-2026-113202: Use after free | HIGH | 8.8 | 47%ile | Microsoft | 2026-10-13 |
| CVE-2026-113203 | Chromium CVE-2026-113203: Use after free | HIGH | 8.8 | 35%ile | Microsoft | 2026-10-13 |
| CVE-2026-113204 | Chromium CVE-2026-113204: Use after free | HIGH | 8.8 | 42%ile | Microsoft | 2026-10-13 |
| CVE-2026-113205 | Chromium CVE-2026-113205: Use after free | HIGH | 8.8 | 35%ile | Microsoft | 2026-10-13 |
| CVE-2026-113206 | Chromium CVE-2026-113206: Memory corruption | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113207 | Chromium CVE-2026-113207: Use after free | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113208 | Chromium CVE-2026-113208: Use after free | HIGH | 8.8 | 35%ile | Microsoft | 2026-10-13 |
| CVE-2026-113210 | Chromium CVE-2026-113210: Use after free | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113213 | Chromium CVE-2026-113213: Memory corruption | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113214 | Chromium CVE-2026-113214: Improper input validation | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113215 | Chromium CVE-2026-113215: Use after free | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113216 | Chromium CVE-2026-113216: Use after free | HIGH | 8.8 | 35%ile | Microsoft | 2026-10-13 |
| CVE-2026-113217 | Chromium CVE-2026-113217: Use after free | HIGH | 8.8 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-113218 | Chromium CVE-2026-113218: Use after free | HIGH | 8.8 | 35%ile | Microsoft | 2026-10-13 |
| CVE-2026-113219 | Chromium CVE-2026-113219: Memory corruption | HIGH | 8.8 | 35%ile | Microsoft | 2026-10-13 |
| CVE-2026-113220 | Chromium CVE-2026-113220: Memory corruption | HIGH | 8.8 | 35%ile | Microsoft | 2026-10-13 |
| CVE-2026-113221 | Chromium CVE-2026-113221: Use after free | HIGH | 8.8 | 31%ile | Microsoft | 2026-10-13 |
| CVE-2026-113226 | Chromium CVE-2026-113226: Memory corruption | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113227 | Chromium CVE-2026-113227: Use after free | HIGH | 8.8 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-113228 | Chromium CVE-2026-113228: Use after free | HIGH | 8.8 | 27%ile | Microsoft | 2026-10-13 |
| CVE-2026-113229 | Chromium CVE-2026-113229: Use after free | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113230 | Chromium CVE-2026-113230: Improper input validation | HIGH | 8.8 | 45%ile | Microsoft | 2026-10-13 |
| CVE-2026-113231 | Chromium CVE-2026-113231: Improper input validation | HIGH | 8.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-113232 | Chromium CVE-2026-113232: Memory corruption | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113233 | Chromium CVE-2026-113233: Out of bounds read | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113234 | Chromium CVE-2026-113234: Memory corruption | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113236 | Chromium CVE-2026-113236: Use after free | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113238 | Chromium CVE-2026-113238: Memory corruption | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113239 | Chromium CVE-2026-113239: Range error | HIGH | 8.8 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-113240 | Chromium CVE-2026-113240: Use after free | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113241 | Chromium CVE-2026-113241: Memory corruption | HIGH | 8.8 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-113242 | Chromium CVE-2026-113242: Memory corruption | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113243 | Chromium CVE-2026-113243: Memory corruption | HIGH | 8.8 | 39%ile | Microsoft | 2026-10-13 |
| CVE-2026-113244 | Chromium CVE-2026-113244: Improper input validation | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113245 | Chromium CVE-2026-113245: Memory corruption | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113247 | Chromium CVE-2026-113247: Memory corruption | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113248 | Chromium CVE-2026-113248: Memory corruption | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113249 | Chromium CVE-2026-113249: Improper input validation | HIGH | 8.8 | 39%ile | Microsoft | 2026-10-13 |
| CVE-2026-113250 | Chromium CVE-2026-113250: Use after free | HIGH | 8.8 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-113251 | Chromium CVE-2026-113251: Use after free | HIGH | 8.8 | 35%ile | Microsoft | 2026-10-13 |
| CVE-2026-113253 | Chromium CVE-2026-113253: Use after free | HIGH | 8.8 | 33%ile | Microsoft | 2026-10-13 |
| CVE-2026-113254 | Chromium CVE-2026-113254: Memory corruption | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113255 | Chromium CVE-2026-113255: Use after free | HIGH | 8.8 | 34%ile | Microsoft | 2026-10-13 |
| CVE-2026-113256 | Chromium CVE-2026-113256: Use after free | HIGH | 8.8 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-113257 | Chromium CVE-2026-113257: Memory corruption | HIGH | 8.8 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-113258 | Chromium CVE-2026-113258: Memory corruption | HIGH | 8.8 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-113259 | Chromium CVE-2026-113259: Use after free | HIGH | 8.8 | 33%ile | Microsoft | 2026-10-13 |
| CVE-2026-113260 | Chromium CVE-2026-113260: Memory corruption | HIGH | 8.8 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-113262 | Chromium CVE-2026-113262: Use after free | HIGH | 8.8 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-113264 | Chromium CVE-2026-113264: Improper input validation | HIGH | 8.8 | 34%ile | Microsoft | 2026-10-13 |
| CVE-2026-113265 | Chromium CVE-2026-113265: Memory corruption | HIGH | 8.8 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-113266 | Chromium CVE-2026-113266: Memory corruption | HIGH | 8.8 | 34%ile | Microsoft | 2026-10-13 |
| CVE-2026-113267 | Chromium CVE-2026-113267: Memory corruption | HIGH | 8.8 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-113268 | Chromium CVE-2026-113268: Memory corruption | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113269 | Chromium CVE-2026-113269: Memory corruption | HIGH | 8.8 | 46%ile | Microsoft | 2026-10-13 |
| CVE-2026-113271 | Chromium CVE-2026-113271: Use after free | HIGH | 8.8 | 44%ile | Microsoft | 2026-10-13 |
| CVE-2026-113272 | Chromium CVE-2026-113272: Memory corruption | HIGH | 8.8 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-113273 | Chromium CVE-2026-113273: Memory corruption | HIGH | 8.8 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-113274 | Chromium CVE-2026-113274: Use after free | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113275 | Chromium CVE-2026-113275: Use after free | HIGH | 8.8 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-113276 | Chromium CVE-2026-113276: Memory corruption | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113278 | Chromium CVE-2026-113278: Use after free | HIGH | 8.8 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-113279 | Chromium CVE-2026-113279: Memory corruption | HIGH | 8.8 | 44%ile | Microsoft | 2026-10-13 |
| CVE-2026-113280 | Chromium CVE-2026-113280: Memory corruption | HIGH | 8.8 | 44%ile | Microsoft | 2026-10-13 |
| CVE-2026-113281 | Chromium CVE-2026-113281: Memory corruption | HIGH | 8.8 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-113282 | Chromium CVE-2026-113282: Use after free | HIGH | 8.8 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-113284 | Chromium CVE-2026-113284: Memory corruption | HIGH | 8.8 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-113285 | Chromium CVE-2026-113285: Memory corruption | HIGH | 8.8 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-113286 | Chromium CVE-2026-113286: Memory corruption | HIGH | 8.8 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-113287 | Chromium CVE-2026-113287: Use after free | HIGH | 8.8 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-113288 | Chromium CVE-2026-113288: Memory corruption | HIGH | 8.8 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-113289 | Chromium CVE-2026-113289: Improper input validation | HIGH | 8.8 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-113290 | Chromium CVE-2026-113290: Use after free | HIGH | 8.8 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-113291 | Chromium CVE-2026-113291: Memory corruption | HIGH | 8.8 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-113292 | Chromium CVE-2026-113292: Improper input validation | HIGH | 8.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-113293 | Chromium CVE-2026-113293: Use after free | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113294 | Chromium CVE-2026-113294: Improper input validation | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113298 | Chromium CVE-2026-113298: Use after free | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113299 | Chromium CVE-2026-113299: Memory corruption | HIGH | 8.8 | 47%ile | Microsoft | 2026-10-13 |
| CVE-2026-113301 | Chromium CVE-2026-113301: Memory corruption | HIGH | 8.8 | 47%ile | Microsoft | 2026-10-13 |
| CVE-2026-113302 | Chromium CVE-2026-113302: Use after free | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113303 | Chromium CVE-2026-113303: Memory corruption | HIGH | 8.8 | 52%ile | Microsoft | 2026-10-13 |
| CVE-2026-113305 | Chromium CVE-2026-113305: Use after free | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113306 | Chromium CVE-2026-113306: Improper input validation | HIGH | 8.8 | 39%ile | Microsoft | 2026-10-13 |
| CVE-2026-113307 | Chromium CVE-2026-113307: Memory corruption | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113308 | Chromium CVE-2026-113308: Use after free | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113311 | Chromium CVE-2026-113311: Use after free | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113312 | Chromium CVE-2026-113312: Memory corruption | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113313 | Chromium CVE-2026-113313: Memory corruption | HIGH | 8.8 | 39%ile | Microsoft | 2026-10-13 |
| CVE-2026-113314 | Chromium CVE-2026-113314: Use after free | HIGH | 8.8 | 39%ile | Microsoft | 2026-10-13 |
| CVE-2026-113315 | Chromium CVE-2026-113315: Memory corruption | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113316 | Chromium CVE-2026-113316: Improper input validation | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113317 | Chromium CVE-2026-113317: Memory corruption | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113318 | Chromium CVE-2026-113318: Memory corruption | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113319 | Chromium CVE-2026-113319: Use after free | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113320 | Chromium CVE-2026-113320: Memory corruption | HIGH | 8.8 | 39%ile | Microsoft | 2026-10-13 |
| CVE-2026-113321 | Chromium CVE-2026-113321: Use after free | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113323 | Chromium CVE-2026-113323: Use after free | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113324 | Chromium CVE-2026-113324: Use after free | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113327 | Chromium CVE-2026-113327: Use after free | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113330 | Chromium CVE-2026-113330: Memory corruption | HIGH | 8.8 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-113331 | Chromium CVE-2026-113331: Memory corruption | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113332 | Chromium CVE-2026-113332: Memory corruption | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113334 | Chromium CVE-2026-113334: Improper input validation | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113335 | Chromium CVE-2026-113335: Memory corruption | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113337 | Chromium CVE-2026-113337: Memory corruption | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113338 | Chromium CVE-2026-113338: Use after free | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113339 | Chromium CVE-2026-113339: Use after free | HIGH | 8.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-113343 | Chromium CVE-2026-113343: Memory corruption | HIGH | 8.8 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-113344 | Chromium CVE-2026-113344: Use after free | HIGH | 8.8 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-65674 | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH | 8.8 | 76%ile | Microsoft | 2026-10-13 |
| CVE-2026-69326 | Graphic Fonts Remote Code Execution Vulnerability | HIGH | 8.8 | 56%ile | Microsoft | 2026-10-13 |
| CVE-2026-69370 | Visual Studio Code Remote Code Execution Vulnerability | HIGH | 8.8 | 59%ile | Microsoft | 2026-10-13 |
| CVE-2026-69521 | Windows iSCSI Remote Code Execution Vulnerability | HIGH | 8.8 | 56%ile | Microsoft | 2026-10-13 |
| CVE-2026-69765 | Windows Storport Miniport Driver Remote Code Execution Vulnerability | HIGH | 8.8 | 56%ile | Microsoft | 2026-10-13 |
| CVE-2026-69918 | Windows Core Messaging Elevation of Privilege Vulnerability | HIGH | 8.8 | 35%ile | Microsoft | 2026-10-13 |
| CVE-2026-69943 | Microsoft Office SharePoint Remote Code Execution Vulnerability | HIGH | 8.8 | 67%ile | Microsoft | 2026-10-13 |
| CVE-2026-69945 | Windows AppX Deployment Extensions Elevation of Privilege Vulnerability | HIGH | 8.8 | 25%ile | Microsoft | 2026-10-13 |
| CVE-2026-69985 | Windows libarchive Remote Code Execution Vulnerability | HIGH | 8.8 | 56%ile | Microsoft | 2026-10-13 |
| CVE-2026-70007 | .NET Framework Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-10-13 |
| CVE-2026-70035 | .NET Framework Remote Code Execution Vulnerability | HIGH | 8.8 | 73%ile | Microsoft | 2026-10-13 |
| CVE-2026-70068 | Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-10-13 |
| CVE-2026-70069 | Windows DHCP Server Remote Code Execution Vulnerability | HIGH | 8.8 | 64%ile | Microsoft | 2026-10-13 |
| CVE-2026-70089 | Windows GDI Remote Code Execution Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-10-13 |
| CVE-2026-70098 | Visual Studio Code Remote Code Execution Vulnerability | HIGH | 8.8 | 48%ile | Microsoft | 2026-10-13 |
| CVE-2026-70149 | Windows Client Side Caching driver (csc.sys) Elevation of Privilege Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-10-13 |
| CVE-2026-70158 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | HIGH | 8.8 | 62%ile | Microsoft | 2026-10-13 |
| CVE-2026-70167 | Windows Domain Name Service Remote Code Execution Vulnerability | HIGH | 8.8 | 62%ile | Microsoft | 2026-10-13 |
| CVE-2026-70174 | .NET Remote Code Execution Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-10-13 |
| CVE-2026-70185 | Microsoft PowerShell Security Feature Bypass Vulnerability | HIGH | 8.8 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-70210 | Windows OLE DB Elevation of Privilege Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-10-13 |
| CVE-2026-70215 | Microsoft Office PowerPoint Remote Code Execution Vulnerability | HIGH | 8.8 | 61%ile | Microsoft | 2026-10-13 |
| CVE-2026-70246 | Microsoft Office SharePoint Elevation of Privilege Vulnerability | HIGH | 8.8 | 59%ile | Microsoft | 2026-10-13 |
| CVE-2026-70250 | Windows DHCP Client Remote Code Execution Vulnerability | HIGH | 8.8 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-70254 | Microsoft Office Excel Remote Code Execution Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-10-13 |
| CVE-2026-70256 | Microsoft Office Outlook Remote Code Execution Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-10-13 |
| CVE-2026-70257 | Microsoft Office Outlook Remote Code Execution Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-10-13 |
| CVE-2026-70258 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-10-13 |
| CVE-2026-70262 | WebDAV Elevation of Privilege Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-10-13 |
| CVE-2026-70266 | Microsoft Office SharePoint Elevation of Privilege Vulnerability | HIGH | 8.8 | 65%ile | Microsoft | 2026-10-13 |
| CVE-2026-70268 | Microsoft Office Word Remote Code Execution Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-10-13 |
| CVE-2026-70275 | Windows CD-ROM File System Driver Remote Code Execution Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-10-13 |
| CVE-2026-70282 | Microsoft Office Outlook Remote Code Execution Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-10-13 |
| CVE-2026-70287 | Microsoft Office Word Remote Code Execution Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-10-13 |
| CVE-2026-70297 | Skype for Business Remote Code Execution Vulnerability | HIGH | 8.8 | 67%ile | Microsoft | 2026-10-13 |
| CVE-2026-70299 | Windows Bind Filter Driver Elevation of Privilege Vulnerability | HIGH | 8.8 | 27%ile | Microsoft | 2026-10-13 |
| CVE-2026-70301 | Microsoft Office Word Remote Code Execution Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-10-13 |
| CVE-2026-70302 | Microsoft Office Word Remote Code Execution Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-10-13 |
| CVE-2026-70343 | Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-10-13 |
| CVE-2026-70580 | Windows Credential Guard Spoofing Vulnerability | HIGH | 8.8 | 27%ile | Microsoft | 2026-10-13 |
| CVE-2026-77496 | Windows Imaging Component Remote Code Execution Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-10-13 |
| CVE-2026-77902 | Microsoft Office Excel Remote Code Execution Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-10-13 |
| CVE-2026-77910 | Microsoft Exchange Server Elevation of Privilege Vulnerability | HIGH | 8.8 | 59%ile | Microsoft | 2026-10-13 |
| CVE-2026-83520 | .NET Remote Code Execution Vulnerability | HIGH | 8.8 | 73%ile | Microsoft | 2026-10-13 |
| CVE-2026-83523 | Windows Image Acquisition Remote Code Execution Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-10-13 |
| CVE-2026-83642 | Windows Domain Name Service Remote Code Execution Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-10-13 |
| CVE-2026-83643 | Windows Error Reporting Remote Code Execution Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-10-13 |
| CVE-2026-83688 | Remote Desktop Client Remote Code Execution Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-10-13 |
| CVE-2026-83716 | Windows Hyper-V Remote Code Execution Vulnerability | HIGH | 8.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-83725 | Microsoft Windows Search Component Remote Code Execution Vulnerability | HIGH | 8.8 | 56%ile | Microsoft | 2026-10-13 |
| CVE-2026-83728 | Windows Hyper-V Spoofing Vulnerability | HIGH | 8.8 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-83759 | Windows Encrypting File System (EFS) Remote Code Execution Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-10-13 |
| CVE-2026-83771 | Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability | HIGH | 8.8 | 50%ile | Microsoft | 2026-10-13 |
| CVE-2026-83777 | Windows Bluetooth Service Elevation of Privilege Vulnerability | HIGH | 8.8 | 50%ile | Microsoft | 2026-10-13 |
| CVE-2026-83778 | Microsoft Internet Messaging API Remote Code Execution Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-10-13 |
| CVE-2026-83784 | Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability | HIGH | 8.8 | 65%ile | Microsoft | 2026-10-13 |
| CVE-2026-83789 | Windows SMB Client Elevation of Privilege Vulnerability | HIGH | 8.8 | 58%ile | Microsoft | 2026-10-13 |
| CVE-2026-83797 | Windows Partition Management Driver Remote Code Execution Vulnerability | HIGH | 8.8 | 58%ile | Microsoft | 2026-10-13 |
| CVE-2026-83851 | Windows Partition Management Driver Elevation of Privilege Vulnerability | HIGH | 8.8 | 56%ile | Microsoft | 2026-10-13 |
| CVE-2026-83862 | Windows Network Load Balancing Remote Code Execution Vulnerability | HIGH | 8.8 | 35%ile | Microsoft | 2026-10-13 |
| CVE-2026-83874 | Windows Event Tracing Remote Code Execution Vulnerability | HIGH | 8.8 | 58%ile | Microsoft | 2026-10-13 |
| CVE-2026-83889 | Windows DNS Server Remote Code Execution Vulnerability | HIGH | 8.8 | 64%ile | Microsoft | 2026-10-13 |
| CVE-2026-83891 | Microsoft Office Word Remote Code Execution Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-10-13 |
| CVE-2026-83923 | Microsoft OpenSSH for Windows Remote Code Execution Vulnerability | HIGH | 8.8 | 64%ile | Microsoft | 2026-10-13 |
| CVE-2026-83928 | Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability | HIGH | 8.8 | 47%ile | Microsoft | 2026-10-13 |
| CVE-2026-83929 | Windows GDI Remote Code Execution Vulnerability | HIGH | 8.8 | 48%ile | Microsoft | 2026-10-13 |
| CVE-2026-83934 | Windows GDI+ Remote Code Execution Vulnerability | HIGH | 8.8 | 59%ile | Microsoft | 2026-10-13 |
| CVE-2026-85339 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | HIGH | 8.8 | 46%ile | Microsoft | 2026-10-13 |
| CVE-2026-85363 | .NET Framework Elevation of Privilege Vulnerability | HIGH | 8.8 | 58%ile | Microsoft | 2026-10-13 |
| CVE-2026-85817 | Microsoft PowerShell Remote Code Execution Vulnerability | HIGH | 8.8 | 54%ile | Microsoft | 2026-10-13 |
| CVE-2026-85900 | Microsoft Office SharePoint Remote Code Execution Vulnerability | HIGH | 8.8 | 75%ile | Microsoft | 2026-10-13 |
| CVE-2026-85903 | Windows Domain Name Service Remote Code Execution Vulnerability | HIGH | 8.8 | 53%ile | Microsoft | 2026-10-13 |
| CVE-2026-85905 | Windows UI Immersive Server API Elevation of Privilege Vulnerability | HIGH | 8.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-85931 | Windows Distributed File System (DFS) Remote Code Execution Vulnerability | HIGH | 8.8 | 58%ile | Microsoft | 2026-10-13 |
| CVE-2026-85936 | Windows Shell Remote Code Execution Vulnerability | HIGH | 8.8 | 46%ile | Microsoft | 2026-10-13 |
| CVE-2026-87697 | .NET Remote Code Execution Vulnerability | HIGH | 8.8 | 58%ile | Microsoft | 2026-10-13 |
| CVE-2026-88073 | Windows Graphics Kernel Elevation of Privilege Vulnerability | HIGH | 8.8 | 18%ile | Microsoft | 2026-10-13 |
| CVE-2026-88075 | Configuration Manager Elevation of Privilege Vulnerability | HIGH | 8.8 | 58%ile | Microsoft | 2026-10-13 |
| CVE-2026-88112 | Windows Domain Name Service Remote Code Execution Vulnerability | HIGH | 8.8 | 53%ile | Microsoft | 2026-10-13 |
| CVE-2026-88114 | Windows Domain Name Service Remote Code Execution Vulnerability | HIGH | 8.8 | 53%ile | Microsoft | 2026-10-13 |
| CVE-2026-88115 | Windows Server for NFS Remote Code Execution Vulnerability | HIGH | 8.8 | 53%ile | Microsoft | 2026-10-13 |
| CVE-2026-88116 | Windows Domain Name Service Remote Code Execution Vulnerability | HIGH | 8.8 | 54%ile | Microsoft | 2026-10-13 |
| CVE-2026-88136 | Web Distributed Authoring and Versioning (WEBDAV) Remote Code Execution Vulnerability | HIGH | 8.8 | 61%ile | Microsoft | 2026-10-13 |
| CVE-2026-88142 | Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability | HIGH | 8.8 | 58%ile | Microsoft | 2026-10-13 |
| CVE-2026-88144 | Microsoft Office PowerPoint Remote Code Execution Vulnerability | HIGH | 8.8 | 61%ile | Microsoft | 2026-10-13 |
| CVE-2026-88145 | Microsoft Office Excel Remote Code Execution Vulnerability | HIGH | 8.8 | 55%ile | Microsoft | 2026-10-13 |
| CVE-2026-88150 | Microsoft Office Word Remote Code Execution Vulnerability | HIGH | 8.8 | 55%ile | Microsoft | 2026-10-13 |
| CVE-2026-88155 | Microsoft Office SharePoint Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-10-13 |
| CVE-2026-88157 | Microsoft OpenSSH for Windows Remote Code Execution Vulnerability | HIGH | 8.8 | 44%ile | Microsoft | 2026-10-13 |
| CVE-2026-88159 | Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability | HIGH | 8.8 | 73%ile | Microsoft | 2026-10-13 |
| CVE-2026-88163 | Microsoft Office SharePoint Remote Code Execution Vulnerability | HIGH | 8.8 | 61%ile | Microsoft | 2026-10-13 |
| CVE-2026-88164 | Microsoft Office SharePoint Elevation of Privilege Vulnerability | HIGH | 8.8 | 58%ile | Microsoft | 2026-10-13 |
| CVE-2026-88165 | Windows Active Directory Domain Services Remote Code Execution Vulnerability | HIGH | 8.8 | 58%ile | Microsoft | 2026-10-13 |
| CVE-2026-88166 | Microsoft Office SharePoint Remote Code Execution Vulnerability | HIGH | 8.8 | 61%ile | Microsoft | 2026-10-13 |
| CVE-2026-88186 | Microsoft Office Word Remote Code Execution Vulnerability | HIGH | 8.8 | 58%ile | Microsoft | 2026-10-13 |
| CVE-2026-88196 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 8.8 | 54%ile | Microsoft | 2026-10-13 |
| CVE-2026-88197 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 8.8 | 44%ile | Microsoft | 2026-10-13 |
| CVE-2026-88198 | Microsoft Office SharePoint Elevation of Privilege Vulnerability | HIGH | 8.8 | 54%ile | Microsoft | 2026-10-13 |
| CVE-2026-88200 | Microsoft Office SharePoint Elevation of Privilege Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-10-13 |
| CVE-2026-88202 | Microsoft Office Word Remote Code Execution Vulnerability | HIGH | 8.8 | 55%ile | Microsoft | 2026-10-13 |
| CVE-2026-88219 | RPC Runtime Library Remote Code Execution Vulnerability | HIGH | 8.8 | 58%ile | Microsoft | 2026-10-13 |
| CVE-2026-94512 | SQL Server Remote Code Execution Vulnerability | HIGH | 8.8 | 51%ile | Microsoft | 2026-10-13 |
| CVE-2026-96044 | Microsoft Office SharePoint Elevation of Privilege Vulnerability | HIGH | 8.8 | 58%ile | Microsoft | 2026-10-13 |
| CVE-2026-96202 | Windows Raw Image Extension Remote Code Execution Vulnerability | HIGH | 8.8 | 61%ile | Microsoft | 2026-10-13 |
| CVE-2026-96224 | .NET Remote Code Execution Vulnerability | HIGH | 8.8 | 55%ile | Microsoft | 2026-10-13 |
| CVE-2026-96230 | ASP.NET Core Remote Code Execution Vulnerability | HIGH | 8.8 | 61%ile | Microsoft | 2026-10-13 |
| CVE-2026-96235 | .NET Remote Code Execution Vulnerability | HIGH | 8.8 | 58%ile | Microsoft | 2026-10-13 |
| CVE-2026-96251 | Microsoft PowerShell Remote Code Execution Vulnerability | HIGH | 8.8 | 53%ile | Microsoft | 2026-10-13 |
| CVE-2026-96913 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 8.8 | 31%ile | Microsoft | 2026-10-13 |
| CVE-2026-96914 | Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability | HIGH | 8.8 | 26%ile | Microsoft | 2026-10-13 |
| CVE-2026-96917 | Windows PCI Bus Driver Elevation of Privilege Vulnerability | HIGH | 8.8 | 30%ile | Microsoft | 2026-10-13 |
| CVE-2026-96940 | Microsoft Exchange Server Elevation of Privilege Vulnerability | HIGH | 8.8 | 86%ile | Microsoft | 2026-10-13 |
| CVE-2026-96943 | Windows Raw Image Extension Remote Code Execution Vulnerability | HIGH | 8.8 | 49%ile | Microsoft | 2026-10-13 |
| CVE-2026-96951 | Windows Shell Security Feature Bypass Vulnerability | HIGH | 8.8 | 96%ile | Microsoft | 2026-10-13 |
| CVE-2026-96952 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-10-13 |
| CVE-2026-96957 | .NET Security Feature Bypass Vulnerability | HIGH | 8.8 | 45%ile | Microsoft | 2026-10-13 |
| CVE-2026-97003 | Microsoft Office Excel Remote Code Execution Vulnerability | HIGH | 8.8 | 55%ile | Microsoft | 2026-10-13 |
| CVE-2026-97004 | Microsoft Office Excel Remote Code Execution Vulnerability | HIGH | 8.8 | 58%ile | Microsoft | 2026-10-13 |
| CVE-2026-97007 | Microsoft Office Excel Remote Code Execution Vulnerability | HIGH | 8.8 | 58%ile | Microsoft | 2026-10-13 |
| CVE-2026-97008 | Microsoft Office Excel Remote Code Execution Vulnerability | HIGH | 8.8 | 58%ile | Microsoft | 2026-10-13 |
| CVE-2026-97010 | Microsoft Office Excel Remote Code Execution Vulnerability | HIGH | 8.8 | 58%ile | Microsoft | 2026-10-13 |
| CVE-2026-97011 | Microsoft Office Excel Remote Code Execution Vulnerability | HIGH | 8.8 | 58%ile | Microsoft | 2026-10-13 |
| CVE-2026-97012 | Microsoft Office Outlook Remote Code Execution Vulnerability | HIGH | 8.8 | 54%ile | Microsoft | 2026-10-13 |
| CVE-2026-97017 | Microsoft Office Excel Remote Code Execution Vulnerability | HIGH | 8.8 | 55%ile | Microsoft | 2026-10-13 |
| CVE-2026-97738 | Microsoft Office Excel Remote Code Execution Vulnerability | HIGH | 8.8 | 58%ile | Microsoft | 2026-10-13 |
| CVE-2026-97739 | Microsoft Office Excel Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-10-13 |
| CVE-2026-97741 | Microsoft Office Excel Remote Code Execution Vulnerability | HIGH | 8.8 | 61%ile | Microsoft | 2026-10-13 |
| CVE-2026-97742 | Microsoft Office Excel Remote Code Execution Vulnerability | HIGH | 8.8 | 61%ile | Microsoft | 2026-10-13 |
| CVE-2026-97745 | Microsoft Office Excel Remote Code Execution Vulnerability | HIGH | 8.8 | 61%ile | Microsoft | 2026-10-13 |
| CVE-2026-97746 | Microsoft Office Excel Remote Code Execution Vulnerability | HIGH | 8.8 | 58%ile | Microsoft | 2026-10-13 |
| CVE-2026-97747 | Microsoft Office Excel Remote Code Execution Vulnerability | HIGH | 8.8 | 55%ile | Microsoft | 2026-10-13 |
| CVE-2026-97748 | Microsoft Office Excel Remote Code Execution Vulnerability | HIGH | 8.8 | 58%ile | Microsoft | 2026-10-13 |
| CVE-2026-97750 | Microsoft Office Excel Remote Code Execution Vulnerability | HIGH | 8.8 | 55%ile | Microsoft | 2026-10-13 |
| CVE-2026-97751 | Microsoft Office Excel Remote Code Execution Vulnerability | HIGH | 8.8 | 45%ile | Microsoft | 2026-10-13 |
| CVE-2026-97752 | Microsoft Office Excel Remote Code Execution Vulnerability | HIGH | 8.8 | 55%ile | Microsoft | 2026-10-13 |
| CVE-2026-97753 | Microsoft Office Excel Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-10-13 |
| CVE-2026-97754 | Microsoft Office Excel Remote Code Execution Vulnerability | HIGH | 8.8 | 55%ile | Microsoft | 2026-10-13 |
| CVE-2026-97755 | Microsoft Office Excel Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-10-13 |
| CVE-2026-97756 | Microsoft Office Excel Remote Code Execution Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-10-13 |
| CVE-2026-97757 | Microsoft Office Excel Remote Code Execution Vulnerability | HIGH | 8.8 | 58%ile | Microsoft | 2026-10-13 |
| CVE-2026-97758 | Microsoft Office Excel Remote Code Execution Vulnerability | HIGH | 8.8 | 48%ile | Microsoft | 2026-10-13 |
| CVE-2026-97759 | Microsoft Office Excel Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-10-13 |
| CVE-2026-97761 | Microsoft Office Excel Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-10-13 |
| CVE-2026-97762 | Microsoft Office Excel Remote Code Execution Vulnerability | HIGH | 8.8 | 58%ile | Microsoft | 2026-10-13 |
| CVE-2026-97763 | Microsoft Office Excel Remote Code Execution Vulnerability | HIGH | 8.8 | 58%ile | Microsoft | 2026-10-13 |
| CVE-2026-97765 | Microsoft Office Excel Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-10-13 |
| CVE-2026-97766 | Microsoft Office Excel Remote Code Execution Vulnerability | HIGH | 8.8 | 55%ile | Microsoft | 2026-10-13 |
| CVE-2026-97767 | Microsoft Office Excel Remote Code Execution Vulnerability | HIGH | 8.8 | 49%ile | Microsoft | 2026-10-13 |
| CVE-2026-97768 | Microsoft Office Excel Remote Code Execution Vulnerability | HIGH | 8.8 | 58%ile | Microsoft | 2026-10-13 |
| CVE-2026-97769 | Microsoft Office Excel Remote Code Execution Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-10-13 |
| CVE-2026-97770 | Microsoft Office Excel Remote Code Execution Vulnerability | HIGH | 8.8 | 55%ile | Microsoft | 2026-10-13 |
| CVE-2026-97771 | Microsoft Office Excel Remote Code Execution Vulnerability | HIGH | 8.8 | 55%ile | Microsoft | 2026-10-13 |
| CVE-2026-97772 | Microsoft Office Excel Remote Code Execution Vulnerability | HIGH | 8.8 | 58%ile | Microsoft | 2026-10-13 |
| CVE-2026-97773 | Microsoft Office Excel Remote Code Execution Vulnerability | HIGH | 8.8 | 58%ile | Microsoft | 2026-10-13 |
| CVE-2026-97775 | Microsoft Office Excel Remote Code Execution Vulnerability | HIGH | 8.8 | 58%ile | Microsoft | 2026-10-13 |
| CVE-2026-97776 | Microsoft Office Excel Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-10-13 |
| CVE-2026-97777 | Microsoft Office Excel Remote Code Execution Vulnerability | HIGH | 8.8 | 58%ile | Microsoft | 2026-10-13 |
| CVE-2026-97778 | Microsoft Office Excel Remote Code Execution Vulnerability | HIGH | 8.8 | 49%ile | Microsoft | 2026-10-13 |
| CVE-2026-97780 | Microsoft Office Excel Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-10-13 |
| CVE-2026-97781 | Microsoft Office OneNote Remote Code Execution Vulnerability | HIGH | 8.8 | 59%ile | Microsoft | 2026-10-13 |
| CVE-2026-97380 | MariaDB: GRANT PROXY with empty password incorrectly checks grantor's privileges | HIGH | 8.8 | 70%ile | Microsoft | 2026-10-13 |
| CVE-2026-99083 | ksmbd: fix heap out-of-bounds write in krb5_authenticate() | HIGH | 8.8 | 39%ile | Microsoft | 2026-10-13 |
| CVE-2026-83943 | Azure API Center Information Disclosure Vulnerability | HIGH | 8.7 | 46%ile | Microsoft | 2026-10-13 |
| CVE-2026-100236 | Dpdk: dpdk: heap out-of-bounds read/write in gso header copy | HIGH | 8.6 | 25%ile | Microsoft | 2026-10-13 |
| CVE-2026-102317 | Chromium CVE-2026-102317: Improper privilege management | HIGH | 8.6 | 1%ile | Microsoft | 2026-10-13 |
| CVE-2026-106186 | Chromium CVE-2026-106186: Uncontrolled search path element | HIGH | 8.6 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-67625 | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH | 8.5 | 46%ile | Microsoft | 2026-10-13 |
| CVE-2026-68883 | Microsoft SQL Server Elevation of Privilege Vulnerability | HIGH | 8.5 | 46%ile | Microsoft | 2026-10-13 |
| CVE-2026-85886 | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH | 8.5 | 35%ile | Microsoft | 2026-10-13 |
| CVE-2026-98978 | namespace: never expire a locked mount | HIGH | 8.4 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-83845 | Windows Internet (wininet.dll) Spoofing Vulnerability | HIGH | 8.4 | 25%ile | Microsoft | 2026-10-13 |
| CVE-2026-98526 | llc: reserve device headroom for allocated frames | HIGH | 8.3 | 13%ile | Microsoft | 2026-10-13 |
| CVE-2026-102301 | Chromium CVE-2026-102301: Out of bounds write | HIGH | 8.3 | 21%ile | Microsoft | 2026-10-13 |
| CVE-2026-102324 | Chromium CVE-2026-102324: Use after free | HIGH | 8.3 | 19%ile | Microsoft | 2026-10-13 |
| CVE-2026-106191 | Chromium CVE-2026-106191: Missing authorization | HIGH | 8.3 | 31%ile | Microsoft | 2026-10-13 |
| CVE-2026-106194 | Chromium CVE-2026-106194: Missing authorization | HIGH | 8.3 | 34%ile | Microsoft | 2026-10-13 |
| CVE-2026-106228 | Chromium CVE-2026-106228: Confused deputy | HIGH | 8.3 | 31%ile | Microsoft | 2026-10-13 |
| CVE-2026-106233 | Chromium CVE-2026-106233: Use after free | HIGH | 8.3 | 33%ile | Microsoft | 2026-10-13 |
| CVE-2026-106238 | Chromium CVE-2026-106238: Race condition | HIGH | 8.3 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-106247 | Chromium CVE-2026-106247: Buffer overflow | HIGH | 8.3 | 27%ile | Microsoft | 2026-10-13 |
| CVE-2026-106292 | Chromium CVE-2026-106292: Buffer overflow | HIGH | 8.3 | 26%ile | Microsoft | 2026-10-13 |
| CVE-2026-106293 | Chromium CVE-2026-106293: Type confusion | HIGH | 8.3 | 25%ile | Microsoft | 2026-10-13 |
| CVE-2026-106363 | Chromium CVE-2026-106363: Missing authorization | HIGH | 8.3 | 22%ile | Microsoft | 2026-10-13 |
| CVE-2026-106377 | Chromium CVE-2026-106377: Race condition | HIGH | 8.3 | 18%ile | Microsoft | 2026-10-13 |
| CVE-2026-106378 | Chromium CVE-2026-106378: Privilege elevation | HIGH | 8.3 | 25%ile | Microsoft | 2026-10-13 |
| CVE-2026-106393 | Chromium CVE-2026-106393: Use after free | HIGH | 8.3 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-106409 | Chromium CVE-2026-106409: Incorrect reference resolution | HIGH | 8.3 | 19%ile | Microsoft | 2026-10-13 |
| CVE-2026-106412 | Chromium CVE-2026-106412: Race condition | HIGH | 8.3 | 15%ile | Microsoft | 2026-10-13 |
| CVE-2026-106426 | Chromium CVE-2026-106426: Race condition | HIGH | 8.3 | 14%ile | Microsoft | 2026-10-13 |
| CVE-2026-110138 | Chromium CVE-2026-110138: Use after free | HIGH | 8.3 | 21%ile | Microsoft | 2026-10-13 |
| CVE-2026-110145 | Chromium CVE-2026-110145: Use after free | HIGH | 8.3 | 21%ile | Microsoft | 2026-10-13 |
| CVE-2026-110156 | Chromium CVE-2026-110156: Incorrect reference resolution | HIGH | 8.3 | 21%ile | Microsoft | 2026-10-13 |
| CVE-2026-59685 | Apache HTTP Server: Out-of-Bounds Write in ap_directory_walk() Canonical-Name Rewrite on CASE_BLIND_FILESYSTEM | HIGH | 8.2 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-63718 | Apache HTTP Server: mod_proxy_uwsgi Transfer-Encoding response smuggling | HIGH | 8.2 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-77214 | libexpat Heap Buffer Over-read in xmlparse.c via XML_ParseBuffer | HIGH | 8.2 | 25%ile | Microsoft | 2026-10-13 |
| CVE-2026-87864 | IMAP APPEND plus CRLF conversion command injection | HIGH | 8.2 | 58%ile | Microsoft | 2026-10-13 |
| CVE-2026-98190 | wifi: wilc1000: fix out-of-bounds read in P2P public action frames | HIGH | 8.2 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98466 | KVM: arm64: Transfer the hyp stack pages out of the host stage-2 | HIGH | 8.2 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-106198 | Chromium CVE-2026-106198: Missing authorization | HIGH | 8.2 | 19%ile | Microsoft | 2026-10-13 |
| CVE-2026-106199 | Chromium CVE-2026-106199: Incorrect authorization | HIGH | 8.2 | 17%ile | Microsoft | 2026-10-13 |
| CVE-2026-85369 | Windows Hyper-V Elevation of Privilege Vulnerability | HIGH | 8.2 | 30%ile | Microsoft | 2026-10-13 |
| CVE-2026-85925 | Azure Key Vault Client SDK Elevation of Privilege Vulnerability | HIGH | 8.2 | 44%ile | Microsoft | 2026-10-13 |
| CVE-2026-112085 | webpack-dev-server vulnerable to cross-origin WebSocket access via proxied upgrades | HIGH | 8.2 | 4%ile | Microsoft | 2026-10-13 |
| CVE-2026-111497 | Google: CVE-2026-111497 Buffer overflow vulnerability in the Brotli decoder | HIGH | 8.1 | 100%ile | Microsoft | 2026-10-13 |
| CVE-2026-98432 | ipv4: free inet_opt and ireq_opt after an RCU grace period | HIGH | 8.1 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-15176 | NGINX ngx_http_core_module vulnerability | HIGH | 8.1 | 58%ile | Microsoft | 2026-10-13 |
| CVE-2026-46570 | In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_index_walk_down() in libntfs-3g/index.c that allows an | HIGH | 8.1 | 4%ile | Microsoft | 2026-10-13 |
| CVE-2026-73636 | Apache HTTP Server: mod_auth_digest one-time-nonce replay attack | HIGH | 8.1 | 34%ile | Microsoft | 2026-10-13 |
| CVE-2026-93479 | NGINX Map directive and Regex matching vulnerability | HIGH | 8.1 | 68%ile | Microsoft | 2026-10-13 |
| CVE-2026-94300 | Concurrent GSS-TSIG messages corrupt memory | HIGH | 8.1 | 61%ile | Microsoft | 2026-10-13 |
| CVE-2026-97205 | NGINX ngx_http_core_module vulnerability | HIGH | 8.1 | 58%ile | Microsoft | 2026-10-13 |
| CVE-2026-98175 | smb: client: cancel reconnect work in clean_demultiplex_info() | HIGH | 8.1 | 25%ile | Microsoft | 2026-10-13 |
| CVE-2026-98261 | cifs: Fix server use-after-free in cifs_chan_skip_or_disable() | HIGH | 8.1 | 35%ile | Microsoft | 2026-10-13 |
| CVE-2026-98441 | net/sched: act_ct: avoid modifying shared unconfirmed ct entry | HIGH | 8.1 | 3%ile | Microsoft | 2026-10-13 |
| CVE-2026-98602 | Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough | HIGH | 8.1 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-98829 | wifi: mac80211: drop oversized fragments to avoid extra_len overflow | HIGH | 8.1 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-100218 | Remote Desktop Gateway Service Remote Code Execution Vulnerability | HIGH | 8.1 | 57%ile | Microsoft | 2026-10-13 |
| CVE-2026-102866 | Microsoft Office SharePoint Elevation of Privilege Vulnerability | HIGH | 8.1 | 52%ile | Microsoft | 2026-10-13 |
| CVE-2026-105005 | Windows Schannel Remote Code Execution Vulnerability | HIGH | 8.1 | 55%ile | Microsoft | 2026-10-13 |
| CVE-2026-106205 | Chromium CVE-2026-106205: Missing authorization | HIGH | 8.1 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-106271 | Chromium CVE-2026-106271: Missing authorization | HIGH | 8.1 | 14%ile | Microsoft | 2026-10-13 |
| CVE-2026-106301 | Chromium CVE-2026-106301: Confused deputy | HIGH | 8.1 | 15%ile | Microsoft | 2026-10-13 |
| CVE-2026-106403 | Chromium CVE-2026-106403: Incorrect authorization | HIGH | 8.1 | 15%ile | Microsoft | 2026-10-13 |
| CVE-2026-108457 | Microsoft Windows PDF Remote Code Execution Vulnerability | HIGH | 8.1 | 55%ile | Microsoft | 2026-10-13 |
| CVE-2026-108460 | Windows Message Queuing Remote Code Execution Vulnerability | HIGH | 8.1 | 55%ile | Microsoft | 2026-10-13 |
| CVE-2026-69802 | Network Device Enrollment Service (NDES) Remote Code Execution Vulnerability | HIGH | 8.1 | 50%ile | Microsoft | 2026-10-13 |
| CVE-2026-69830 | Windows DHCP Server Remote Code Execution Vulnerability | HIGH | 8.1 | 41%ile | Microsoft | 2026-10-13 |
| CVE-2026-69913 | Windows TCP/IP Remote Code Execution Vulnerability | HIGH | 8.1 | 52%ile | Microsoft | 2026-10-13 |
| CVE-2026-70013 | Windows iSCSI Remote Code Execution Vulnerability | HIGH | 8.1 | 51%ile | Microsoft | 2026-10-13 |
| CVE-2026-70038 | Windows iSCSI Remote Code Execution Vulnerability | HIGH | 8.1 | 55%ile | Microsoft | 2026-10-13 |
| CVE-2026-70062 | Windows libarchive Remote Code Execution Vulnerability | HIGH | 8.1 | 56%ile | Microsoft | 2026-10-13 |
| CVE-2026-70111 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 8.1 | 58%ile | Microsoft | 2026-10-13 |
| CVE-2026-70127 | Windows Domain Name Service Remote Code Execution Vulnerability | HIGH | 8.1 | 57%ile | Microsoft | 2026-10-13 |
| CVE-2026-70175 | ASP.NET Core Elevation of Privilege Vulnerability | HIGH | 8.1 | 54%ile | Microsoft | 2026-10-13 |
| CVE-2026-70187 | Windows Remote Desktop Services Remote Code Execution Vulnerability | HIGH | 8.1 | 56%ile | Microsoft | 2026-10-13 |
| CVE-2026-70197 | .NET and Visual Studio Remote Code Execution Vulnerability | HIGH | 8.1 | 56%ile | Microsoft | 2026-10-13 |
| CVE-2026-70229 | Windows Active Directory Domain Services Remote Code Execution Vulnerability | HIGH | 8.1 | 64%ile | Microsoft | 2026-10-13 |
| CVE-2026-70269 | Microsoft Office Word Remote Code Execution Vulnerability | HIGH | 8.1 | 56%ile | Microsoft | 2026-10-13 |
| CVE-2026-70571 | Microsoft Exchange Server Remote Code Execution Vulnerability | HIGH | 8.1 | 72%ile | Microsoft | 2026-10-13 |
| CVE-2026-83522 | Windows IKE Extension Spoofing Vulnerability | HIGH | 8.1 | 57%ile | Microsoft | 2026-10-13 |
| CVE-2026-83674 | Active Directory Federation Services (AD FS) Spoofing Vulnerability | HIGH | 8.1 | 54%ile | Microsoft | 2026-10-13 |
| CVE-2026-83746 | Skype for Business Elevation of Privilege Vulnerability | HIGH | 8.1 | 67%ile | Microsoft | 2026-10-13 |
| CVE-2026-83844 | Windows Paint Remote Code Execution Vulnerability | HIGH | 8.1 | 54%ile | Microsoft | 2026-10-13 |
| CVE-2026-83914 | Microsoft XML Remote Code Execution Vulnerability | HIGH | 8.1 | 57%ile | Microsoft | 2026-10-13 |
| CVE-2026-84012 | Windows Remote Desktop Services Remote Code Execution Vulnerability | HIGH | 8.1 | 52%ile | Microsoft | 2026-10-13 |
| CVE-2026-85371 | Network Policy Server (NPS) Remote Code Execution Vulnerability | HIGH | 8.1 | 52%ile | Microsoft | 2026-10-13 |
| CVE-2026-85799 | Network Policy Server (NPS) Remote Code Execution Vulnerability | HIGH | 8.1 | 52%ile | Microsoft | 2026-10-13 |
| CVE-2026-85926 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability | HIGH | 8.1 | 52%ile | Microsoft | 2026-10-13 |
| CVE-2026-88094 | Azure Storage Library Elevation of Privilege Vulnerability | HIGH | 8.1 | 57%ile | Microsoft | 2026-10-13 |
| CVE-2026-88117 | Windows DHCP Server Remote Code Execution Vulnerability | HIGH | 8.1 | 53%ile | Microsoft | 2026-10-13 |
| CVE-2026-88119 | Windows DHCP Server Remote Code Execution Vulnerability | HIGH | 8.1 | 55%ile | Microsoft | 2026-10-13 |
| CVE-2026-88120 | Windows DHCP Server Remote Code Execution Vulnerability | HIGH | 8.1 | 55%ile | Microsoft | 2026-10-13 |
| CVE-2026-88171 | Windows DHCP Server Remote Code Execution Vulnerability | HIGH | 8.1 | 53%ile | Microsoft | 2026-10-13 |
| CVE-2026-88173 | Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability | HIGH | 8.1 | 43%ile | Microsoft | 2026-10-13 |
| CVE-2026-88174 | Windows Deployment Services Remote Code Execution Vulnerability | HIGH | 8.1 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-88185 | Microsoft Office Word Remote Code Execution Vulnerability | HIGH | 8.1 | 56%ile | Microsoft | 2026-10-13 |
| CVE-2026-97783 | Microsoft Office SharePoint Spoofing Vulnerability | HIGH | 8.1 | 43%ile | Microsoft | 2026-10-13 |
| CVE-2026-92392 | HTTP/2 upload Use-After-Free | HIGH | 8.1 | 70%ile | Microsoft | 2026-10-13 |
| CVE-2026-98687 | thunderbolt: Reject oversized XDomain properties responses | HIGH | 8.1 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-53615 | util-linux libblkid DOS extended-partition overflow produces invalid partition metadata | HIGH | 8.0 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-69363 | Windows Error Reporting Elevation of Privilege Vulnerability | HIGH | 8.0 | 55%ile | Microsoft | 2026-10-13 |
| CVE-2026-70049 | Microsoft Configuration Manager Elevation of Privilege Vulnerability | HIGH | 8.0 | 86%ile | Microsoft | 2026-10-13 |
| CVE-2026-70213 | Microsoft Power Apps Remote Code Execution Vulnerability | HIGH | 8.0 | 33%ile | Microsoft | 2026-10-13 |
| CVE-2026-83838 | Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability | HIGH | 8.0 | 46%ile | Microsoft | 2026-10-13 |
| CVE-2026-85881 | Microsoft Office Graphics Elevation of Privilege Vulnerability | HIGH | 8.0 | 52%ile | Microsoft | 2026-10-13 |
| CVE-2026-88121 | Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability | HIGH | 8.0 | 67%ile | Microsoft | 2026-10-13 |
| CVE-2026-96844 | Microsoft Bluetooth Driver Elevation of Privilege Vulnerability | HIGH | 8.0 | 45%ile | Microsoft | 2026-10-13 |
| CVE-2026-96956 | SQL Server Elevation of Privilege Vulnerability | HIGH | 8.0 | 49%ile | Microsoft | 2026-10-13 |
| CVE-2026-115392 | Wasmtime before 24.0.13, 25.0.0 before 36.0.14, 37.0.0 before 46.0.3, and 47.0.0 before 47.0.4 Sandbox Escape via Traili | HIGH | 7.9 | 15%ile | Microsoft | 2026-10-13 |
| CVE-2026-99110 | smb: client: fix heap overflow in cifs_do_set_acl() | HIGH | 7.8 | 3%ile | Microsoft | 2026-10-13 |
| CVE-2026-99138 | tcp: fix use-after-free in do_tcp_getsockopt(TCP_CC_INFO) | HIGH | 7.8 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-99139 | tcp: fix use-after-free in do_tcp_getsockopt(TCP_CONGESTION) | HIGH | 7.8 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-99157 | scsi: bsg: Pass reply_len to bsg_setup_queue() to fit UFS ARPMB replies | HIGH | 7.8 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-99181 | autofs: ignore notification errors from a replaced pipe | HIGH | 7.8 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-99192 | net: bcmgenet: unshare the skb before writing the control block | HIGH | 7.8 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-104715 | Cifs-utils: mount.cifs credential-file option injection allows local privilege boundary bypass | HIGH | 7.8 | 18%ile | Microsoft | 2026-10-13 |
| CVE-2026-108976 | GNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via a filename because tramp-user-regexp has | HIGH | 7.8 | 51%ile | Microsoft | 2026-10-13 |
| CVE-2026-42616 | In NTFS-3G before 2026.7.7, a heap buffer overflow exists in cat() in ntfscat.c that allows an attacker to corrupt heap | HIGH | 7.8 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-86562 | Dpdk: dpdk: control-queue descriptor double-fetch overflows host heap in dpdk vhost (vduse) | HIGH | 7.8 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-90954 | Busybox: busybox: dpkg-deb extraction-root escape via per-ar-member deferred symlink flush | HIGH | 7.8 | 14%ile | Microsoft | 2026-10-13 |
| CVE-2026-94444 | Checksum bypass for golang.org/fips140 in cmd/go | HIGH | 7.8 | 1%ile | Microsoft | 2026-10-13 |
| CVE-2026-98194 | wifi: libertas_tf: fix UAF in lbtf_free_adapter() | HIGH | 7.8 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98245 | btrfs: take commit root semaphore when iterating in mark_block_group_to_copy() | HIGH | 7.8 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98248 | arm64: percpu: Fix LSE operations on {8,16}-bit types | HIGH | 7.8 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-98309 | drm/vc4: Use managed KMS polling to fix UAF on unbind | HIGH | 7.8 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98342 | dmaengine: wait for RCU readers before releasing dma_device | HIGH | 7.8 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98343 | dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() | HIGH | 7.8 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98359 | RDMA/core: Reject unregistering netdevs in ib_get_eth_speed | HIGH | 7.8 | 2%ile | Microsoft | 2026-10-13 |
| CVE-2026-98366 | RDMA/rxe: validate access flags before swapping the MR's PD | HIGH | 7.8 | 2%ile | Microsoft | 2026-10-13 |
| CVE-2026-98378 | bpf: Skip unsettled links in link iterator | HIGH | 7.8 | 2%ile | Microsoft | 2026-10-13 |
| CVE-2026-98381 | veth: manage XDP program pointers during channel resize | HIGH | 7.8 | 2%ile | Microsoft | 2026-10-13 |
| CVE-2026-98715 | KVM: SVM: Preserve TLB control (i.e. pending TLB flush) on failed VMRUN | HIGH | 7.8 | 9%ile | Microsoft | 2026-10-13 |
| CVE-2026-98716 | KVM: SVM: Use the active VMCB's MSR bitmap when checking if MSR is intercepted | HIGH | 7.8 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98808 | net: systemport: Fix buffer overflow in bcm_sysport_get_stats() | HIGH | 7.8 | 9%ile | Microsoft | 2026-10-13 |
| CVE-2026-98863 | KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails | HIGH | 7.8 | 4%ile | Microsoft | 2026-10-13 |
| CVE-2026-98900 | xen/gntalloc: validate grant count before allocation | HIGH | 7.8 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-99053 | tipc: hold a reference to nodes found by link name | HIGH | 7.8 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-99054 | tipc: destroy topsrv workqueues before closing connections | HIGH | 7.8 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-99056 | strparser: make sure __strp_recv isn't running before tearing down the parser | HIGH | 7.8 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-100215 | Microsoft Graphics Component Remote Code Execution Vulnerability | HIGH | 7.8 | 46%ile | Microsoft | 2026-10-13 |
| CVE-2026-100217 | Windows Group Policy Elevation of Privilege Vulnerability | HIGH | 7.8 | 26%ile | Microsoft | 2026-10-13 |
| CVE-2026-102196 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 30%ile | Microsoft | 2026-10-13 |
| CVE-2026-102201 | Microsoft Windows Media Foundation Elevation of Privilege Vulnerability | HIGH | 7.8 | 30%ile | Microsoft | 2026-10-13 |
| CVE-2026-102202 | Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability | HIGH | 7.8 | 35%ile | Microsoft | 2026-10-13 |
| CVE-2026-102204 | Windows Subsystem for Linux Elevation of Privilege Vulnerability | HIGH | 7.8 | 34%ile | Microsoft | 2026-10-13 |
| CVE-2026-102205 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | HIGH | 7.8 | 30%ile | Microsoft | 2026-10-13 |
| CVE-2026-102215 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | HIGH | 7.8 | 30%ile | Microsoft | 2026-10-13 |
| CVE-2026-102216 | Windows StateRepository API Elevation of Privilege Vulnerability | HIGH | 7.8 | 30%ile | Microsoft | 2026-10-13 |
| CVE-2026-102218 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | HIGH | 7.8 | 30%ile | Microsoft | 2026-10-13 |
| CVE-2026-102220 | Windows VHD miniport driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 30%ile | Microsoft | 2026-10-13 |
| CVE-2026-102227 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-102233 | Visual Studio Code Security Feature Bypass Vulnerability | HIGH | 7.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-103553 | Windows Partition Management Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-103568 | Windows Credential Providers Elevation of Privilege Vulnerability | HIGH | 7.8 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-105003 | HID Class Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-10-13 |
| CVE-2026-105004 | Windows Overlay Filter Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-108130 | Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability | HIGH | 7.8 | 31%ile | Microsoft | 2026-10-13 |
| CVE-2026-108133 | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-108136 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | HIGH | 7.8 | 30%ile | Microsoft | 2026-10-13 |
| CVE-2026-108433 | Microsoft Office Word Security Feature Bypass Vulnerability | HIGH | 7.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-49785 | UEFI Secure Boot Security Feature Bypass Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-61931 | Windows Perception Simulation Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-68836 | Windows kernel32.dll Elevation of Privilege Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-69354 | Windows Error Reporting Elevation of Privilege Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-69471 | Windows Installer Elevation of Privilege Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-69633 | Windows Update Elevation of Privilege Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-69650 | Windows Key Distribution Center Elevation of Privilege Vulnerability | HIGH | 7.8 | 17%ile | Microsoft | 2026-10-13 |
| CVE-2026-69673 | Windows Update Elevation of Privilege Vulnerability | HIGH | 7.8 | 43%ile | Microsoft | 2026-10-13 |
| CVE-2026-69718 | Windows Update Elevation of Privilege Vulnerability | HIGH | 7.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-69733 | Windows Update Elevation of Privilege Vulnerability | HIGH | 7.8 | 50%ile | Microsoft | 2026-10-13 |
| CVE-2026-69783 | Windows Update Elevation of Privilege Vulnerability | HIGH | 7.8 | 50%ile | Microsoft | 2026-10-13 |
| CVE-2026-69798 | Windows Wired AutoConfig Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-69850 | Windows Certificates Elevation of Privilege Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-69867 | SQLite Elevation of Privilege Vulnerability | HIGH | 7.8 | 33%ile | Microsoft | 2026-10-13 |
| CVE-2026-69880 | Desktop Window Manager Elevation of Privilege Vulnerability | HIGH | 7.8 | 35%ile | Microsoft | 2026-10-13 |
| CVE-2026-69882 | Windows Update Elevation of Privilege Vulnerability | HIGH | 7.8 | 48%ile | Microsoft | 2026-10-13 |
| CVE-2026-69884 | Windows GDI Elevation of Privilege Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-69898 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-69909 | Microsoft COM for Windows Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-10-13 |
| CVE-2026-69916 | Windows NTFS Elevation of Privilege Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-69923 | Windows AI Elevation of Privilege Vulnerability | HIGH | 7.8 | 48%ile | Microsoft | 2026-10-13 |
| CVE-2026-69926 | Desktop Window Manager Elevation of Privilege Vulnerability | HIGH | 7.8 | 35%ile | Microsoft | 2026-10-13 |
| CVE-2026-69934 | Windows Spaceport.sys Elevation of Privilege Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-69942 | Windows Overlay Filter Remote Code Execution Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-69949 | Windows Client for NFS Elevation of Privilege Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-69950 | Windows Overlay Filter Elevation of Privilege Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-69952 | Windows Overlay Filter Elevation of Privilege Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-69953 | Windows Overlay Filter Elevation of Privilege Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-69957 | Windows Overlay Filter Elevation of Privilege Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-69959 | Windows Overlay Filter Remote Code Execution Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-69963 | Kernel Streaming Service Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 28%ile | Microsoft | 2026-10-13 |
| CVE-2026-69966 | Kernel Streaming Service Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-10-13 |
| CVE-2026-70008 | Windows IP Over USB Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-70010 | Windows NTFS Elevation of Privilege Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-70015 | Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-70023 | Windows Hyper-V Elevation of Privilege Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-70027 | Windows Subsystem for Linux Elevation of Privilege Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-70048 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-70051 | Windows SmartScreen Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-70052 | Microsoft PowerShell Remote Code Execution Vulnerability | HIGH | 7.8 | 30%ile | Microsoft | 2026-10-13 |
| CVE-2026-70054 | Windows NetBIOS Elevation of Privilege Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-70059 | Windows OLE Elevation of Privilege Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-70060 | Windows Win32k Elevation of Privilege Vulnerability | HIGH | 7.8 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-70064 | Windows Kerberos Elevation of Privilege Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-70092 | Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 41%ile | Microsoft | 2026-10-13 |
| CVE-2026-70093 | Windows Rich Text Edit Control Elevation of Privilege Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-70102 | Windows Spaceport.sys Elevation of Privilege Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-70103 | Windows Error Reporting Elevation of Privilege Vulnerability | HIGH | 7.8 | 34%ile | Microsoft | 2026-10-13 |
| CVE-2026-70104 | Windows Win32k Elevation of Privilege Vulnerability | HIGH | 7.8 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-70106 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.8 | 43%ile | Microsoft | 2026-10-13 |
| CVE-2026-70108 | Windows Win32k Elevation of Privilege Vulnerability | HIGH | 7.8 | 43%ile | Microsoft | 2026-10-13 |
| CVE-2026-70109 | Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 41%ile | Microsoft | 2026-10-13 |
| CVE-2026-70110 | Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 41%ile | Microsoft | 2026-10-13 |
| CVE-2026-70112 | Windows Spaceport.sys Remote Code Execution Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-70113 | Windows Client for NFS Elevation of Privilege Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-70114 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-70117 | Windows Win32k Elevation of Privilege Vulnerability | HIGH | 7.8 | 34%ile | Microsoft | 2026-10-13 |
| CVE-2026-70121 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-70123 | Microsoft Graphics Component Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-10-13 |
| CVE-2026-70131 | Microsoft Windows Media Foundation Elevation of Privilege Vulnerability | HIGH | 7.8 | 42%ile | Microsoft | 2026-10-13 |
| CVE-2026-70132 | Windows Portable Device File System Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 34%ile | Microsoft | 2026-10-13 |
| CVE-2026-70138 | Windows OLE Elevation of Privilege Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-70139 | Windows Update Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-70142 | Windows Update Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 44%ile | Microsoft | 2026-10-13 |
| CVE-2026-70143 | Windows Network File System Remote Code Execution Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-70151 | Windows Direct Composition Elevation of Privilege Vulnerability | HIGH | 7.8 | 34%ile | Microsoft | 2026-10-13 |
| CVE-2026-70172 | Windows NTFS Elevation of Privilege Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-70177 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-70184 | Windows Backup Engine Elevation of Privilege Vulnerability | HIGH | 7.8 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-70218 | Windows StateRepository API Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-70220 | Microsoft Office Word Remote Code Execution Vulnerability | HIGH | 7.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-70222 | Windows Shell Elevation of Privilege Vulnerability | HIGH | 7.8 | 33%ile | Microsoft | 2026-10-13 |
| CVE-2026-70225 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-70228 | Desktop Window Manager Elevation of Privilege Vulnerability | HIGH | 7.8 | 30%ile | Microsoft | 2026-10-13 |
| CVE-2026-70233 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 42%ile | Microsoft | 2026-10-13 |
| CVE-2026-70238 | Windows Storage Spaces Controller Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-70245 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | HIGH | 7.8 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-70247 | HTTP.sys Remote Code Execution Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-10-13 |
| CVE-2026-70255 | Desktop Window Manager Elevation of Privilege Vulnerability | HIGH | 7.8 | 34%ile | Microsoft | 2026-10-13 |
| CVE-2026-70274 | Windows Bind Filter Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-70278 | Microsoft Windows Media Foundation Elevation of Privilege Vulnerability | HIGH | 7.8 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-70285 | Windows Win32k Elevation of Privilege Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-70286 | Windows Graphics Component Elevation of Privilege Vulnerability | HIGH | 7.8 | 35%ile | Microsoft | 2026-10-13 |
| CVE-2026-70303 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.8 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-70566 | Windows Schannel Elevation of Privilege Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-73027 | Windows Setup Files Cleanup Elevation of Privilege Vulnerability | HIGH | 7.8 | 44%ile | Microsoft | 2026-10-13 |
| CVE-2026-78459 | Microsoft Internet Information Services Elevation of Privilege Vulnerability | HIGH | 7.8 | 30%ile | Microsoft | 2026-10-13 |
| CVE-2026-81969 | Windows Server Update Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-10-13 |
| CVE-2026-83499 | Windows Server Update Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-10-13 |
| CVE-2026-83506 | Servicing Stack Updates Elevation of Privilege Vulnerability | HIGH | 7.8 | 35%ile | Microsoft | 2026-10-13 |
| CVE-2026-83508 | Windows NTFS Elevation of Privilege Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-83513 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-83514 | Windows Partition Management Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-83518 | RPC Runtime Elevation of Privilege Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-83567 | Windows NTFS Elevation of Privilege Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-83568 | Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-10-13 |
| CVE-2026-83569 | HID Parser Library Elevation of Privilege Vulnerability | HIGH | 7.8 | 30%ile | Microsoft | 2026-10-13 |
| CVE-2026-83570 | Windows Search Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-83579 | Windows Smart Card Elevation of Privilege Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-83583 | Windows Geotag Broker Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-10-13 |
| CVE-2026-83585 | Windows NTFS Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-83586 | Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-83587 | Windows Core Messaging Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-83588 | Windows USB Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-83634 | Windows BitLocker Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-83637 | Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-83638 | Windows USB Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-83639 | Windows Sensor Data Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-83640 | Windows NTFS Remote Code Execution Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-83641 | Windows Media Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-83650 | Windows Media Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-83652 | Windows NTFS Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-83654 | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-83659 | Windows User Profile Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-10-13 |
| CVE-2026-83669 | Windows Error Reporting Elevation of Privilege Vulnerability | HIGH | 7.8 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-83678 | Windows TCP/IP Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-83679 | Windows Defender Firewall Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-83690 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-83691 | Windows DHCP Server Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-83692 | Windows Bind Filter Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-83698 | Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-83699 | Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 35%ile | Microsoft | 2026-10-13 |
| CVE-2026-83700 | Windows Now Playing Session Manager Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-83704 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | HIGH | 7.8 | 41%ile | Microsoft | 2026-10-13 |
| CVE-2026-83709 | Windows NTLM Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-83712 | Windows NTFS Remote Code Execution Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-83721 | Win32k Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-83726 | Windows DWM Core Library Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-83727 | Windows Overlay Filter Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-83732 | Win32k Elevation of Privilege Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-83735 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.8 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-83741 | Internet Explorer Elevation of Privilege Vulnerability | HIGH | 7.8 | 19%ile | Microsoft | 2026-10-13 |
| CVE-2026-83753 | Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-83756 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability | HIGH | 7.8 | 26%ile | Microsoft | 2026-10-13 |
| CVE-2026-83757 | Win32k Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-83758 | Windows Error Reporting Remote Code Execution Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-83761 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability | HIGH | 7.8 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-83762 | Win32k Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-83763 | Windows Input System Elevation of Privilege Vulnerability | HIGH | 7.8 | 34%ile | Microsoft | 2026-10-13 |
| CVE-2026-83767 | Windows Installer Elevation of Privilege Vulnerability | HIGH | 7.8 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-83768 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.8 | 34%ile | Microsoft | 2026-10-13 |
| CVE-2026-83769 | Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability | HIGH | 7.8 | 35%ile | Microsoft | 2026-10-13 |
| CVE-2026-83779 | Windows Installer Elevation of Privilege Vulnerability | HIGH | 7.8 | 30%ile | Microsoft | 2026-10-13 |
| CVE-2026-83781 | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 30%ile | Microsoft | 2026-10-13 |
| CVE-2026-83783 | Windows Management Instrumentation Elevation of Privilege Vulnerability | HIGH | 7.8 | 30%ile | Microsoft | 2026-10-13 |
| CVE-2026-83791 | Windows Virtual Input Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-83792 | Windows Device Install Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-83796 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-83826 | Windows Error Reporting Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-83828 | Windows MIDI Service Module Elevation of Privileges Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-83829 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-83830 | Windows COM+ Event System Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 35%ile | Microsoft | 2026-10-13 |
| CVE-2026-83832 | Windows Spaceport.sys Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-83833 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-83836 | Windows Event Tracing Remote Code Execution Vulnerability | HIGH | 7.8 | 42%ile | Microsoft | 2026-10-13 |
| CVE-2026-83837 | Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-83840 | Windows Error Reporting Elevation of Privilege Vulnerability | HIGH | 7.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-83847 | Microsoft Account Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-10-13 |
| CVE-2026-83848 | Windows COM+ Event System Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 35%ile | Microsoft | 2026-10-13 |
| CVE-2026-83850 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-83857 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-83859 | Windows NTFS Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-83861 | Windows Remote Desktop Protocol Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-83863 | Servicing Stack Updates Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-83867 | Windows Push Notifications Elevation of Privilege Vulnerability | HIGH | 7.8 | 35%ile | Microsoft | 2026-10-13 |
| CVE-2026-83872 | Windows TCP/IP Local Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-83873 | Windows Shell Elevation of Privilege Vulnerability | HIGH | 7.8 | 33%ile | Microsoft | 2026-10-13 |
| CVE-2026-83876 | Windows Shell Elevation of Privilege Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-83877 | Windows Devices Human Interface Elevation of Privilege Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-83881 | Windows exFAT File System Elevation of Privilege Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-83882 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-83883 | Windows Win32k Elevation of Privilege Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-83896 | Windows Direct Composition Elevation of Privilege Vulnerability | HIGH | 7.8 | 34%ile | Microsoft | 2026-10-13 |
| CVE-2026-83902 | Windows Direct Composition Elevation of Privilege Vulnerability | HIGH | 7.8 | 34%ile | Microsoft | 2026-10-13 |
| CVE-2026-83903 | Windows Direct Composition Elevation of Privilege Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-83912 | Windows Direct Composition Elevation of Privilege Vulnerability | HIGH | 7.8 | 26%ile | Microsoft | 2026-10-13 |
| CVE-2026-83913 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-83918 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.8 | 26%ile | Microsoft | 2026-10-13 |
| CVE-2026-83919 | Microsoft Internet Messaging API Remote Code Execution Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-83920 | Windows Search Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 26%ile | Microsoft | 2026-10-13 |
| CVE-2026-83922 | Windows Direct Composition Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-10-13 |
| CVE-2026-83927 | Windows Registry Elevation of Privilege Vulnerability | HIGH | 7.8 | 33%ile | Microsoft | 2026-10-13 |
| CVE-2026-83931 | Windows Hyper-V Remote Code Execution Vulnerability | HIGH | 7.8 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-83932 | Windows Group Policy Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-10-13 |
| CVE-2026-84013 | Windows Telephony Server Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-84016 | Windows EAPHost Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-85318 | Servicing Stack Updates Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-85327 | Windows Print Spooler Components Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-85332 | Windows Device Association Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-85338 | Microsoft Graphics Component Elevation of Privilege Vulnerability | HIGH | 7.8 | 25%ile | Microsoft | 2026-10-13 |
| CVE-2026-85340 | Microsoft Office Click-To-Run Elevation of Privilege Vulnerability | HIGH | 7.8 | 30%ile | Microsoft | 2026-10-13 |
| CVE-2026-85341 | Windows USB Video Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-85343 | Windows Hyper-V Elevation of Privilege Vulnerability | HIGH | 7.8 | 28%ile | Microsoft | 2026-10-13 |
| CVE-2026-85356 | Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-85358 | Windows Installer Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-85359 | Windows Performance Monitor Elevation of Privilege Vulnerability | HIGH | 7.8 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-85366 | Windows Installer Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-85368 | Windows TCP/IP Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-85373 | Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-85375 | Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-85376 | Windows Print Spooler Components Elevation of Privilege Vulnerability | HIGH | 7.8 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-85377 | Windows CD-ROM Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-85795 | Windows Text Services Framework Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-85796 | Windows Installer Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-85800 | Windows Error Reporting Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-85804 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-10-13 |
| CVE-2026-85807 | Windows USB Video Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-85820 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-85822 | Windows exFAT File System Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-85829 | Windows Wired AutoConfig Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-85832 | Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability | HIGH | 7.8 | 30%ile | Microsoft | 2026-10-13 |
| CVE-2026-85833 | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-85836 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-85837 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-85842 | Windows Image Acquisition Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-85843 | Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability | HIGH | 7.8 | 30%ile | Microsoft | 2026-10-13 |
| CVE-2026-85848 | Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability | HIGH | 7.8 | 30%ile | Microsoft | 2026-10-13 |
| CVE-2026-85849 | Windows AppX Deployment Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 41%ile | Microsoft | 2026-10-13 |
| CVE-2026-85850 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-10-13 |
| CVE-2026-85851 | Windows SmartScreen Elevation of Privilege Vulnerability | HIGH | 7.8 | 25%ile | Microsoft | 2026-10-13 |
| CVE-2026-85858 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability | HIGH | 7.8 | 16%ile | Microsoft | 2026-10-13 |
| CVE-2026-85860 | Windows Message Queuing Queue Manager Elevation of Privilege Vulnerability | HIGH | 7.8 | 15%ile | Microsoft | 2026-10-13 |
| CVE-2026-85861 | Clipboard User Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 15%ile | Microsoft | 2026-10-13 |
| CVE-2026-85863 | Clipboard User Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 15%ile | Microsoft | 2026-10-13 |
| CVE-2026-85864 | Python Elevation of Privilege Vulnerability | HIGH | 7.8 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-85867 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | HIGH | 7.8 | 15%ile | Microsoft | 2026-10-13 |
| CVE-2026-85869 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-85871 | Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-85872 | Windows Storage VSP Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-85874 | Windows Message Queuing Queue Manager Remote Code Execution Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-85884 | Windows Health and Optimized Experiences Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-85901 | Windows Graphics Component Elevation of Privilege Vulnerability | HIGH | 7.8 | 35%ile | Microsoft | 2026-10-13 |
| CVE-2026-85902 | Windows Direct Composition Elevation of Privilege Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-85906 | Windows Direct Composition Elevation of Privilege Vulnerability | HIGH | 7.8 | 28%ile | Microsoft | 2026-10-13 |
| CVE-2026-85908 | Windows Graphics Component Elevation of Privilege Vulnerability | HIGH | 7.8 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-85911 | Windows StateRepository API Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-85915 | Windows PCI Bus Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-85927 | Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-85933 | Windows Print Spooler Components Elevation of Privilege Vulnerability | HIGH | 7.8 | 15%ile | Microsoft | 2026-10-13 |
| CVE-2026-85945 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.8 | 30%ile | Microsoft | 2026-10-13 |
| CVE-2026-87691 | Windows Management Services Elevation of Privilege Vulnerability | HIGH | 7.8 | 15%ile | Microsoft | 2026-10-13 |
| CVE-2026-87692 | Microsoft Exchange Server Elevation of Privilege Vulnerability | HIGH | 7.8 | 83%ile | Microsoft | 2026-10-13 |
| CVE-2026-87694 | Windows Installer Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-87695 | Microsoft Exchange Server Elevation of Privilege Vulnerability | HIGH | 7.8 | 22%ile | Microsoft | 2026-10-13 |
| CVE-2026-87699 | Winlogon Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-87700 | Windows Installer Elevation of Privilege Vulnerability | HIGH | 7.8 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-87702 | Windows Resource Management (MRM) Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-87706 | Windows Storage Spaces Controller Elevation of Privilege Vulnerability | HIGH | 7.8 | 15%ile | Microsoft | 2026-10-13 |
| CVE-2026-87707 | Windows Fax and Scan Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 15%ile | Microsoft | 2026-10-13 |
| CVE-2026-87711 | Windows Installer Elevation of Privilege Vulnerability | HIGH | 7.8 | 15%ile | Microsoft | 2026-10-13 |
| CVE-2026-87712 | Microsoft Windows QoS Scheduler Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 15%ile | Microsoft | 2026-10-13 |
| CVE-2026-88070 | Windows BitLocker Elevation of Privilege Vulnerability | HIGH | 7.8 | 25%ile | Microsoft | 2026-10-13 |
| CVE-2026-88071 | Windows Hyper-V Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-88072 | Windows Host Guardian Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 33%ile | Microsoft | 2026-10-13 |
| CVE-2026-88074 | Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability | HIGH | 7.8 | 26%ile | Microsoft | 2026-10-13 |
| CVE-2026-88080 | Windows Installer Elevation of Privilege Vulnerability | HIGH | 7.8 | 15%ile | Microsoft | 2026-10-13 |
| CVE-2026-88091 | Windows Management Instrumentation Elevation of Privilege Vulnerability | HIGH | 7.8 | 87%ile | Microsoft | 2026-10-13 |
| CVE-2026-88093 | Desktop Window Manager Elevation of Privilege Vulnerability | HIGH | 7.8 | 26%ile | Microsoft | 2026-10-13 |
| CVE-2026-88100 | Windows Storage Spaces Controller Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-88101 | Microsoft Input Method Editor (IME) Elevation of Privilege Vulnerability | HIGH | 7.8 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-88105 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-88109 | Microsoft Office Click-To-Run Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-10-13 |
| CVE-2026-88118 | Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability | HIGH | 7.8 | 35%ile | Microsoft | 2026-10-13 |
| CVE-2026-88126 | WebDAV Elevation of Privilege Vulnerability | HIGH | 7.8 | 30%ile | Microsoft | 2026-10-13 |
| CVE-2026-88128 | Windows DWM Core Library Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-88133 | Windows Portable Device Enumerator Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 45%ile | Microsoft | 2026-10-13 |
| CVE-2026-88134 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-88135 | WebDAV Elevation of Privilege Vulnerability | HIGH | 7.8 | 25%ile | Microsoft | 2026-10-13 |
| CVE-2026-88147 | Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-10-13 |
| CVE-2026-88152 | Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability | HIGH | 7.8 | 28%ile | Microsoft | 2026-10-13 |
| CVE-2026-88168 | Windows Bind Filter Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-88177 | Windows DWM Core Library Elevation of Privilege Vulnerability | HIGH | 7.8 | 15%ile | Microsoft | 2026-10-13 |
| CVE-2026-88179 | Windows DWM Core Library Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-88180 | Windows DWM Core Library Elevation of Privilege Vulnerability | HIGH | 7.8 | 15%ile | Microsoft | 2026-10-13 |
| CVE-2026-88181 | Windows DWM Core Library Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-88182 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-88188 | Windows DWM Core Library Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-88189 | Windows DWM Core Library Elevation of Privilege Vulnerability | HIGH | 7.8 | 15%ile | Microsoft | 2026-10-13 |
| CVE-2026-88191 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | HIGH | 7.8 | 31%ile | Microsoft | 2026-10-13 |
| CVE-2026-88193 | Microsoft Scripting Engine Elevation of Privilege Vulnerability | HIGH | 7.8 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-88194 | Windows DWM Core Library Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-88210 | Microsoft Office Word Security Feature Bypass Vulnerability | HIGH | 7.8 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-96108 | Desktop Window Manager Elevation of Privilege Vulnerability | HIGH | 7.8 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-96118 | Windows Graphics Kernel Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-96186 | Microsoft Windows Media Foundation Elevation of Privilege Vulnerability | HIGH | 7.8 | 84%ile | Microsoft | 2026-10-13 |
| CVE-2026-96217 | Windows NTFS Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-96220 | Windows Assigned Access Elevation of Privilege Vulnerability | HIGH | 7.8 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-96223 | Windows Hyper-V Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-96225 | .NET Elevation of Privilege Vulnerability | HIGH | 7.8 | 35%ile | Microsoft | 2026-10-13 |
| CVE-2026-96231 | .NET Elevation of Privilege Vulnerability | HIGH | 7.8 | 35%ile | Microsoft | 2026-10-13 |
| CVE-2026-96243 | Windows WalletService Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-10-13 |
| CVE-2026-96244 | Windows Internal System User Profile Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-96249 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-96306 | Windows Sysmain Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 15%ile | Microsoft | 2026-10-13 |
| CVE-2026-96308 | Windows Installer Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-96309 | Windows Subsystem for Linux Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-96312 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-96317 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.8 | 16%ile | Microsoft | 2026-10-13 |
| CVE-2026-96318 | Windows Resume Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-96324 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-96843 | WebDAV Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-96847 | WebDAV Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-96856 | Windows Management Instrumentation Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-96862 | Windows Spaceport.sys Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-96867 | Windows NTFS Remote Code Execution Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-96911 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | HIGH | 7.8 | 46%ile | Microsoft | 2026-10-13 |
| CVE-2026-96912 | Windows Client License Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-96915 | Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability | HIGH | 7.8 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-96916 | Windows NTFS Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-96918 | Windows NTFS Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-96920 | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-96928 | Windows NTFS Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-96929 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.8 | 42%ile | Microsoft | 2026-10-13 |
| CVE-2026-96931 | Windows NTFS Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-96933 | Windows COM+ Event System Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-96946 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-96947 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-96950 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-96953 | Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution Vulnerability | HIGH | 7.8 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-96995 | Microsoft Office Word Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-96996 | Microsoft Office Word Remote Code Execution Vulnerability | HIGH | 7.8 | 25%ile | Microsoft | 2026-10-13 |
| CVE-2026-96997 | Microsoft Office OneNote Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-97001 | Microsoft Office Word Remote Code Execution Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-97009 | Microsoft Office Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 25%ile | Microsoft | 2026-10-13 |
| CVE-2026-97792 | Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-97794 | Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-97798 | Windows Error Reporting Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 31%ile | Microsoft | 2026-10-13 |
| CVE-2026-97799 | Windows Audio Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 26%ile | Microsoft | 2026-10-13 |
| CVE-2026-97800 | Windows Mobile Broadband Elevation of Privilege Vulnerability | HIGH | 7.8 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-97803 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-97804 | HID Class Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-10-13 |
| CVE-2026-97806 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-97807 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-97809 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-97811 | Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability | HIGH | 7.8 | 22%ile | Microsoft | 2026-10-13 |
| CVE-2026-46569 | In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ib_copy_tail(), in libntfs-3g/index.c, that allows an | HIGH | 7.7 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-61642 | Squid Request Smuggling in HTTP Transfer-Encoding | HIGH | 7.7 | 81%ile | Microsoft | 2026-10-13 |
| CVE-2026-92709 | Rsyslog: DynFile Path Traversal → Arbitrary File Write as Root → RCE | HIGH | 7.7 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-98442 | net/sched: act_ct: fix helper UAF due to extensions realloc | HIGH | 7.7 | 2%ile | Microsoft | 2026-10-13 |
| CVE-2026-98490 | net: openvswitch: conntrack: fix helper UAF due to extensions realloc | HIGH | 7.7 | 53%ile | Microsoft | 2026-10-13 |
| CVE-2026-98559 | net/smc: fix UAF on lgr list traversal in smcr_port_err() | HIGH | 7.7 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-98720 | KVM: nVMX: Force MSR bitmap refresh if runtime eVMCS controls are modified | HIGH | 7.7 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-99059 | wireguard: noise: reject response consumption after intermediate initiation | HIGH | 7.7 | 43%ile | Microsoft | 2026-10-13 |
| CVE-2026-102231 | Visual Studio Code Security Feature Bypass Vulnerability | HIGH | 7.7 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-108456 | Azure AI Foundry Elevation of Privilege Vulnerability | HIGH | 7.7 | 53%ile | Microsoft | 2026-10-13 |
| CVE-2026-83947 | Azure Event Grid Spoofing Vulnerability | HIGH | 7.7 | 45%ile | Microsoft | 2026-10-13 |
| CVE-2026-85888 | Microsoft SQL Server Information Disclosure Vulnerability | HIGH | 7.7 | 56%ile | Microsoft | 2026-10-13 |
| CVE-2026-88081 | Microsoft SQL Server Information Disclosure Vulnerability | HIGH | 7.7 | 56%ile | Microsoft | 2026-10-13 |
| CVE-2026-98968 | amt: send the relay's General Query directly from the receive path | HIGH | 7.7 | 45%ile | Microsoft | 2026-10-13 |
| CVE-2026-115484 | Open-iscsi: open-iscsi: dhcpv4 option parser heap out-of-bounds read in iscsiuio parse_msg | HIGH | 7.6 | 13%ile | Microsoft | 2026-10-13 |
| CVE-2026-106196 | Chromium CVE-2026-106196: Missing authorization | HIGH | 7.6 | 18%ile | Microsoft | 2026-10-13 |
| CVE-2026-99128 | sctp: validate chunk length in the inqueue parser | HIGH | 7.5 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-107161 | Cyrus-sasl: heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise digest- | HIGH | 7.5 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-107349 | Infinite loop on empty option name in startup options parameter in PgBouncer | HIGH | 7.5 | 35%ile | Microsoft | 2026-10-13 |
| CVE-2026-110354 | HAProxy 3 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (persistent worker-thread C | HIGH | 7.5 | 57%ile | Microsoft | 2026-10-13 |
| CVE-2026-115506 | libexpat through 2.9.0 Denial of Service via Billion Laughs Detection Delay | HIGH | 7.5 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-115776 | Twisted: Unauthenticated Remote Denial of Service in the Twisted IRC Server via an Unbounded Line Buffer | HIGH | 7.5 | 43%ile | Microsoft | 2026-10-13 |
| CVE-2026-115778 | Twisted: Unauthenticated Remote Denial of Service in the Twisted conch Telnet Transport via an Unbounded Subnegotiation | HIGH | 7.5 | 46%ile | Microsoft | 2026-10-13 |
| CVE-2026-19630 | Amplified resource exhaustion in inbound message processing | HIGH | 7.5 | 39%ile | Microsoft | 2026-10-13 |
| CVE-2026-46729 | Apache HTTP Server: mod_heartmonitor denial of service | HIGH | 7.5 | 39%ile | Microsoft | 2026-10-13 |
| CVE-2026-47360 | Apache HTTP Server: mod_session: Session cookie not removed during internal redirect | HIGH | 7.5 | 31%ile | Microsoft | 2026-10-13 |
| CVE-2026-48005 | Apache HTTP Server: mod_auth_digest reauthentication attack | HIGH | 7.5 | 47%ile | Microsoft | 2026-10-13 |
| CVE-2026-56449 | Apache HTTP Server: mod_proxy_html: crash in dump_content | HIGH | 7.5 | 47%ile | Microsoft | 2026-10-13 |
| CVE-2026-56851 | Panic parsing crafted input in x/text/secure/precis in golang.org/x/text | HIGH | 7.5 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-56866 | HTTP/1 client connection desynchronization after CONNECT rejection in net/http | HIGH | 7.5 | 41%ile | Microsoft | 2026-10-13 |
| CVE-2026-63045 | Apache HTTP Server: mod_proxy_ftp PASV address handling | HIGH | 7.5 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-63292 | Apache HTTP Server: mod_vhost_alias stack overflow | HIGH | 7.5 | 61%ile | Microsoft | 2026-10-13 |
| CVE-2026-63686 | Apache HTTP Server: mod_xml2enc crash on charset conversion failure | HIGH | 7.5 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-67693 | An issue in gnutls v.3.8.13 allows an attacker to obtain sensitive information via failing to reject end-entity X.509 ce | HIGH | 7.5 | 4%ile | Microsoft | 2026-10-13 |
| CVE-2026-77207 | Null Pointer Dereference in PKCS#7 bundle with no certificates | HIGH | 7.5 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-78659 | HTTP/2 server memory exhaustion due to Trailer headers in net/http | HIGH | 7.5 | 50%ile | Microsoft | 2026-10-13 |
| CVE-2026-78660 | HTTP/2 transport accepts malformed framing-related headers in net/http | HIGH | 7.5 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-78667 | Lack of limit on size of parsed Range headers in net/http | HIGH | 7.5 | 41%ile | Microsoft | 2026-10-13 |
| CVE-2026-78669 | Excessive CPU consumption from repeated initial window changes in net/http | HIGH | 7.5 | 49%ile | Microsoft | 2026-10-13 |
| CVE-2026-86414 | leaking host credentials to HTTP proxy | HIGH | 7.5 | 52%ile | Microsoft | 2026-10-13 |
| CVE-2026-94439 | HTTP/1 server connection desynchronization after 2xx CONNECT response in net/http | HIGH | 7.5 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-94440 | Memory limit bypass when parsing MIME headers in net/textproto, mime/multipart | HIGH | 7.5 | 44%ile | Microsoft | 2026-10-13 |
| CVE-2026-94453 | IKEv2 Use-After-Free bug when using IKE-over-TCP | HIGH | 7.5 | 39%ile | Microsoft | 2026-10-13 |
| CVE-2026-95124 | Buffer Overflow vulnerability in madmurphy libconfini v.1.16.4 allows a remote attacker to cause a denial of service via | HIGH | 7.5 | 46%ile | Microsoft | 2026-10-13 |
| CVE-2026-95184 | Improper certificate validation in gnutls v3.8.13 causes the application to reject legitimate certificates for valid use | HIGH | 7.5 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-95209 | An issue in gnutls v3.8.13 causes legitimate CA certificates to be rejected, leading to a Denial of Service (DoS). | HIGH | 7.5 | 15%ile | Microsoft | 2026-10-13 |
| CVE-2026-96888 | Named may terminate unexpectedly when a redirect zone is used with strict QNAME minimization | HIGH | 7.5 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-97031 | Reject malformed ECH outer extension references in crypto/tls | HIGH | 7.5 | 44%ile | Microsoft | 2026-10-13 |
| CVE-2026-97032 | HTTP/2 server crash due to HPACK encoder race in net/http | HIGH | 7.5 | 42%ile | Microsoft | 2026-10-13 |
| CVE-2026-97206 | DNS-over-QUIC (DoQ) path-migration can lead to use-after-free on multi-threaded deployments. | HIGH | 7.5 | 27%ile | Microsoft | 2026-10-13 |
| CVE-2026-97313 | Specific RPZ configurations and query patterns may result in an unexpected exit | HIGH | 7.5 | 39%ile | Microsoft | 2026-10-13 |
| CVE-2026-98561 | nfp: hold IPsec RX state under the XArray lock | HIGH | 7.5 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-98707 | wifi: mac80211: shut down RX BA session timer on teardown | HIGH | 7.5 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98734 | Bluetooth: hci_core: Serialize SCO and ISO scheduling with teardown | HIGH | 7.5 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98735 | Bluetooth: hci_core: Serialize ACL scheduling with channel deletion | HIGH | 7.5 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98846 | sctp: check RCV_SHUTDOWN after the sendmsg connect wait | HIGH | 7.5 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98857 | ipvs: bound LBLCR and LBLC cache growth | HIGH | 7.5 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-99081 | bnxt_en: fix DMA mapping length for padded small packets | HIGH | 7.5 | 44%ile | Microsoft | 2026-10-13 |
| CVE-2026-102192 | Windows Failover Cluster Denial of Service Vulnerability | HIGH | 7.5 | 70%ile | Microsoft | 2026-10-13 |
| CVE-2026-103558 | Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability | HIGH | 7.5 | 62%ile | Microsoft | 2026-10-13 |
| CVE-2026-103569 | Windows IKE Extension Information Disclosure Vulnerability | HIGH | 7.5 | 66%ile | Microsoft | 2026-10-13 |
| CVE-2026-103577 | Microsoft QUIC Security Feature Bypass Vulnerability | HIGH | 7.5 | 47%ile | Microsoft | 2026-10-13 |
| CVE-2026-105009 | Windows Server Update Service Elevation of Privilege Vulnerability | HIGH | 7.5 | 25%ile | Microsoft | 2026-10-13 |
| CVE-2026-105592 | Microsoft Office Access Remote Code Execution Vulnerability | HIGH | 7.5 | 49%ile | Microsoft | 2026-10-13 |
| CVE-2026-105599 | Microsoft Office PowerPoint Remote Code Execution Vulnerability | HIGH | 7.5 | 50%ile | Microsoft | 2026-10-13 |
| CVE-2026-105714 | Microsoft Office Access Remote Code Execution Vulnerability | HIGH | 7.5 | 49%ile | Microsoft | 2026-10-13 |
| CVE-2026-105715 | Microsoft Office Word Remote Code Execution Vulnerability | HIGH | 7.5 | 49%ile | Microsoft | 2026-10-13 |
| CVE-2026-105723 | Windows Distributed File System (DFS) Elevation of Privilege Vulnerability | HIGH | 7.5 | 71%ile | Microsoft | 2026-10-13 |
| CVE-2026-105728 | Dynamics Business Central Information Disclosure Vulnerability | HIGH | 7.5 | 62%ile | Microsoft | 2026-10-13 |
| CVE-2026-108131 | Active Directory Federation Services (AD FS) Spoofing Vulnerability | HIGH | 7.5 | 59%ile | Microsoft | 2026-10-13 |
| CVE-2026-108448 | Microsoft Office Outlook Remote Code Execution Vulnerability | HIGH | 7.5 | 41%ile | Microsoft | 2026-10-13 |
| CVE-2026-109468 | ASP.NET Core Denial of Service Vulnerability | HIGH | 7.5 | 61%ile | Microsoft | 2026-10-13 |
| CVE-2026-58280 | .NET Denial of Service Vulnerability | HIGH | 7.5 | 69%ile | Microsoft | 2026-10-13 |
| CVE-2026-69454 | Microsoft Azure Attestation service and Device Health Attestation Service Information Disclosure Vulnerability | HIGH | 7.5 | 66%ile | Microsoft | 2026-10-13 |
| CVE-2026-69577 | Microsoft Azure Attestation service and Device Health Attestation Service Information Disclosure Vulnerability | HIGH | 7.5 | 65%ile | Microsoft | 2026-10-13 |
| CVE-2026-69651 | .NET Denial of Service Vulnerability | HIGH | 7.5 | 69%ile | Microsoft | 2026-10-13 |
| CVE-2026-69789 | Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability | HIGH | 7.5 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-69976 | Remote Desktop Client Remote Code Execution Vulnerability | HIGH | 7.5 | 50%ile | Microsoft | 2026-10-13 |
| CVE-2026-69984 | Remote Desktop Client Remote Code Execution Vulnerability | HIGH | 7.5 | 50%ile | Microsoft | 2026-10-13 |
| CVE-2026-69986 | Remote Desktop Client Remote Code Execution Vulnerability | HIGH | 7.5 | 50%ile | Microsoft | 2026-10-13 |
| CVE-2026-69987 | Remote Desktop Client Remote Code Execution Vulnerability | HIGH | 7.5 | 50%ile | Microsoft | 2026-10-13 |
| CVE-2026-69988 | Remote Desktop Client Remote Code Execution Vulnerability | HIGH | 7.5 | 50%ile | Microsoft | 2026-10-13 |
| CVE-2026-69991 | Remote Desktop Client Remote Code Execution Vulnerability | HIGH | 7.5 | 50%ile | Microsoft | 2026-10-13 |
| CVE-2026-69992 | Remote Desktop Services Remote Code Execution Vulnerability | HIGH | 7.5 | 50%ile | Microsoft | 2026-10-13 |
| CVE-2026-69994 | Remote Desktop Client Remote Code Execution Vulnerability | HIGH | 7.5 | 50%ile | Microsoft | 2026-10-13 |
| CVE-2026-69995 | Remote Desktop Client Remote Code Execution Vulnerability | HIGH | 7.5 | 50%ile | Microsoft | 2026-10-13 |
| CVE-2026-69996 | Remote Desktop Client Remote Code Execution Vulnerability | HIGH | 7.5 | 50%ile | Microsoft | 2026-10-13 |
| CVE-2026-69997 | Remote Desktop Client Remote Code Execution Vulnerability | HIGH | 7.5 | 50%ile | Microsoft | 2026-10-13 |
| CVE-2026-69998 | Remote Desktop Client Remote Code Execution Vulnerability | HIGH | 7.5 | 50%ile | Microsoft | 2026-10-13 |
| CVE-2026-70004 | Remote Desktop Client Remote Code Execution Vulnerability | HIGH | 7.5 | 50%ile | Microsoft | 2026-10-13 |
| CVE-2026-70006 | Remote Desktop Client Remote Code Execution Vulnerability | HIGH | 7.5 | 50%ile | Microsoft | 2026-10-13 |
| CVE-2026-70012 | Remote Desktop Client Remote Code Execution Vulnerability | HIGH | 7.5 | 50%ile | Microsoft | 2026-10-13 |
| CVE-2026-70014 | Windows Cryptographic Services Remote Code Execution Vulnerability | HIGH | 7.5 | 55%ile | Microsoft | 2026-10-13 |
| CVE-2026-70031 | Windows iSCSI Denial of Service Vulnerability | HIGH | 7.5 | 70%ile | Microsoft | 2026-10-13 |
| CVE-2026-70033 | Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability | HIGH | 7.5 | 70%ile | Microsoft | 2026-10-13 |
| CVE-2026-70058 | Windows DHCP Server Remote Code Execution Vulnerability | HIGH | 7.5 | 71%ile | Microsoft | 2026-10-13 |
| CVE-2026-70079 | Windows DNS Denial of Service Vulnerability | HIGH | 7.5 | 70%ile | Microsoft | 2026-10-13 |
| CVE-2026-70082 | Windows DNS Denial of Service Vulnerability | HIGH | 7.5 | 71%ile | Microsoft | 2026-10-13 |
| CVE-2026-70095 | Windows iSCSI Remote Code Execution Vulnerability | HIGH | 7.5 | 50%ile | Microsoft | 2026-10-13 |
| CVE-2026-70133 | Windows SMB Server Denial of Service Vulnerability | HIGH | 7.5 | 70%ile | Microsoft | 2026-10-13 |
| CVE-2026-70155 | Windows DNS Denial of Service Vulnerability | HIGH | 7.5 | 71%ile | Microsoft | 2026-10-13 |
| CVE-2026-70159 | ASP.NET Core Denial of Service Vulnerability | HIGH | 7.5 | 69%ile | Microsoft | 2026-10-13 |
| CVE-2026-70163 | Microsoft OpenSSH for Windows Denial of Service Vulnerability | HIGH | 7.5 | 69%ile | Microsoft | 2026-10-13 |
| CVE-2026-70179 | ASP.NET Core Elevation of Privilege Vulnerability | HIGH | 7.5 | 50%ile | Microsoft | 2026-10-13 |
| CVE-2026-70181 | ASP.NET Core Denial of Service Vulnerability | HIGH | 7.5 | 69%ile | Microsoft | 2026-10-13 |
| CVE-2026-70183 | ASP.NET Core Elevation of Privilege Vulnerability | HIGH | 7.5 | 45%ile | Microsoft | 2026-10-13 |
| CVE-2026-70186 | ASP.NET Core Denial of Service Vulnerability | HIGH | 7.5 | 62%ile | Microsoft | 2026-10-13 |
| CVE-2026-70202 | Microsoft Office SharePoint Elevation of Privilege Vulnerability | HIGH | 7.5 | 47%ile | Microsoft | 2026-10-13 |
| CVE-2026-70207 | Network Policy Server (NPS) Remote Code Execution Vulnerability | HIGH | 7.5 | 55%ile | Microsoft | 2026-10-13 |
| CVE-2026-70251 | Microsoft Office SharePoint Elevation of Privilege Vulnerability | HIGH | 7.5 | 50%ile | Microsoft | 2026-10-13 |
| CVE-2026-70281 | Microsoft Office Outlook Information Disclosure Vulnerability | HIGH | 7.5 | 66%ile | Microsoft | 2026-10-13 |
| CVE-2026-83516 | Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability | HIGH | 7.5 | 71%ile | Microsoft | 2026-10-13 |
| CVE-2026-83635 | Role: DNS Server Denial of Service Vulnerability | HIGH | 7.5 | 71%ile | Microsoft | 2026-10-13 |
| CVE-2026-83645 | Active Directory Federation Services (AD FS) Denial of Service Vulnerability | HIGH | 7.5 | 69%ile | Microsoft | 2026-10-13 |
| CVE-2026-83647 | Windows Active Directory Domain Services Denial of Service Vulnerability | HIGH | 7.5 | 70%ile | Microsoft | 2026-10-13 |
| CVE-2026-83655 | Network Policy Server (NPS) Denial of Service Vulnerability | HIGH | 7.5 | 71%ile | Microsoft | 2026-10-13 |
| CVE-2026-83665 | Windows DHCP Server Denial of Service Vulnerability | HIGH | 7.5 | 71%ile | Microsoft | 2026-10-13 |
| CVE-2026-83670 | Function Discovery Service (fdwsd.dll) Information Disclosure Vulnerability | HIGH | 7.5 | 65%ile | Microsoft | 2026-10-13 |
| CVE-2026-83677 | Windows DHCP Client Denial of Service Vulnerability | HIGH | 7.5 | 66%ile | Microsoft | 2026-10-13 |
| CVE-2026-83739 | Windows Bluetooth Service Remote Code Execution Vulnerability | HIGH | 7.5 | 41%ile | Microsoft | 2026-10-13 |
| CVE-2026-83754 | Microsoft OpenSSH for Windows Remote Code Execution Vulnerability | HIGH | 7.5 | 52%ile | Microsoft | 2026-10-13 |
| CVE-2026-83795 | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability | HIGH | 7.5 | 70%ile | Microsoft | 2026-10-13 |
| CVE-2026-83843 | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability | HIGH | 7.5 | 70%ile | Microsoft | 2026-10-13 |
| CVE-2026-83855 | Windows WLAN Service Denial of Service Vulnerability | HIGH | 7.5 | 71%ile | Microsoft | 2026-10-13 |
| CVE-2026-83856 | Windows Event Logging Service Remote Code Execution Vulnerability | HIGH | 7.5 | 50%ile | Microsoft | 2026-10-13 |
| CVE-2026-83860 | Windows GDI Denial of Service Vulnerability | HIGH | 7.5 | 70%ile | Microsoft | 2026-10-13 |
| CVE-2026-84008 | .NET Denial of Service Vulnerability | HIGH | 7.5 | 62%ile | Microsoft | 2026-10-13 |
| CVE-2026-84017 | Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability | HIGH | 7.5 | 66%ile | Microsoft | 2026-10-13 |
| CVE-2026-85319 | Active Directory Federation Services (AD FS) Denial of Service Vulnerability | HIGH | 7.5 | 65%ile | Microsoft | 2026-10-13 |
| CVE-2026-85321 | Active Directory Federation Services (AD FS) Denial of Service Vulnerability | HIGH | 7.5 | 64%ile | Microsoft | 2026-10-13 |
| CVE-2026-85322 | Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability | HIGH | 7.5 | 64%ile | Microsoft | 2026-10-13 |
| CVE-2026-85324 | Active Directory Federation Services (AD FS) Denial of Service Vulnerability | HIGH | 7.5 | 55%ile | Microsoft | 2026-10-13 |
| CVE-2026-85334 | Windows Message Queuing Queue Manager Information Disclosure Vulnerability | HIGH | 7.5 | 62%ile | Microsoft | 2026-10-13 |
| CVE-2026-85353 | Windows Print Spooler Components Information Disclosure Vulnerability | HIGH | 7.5 | 62%ile | Microsoft | 2026-10-13 |
| CVE-2026-85808 | Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability | HIGH | 7.5 | 66%ile | Microsoft | 2026-10-13 |
| CVE-2026-85811 | Network Policy Server (NPS) Remote Code Execution Vulnerability | HIGH | 7.5 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-85891 | Azure HDInsight Information Disclosure Vulnerability | HIGH | 7.5 | 60%ile | Microsoft | 2026-10-13 |
| CVE-2026-87696 | Microsoft Exchange Server Elevation of Privilege Vulnerability | HIGH | 7.5 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-87713 | Windows Bluetooth Port Driver Remote Code Execution | HIGH | 7.5 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-87716 | Windows Storage Spaces Controller Denial of Service Vulnerability | HIGH | 7.5 | 66%ile | Microsoft | 2026-10-13 |
| CVE-2026-88083 | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH | 7.5 | 43%ile | Microsoft | 2026-10-13 |
| CVE-2026-88206 | Microsoft Office SharePoint Elevation of Privilege Vulnerability | HIGH | 7.5 | 47%ile | Microsoft | 2026-10-13 |
| CVE-2026-88207 | Microsoft Office PowerPoint Remote Code Execution Vulnerability | HIGH | 7.5 | 48%ile | Microsoft | 2026-10-13 |
| CVE-2026-96071 | Windows Media Remote Code Execution Vulnerability | HIGH | 7.5 | 50%ile | Microsoft | 2026-10-13 |
| CVE-2026-96185 | Microsoft Exchange Online Remote Code Execution Vulnerability | HIGH | 7.5 | 45%ile | Microsoft | 2026-10-13 |
| CVE-2026-96232 | .NET Information Disclosure Vulnerability | HIGH | 7.5 | 60%ile | Microsoft | 2026-10-13 |
| CVE-2026-96233 | ASP.NET Core Denial of Service Vulnerability | HIGH | 7.5 | 62%ile | Microsoft | 2026-10-13 |
| CVE-2026-96236 | ASP.NET Core Denial of Service Vulnerability | HIGH | 7.5 | 65%ile | Microsoft | 2026-10-13 |
| CVE-2026-96237 | .NET Remote Code Execution Vulnerability | HIGH | 7.5 | 51%ile | Microsoft | 2026-10-13 |
| CVE-2026-96245 | Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability | HIGH | 7.5 | 62%ile | Microsoft | 2026-10-13 |
| CVE-2026-96246 | Network Policy Server (NPS) Information Disclosure Vulnerability | HIGH | 7.5 | 62%ile | Microsoft | 2026-10-13 |
| CVE-2026-96248 | Windows Host Guardian Service Denial of Service Vulnerability | HIGH | 7.5 | 66%ile | Microsoft | 2026-10-13 |
| CVE-2026-96325 | Windows SMB Server Denial of Service Vulnerability | HIGH | 7.5 | 64%ile | Microsoft | 2026-10-13 |
| CVE-2026-96861 | Network Device Enrollment Service (NDES) Denial of Service Vulnerability | HIGH | 7.5 | 66%ile | Microsoft | 2026-10-13 |
| CVE-2026-96866 | Network Device Enrollment Service (NDES) Denial of Service Vulnerability | HIGH | 7.5 | 66%ile | Microsoft | 2026-10-13 |
| CVE-2026-96945 | Windows Failover Cluster Denial of Service Vulnerability | HIGH | 7.5 | 64%ile | Microsoft | 2026-10-13 |
| CVE-2026-96958 | .NET Denial of Service Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-10-13 |
| CVE-2026-96959 | .NET Denial of Service Vulnerability | HIGH | 7.5 | 62%ile | Microsoft | 2026-10-13 |
| CVE-2026-96960 | .NET Denial of Service Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-10-13 |
| CVE-2026-97788 | Active Directory Federation Services (AD FS) Information Disclosure Vulnerability | HIGH | 7.5 | 59%ile | Microsoft | 2026-10-13 |
| CVE-2026-97789 | Remote Desktop Client Remote Code Execution Vulnerability | HIGH | 7.5 | 46%ile | Microsoft | 2026-10-13 |
| CVE-2026-97801 | .NET Framework Tampering Vulnerability | HIGH | 7.5 | 54%ile | Microsoft | 2026-10-13 |
| CVE-2026-97830 | Windows Internet Information Services Denial of Service Vulnerability | HIGH | 7.5 | 65%ile | Microsoft | 2026-10-13 |
| CVE-2026-111181 | body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body | HIGH | 7.5 | 33%ile | Microsoft | 2026-10-13 |
| CVE-2026-107300 | msgpack5: Many buffered values can exhaust the streaming decoder stack | HIGH | 7.5 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-107302 | msgpack5: Truncated map32 headers throw an unexpected error | HIGH | 7.5 | 44%ile | Microsoft | 2026-10-13 |
| CVE-2026-77206 | IKEv2 pre-authentication Null Pointer Dereference in EAP code | HIGH | 7.5 | 52%ile | Microsoft | 2026-10-13 |
| CVE-2026-111943 | Go: CVE-2026-111943 Distrust compromised intermediate certificates in crypto/x509 | HIGH | 7.4 | 34%ile | Microsoft | 2026-10-13 |
| CVE-2026-104252 | Vitess vttablet /twopcz reflected XSS | HIGH | 7.4 | 68%ile | Microsoft | 2026-10-13 |
| CVE-2026-105482 | A flaw in Node.js DNS resolution allows hostnames containing a NUL byte to be silently truncated by the dns.resolve*() f | HIGH | 7.4 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-105483 | A flaw in Node.js TLS hostname verification allows a certificate without a matching IP address SAN to authenticate a con | HIGH | 7.4 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-106069 | A flaw in Node.js TLS hostname verification can cause a server certificate to be validated against a different IP addres | HIGH | 7.4 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-46572 | In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ib_cut_tail() in libntfs-3g/index.c that allows an att | HIGH | 7.4 | 4%ile | Microsoft | 2026-10-13 |
| CVE-2026-88647 | A hostname verification bypass in GnuTLS v3.8.13 allows attackers to circumvent the Common Name fallback mechanism and e | HIGH | 7.4 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-98549 | tcp: prevent collapsing skbs across boundary in rtx queue | HIGH | 7.4 | 47%ile | Microsoft | 2026-10-13 |
| CVE-2026-98570 | net: ipv6: keep room for the mac header in dst_dev_overhead() | HIGH | 7.4 | 9%ile | Microsoft | 2026-10-13 |
| CVE-2026-99076 | ipv6: udp: Create exceptions before socket matching | HIGH | 7.4 | 4%ile | Microsoft | 2026-10-13 |
| CVE-2026-99077 | ipv4: udp: Create exceptions before socket matching | HIGH | 7.4 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-102234 | Visual Studio Code Security Feature Bypass Vulnerability | HIGH | 7.4 | 57%ile | Microsoft | 2026-10-13 |
| CVE-2026-105013 | Microsoft Office SharePoint Remote Code Execution Vulnerability | HIGH | 7.4 | 61%ile | Microsoft | 2026-10-13 |
| CVE-2026-106279 | Chromium CVE-2026-106279: Incorrect reference resolution | HIGH | 7.4 | 0%ile | Microsoft | 2026-10-13 |
| CVE-2026-83511 | Active Directory Federation Services (AD FS) Spoofing Vulnerability | HIGH | 7.4 | 51%ile | Microsoft | 2026-10-13 |
| CVE-2026-85922 | Azure Key Vault Security Feature Bypass Vulnerability | HIGH | 7.4 | 49%ile | Microsoft | 2026-10-13 |
| CVE-2026-87705 | Windows Hyper-V Security Feature Bypass Vulnerability | HIGH | 7.4 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-96222 | Active Directory Federation Services (AD FS) Spoofing Vulnerability | HIGH | 7.4 | 48%ile | Microsoft | 2026-10-13 |
| CVE-2026-87866 | wolfSSL public-key pinning bypass | HIGH | 7.4 | 44%ile | Microsoft | 2026-10-13 |
| CVE-2026-116620 | Tencent RapidJSON Regex stream.h Take out-of-bounds | HIGH | 7.3 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-73637 | Apache HTTP Server: mod_auth_digest DoS attack | HIGH | 7.3 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-100207 | Azure CycleCloud Remote Code Execution Vulnerability | HIGH | 7.3 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-105732 | SysInternals Elevation of Privilege Vulnerability | HIGH | 7.3 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-106189 | Chromium CVE-2026-106189: Code injection | HIGH | 7.3 | 22%ile | Microsoft | 2026-10-13 |
| CVE-2026-70161 | .NET Elevation of Privilege Vulnerability | HIGH | 7.3 | 42%ile | Microsoft | 2026-10-13 |
| CVE-2026-70190 | .NET Elevation of Privilege Vulnerability | HIGH | 7.3 | 42%ile | Microsoft | 2026-10-13 |
| CVE-2026-88204 | Microsoft Office SharePoint Spoofing Vulnerability | HIGH | 7.3 | 50%ile | Microsoft | 2026-10-13 |
| CVE-2026-96188 | Microsoft PowerToys Elevation of Privilege Vulnerability | HIGH | 7.3 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-88829 | Busybox: busybox: http request smuggling via pipelined requests in httpd reverse proxy | HIGH | 7.2 | 18%ile | Microsoft | 2026-10-13 |
| CVE-2026-108399 | Windows Hyper-V Elevation of Privilege Vulnerability | HIGH | 7.2 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-70267 | Microsoft Office SharePoint Remote Code Execution Vulnerability | HIGH | 7.2 | 63%ile | Microsoft | 2026-10-13 |
| CVE-2026-85798 | Windows Distributed File System (DFS) Remote Code Execution Vulnerability | HIGH | 7.2 | 59%ile | Microsoft | 2026-10-13 |
| CVE-2026-99124 | s390/pci: Fix leak of uninitialized kernel data in SCLP report | HIGH | 7.1 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-99136 | dm-crypt: fix a tiny race condition in crypt_dec_pending | HIGH | 7.1 | 2%ile | Microsoft | 2026-10-13 |
| CVE-2026-99147 | drm/exec: don't immediately add prelocked obj to array of locked objs | HIGH | 7.1 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-99161 | i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe() | HIGH | 7.1 | 9%ile | Microsoft | 2026-10-13 |
| CVE-2026-99172 | ipc: drop the mqueue mount with kern_unmount() on setup failure | HIGH | 7.1 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-99174 | ext4: free the sbi after a grace period | HIGH | 7.1 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-99182 | ASoC: SOF: ipc4-topology: Fix shift-out-of-bounds for aggregated ALH capture | HIGH | 7.1 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-99204 | ocfs2/dlm: Protect the recovery list during debugfs reads | HIGH | 7.1 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-108985 | ZDR decoding in libnfs through 6.0.2 before 7613236 has an out-of-bounds write related to lib/libnfs-zdr.c with libnfs_z | HIGH | 7.1 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-115486 | Open-iscsi: open-iscsi: ipv6 neighbor discovery missing option length validation in iscsiuio allows arp table poisoning | HIGH | 7.1 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-42617 | In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ir_to_ib() in index.c that allows an attacker to corru | HIGH | 7.1 | 4%ile | Microsoft | 2026-10-13 |
| CVE-2026-42618 | In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_decompress() in compress.c that allows an attacker to | HIGH | 7.1 | 4%ile | Microsoft | 2026-10-13 |
| CVE-2026-98169 | smb: client: fix potential OOB read in smb3_enum_snapshots() | HIGH | 7.1 | 39%ile | Microsoft | 2026-10-13 |
| CVE-2026-98189 | wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() | HIGH | 7.1 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98197 | hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove | HIGH | 7.1 | 2%ile | Microsoft | 2026-10-13 |
| CVE-2026-98200 | hwmon: (hp-wmi-sensors) Fix use-after-free in fungible_show() | HIGH | 7.1 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98201 | Input: zero ff_effect before compat copy in input_ff_effect_from_user | HIGH | 7.1 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98204 | Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() | HIGH | 7.1 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98208 | mmc: sdio_uart: fix xmit_fifo leak when the port table is full | HIGH | 7.1 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98210 | mmc: mxcmmc: cancel data work and watchdog on remove | HIGH | 7.1 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98213 | mmc: core: Cancel SDIO IRQ work before freeing host | HIGH | 7.1 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-98218 | i2c: atr: fix dangling adapter pointer on add failure | HIGH | 7.1 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98231 | xfrm: serialize state GC with device state flush | HIGH | 7.1 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-98234 | net/sched: hhf: cap hh_flows_limit at change time | HIGH | 7.1 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98236 | net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value | HIGH | 7.1 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98239 | net: lan743x: fix RX checksum use-after-free | HIGH | 7.1 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-98246 | Bluetooth: hci_sync: Serialize local codec list cleanup | HIGH | 7.1 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98264 | ALSA: virtio: reset device before deleting virtqueues | HIGH | 7.1 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98293 | Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() | HIGH | 7.1 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98294 | Bluetooth: hci_qca: Do not write to the serial port after it is closed | HIGH | 7.1 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98357 | IB/isert: wait for deferred control PDU completions before releasing the connection | HIGH | 7.1 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-98360 | RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds | HIGH | 7.1 | 3%ile | Microsoft | 2026-10-13 |
| CVE-2026-98364 | xfrm: hold net_device reference under RCU in bundle creation | HIGH | 7.1 | 2%ile | Microsoft | 2026-10-13 |
| CVE-2026-98369 | xfrm: add missing rcu_read_lock(), skb_dst_force() and dev_hold() for xfrm_trans_reinject() | HIGH | 7.1 | 3%ile | Microsoft | 2026-10-13 |
| CVE-2026-98374 | tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack() | HIGH | 7.1 | 22%ile | Microsoft | 2026-10-13 |
| CVE-2026-98383 | bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL | HIGH | 7.1 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-98457 | Bluetooth: L2CAP: validate frame length before control and FCS access | HIGH | 7.1 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-98460 | Bluetooth: hci_sock: reject out-of-range OCF values | HIGH | 7.1 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98479 | scsi: libiscsi_tcp: Check the data direction of a Data-In PDU | HIGH | 7.1 | 33%ile | Microsoft | 2026-10-13 |
| CVE-2026-98517 | drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM | HIGH | 7.1 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98626 | bpf: Restrict CO-RE poisoning to relocatable instructions | HIGH | 7.1 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-98686 | smb: client: discard post-EOF pagecache when extending a file via zero range | HIGH | 7.1 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98706 | wifi: mac80211: drain PS delivery work during station teardown | HIGH | 7.1 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98709 | wifi: mac80211: count only matching reservations in reserved switch | HIGH | 7.1 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98736 | Bluetooth: hci_conn: Lock parent access during enhanced SCO setup | HIGH | 7.1 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98737 | Bluetooth: hci_sync: Fix inquiry cache use-after-free | HIGH | 7.1 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-98781 | drm/mediatek: Fix pdev reference leak in mtk_drm_bind() | HIGH | 7.1 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98782 | drm/mediatek: Fix ovl adaptor platform device leak | HIGH | 7.1 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98801 | net: restrict SO_RESERVE_MEM to TCP sockets and cap max value | HIGH | 7.1 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98827 | wifi: ath9k_htc: bound TX aggregation to MAX_TX_BUF_SIZE | HIGH | 7.1 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-98881 | net: bridge: remove stale rcu_barrier() in br_multicast_dev_del() | HIGH | 7.1 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-98882 | media: chips-media: wave5: Add range checks for dec_output_info | HIGH | 7.1 | 13%ile | Microsoft | 2026-10-13 |
| CVE-2026-98883 | serial: 8250_port: recognize UPIO_AU | HIGH | 7.1 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-98889 | wifi: iwlwifi: mvm: fix sched scan IE sizing | HIGH | 7.1 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98902 | md/raid5: let stripe batch bm_seq comparison wrap-safe | HIGH | 7.1 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-98904 | mailbox: imx: Use devm_pm_runtime_enable() | HIGH | 7.1 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98907 | btrfs: protect sb_write_pointer() with invalidate lock | HIGH | 7.1 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-98913 | net: thunderx: fix PTP device ref leak in nicvf_probe() | HIGH | 7.1 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98915 | media: video-i2c: use vb2_video_unregister_device on driver removal | HIGH | 7.1 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98916 | wifi: nl80211: check link is beaconing for color change | HIGH | 7.1 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98959 | btrfs: fix xattr replace when multiple xattrs are packed in the same item | HIGH | 7.1 | 49%ile | Microsoft | 2026-10-13 |
| CVE-2026-99002 | drm/vmwgfx: validate pitch coming from userspace | HIGH | 7.1 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-99006 | drm/i915/gem: Prevent overstepping exec array boundary | HIGH | 7.1 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-99032 | net/smc: protect clcsock lifetime in smc_getname | HIGH | 7.1 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-100205 | SysInternals Elevation of Privilege Vulnerability | HIGH | 7.1 | 35%ile | Microsoft | 2026-10-13 |
| CVE-2026-105729 | SysInternals Elevation of Privilege Vulnerability | HIGH | 7.1 | 30%ile | Microsoft | 2026-10-13 |
| CVE-2026-69452 | Windows Enterprise App Management Elevation of Privilege Vulnerability | HIGH | 7.1 | 52%ile | Microsoft | 2026-10-13 |
| CVE-2026-70126 | Windows Bluetooth Port Driver Remote Code Execution | HIGH | 7.1 | 44%ile | Microsoft | 2026-10-13 |
| CVE-2026-83715 | Windows Error Reporting Tampering Vulnerability | HIGH | 7.1 | 25%ile | Microsoft | 2026-10-13 |
| CVE-2026-85856 | Internet Connection Sharing (ICS) Remote Code Execution Vulnerability | HIGH | 7.1 | 30%ile | Microsoft | 2026-10-13 |
| CVE-2026-98436 | accel/amdxdna: Disable device buffer exporting | HIGH | 7.1 | 1%ile | Microsoft | 2026-10-13 |
| CVE-2026-98483 | nfc: fix use-after-free in nfc_get_local_general_bytes | HIGH | 7.1 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-98581 | nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() | HIGH | 7.1 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-98951 | riscv: ptrace: Zero-initialize regset buffers before copyin | HIGH | 7.1 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-99012 | Bluetooth: ISO: Serialize concurrent connect calls | HIGH | 7.1 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-53612 | util-linux mount hook_owner TOCTOU allows local privilege escalation | HIGH | 7.0 | 4%ile | Microsoft | 2026-10-13 |
| CVE-2026-53613 | util-linux mount target TOCTOU allows local privilege escalation | HIGH | 7.0 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-53614 | util-linux LIBMOUNT_FORCE_MOUNT2 allows nosuid and noexec bypass | HIGH | 7.0 | 3%ile | Microsoft | 2026-10-13 |
| CVE-2026-94447 | Checksum database bypass for golang.org/toolchain in cmd/go | HIGH | 7.0 | 1%ile | Microsoft | 2026-10-13 |
| CVE-2026-98375 | xen/netfront: drop RX packets with a short Ethernet header | HIGH | 7.0 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-98456 | Bluetooth: mgmt: fix race in read_unconf_index_list() | HIGH | 7.0 | 2%ile | Microsoft | 2026-10-13 |
| CVE-2026-98491 | net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry | HIGH | 7.0 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98524 | rds: ib: Clear the sg list when mapping an MR fails | HIGH | 7.0 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98548 | sctp: discard the rest of the packet on a stale-cookie error | HIGH | 7.0 | 53%ile | Microsoft | 2026-10-13 |
| CVE-2026-98733 | Bluetooth: hci_core: Serialize fragmented ISO packet queueing | HIGH | 7.0 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-100200 | Windows Update Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-100201 | Windows Client License Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-100203 | Windows Update Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-100216 | Windows Storage Elevation of Privilege Vulnerability | HIGH | 7.0 | 22%ile | Microsoft | 2026-10-13 |
| CVE-2026-100225 | Windows Storage Elevation of Privilege Vulnerability | HIGH | 7.0 | 22%ile | Microsoft | 2026-10-13 |
| CVE-2026-102189 | Windows Storage Elevation of Privilege Vulnerability | HIGH | 7.0 | 22%ile | Microsoft | 2026-10-13 |
| CVE-2026-102191 | Windows Storage Elevation of Privilege Vulnerability | HIGH | 7.0 | 22%ile | Microsoft | 2026-10-13 |
| CVE-2026-102193 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 22%ile | Microsoft | 2026-10-13 |
| CVE-2026-102194 | Windows Graphics Kernel Elevation of Privilege Vulnerability | HIGH | 7.0 | 22%ile | Microsoft | 2026-10-13 |
| CVE-2026-102195 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 22%ile | Microsoft | 2026-10-13 |
| CVE-2026-102197 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 22%ile | Microsoft | 2026-10-13 |
| CVE-2026-102207 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.0 | 13%ile | Microsoft | 2026-10-13 |
| CVE-2026-102208 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability | HIGH | 7.0 | 22%ile | Microsoft | 2026-10-13 |
| CVE-2026-102209 | Microsoft Graphics Component Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-102211 | Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability | HIGH | 7.0 | 13%ile | Microsoft | 2026-10-13 |
| CVE-2026-102232 | Visual Studio Code Security Feature Bypass Vulnerability | HIGH | 7.0 | 28%ile | Microsoft | 2026-10-13 |
| CVE-2026-103554 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-103555 | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-103565 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-105722 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-105725 | Windows Security App Elevation of Privilege Vulnerability | HIGH | 7.0 | 21%ile | Microsoft | 2026-10-13 |
| CVE-2026-108132 | Windows Kerberos Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-108134 | Windows Autopilot Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-108135 | Windows Backup Engine Elevation of Privilege Vulnerability | HIGH | 7.0 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-108396 | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability | HIGH | 7.0 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-108461 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-108464 | Software Protection Platform (SPP) Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-108465 | Windows Update Delivery Optimization Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-108468 | Windows Installer Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-109453 | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-69387 | Windows Error Reporting Elevation of Privilege Vulnerability | HIGH | 7.0 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-69596 | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-69736 | Windows Credential Manager Elevation of Privilege Vulnerability | HIGH | 7.0 | 14%ile | Microsoft | 2026-10-13 |
| CVE-2026-69743 | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-69763 | Windows Storage Elevation of Privilege Vulnerability | HIGH | 7.0 | 14%ile | Microsoft | 2026-10-13 |
| CVE-2026-69766 | Windows Storage Elevation of Privilege Vulnerability | HIGH | 7.0 | 14%ile | Microsoft | 2026-10-13 |
| CVE-2026-69795 | Windows Clipboard Server Elevation of Privilege Vulnerability | HIGH | 7.0 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-69840 | Windows Certificates Elevation of Privilege Vulnerability | HIGH | 7.0 | 19%ile | Microsoft | 2026-10-13 |
| CVE-2026-69856 | Windows Storage Elevation of Privilege Vulnerability | HIGH | 7.0 | 14%ile | Microsoft | 2026-10-13 |
| CVE-2026-69915 | Windows NTFS Elevation of Privilege Vulnerability | HIGH | 7.0 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-69931 | Windows Storage Elevation of Privilege Vulnerability | HIGH | 7.0 | 14%ile | Microsoft | 2026-10-13 |
| CVE-2026-69935 | Windows Storage Elevation of Privilege Vulnerability | HIGH | 7.0 | 14%ile | Microsoft | 2026-10-13 |
| CVE-2026-69964 | Kernel Streaming Service Driver Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-69970 | Kernel Streaming Service Driver Elevation of Privilege Vulnerability | HIGH | 7.0 | 19%ile | Microsoft | 2026-10-13 |
| CVE-2026-69977 | Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege Vulnerability | HIGH | 7.0 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-70021 | Windows Direct Composition Elevation of Privilege Vulnerability | HIGH | 7.0 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-70026 | Windows Secure Kernel Mode Elevation of Privilege Vulnerability | HIGH | 7.0 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-70045 | Windows Work Folders Elevation of Privilege Vulnerability | HIGH | 7.0 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-70056 | Windows Update Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-70066 | Windows DHCP Server Elevation of Privilege Vulnerability | HIGH | 7.0 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-70067 | Windows Win32k Elevation of Privilege Vulnerability | HIGH | 7.0 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-70076 | Windows Win32k Elevation of Privilege Vulnerability | HIGH | 7.0 | 26%ile | Microsoft | 2026-10-13 |
| CVE-2026-70086 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-70115 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-70118 | Windows Audio Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-70134 | Windows Event Tracing Elevation of Privilege Vulnerability | HIGH | 7.0 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-70136 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-70140 | Windows Audio Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-70144 | Windows Win32k Elevation of Privilege Vulnerability | HIGH | 7.0 | 33%ile | Microsoft | 2026-10-13 |
| CVE-2026-70150 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-70156 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | HIGH | 7.0 | 22%ile | Microsoft | 2026-10-13 |
| CVE-2026-70160 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.0 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-70164 | Windows TCP/IP Elevation of Privilege Vulnerability | HIGH | 7.0 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-70168 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | HIGH | 7.0 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-70169 | Windows Connected Devices Platform Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-70176 | Windows Win32k Elevation of Privilege Vulnerability | HIGH | 7.0 | 26%ile | Microsoft | 2026-10-13 |
| CVE-2026-70198 | Windows Push Notifications Elevation of Privilege Vulnerability | HIGH | 7.0 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-70205 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | HIGH | 7.0 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-70209 | Windows Win32k Elevation of Privilege Vulnerability | HIGH | 7.0 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-70212 | Windows Security Center Elevation of Privilege Vulnerability | HIGH | 7.0 | 19%ile | Microsoft | 2026-10-13 |
| CVE-2026-70223 | Windows Console Driver Elevation of Privilege Vulnerability | HIGH | 7.0 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-70230 | Windows Audio Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-70236 | Windows Win32k Elevation of Privilege Vulnerability | HIGH | 7.0 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-70237 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | HIGH | 7.0 | 25%ile | Microsoft | 2026-10-13 |
| CVE-2026-70241 | Windows Kerberos Elevation of Privilege Vulnerability | HIGH | 7.0 | 22%ile | Microsoft | 2026-10-13 |
| CVE-2026-70243 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.0 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-70249 | Windows Win32k Elevation of Privilege Vulnerability | HIGH | 7.0 | 26%ile | Microsoft | 2026-10-13 |
| CVE-2026-70252 | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability | HIGH | 7.0 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-70253 | Windows Win32k Elevation of Privilege Vulnerability | HIGH | 7.0 | 26%ile | Microsoft | 2026-10-13 |
| CVE-2026-70271 | Windows Win32k Elevation of Privilege Vulnerability | HIGH | 7.0 | 26%ile | Microsoft | 2026-10-13 |
| CVE-2026-70272 | Windows Installer Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-70273 | Windows Win32k Elevation of Privilege Vulnerability | HIGH | 7.0 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-70276 | Microsoft Office Click-To-Run Elevation of Privilege Vulnerability | HIGH | 7.0 | 21%ile | Microsoft | 2026-10-13 |
| CVE-2026-72934 | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-72955 | Windows Application Compatibility Cache Elevation of Privilege Vulnerability | HIGH | 7.0 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-72968 | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-72969 | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-81971 | Windows NTFS Elevation of Privilege Vulnerability | HIGH | 7.0 | 14%ile | Microsoft | 2026-10-13 |
| CVE-2026-83505 | Windows Setup Files Cleanup Elevation of Privilege Vulnerability | HIGH | 7.0 | 25%ile | Microsoft | 2026-10-13 |
| CVE-2026-83509 | Windows Setup Files Cleanup Elevation of Privilege Vulnerability | HIGH | 7.0 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-83510 | Windows Setup Files Cleanup Elevation of Privilege Vulnerability | HIGH | 7.0 | 14%ile | Microsoft | 2026-10-13 |
| CVE-2026-83564 | Windows Search Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-83566 | Windows Win32k Elevation of Privilege Vulnerability | HIGH | 7.0 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-83574 | Windows Search Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-83575 | Windows Search Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-83580 | Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 25%ile | Microsoft | 2026-10-13 |
| CVE-2026-83584 | Windows Smart Card Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-83644 | Windows Audio Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-83666 | Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability | HIGH | 7.0 | 13%ile | Microsoft | 2026-10-13 |
| CVE-2026-83675 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.0 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-83676 | Windows Installer Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-83680 | Windows Installer Elevation of Privilege Vulnerability | HIGH | 7.0 | 17%ile | Microsoft | 2026-10-13 |
| CVE-2026-83682 | Windows TCP/IP Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-83687 | Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-83689 | Windows Error Reporting Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-83694 | Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-83696 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-83701 | Windows Now Playing Session Manager Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-83702 | Windows Installer Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-83707 | Windows Event Tracing Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-83708 | Windows Installer Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-83710 | Windows Device Association Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-83717 | Windows Installer Elevation of Privilege Vulnerability | HIGH | 7.0 | 22%ile | Microsoft | 2026-10-13 |
| CVE-2026-83718 | Windows Installer Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-83720 | Windows Kerberos Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-83722 | Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability | HIGH | 7.0 | 13%ile | Microsoft | 2026-10-13 |
| CVE-2026-83724 | Windows Management Instrumentation Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-83738 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | HIGH | 7.0 | 22%ile | Microsoft | 2026-10-13 |
| CVE-2026-83740 | Windows Hello Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-83749 | Windows Overlay Filter Elevation of Privilege Vulnerability | HIGH | 7.0 | 17%ile | Microsoft | 2026-10-13 |
| CVE-2026-83750 | Windows Error Reporting Elevation of Privilege Vulnerability | HIGH | 7.0 | 14%ile | Microsoft | 2026-10-13 |
| CVE-2026-83751 | Windows MIDI Service Module Elevation of Privileges Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-83752 | Windows Installer Elevation of Privilege Vulnerability | HIGH | 7.0 | 17%ile | Microsoft | 2026-10-13 |
| CVE-2026-83775 | Windows Installer Elevation of Privilege Vulnerability | HIGH | 7.0 | 14%ile | Microsoft | 2026-10-13 |
| CVE-2026-83785 | Windows COM+ Event System Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 25%ile | Microsoft | 2026-10-13 |
| CVE-2026-83790 | Windows Hello Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-83793 | Windows Update Orchestrator Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 25%ile | Microsoft | 2026-10-13 |
| CVE-2026-83827 | Windows Bluetooth Port Driver Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-83834 | Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability | HIGH | 7.0 | 22%ile | Microsoft | 2026-10-13 |
| CVE-2026-83839 | Windows Hyper-V Elevation of Privilege Vulnerability | HIGH | 7.0 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-83841 | Windows Win32k Elevation of Privilege Vulnerability | HIGH | 7.0 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-83842 | Windows TCP/IP Elevation of Privilege Vulnerability | HIGH | 7.0 | 22%ile | Microsoft | 2026-10-13 |
| CVE-2026-83846 | Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability | HIGH | 7.0 | 19%ile | Microsoft | 2026-10-13 |
| CVE-2026-83852 | Windows Bind Filter Driver Elevation of Privilege Vulnerability | HIGH | 7.0 | 17%ile | Microsoft | 2026-10-13 |
| CVE-2026-83853 | Windows Hello Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-83866 | Windows Win32k Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-83868 | Microsoft Bluetooth Driver Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-83871 | Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability | HIGH | 7.0 | 13%ile | Microsoft | 2026-10-13 |
| CVE-2026-83879 | Windows Overlay Filter Elevation of Privilege Vulnerability | HIGH | 7.0 | 14%ile | Microsoft | 2026-10-13 |
| CVE-2026-83886 | Windows Update Orchestrator Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 26%ile | Microsoft | 2026-10-13 |
| CVE-2026-83899 | Windows Installer Elevation of Privilege Vulnerability | HIGH | 7.0 | 14%ile | Microsoft | 2026-10-13 |
| CVE-2026-83900 | Windows Bind Filter Driver Elevation of Privilege Vulnerability | HIGH | 7.0 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-83901 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability | HIGH | 7.0 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-83908 | RPC Runtime Elevation of Privilege Vulnerability | HIGH | 7.0 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-83911 | Windows Storage Elevation of Privilege Vulnerability | HIGH | 7.0 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-83915 | Windows Diagnostic Policy Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-83916 | Windows Error Reporting Remote Code Execution Vulnerability | HIGH | 7.0 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-83917 | Windows ALPC Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-83921 | Windows Search Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 19%ile | Microsoft | 2026-10-13 |
| CVE-2026-83924 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.0 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-83930 | Windows Update Orchestrator Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 19%ile | Microsoft | 2026-10-13 |
| CVE-2026-84014 | Windows Device Association Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-84018 | Windows Print Spooler Components Elevation of Privilege Vulnerability | HIGH | 7.0 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-84019 | Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-84020 | Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability | HIGH | 7.0 | 16%ile | Microsoft | 2026-10-13 |
| CVE-2026-85328 | Windows Projected File System Elevation of Privilege Vulnerability | HIGH | 7.0 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-85329 | Microsoft Account Elevation of Privilege Vulnerability | HIGH | 7.0 | 9%ile | Microsoft | 2026-10-13 |
| CVE-2026-85342 | Windows Device Association Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 16%ile | Microsoft | 2026-10-13 |
| CVE-2026-85352 | Windows Device Association Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 16%ile | Microsoft | 2026-10-13 |
| CVE-2026-85354 | Windows Error Reporting Elevation of Privilege Vulnerability | HIGH | 7.0 | 16%ile | Microsoft | 2026-10-13 |
| CVE-2026-85355 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | HIGH | 7.0 | 21%ile | Microsoft | 2026-10-13 |
| CVE-2026-85357 | Windows Phone Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 9%ile | Microsoft | 2026-10-13 |
| CVE-2026-85361 | Windows Installer Elevation of Privilege Vulnerability | HIGH | 7.0 | 16%ile | Microsoft | 2026-10-13 |
| CVE-2026-85362 | Windows Management Instrumentation Elevation of Privilege Vulnerability | HIGH | 7.0 | 16%ile | Microsoft | 2026-10-13 |
| CVE-2026-85364 | Windows Installer Elevation of Privilege Vulnerability | HIGH | 7.0 | 16%ile | Microsoft | 2026-10-13 |
| CVE-2026-85365 | Servicing Stack Updates Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-85367 | Windows Cash Drawer Protocol Provider Elevation of Privilege Vulnerability | HIGH | 7.0 | 16%ile | Microsoft | 2026-10-13 |
| CVE-2026-85370 | WebDAV Elevation of Privilege Vulnerability | HIGH | 7.0 | 17%ile | Microsoft | 2026-10-13 |
| CVE-2026-85372 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.0 | 16%ile | Microsoft | 2026-10-13 |
| CVE-2026-85791 | Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability | HIGH | 7.0 | 21%ile | Microsoft | 2026-10-13 |
| CVE-2026-85802 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-10-13 |
| CVE-2026-85803 | Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability | HIGH | 7.0 | 16%ile | Microsoft | 2026-10-13 |
| CVE-2026-85810 | Windows Telephony Server Elevation of Privilege Vulnerability | HIGH | 7.0 | 16%ile | Microsoft | 2026-10-13 |
| CVE-2026-85823 | Windows Composite Image File System Elevation of Privilege Vulnerability | HIGH | 7.0 | 16%ile | Microsoft | 2026-10-13 |
| CVE-2026-85824 | Windows Composite Image File System Elevation of Privilege Vulnerability | HIGH | 7.0 | 9%ile | Microsoft | 2026-10-13 |
| CVE-2026-85825 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | HIGH | 7.0 | 9%ile | Microsoft | 2026-10-13 |
| CVE-2026-85826 | Windows Fast FAT Driver Elevation of Privilege Vulnerability | HIGH | 7.0 | 16%ile | Microsoft | 2026-10-13 |
| CVE-2026-85827 | WebDAV Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-85828 | WebDAV Elevation of Privilege Vulnerability | HIGH | 7.0 | 16%ile | Microsoft | 2026-10-13 |
| CVE-2026-85834 | Windows TCP/IP Elevation of Privilege Vulnerability | HIGH | 7.0 | 16%ile | Microsoft | 2026-10-13 |
| CVE-2026-85846 | Web Account Manager Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-85853 | Windows DWM Core Library Elevation of Privilege Vulnerability | HIGH | 7.0 | 16%ile | Microsoft | 2026-10-13 |
| CVE-2026-85854 | Windows DWM Core Library Elevation of Privilege Vulnerability | HIGH | 7.0 | 16%ile | Microsoft | 2026-10-13 |
| CVE-2026-85855 | Windows DWM Core Library Elevation of Privilege Vulnerability | HIGH | 7.0 | 27%ile | Microsoft | 2026-10-13 |
| CVE-2026-85868 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-85870 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | HIGH | 7.0 | 25%ile | Microsoft | 2026-10-13 |
| CVE-2026-85876 | Microsoft SQL Server Elevation of Privilege Vulnerability | HIGH | 7.0 | 9%ile | Microsoft | 2026-10-13 |
| CVE-2026-85879 | Windows Subsystem for Linux Elevation of Privilege Vulnerability | HIGH | 7.0 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-85904 | Windows Device Association Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 4%ile | Microsoft | 2026-10-13 |
| CVE-2026-85912 | Clipboard User Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-85914 | Windows Embedded Mode Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-85918 | Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability | HIGH | 7.0 | 16%ile | Microsoft | 2026-10-13 |
| CVE-2026-85919 | Microsoft SQL Server Elevation of Privilege Vulnerability | HIGH | 7.0 | 15%ile | Microsoft | 2026-10-13 |
| CVE-2026-85920 | Windows BitLocker Elevation of Privilege Vulnerability | HIGH | 7.0 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-85930 | Windows Image Acquisition Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-85934 | Windows AppX Deployment Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 16%ile | Microsoft | 2026-10-13 |
| CVE-2026-85941 | Windows Installer Elevation of Privilege Vulnerability | HIGH | 7.0 | 14%ile | Microsoft | 2026-10-13 |
| CVE-2026-85943 | Reliable Multicast Transport Driver (RMCAST) Elevation of Privilege Vulnerability | HIGH | 7.0 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-87693 | Windows Installer Elevation of Privilege Vulnerability | HIGH | 7.0 | 17%ile | Microsoft | 2026-10-13 |
| CVE-2026-87704 | Windows Installer Elevation of Privilege Vulnerability | HIGH | 7.0 | 17%ile | Microsoft | 2026-10-13 |
| CVE-2026-87708 | Windows Installer Elevation of Privilege Vulnerability | HIGH | 7.0 | 16%ile | Microsoft | 2026-10-13 |
| CVE-2026-87710 | Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability | HIGH | 7.0 | 4%ile | Microsoft | 2026-10-13 |
| CVE-2026-87715 | Windows Installer Elevation of Privilege Vulnerability | HIGH | 7.0 | 17%ile | Microsoft | 2026-10-13 |
| CVE-2026-88076 | Windows Installer Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-88079 | Windows MIDI Service Module Elevation of Privileges Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-88082 | Microsoft SQL Server Elevation of Privilege Vulnerability | HIGH | 7.0 | 15%ile | Microsoft | 2026-10-13 |
| CVE-2026-88088 | Microsoft SQL Server Elevation of Privilege Vulnerability | HIGH | 7.0 | 15%ile | Microsoft | 2026-10-13 |
| CVE-2026-88096 | Windows DCOM Server Elevation of Privilege Vulnerability | HIGH | 7.0 | 4%ile | Microsoft | 2026-10-13 |
| CVE-2026-88098 | Windows Security Support Provider Interface Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-88103 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 17%ile | Microsoft | 2026-10-13 |
| CVE-2026-88106 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-88107 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | HIGH | 7.0 | 4%ile | Microsoft | 2026-10-13 |
| CVE-2026-88110 | Windows Graphics Kernel Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-88113 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 17%ile | Microsoft | 2026-10-13 |
| CVE-2026-88124 | Windows Installer Elevation of Privilege Vulnerability | HIGH | 7.0 | 16%ile | Microsoft | 2026-10-13 |
| CVE-2026-88127 | Windows SMB Server Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-88139 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.0 | 17%ile | Microsoft | 2026-10-13 |
| CVE-2026-88141 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.0 | 16%ile | Microsoft | 2026-10-13 |
| CVE-2026-88146 | Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability | HIGH | 7.0 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-88149 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-88160 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | HIGH | 7.0 | 4%ile | Microsoft | 2026-10-13 |
| CVE-2026-88161 | Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability | HIGH | 7.0 | 16%ile | Microsoft | 2026-10-13 |
| CVE-2026-95943 | Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability | HIGH | 7.0 | 19%ile | Microsoft | 2026-10-13 |
| CVE-2026-96209 | Windows Network File System Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-96215 | Windows Autopilot Elevation of Privilege Vulnerability | HIGH | 7.0 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-96216 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.0 | 16%ile | Microsoft | 2026-10-13 |
| CVE-2026-96250 | Windows USB Print Driver Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-96253 | Windows USB Print Driver Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-96254 | Windows USB Print Driver Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-96301 | Windows USB Print Driver Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-96302 | Windows Installer Elevation of Privilege Vulnerability | HIGH | 7.0 | 16%ile | Microsoft | 2026-10-13 |
| CVE-2026-96304 | Windows USB Print Driver Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-96305 | Windows Installer Elevation of Privilege Vulnerability | HIGH | 7.0 | 16%ile | Microsoft | 2026-10-13 |
| CVE-2026-96307 | Windows Installer Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-96310 | Windows USB Print Driver Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-96313 | Windows Push Notifications Elevation of Privilege Vulnerability | HIGH | 7.0 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-96319 | Windows USB Print Driver Elevation of Privilege Vulnerability | HIGH | 7.0 | 16%ile | Microsoft | 2026-10-13 |
| CVE-2026-96322 | Windows Remote Desktop Protocol Elevation of Privilege Vulnerability | HIGH | 7.0 | 17%ile | Microsoft | 2026-10-13 |
| CVE-2026-96323 | Windows Update Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-96852 | Windows TCP/IP Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-96868 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.0 | 16%ile | Microsoft | 2026-10-13 |
| CVE-2026-96919 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 9%ile | Microsoft | 2026-10-13 |
| CVE-2026-96923 | Windows Workstation Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-96932 | Windows Embedded Mode Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-96937 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | HIGH | 7.0 | 17%ile | Microsoft | 2026-10-13 |
| CVE-2026-96939 | Servicing Stack Updates Elevation of Privilege Vulnerability | HIGH | 7.0 | 14%ile | Microsoft | 2026-10-13 |
| CVE-2026-96949 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | HIGH | 7.0 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-97774 | Microsoft Office Click-To-Run Elevation of Privilege Vulnerability | HIGH | 7.0 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-97787 | Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability | HIGH | 7.0 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-97793 | Windows Setup and Deployment Elevation of Privilege Vulnerability | HIGH | 7.0 | 16%ile | Microsoft | 2026-10-13 |
| CVE-2026-97808 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-97810 | Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-97812 | Windows Update Orchestrator Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-113679 | HarfBuzz 8.0.0 through 14.6.0 Out-of-Bounds Write via WebAssembly font_glyph_to_string | HIGH | 7.0 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-105773 | Canimaan Software ClamXAV local privilege escalation | HIGH | 7.0 | 3%ile | Microsoft | 2026-10-13 |
| CVE-2026-49265 | OAuthLib: Timing Attack Vulnerability in PKCE code_verifier Comparison | MEDIUM | 6.8 | 15%ile | Microsoft | 2026-10-13 |
| CVE-2026-98545 | ata: libata-scsi: bound the ATA passthru sense descriptor writes | MEDIUM | 6.8 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-98763 | usb: core: clear both ep_in and ep_out for non-ep0 control endpoints | MEDIUM | 6.8 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98805 | tipc: prevent GCM nonce reuse on peer key changes | MEDIUM | 6.8 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-102188 | Windows Storage Port Driver Elevation of Privilege Vulnerability | MEDIUM | 6.8 | 41%ile | Microsoft | 2026-10-13 |
| CVE-2026-102206 | Windows Portable Device MTP Driver Elevation of Privilege Vulnerability | MEDIUM | 6.8 | 41%ile | Microsoft | 2026-10-13 |
| CVE-2026-102229 | Visual Studio Code Information Disclosure Vulnerability | MEDIUM | 6.8 | 64%ile | Microsoft | 2026-10-13 |
| CVE-2026-103578 | Windows Kernel Elevation of Privilege Vulnerability | MEDIUM | 6.8 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-59116 | Windows Remote Desktop Security Feature Bypass Vulnerability | MEDIUM | 6.8 | 35%ile | Microsoft | 2026-10-13 |
| CVE-2026-69947 | Windows Overlay Filter Remote Code Execution Vulnerability | MEDIUM | 6.8 | 43%ile | Microsoft | 2026-10-13 |
| CVE-2026-69958 | Windows Overlay Filter Remote Code Execution Vulnerability | MEDIUM | 6.8 | 43%ile | Microsoft | 2026-10-13 |
| CVE-2026-83573 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability | MEDIUM | 6.8 | 43%ile | Microsoft | 2026-10-13 |
| CVE-2026-83776 | Windows Bluetooth Driver Elevation of Privilege Vulnerability | MEDIUM | 6.8 | 43%ile | Microsoft | 2026-10-13 |
| CVE-2026-83895 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability | MEDIUM | 6.8 | 43%ile | Microsoft | 2026-10-13 |
| CVE-2026-85323 | Network Device Enrollment Service (NDES) Spoofing Vulnerability | MEDIUM | 6.8 | 42%ile | Microsoft | 2026-10-13 |
| CVE-2026-96863 | Windows Storage Port Driver Elevation of Privilege Vulnerability | MEDIUM | 6.8 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-97782 | Microsoft Office SharePoint Tampering Vulnerability | MEDIUM | 6.8 | 45%ile | Microsoft | 2026-10-13 |
| CVE-2026-98769 | usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd | MEDIUM | 6.8 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98830 | wifi: wfx: validate MIB read length before copying to caller | MEDIUM | 6.8 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-98836 | ALSA: line6: reject oversized playback packets | MEDIUM | 6.8 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-106072 | A flaw in Node.js TLS hostname verification allows a certificate with only a DNS SAN to authenticate an IP endpoint when | MEDIUM | 6.7 | 50%ile | Microsoft | 2026-10-13 |
| CVE-2026-86565 | Dpdk: dpdk: guest can desynchronize virtqueue size from inflight descriptor table size, causing out-of-bounds write | MEDIUM | 6.7 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-98567 | net: xps: reject an out of range traffic class | MEDIUM | 6.7 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-98589 | bpf: Reject pkt arguments in mutating subprogs | MEDIUM | 6.7 | 9%ile | Microsoft | 2026-10-13 |
| CVE-2026-98591 | bpf: Fix bounds check for skb-backed dynptrs | MEDIUM | 6.7 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-98599 | bpf: Reject non-negative offsets in stack_slot_obj_get_spi() | MEDIUM | 6.7 | 9%ile | Microsoft | 2026-10-13 |
| CVE-2026-98793 | netfilter: bpf: reject invalid NAT manipulation types | MEDIUM | 6.7 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-69902 | Windows NTFS Remote Code Execution Vulnerability | MEDIUM | 6.7 | 34%ile | Microsoft | 2026-10-13 |
| CVE-2026-70165 | .NET Elevation of Privilege Vulnerability | MEDIUM | 6.7 | 31%ile | Microsoft | 2026-10-13 |
| CVE-2026-70189 | Microsoft SQL Server Remote Code Execution Vulnerability | MEDIUM | 6.7 | 26%ile | Microsoft | 2026-10-13 |
| CVE-2026-83706 | Windows NTFS Elevation of Privilege Vulnerability | MEDIUM | 6.7 | 31%ile | Microsoft | 2026-10-13 |
| CVE-2026-85333 | Windows Performance Monitor Elevation of Privilege Vulnerability | MEDIUM | 6.7 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-88089 | Microsoft SQL Server Remote Code Execution Vulnerability | MEDIUM | 6.7 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-88143 | Windows Storage Spaces Controller Elevation of Privilege Vulnerability | MEDIUM | 6.7 | 16%ile | Microsoft | 2026-10-13 |
| CVE-2026-96938 | Windows Distributed File System (DFS) Elevation of Privilege Vulnerability | MEDIUM | 6.7 | 31%ile | Microsoft | 2026-10-13 |
| CVE-2026-98940 | ASoC: qcom: lpass-cpu: use DAI table index for playback constraints | MEDIUM | 6.7 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-69635 | Windows Installer Elevation of Privilege Vulnerability | MEDIUM | 6.6 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-83945 | Microsoft SQL Server Remote Code Execution Vulnerability | MEDIUM | 6.6 | 47%ile | Microsoft | 2026-10-13 |
| CVE-2026-85841 | Windows DHCP Server Remote Code Execution Vulnerability | MEDIUM | 6.6 | 50%ile | Microsoft | 2026-10-13 |
| CVE-2026-98741 | ALSA: ua101: reject mismatched capture/playback packet sizes | MEDIUM | 6.6 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-99126 | s390/ctcm: Prevent XID null dereference | MEDIUM | 6.5 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-99178 | x86/kvm: Don't consume async #PF flags on a kernel #PF in NMI context | MEDIUM | 6.5 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-99191 | calipso: keep BIG TCP payload_len in calipso_skbuff_setattr() | MEDIUM | 6.5 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-101019 | NGINX ngx_http_js_module vulnerability | MEDIUM | 6.5 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-105481 | A flaw in Node.js HTTP Agent connection reuse can cause a client to accept as valid a response that was sent before the | MEDIUM | 6.5 | 25%ile | Microsoft | 2026-10-13 |
| CVE-2026-106585 | In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during decom | MEDIUM | 6.5 | 9%ile | Microsoft | 2026-10-13 |
| CVE-2026-107778 | MIT krb5 through 1.22.2 NULL Pointer Dereference via krb5_rd_cred() | MEDIUM | 6.5 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-109349 | gix-pack before 0.75.0 Reachable Assertion DoS via Pack Version 3 Header | MEDIUM | 6.5 | 19%ile | Microsoft | 2026-10-13 |
| CVE-2026-109351 | Gitoxide gix-pack before 0.75.0 Denial of Service via Pack Header Object Count | MEDIUM | 6.5 | 25%ile | Microsoft | 2026-10-13 |
| CVE-2026-86847 | Dpdk: dpdk: guest can trigger infinite loop in vhost-crypto writeback chain cleanup | MEDIUM | 6.5 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-87863 | HSTS response erases persisted entries | MEDIUM | 6.5 | 58%ile | Microsoft | 2026-10-13 |
| CVE-2026-88833 | Busybox: busybox: udhcpc integer underflow in dhcp packet length calculation causes denial of service | MEDIUM | 6.5 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-97629 | NGINX ngx_http_ssl_module vulnerability | MEDIUM | 6.5 | 16%ile | Microsoft | 2026-10-13 |
| CVE-2026-98229 | xfrm: save input state data before secpath resets | MEDIUM | 6.5 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98306 | seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation | MEDIUM | 6.5 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-98458 | Bluetooth: ISO: release unused CIS holds after channel attach | MEDIUM | 6.5 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-98521 | drm/i915: fix incorrect RCU teardown order | MEDIUM | 6.5 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-98606 | drm/virtio: release the GEM object on virtio_gpu_vram_create() errors | MEDIUM | 6.5 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-98803 | net: stmmac: fix rx Scatter-Gather support | MEDIUM | 6.5 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98815 | nvme: fix cdev lifetime | MEDIUM | 6.5 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-98822 | wifi: mac80211: prevent AP VLAN tx from other interfaces | MEDIUM | 6.5 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-102199 | Microsoft Windows Codecs Library Denial of Service Vulnerability | MEDIUM | 6.5 | 61%ile | Microsoft | 2026-10-13 |
| CVE-2026-102310 | Chromium CVE-2026-102310: Missing authorization | MEDIUM | 6.5 | 16%ile | Microsoft | 2026-10-13 |
| CVE-2026-102320 | Chromium CVE-2026-102320: Missing authorization | MEDIUM | 6.5 | 14%ile | Microsoft | 2026-10-13 |
| CVE-2026-102330 | Chromium CVE-2026-102330: Incorrect authorization | MEDIUM | 6.5 | 14%ile | Microsoft | 2026-10-13 |
| CVE-2026-102865 | Microsoft Office SharePoint Information Disclosure Vulnerability | MEDIUM | 6.5 | 59%ile | Microsoft | 2026-10-13 |
| CVE-2026-102867 | Microsoft Office Word Information Disclosure Vulnerability | MEDIUM | 6.5 | 63%ile | Microsoft | 2026-10-13 |
| CVE-2026-103576 | Active Directory Federation Services (AD FS) Spoofing Vulnerability | MEDIUM | 6.5 | 58%ile | Microsoft | 2026-10-13 |
| CVE-2026-105719 | Microsoft SharePoint Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 65%ile | Microsoft | 2026-10-13 |
| CVE-2026-106185 | Chromium CVE-2026-106185: Improper input validation | MEDIUM | 6.5 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-106242 | Chromium CVE-2026-106242: Information leak | MEDIUM | 6.5 | 14%ile | Microsoft | 2026-10-13 |
| CVE-2026-106244 | Chromium CVE-2026-106244: Incorrect authorization | MEDIUM | 6.5 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-106263 | Chromium CVE-2026-106263: Improper input validation | MEDIUM | 6.5 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-106280 | Chromium CVE-2026-106280: Incorrect authorization | MEDIUM | 6.5 | 14%ile | Microsoft | 2026-10-13 |
| CVE-2026-106307 | Chromium CVE-2026-106307: Incorrect authorization | MEDIUM | 6.5 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-106310 | Chromium CVE-2026-106310: Use of released resource | MEDIUM | 6.5 | 14%ile | Microsoft | 2026-10-13 |
| CVE-2026-106312 | Chromium CVE-2026-106312: Missing authorization | MEDIUM | 6.5 | 13%ile | Microsoft | 2026-10-13 |
| CVE-2026-106348 | Chromium CVE-2026-106348: Information leak | MEDIUM | 6.5 | 18%ile | Microsoft | 2026-10-13 |
| CVE-2026-106386 | Chromium CVE-2026-106386: Uninitialized resource | MEDIUM | 6.5 | 26%ile | Microsoft | 2026-10-13 |
| CVE-2026-106389 | Chromium CVE-2026-106389: Incorrect authorization | MEDIUM | 6.5 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-106404 | Chromium CVE-2026-106404: Incorrect authorization | MEDIUM | 6.5 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-106407 | Chromium CVE-2026-106407: Incorrect authorization | MEDIUM | 6.5 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-108127 | Role: DNS Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 65%ile | Microsoft | 2026-10-13 |
| CVE-2026-108128 | Role: DNS Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 65%ile | Microsoft | 2026-10-13 |
| CVE-2026-108129 | Role: DNS Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 65%ile | Microsoft | 2026-10-13 |
| CVE-2026-108434 | Microsoft Office Word Information Disclosure Vulnerability | MEDIUM | 6.5 | 55%ile | Microsoft | 2026-10-13 |
| CVE-2026-108435 | Microsoft Office Word Information Disclosure Vulnerability | MEDIUM | 6.5 | 55%ile | Microsoft | 2026-10-13 |
| CVE-2026-108436 | Microsoft Office Word Information Disclosure Vulnerability | MEDIUM | 6.5 | 55%ile | Microsoft | 2026-10-13 |
| CVE-2026-108438 | Microsoft Office Word Information Disclosure Vulnerability | MEDIUM | 6.5 | 55%ile | Microsoft | 2026-10-13 |
| CVE-2026-108453 | Microsoft Office PowerPoint Information Disclosure Vulnerability | MEDIUM | 6.5 | 55%ile | Microsoft | 2026-10-13 |
| CVE-2026-108454 | Microsoft Office PowerPoint Information Disclosure Vulnerability | MEDIUM | 6.5 | 55%ile | Microsoft | 2026-10-13 |
| CVE-2026-108455 | Microsoft Office PowerPoint Information Disclosure Vulnerability | MEDIUM | 6.5 | 55%ile | Microsoft | 2026-10-13 |
| CVE-2026-110146 | Chromium CVE-2026-110146: Information leak | MEDIUM | 6.5 | 15%ile | Microsoft | 2026-10-13 |
| CVE-2026-113002 | Chromium CVE-2026-113002: Memory corruption | MEDIUM | 6.5 | 26%ile | Microsoft | 2026-10-13 |
| CVE-2026-113010 | Chromium CVE-2026-113010: Out of bounds read | MEDIUM | 6.5 | 21%ile | Microsoft | 2026-10-13 |
| CVE-2026-113026 | Chromium CVE-2026-113026: Memory corruption | MEDIUM | 6.5 | 28%ile | Microsoft | 2026-10-13 |
| CVE-2026-113035 | Chromium CVE-2026-113035: Out of bounds read | MEDIUM | 6.5 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-113038 | Chromium CVE-2026-113038: Memory corruption | MEDIUM | 6.5 | 26%ile | Microsoft | 2026-10-13 |
| CVE-2026-113045 | Chromium CVE-2026-113045: Out of bounds read | MEDIUM | 6.5 | 28%ile | Microsoft | 2026-10-13 |
| CVE-2026-113047 | Chromium CVE-2026-113047: Memory corruption | MEDIUM | 6.5 | 26%ile | Microsoft | 2026-10-13 |
| CVE-2026-113050 | Chromium CVE-2026-113050: Out of bounds read | MEDIUM | 6.5 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-113051 | Chromium CVE-2026-113051: Memory corruption | MEDIUM | 6.5 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-113054 | Chromium CVE-2026-113054: Out of bounds read | MEDIUM | 6.5 | 26%ile | Microsoft | 2026-10-13 |
| CVE-2026-113066 | Chromium CVE-2026-113066: Memory corruption | MEDIUM | 6.5 | 26%ile | Microsoft | 2026-10-13 |
| CVE-2026-113070 | Chromium CVE-2026-113070: Out of bounds read | MEDIUM | 6.5 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-113077 | Chromium CVE-2026-113077: Memory corruption | MEDIUM | 6.5 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-113082 | Chromium CVE-2026-113082: Memory corruption | MEDIUM | 6.5 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-113098 | Chromium CVE-2026-113098: Memory corruption | MEDIUM | 6.5 | 26%ile | Microsoft | 2026-10-13 |
| CVE-2026-113102 | Chromium CVE-2026-113102: Out of bounds read | MEDIUM | 6.5 | 26%ile | Microsoft | 2026-10-13 |
| CVE-2026-113122 | Chromium CVE-2026-113122: Memory corruption | MEDIUM | 6.5 | 26%ile | Microsoft | 2026-10-13 |
| CVE-2026-113129 | Chromium CVE-2026-113129: Improper access control | MEDIUM | 6.5 | 22%ile | Microsoft | 2026-10-13 |
| CVE-2026-113137 | Chromium CVE-2026-113137: Memory corruption | MEDIUM | 6.5 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-113139 | Chromium CVE-2026-113139: Memory corruption | MEDIUM | 6.5 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-113142 | Chromium CVE-2026-113142: Memory corruption | MEDIUM | 6.5 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-113144 | Chromium CVE-2026-113144: Memory corruption | MEDIUM | 6.5 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-113151 | Chromium CVE-2026-113151: Out of bounds read | MEDIUM | 6.5 | 26%ile | Microsoft | 2026-10-13 |
| CVE-2026-113157 | Chromium CVE-2026-113157: Information leak | MEDIUM | 6.5 | 28%ile | Microsoft | 2026-10-13 |
| CVE-2026-113159 | Chromium CVE-2026-113159: Improper access control | MEDIUM | 6.5 | 26%ile | Microsoft | 2026-10-13 |
| CVE-2026-113178 | Chromium CVE-2026-113178: Memory corruption | MEDIUM | 6.5 | 25%ile | Microsoft | 2026-10-13 |
| CVE-2026-113193 | Chromium CVE-2026-113193: Memory corruption | MEDIUM | 6.5 | 25%ile | Microsoft | 2026-10-13 |
| CVE-2026-113199 | Chromium CVE-2026-113199: Out of bounds read | MEDIUM | 6.5 | 25%ile | Microsoft | 2026-10-13 |
| CVE-2026-113201 | Chromium CVE-2026-113201: Memory corruption | MEDIUM | 6.5 | 25%ile | Microsoft | 2026-10-13 |
| CVE-2026-113209 | Chromium CVE-2026-113209: Memory corruption | MEDIUM | 6.5 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-113223 | Chromium CVE-2026-113223: Memory corruption | MEDIUM | 6.5 | 26%ile | Microsoft | 2026-10-13 |
| CVE-2026-113224 | Chromium CVE-2026-113224: Memory corruption | MEDIUM | 6.5 | 22%ile | Microsoft | 2026-10-13 |
| CVE-2026-113225 | Chromium CVE-2026-113225: Memory corruption | MEDIUM | 6.5 | 26%ile | Microsoft | 2026-10-13 |
| CVE-2026-113237 | Chromium CVE-2026-113237: Memory corruption | MEDIUM | 6.5 | 28%ile | Microsoft | 2026-10-13 |
| CVE-2026-113246 | Chromium CVE-2026-113246: Memory corruption | MEDIUM | 6.5 | 28%ile | Microsoft | 2026-10-13 |
| CVE-2026-113277 | Chromium CVE-2026-113277: Out of bounds read | MEDIUM | 6.5 | 25%ile | Microsoft | 2026-10-13 |
| CVE-2026-113295 | Chromium CVE-2026-113295: Out of bounds read | MEDIUM | 6.5 | 28%ile | Microsoft | 2026-10-13 |
| CVE-2026-113296 | Chromium CVE-2026-113296: Memory corruption | MEDIUM | 6.5 | 28%ile | Microsoft | 2026-10-13 |
| CVE-2026-113297 | Chromium CVE-2026-113297: Improper access control | MEDIUM | 6.5 | 26%ile | Microsoft | 2026-10-13 |
| CVE-2026-113304 | Chromium CVE-2026-113304: Memory corruption | MEDIUM | 6.5 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-113309 | Chromium CVE-2026-113309: Out of bounds read | MEDIUM | 6.5 | 28%ile | Microsoft | 2026-10-13 |
| CVE-2026-113310 | Chromium CVE-2026-113310: Out of bounds read | MEDIUM | 6.5 | 28%ile | Microsoft | 2026-10-13 |
| CVE-2026-113322 | Chromium CVE-2026-113322: Memory corruption | MEDIUM | 6.5 | 28%ile | Microsoft | 2026-10-13 |
| CVE-2026-113325 | Chromium CVE-2026-113325: Memory corruption | MEDIUM | 6.5 | 28%ile | Microsoft | 2026-10-13 |
| CVE-2026-113326 | Chromium CVE-2026-113326: Memory corruption | MEDIUM | 6.5 | 28%ile | Microsoft | 2026-10-13 |
| CVE-2026-113329 | Chromium CVE-2026-113329: Out of bounds read | MEDIUM | 6.5 | 27%ile | Microsoft | 2026-10-13 |
| CVE-2026-113333 | Chromium CVE-2026-113333: Memory corruption | MEDIUM | 6.5 | 28%ile | Microsoft | 2026-10-13 |
| CVE-2026-113340 | Chromium CVE-2026-113340: Memory corruption | MEDIUM | 6.5 | 28%ile | Microsoft | 2026-10-13 |
| CVE-2026-113341 | Chromium CVE-2026-113341: Memory corruption | MEDIUM | 6.5 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-67626 | Microsoft SQL Server Denial of Service Vulnerability | MEDIUM | 6.5 | 59%ile | Microsoft | 2026-10-13 |
| CVE-2026-69877 | Azure DevOps Information Disclosure Vulnerability | MEDIUM | 6.5 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-69922 | Microsoft Office Excel Information Disclosure Vulnerability | MEDIUM | 6.5 | 61%ile | Microsoft | 2026-10-13 |
| CVE-2026-69940 | Windows Client for NFS Information Disclosure Vulnerability | MEDIUM | 6.5 | 64%ile | Microsoft | 2026-10-13 |
| CVE-2026-69955 | Windows Client for NFS Information Disclosure Vulnerability | MEDIUM | 6.5 | 62%ile | Microsoft | 2026-10-13 |
| CVE-2026-69968 | Windows libarchive Tampering Vulnerability | MEDIUM | 6.5 | 58%ile | Microsoft | 2026-10-13 |
| CVE-2026-69973 | Windows libarchive Tampering Vulnerability | MEDIUM | 6.5 | 56%ile | Microsoft | 2026-10-13 |
| CVE-2026-70072 | Windows Netlogon Denial of Service Vulnerability | MEDIUM | 6.5 | 69%ile | Microsoft | 2026-10-13 |
| CVE-2026-70119 | Windows DNS Remote Code Execution Vulnerability | MEDIUM | 6.5 | 70%ile | Microsoft | 2026-10-13 |
| CVE-2026-70122 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability | MEDIUM | 6.5 | 22%ile | Microsoft | 2026-10-13 |
| CVE-2026-70148 | Windows Broadcast DVR User Service Information Disclosure Vulnerability | MEDIUM | 6.5 | 34%ile | Microsoft | 2026-10-13 |
| CVE-2026-70166 | Windows DNS Denial of Service Vulnerability | MEDIUM | 6.5 | 70%ile | Microsoft | 2026-10-13 |
| CVE-2026-70170 | Windows Kernel Denial of Service Vulnerability | MEDIUM | 6.5 | 69%ile | Microsoft | 2026-10-13 |
| CVE-2026-70194 | .NET Framework Security Feature Bypass Vulnerability | MEDIUM | 6.5 | 42%ile | Microsoft | 2026-10-13 |
| CVE-2026-70206 | Microsoft Office Word Information Disclosure Vulnerability | MEDIUM | 6.5 | 62%ile | Microsoft | 2026-10-13 |
| CVE-2026-70219 | Microsoft Office Excel Information Disclosure Vulnerability | MEDIUM | 6.5 | 61%ile | Microsoft | 2026-10-13 |
| CVE-2026-70244 | Windows DNS Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 64%ile | Microsoft | 2026-10-13 |
| CVE-2026-70248 | Windows Hyper-V Denial of Service Vulnerability | MEDIUM | 6.5 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-70259 | Microsoft Office SharePoint Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-10-13 |
| CVE-2026-70263 | Microsoft Office Word Information Disclosure Vulnerability | MEDIUM | 6.5 | 63%ile | Microsoft | 2026-10-13 |
| CVE-2026-70298 | Microsoft Office SharePoint Information Disclosure Vulnerability | MEDIUM | 6.5 | 69%ile | Microsoft | 2026-10-13 |
| CVE-2026-83515 | RPC Runtime Information Disclosure Vulnerability | MEDIUM | 6.5 | 64%ile | Microsoft | 2026-10-13 |
| CVE-2026-83521 | Windows IKE Extension Information Disclosure Vulnerability | MEDIUM | 6.5 | 66%ile | Microsoft | 2026-10-13 |
| CVE-2026-83636 | Windows Hyper-V Denial of Service Vulnerability | MEDIUM | 6.5 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-83648 | Windows Active Directory Domain Services Denial of Service Vulnerability | MEDIUM | 6.5 | 69%ile | Microsoft | 2026-10-13 |
| CVE-2026-83649 | Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability | MEDIUM | 6.5 | 69%ile | Microsoft | 2026-10-13 |
| CVE-2026-83651 | Windows GDI Information Disclosure Vulnerability | MEDIUM | 6.5 | 64%ile | Microsoft | 2026-10-13 |
| CVE-2026-83667 | Windows Active Directory Domain Services Denial of Service Vulnerability | MEDIUM | 6.5 | 69%ile | Microsoft | 2026-10-13 |
| CVE-2026-83671 | Windows Hyper-V Information Disclosure Vulnerability | MEDIUM | 6.5 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-83683 | Windows Encrypting File System (EFS) Information Disclosure Vulnerability | MEDIUM | 6.5 | 70%ile | Microsoft | 2026-10-13 |
| CVE-2026-83685 | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability | MEDIUM | 6.5 | 70%ile | Microsoft | 2026-10-13 |
| CVE-2026-83703 | Windows Wi-Fi Driver Denial of Service Vulnerability | MEDIUM | 6.5 | 52%ile | Microsoft | 2026-10-13 |
| CVE-2026-83888 | Windows CD-ROM Driver Elevation of Privilege Vulnerability | MEDIUM | 6.5 | 62%ile | Microsoft | 2026-10-13 |
| CVE-2026-83906 | Windows Shell Spoofing Vulnerability | MEDIUM | 6.5 | 62%ile | Microsoft | 2026-10-13 |
| CVE-2026-84007 | Remote Desktop Gateway Service Information Disclosure Vulnerability | MEDIUM | 6.5 | 63%ile | Microsoft | 2026-10-13 |
| CVE-2026-85331 | Windows Device Association Service Information Disclosure Vulnerability | MEDIUM | 6.5 | 61%ile | Microsoft | 2026-10-13 |
| CVE-2026-85337 | Windows Remote Desktop Client Information Disclosure Vulnerability | MEDIUM | 6.5 | 59%ile | Microsoft | 2026-10-13 |
| CVE-2026-85797 | Windows GDI Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-10-13 |
| CVE-2026-85805 | Microsoft PowerShell Security Feature Bypass Vulnerability | MEDIUM | 6.5 | 48%ile | Microsoft | 2026-10-13 |
| CVE-2026-85821 | Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability | MEDIUM | 6.5 | 61%ile | Microsoft | 2026-10-13 |
| CVE-2026-85840 | Windows Event Viewer Information Disclosure Vulnerability | MEDIUM | 6.5 | 61%ile | Microsoft | 2026-10-13 |
| CVE-2026-85847 | Windows Print Spooler Components Information Disclosure Vulnerability | MEDIUM | 6.5 | 51%ile | Microsoft | 2026-10-13 |
| CVE-2026-85859 | Windows Message Queuing Queue Manager Denial of Service Vulnerability | MEDIUM | 6.5 | 56%ile | Microsoft | 2026-10-13 |
| CVE-2026-85873 | Skype for Business Elevation of Privilege Vulnerability | MEDIUM | 6.5 | 62%ile | Microsoft | 2026-10-13 |
| CVE-2026-85932 | Microsoft Office SharePoint Information Disclosure Vulnerability | MEDIUM | 6.5 | 68%ile | Microsoft | 2026-10-13 |
| CVE-2026-87714 | WebDAV Security Feature Bypass Vulnerability | MEDIUM | 6.5 | 39%ile | Microsoft | 2026-10-13 |
| CVE-2026-88122 | Role: DNS Server Denial of Service Vulnerability | MEDIUM | 6.5 | 63%ile | Microsoft | 2026-10-13 |
| CVE-2026-88123 | Role: DNS Server Denial of Service Vulnerability | MEDIUM | 6.5 | 69%ile | Microsoft | 2026-10-13 |
| CVE-2026-88125 | Role: DNS Server Denial of Service Vulnerability | MEDIUM | 6.5 | 69%ile | Microsoft | 2026-10-13 |
| CVE-2026-88129 | Role: DNS Server Denial of Service Vulnerability | MEDIUM | 6.5 | 69%ile | Microsoft | 2026-10-13 |
| CVE-2026-88130 | Role: DNS Server Denial of Service Vulnerability | MEDIUM | 6.5 | 69%ile | Microsoft | 2026-10-13 |
| CVE-2026-88137 | WebDAV Information Disclosure Vulnerability | MEDIUM | 6.5 | 61%ile | Microsoft | 2026-10-13 |
| CVE-2026-88151 | Microsoft Office Excel Information Disclosure Vulnerability | MEDIUM | 6.5 | 58%ile | Microsoft | 2026-10-13 |
| CVE-2026-88153 | Microsoft Office Excel Information Disclosure Vulnerability | MEDIUM | 6.5 | 58%ile | Microsoft | 2026-10-13 |
| CVE-2026-88154 | Microsoft Office Excel Information Disclosure Vulnerability | MEDIUM | 6.5 | 61%ile | Microsoft | 2026-10-13 |
| CVE-2026-88167 | Microsoft Office Word Information Disclosure Vulnerability | MEDIUM | 6.5 | 58%ile | Microsoft | 2026-10-13 |
| CVE-2026-88169 | Microsoft Office Word Information Disclosure Vulnerability | MEDIUM | 6.5 | 58%ile | Microsoft | 2026-10-13 |
| CVE-2026-88172 | Microsoft Office Excel Information Disclosure Vulnerability | MEDIUM | 6.5 | 61%ile | Microsoft | 2026-10-13 |
| CVE-2026-88175 | Microsoft Office Excel Information Disclosure Vulnerability | MEDIUM | 6.5 | 58%ile | Microsoft | 2026-10-13 |
| CVE-2026-88183 | Microsoft Office PowerPoint Information Disclosure Vulnerability | MEDIUM | 6.5 | 61%ile | Microsoft | 2026-10-13 |
| CVE-2026-88184 | Microsoft Office Excel Information Disclosure Vulnerability | MEDIUM | 6.5 | 57%ile | Microsoft | 2026-10-13 |
| CVE-2026-88190 | Microsoft Office Excel Information Disclosure Vulnerability | MEDIUM | 6.5 | 61%ile | Microsoft | 2026-10-13 |
| CVE-2026-88192 | Microsoft Office Excel Information Disclosure Vulnerability | MEDIUM | 6.5 | 61%ile | Microsoft | 2026-10-13 |
| CVE-2026-88195 | Microsoft Office Excel Information Disclosure Vulnerability | MEDIUM | 6.5 | 57%ile | Microsoft | 2026-10-13 |
| CVE-2026-88201 | Microsoft Office Excel Information Disclosure Vulnerability | MEDIUM | 6.5 | 50%ile | Microsoft | 2026-10-13 |
| CVE-2026-88203 | Microsoft Office PowerPoint Information Disclosure Vulnerability | MEDIUM | 6.5 | 61%ile | Microsoft | 2026-10-13 |
| CVE-2026-94506 | Microsoft Office Access Information Disclosure Vulnerability | MEDIUM | 6.5 | 61%ile | Microsoft | 2026-10-13 |
| CVE-2026-96204 | Azure Arc Elevation of Privilege Vulnerability | MEDIUM | 6.5 | 56%ile | Microsoft | 2026-10-13 |
| CVE-2026-96206 | Windows Subsystem for Linux Information Disclosure Vulnerability | MEDIUM | 6.5 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-96229 | .NET Information Disclosure Vulnerability | MEDIUM | 6.5 | 61%ile | Microsoft | 2026-10-13 |
| CVE-2026-96238 | .NET Security Feature Bypass Vulnerability | MEDIUM | 6.5 | 22%ile | Microsoft | 2026-10-13 |
| CVE-2026-96303 | Microsoft PowerShell Security Feature Bypass Vulnerability | MEDIUM | 6.5 | 53%ile | Microsoft | 2026-10-13 |
| CVE-2026-97740 | Microsoft Office Excel Information Disclosure Vulnerability | MEDIUM | 6.5 | 58%ile | Microsoft | 2026-10-13 |
| CVE-2026-97743 | Microsoft Office Excel Information Disclosure Vulnerability | MEDIUM | 6.5 | 62%ile | Microsoft | 2026-10-13 |
| CVE-2026-97760 | Microsoft Office Excel Information Disclosure Vulnerability | MEDIUM | 6.5 | 62%ile | Microsoft | 2026-10-13 |
| CVE-2026-97779 | Microsoft Office Excel Information Disclosure Vulnerability | MEDIUM | 6.5 | 62%ile | Microsoft | 2026-10-13 |
| CVE-2026-97813 | Windows Hyper-V Information Disclosure Vulnerability | MEDIUM | 6.5 | 65%ile | Microsoft | 2026-10-13 |
| CVE-2026-97817 | Role: DNS Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 65%ile | Microsoft | 2026-10-13 |
| CVE-2026-97819 | Role: DNS Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 65%ile | Microsoft | 2026-10-13 |
| CVE-2026-97820 | Role: DNS Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 61%ile | Microsoft | 2026-10-13 |
| CVE-2026-97821 | Role: DNS Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 61%ile | Microsoft | 2026-10-13 |
| CVE-2026-97822 | Role: DNS Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 61%ile | Microsoft | 2026-10-13 |
| CVE-2026-97823 | Role: DNS Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 61%ile | Microsoft | 2026-10-13 |
| CVE-2026-97824 | Role: DNS Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 61%ile | Microsoft | 2026-10-13 |
| CVE-2026-97825 | Role: DNS Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 61%ile | Microsoft | 2026-10-13 |
| CVE-2026-97826 | Role: DNS Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 61%ile | Microsoft | 2026-10-13 |
| CVE-2026-97827 | Role: DNS Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 61%ile | Microsoft | 2026-10-13 |
| CVE-2026-97828 | Role: DNS Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 61%ile | Microsoft | 2026-10-13 |
| CVE-2026-97829 | Role: DNS Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 61%ile | Microsoft | 2026-10-13 |
| CVE-2026-97831 | Role: DNS Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-10-13 |
| CVE-2026-97832 | Role: DNS Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 56%ile | Microsoft | 2026-10-13 |
| CVE-2026-97833 | Role: DNS Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 56%ile | Microsoft | 2026-10-13 |
| CVE-2026-97834 | Role: DNS Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 56%ile | Microsoft | 2026-10-13 |
| CVE-2026-97835 | Role: DNS Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-10-13 |
| CVE-2026-97836 | Role: DNS Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-10-13 |
| CVE-2026-97837 | Role: DNS Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-10-13 |
| CVE-2026-97838 | Role: DNS Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-10-13 |
| CVE-2026-97839 | Role: DNS Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-10-13 |
| CVE-2026-97840 | Role: DNS Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-10-13 |
| CVE-2026-97841 | Role: DNS Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-10-13 |
| CVE-2026-97842 | Role: DNS Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 56%ile | Microsoft | 2026-10-13 |
| CVE-2026-97843 | Role: DNS Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-10-13 |
| CVE-2026-97844 | Role: DNS Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-10-13 |
| CVE-2026-110923 | Openssh: openssh: sftp can write outside the destination directory from a server-supplied path | MEDIUM | 6.5 | — | Microsoft | 2026-10-13 |
| CVE-2026-98464 | RISC-V: KVM: Synchronize hrtimer callback during teardown | MEDIUM | 6.5 | 4%ile | Microsoft | 2026-10-13 |
| CVE-2026-98742 | ALSA: seq: Serialize compat port-info ioctls | MEDIUM | 6.5 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98775 | nitro_enclaves: fix use-after-free on SLOT_ALLOC failure | MEDIUM | 6.5 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-102404 | Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service | MEDIUM | 6.5 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-102411 | Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service | MEDIUM | 6.5 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-103006 | Uncontrolled Recursion in Elasticsearch Leading to Denial of Service | MEDIUM | 6.5 | 35%ile | Microsoft | 2026-10-13 |
| CVE-2026-107301 | msgpack5: Partial options disable prototype protection | MEDIUM | 6.5 | 30%ile | Microsoft | 2026-10-13 |
| CVE-2026-98544 | bna: prevent IOC timer rearm during teardown | MEDIUM | 6.4 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-98555 | llc: fix skb UAF and leaks on llc_mac_hdr_init() failure | MEDIUM | 6.4 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-98642 | bpf: Fix UAF due to concurrent consumption of ttrace lists in alloc_bulk | MEDIUM | 6.4 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98669 | iio: buffer: serialize buffer teardown with mode claims | MEDIUM | 6.4 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98699 | wifi: mac80211: fix mesh fast xmit path deletion UAF | MEDIUM | 6.4 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98704 | wifi: mac80211: keep fallback association elements alive | MEDIUM | 6.4 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98738 | Bluetooth: Serialize SMP remote OOB data access | MEDIUM | 6.4 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98750 | tty: fix saved termios reset race | MEDIUM | 6.4 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98797 | net: cap skb->queue_mapping when the tx queue is picked | MEDIUM | 6.4 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-98823 | wifi: cfg80211: preserve hidden-group beacon IE ownership | MEDIUM | 6.4 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-98834 | mtd: core: avoid double-free of OTP NVMEM device | MEDIUM | 6.4 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-98856 | kprobes: Skip disarmed probes when checking optkprobe overlap | MEDIUM | 6.4 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98980 | namei: don't reveal overmounted entries in refwalk | MEDIUM | 6.4 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-105006 | HID Class Driver Elevation of Privilege Vulnerability | MEDIUM | 6.4 | 28%ile | Microsoft | 2026-10-13 |
| CVE-2026-71347 | Windows Security Center Elevation of Privilege Vulnerability | MEDIUM | 6.4 | 14%ile | Microsoft | 2026-10-13 |
| CVE-2026-88085 | Microsoft SQL Server Elevation of Privilege Vulnerability | MEDIUM | 6.4 | 16%ile | Microsoft | 2026-10-13 |
| CVE-2026-98757 | usb: cdns3: fix use-after-free in cdns3_gadget_exit() | MEDIUM | 6.4 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98760 | usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() | MEDIUM | 6.4 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98826 | rtc: ac100: Fix clock provider use-after-free on probe failure | MEDIUM | 6.4 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-108119 | Busybox: busybox: tar extraction-root escape via deferred symlink/hardlink creation bypasses cve-2026-26158 fix | MEDIUM | 6.3 | 3%ile | Microsoft | 2026-10-13 |
| CVE-2026-110602 | libmspack through 0.11alpha Uninitialized Pointer Free via kwajd_open Error Path | MEDIUM | 6.3 | 15%ile | Microsoft | 2026-10-13 |
| CVE-2026-115485 | Open-iscsi: open-iscsi: dhcpv6 vendor option strlen heap out-of-bounds read and 1-byte write in iscsiuio | MEDIUM | 6.3 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-98454 | smb: client: fix create context out-of-bounds reads | MEDIUM | 6.3 | 33%ile | Microsoft | 2026-10-13 |
| CVE-2026-98515 | drm/nouveau: fix double-free in nvif_vmm_dtor | MEDIUM | 6.3 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98590 | bpf: Fix bpf_sock context code generation | MEDIUM | 6.3 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-98703 | wifi: mac80211: minstrel_ht: validate fixed rate index | MEDIUM | 6.3 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-98726 | nvme-multipath: fix underflow in ANA log bounds checks | MEDIUM | 6.3 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-98996 | fs: don't silently unmount busy mounts | MEDIUM | 6.3 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-99015 | Bluetooth: hci_sock: Serialize dead-device detachment | MEDIUM | 6.3 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98539 | fs/ntfs3: use d_instantiate_new() in ntfs_create_inode() and murder syzbot's "WARNING in do_new_mount" saga | MEDIUM | 6.3 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-98778 | binder: fix is_failure flag for superseded transaction cleanup | MEDIUM | 6.3 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-85916 | Azure Active Directory Information Disclosure Vulnerability | MEDIUM | 6.2 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-114538 | Bootstrap - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-236 | MEDIUM | 6.1 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-111137 | libsmi through 0.5.0 Out-of-Bounds Write via smiValueAsString OCTET STRING DEFVAL | MEDIUM | 6.1 | 2%ile | Microsoft | 2026-10-13 |
| CVE-2026-111269 | libical through 4.0.6 Heap Out-of-Bounds Read via icalvalue_decode_ical_string | MEDIUM | 6.1 | 16%ile | Microsoft | 2026-10-13 |
| CVE-2026-49264 | OAuthLib: Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation | MEDIUM | 6.1 | 14%ile | Microsoft | 2026-10-13 |
| CVE-2026-97030 | Recognize yield as regexp preceder keyword in html/template | MEDIUM | 6.1 | 22%ile | Microsoft | 2026-10-13 |
| CVE-2026-98205 | Input: evdev - zero absinfo before partial copy in EVIOCSABS | MEDIUM | 6.1 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98271 | net: skbuff: do not leave stale header offsets after pskb_carve() | MEDIUM | 6.1 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98407 | wifi: rsi: fix heap OOB write on key removal | MEDIUM | 6.1 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-98499 | HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() | MEDIUM | 6.1 | 33%ile | Microsoft | 2026-10-13 |
| CVE-2026-98597 | net: usb: sr9700: include receive overhead in the length check | MEDIUM | 6.1 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98612 | net: usb: catc: bound the RX packet length in catc_rx_done() | MEDIUM | 6.1 | 9%ile | Microsoft | 2026-10-13 |
| CVE-2026-98634 | scsi: sd_zbc: Reject disks with too many zones | MEDIUM | 6.1 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98975 | xfs: stop exchanging reflink flags when exchanging mappings | MEDIUM | 6.1 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98993 | namespace: don't inherit MNT_UMOUNT in clone_mnt() | MEDIUM | 6.1 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-102329 | Chromium CVE-2026-102329: Cross-site scripting | MEDIUM | 6.1 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-102851 | Visual Studio Code Security Feature Bypass Vulnerability | MEDIUM | 6.1 | 18%ile | Microsoft | 2026-10-13 |
| CVE-2026-106188 | Chromium CVE-2026-106188: Confused deputy | MEDIUM | 6.1 | 13%ile | Microsoft | 2026-10-13 |
| CVE-2026-106208 | Chromium CVE-2026-106208: Missing authorization | MEDIUM | 6.1 | 15%ile | Microsoft | 2026-10-13 |
| CVE-2026-106322 | Chromium CVE-2026-106322: Open redirect | MEDIUM | 6.1 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-106324 | Chromium CVE-2026-106324: Incorrect authorization | MEDIUM | 6.1 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-83500 | Windows BitLocker Security Feature Bypass Vulnerability | MEDIUM | 6.1 | 39%ile | Microsoft | 2026-10-13 |
| CVE-2026-98525 | mctp: route: iterate socket tag list in mctp_lookup_prealloc_tag() | MEDIUM | 6.1 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-98660 | iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup | MEDIUM | 6.1 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-107718 | AdonisJS: Unencoded route parameters can produce open redirects | MEDIUM | 6.1 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-98471 | KVM: SEV: Do cache maintenance on the source VM during intra-host migration | MEDIUM | 6.0 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-98503 | packet: use ubuf_info completion for TX_RING packets | MEDIUM | 6.0 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-98568 | vxlan: use one headroom snapshot for neighbour replies | MEDIUM | 6.0 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-98631 | xsk: Use a 32-bit compare in xsk_map_gen_lookup | MEDIUM | 6.0 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-98862 | audit: fix exe mark UAF in kill_rules() | MEDIUM | 6.0 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-99037 | dm-crypt: reject the lmk IV mode with AEAD ciphers | MEDIUM | 6.0 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-99052 | selinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_opts | MEDIUM | 6.0 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98770 | usb: gadget: midi2: Fix the jack descriptor array sizes | MEDIUM | 6.0 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-99027 | net: team: stop reusing skb after queue override | MEDIUM | 6.0 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-103658 | GNU Aspell 0.60.8.2 (first vulnerable version is not known) contains a heap-based buffer overflow write (CWE-122) in its | MEDIUM | 5.9 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-107324 | Application denial of service via integer overflow in BSON value-length validation in MongoDB Go Driver | MEDIUM | 5.9 | 14%ile | Microsoft | 2026-10-13 |
| CVE-2026-107325 | Application denial of service via missing BSON array length validation in MongoDB Go Driver | MEDIUM | 5.9 | 14%ile | Microsoft | 2026-10-13 |
| CVE-2026-107348 | Integer overflow causes an infinite loop in message buffer growth in PgBouncer | MEDIUM | 5.9 | 33%ile | Microsoft | 2026-10-13 |
| CVE-2026-86410 | redirect to SFTP or SCP bypasses host verification | MEDIUM | 5.9 | 56%ile | Microsoft | 2026-10-13 |
| CVE-2026-98401 | net: iptunnel: fix stale transport header during tunnel decapsulation | MEDIUM | 5.9 | 48%ile | Microsoft | 2026-10-13 |
| CVE-2026-98498 | net/mlx5: Fix rev_entry reference leak in mlx5_tc_ct_shared_counter_get() | MEDIUM | 5.9 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-98541 | fou: reject omitted FOU_ATTR_IPPROTO on FOU_ENCAP_DIRECT | MEDIUM | 5.9 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-98586 | sctp: hold asoc or transport before mod_timer() in timer handlers | MEDIUM | 5.9 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98610 | net/sched: sch_hfsc: bound the classify inner-filter walk with a drift budget | MEDIUM | 5.9 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-98614 | sctp: avoid livelock while updating retransmit path | MEDIUM | 5.9 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-106183 | Chromium CVE-2026-106183: Missing authorization | MEDIUM | 5.9 | 21%ile | Microsoft | 2026-10-13 |
| CVE-2026-106222 | Chromium CVE-2026-106222: Incorrect authorization | MEDIUM | 5.9 | 21%ile | Microsoft | 2026-10-13 |
| CVE-2026-106328 | Chromium CVE-2026-106328: Incorrect authorization | MEDIUM | 5.9 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-109461 | Microsoft Authentication Library (MSAL) for Node.js Information Disclosure Vulnerability | MEDIUM | 5.9 | 30%ile | Microsoft | 2026-10-13 |
| CVE-2026-66822 | .NET Information Disclosure Vulnerability | MEDIUM | 5.9 | 56%ile | Microsoft | 2026-10-13 |
| CVE-2026-69982 | Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability | MEDIUM | 5.9 | 51%ile | Microsoft | 2026-10-13 |
| CVE-2026-70005 | Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability | MEDIUM | 5.9 | 50%ile | Microsoft | 2026-10-13 |
| CVE-2026-70162 | .NET Denial of Service Vulnerability | MEDIUM | 5.9 | 60%ile | Microsoft | 2026-10-13 |
| CVE-2026-70196 | ASP.NET Core Denial of Service Vulnerability | MEDIUM | 5.9 | 60%ile | Microsoft | 2026-10-13 |
| CVE-2026-85790 | Microsoft QUIC Information Disclosure Vulnerability | MEDIUM | 5.9 | 57%ile | Microsoft | 2026-10-13 |
| CVE-2026-88099 | Windows Failover Cluster Denial of Service Vulnerability | MEDIUM | 5.9 | 57%ile | Microsoft | 2026-10-13 |
| CVE-2026-88132 | Azure Key Vault Information Disclosure Vulnerability | MEDIUM | 5.9 | 25%ile | Microsoft | 2026-10-13 |
| CVE-2026-96300 | RPC Endpoint Mapper Service Denial of Service Vulnerability | MEDIUM | 5.9 | 60%ile | Microsoft | 2026-10-13 |
| CVE-2026-111450 | Wheels through 4.1.1 derives its default production error-email address from the Host header of the request that starts | MEDIUM | 5.9 | 3%ile | Microsoft | 2026-10-13 |
| CVE-2026-86413 | Negotiate credentials sent to redirected origin | MEDIUM | 5.9 | 54%ile | Microsoft | 2026-10-13 |
| CVE-2026-94265 | Authorization: Negotiate sent to foreign origin | MEDIUM | 5.9 | 56%ile | Microsoft | 2026-10-13 |
| CVE-2026-98576 | nfc: llcp: fix slab-out-of-bounds reads when logging service names | MEDIUM | 5.9 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-107297 | msgpack5: Quadratic parsing in the streaming decoder | MEDIUM | 5.9 | 33%ile | Microsoft | 2026-10-13 |
| CVE-2026-107299 | msgpack5: Reserved byte can cause unbounded stream buffering | MEDIUM | 5.9 | 33%ile | Microsoft | 2026-10-13 |
| CVE-2026-98739 | Bluetooth: RFCOMM: Fix initial port reference race | MEDIUM | 5.8 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98580 | nfc: llcp: Fix race condition in accept_queue lifecycle | MEDIUM | 5.8 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-115379 | Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 GC Heap Corruption via try_call | MEDIUM | 5.7 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-55480 | CUPS copy_model() creates a predictable PPD tempfile without O_EXCL/O_NOFOLLOW (symlink TOCTOU, lp → root) | MEDIUM | 5.7 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-98443 | xfs: fix cursor and pointer handling when recovering iunlink buckets | MEDIUM | 5.7 | 3%ile | Microsoft | 2026-10-13 |
| CVE-2026-98501 | HID: alps: fix use-after-free on input2 registration failure | MEDIUM | 5.7 | 18%ile | Microsoft | 2026-10-13 |
| CVE-2026-98506 | mm/hugetlb: do not dissolve gigantic pages without runtime support | MEDIUM | 5.7 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-98588 | bpf, sockmap: Reject max_entries > INT_MAX in sock_map_alloc | MEDIUM | 5.7 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-98625 | netfilter: flowtable: publish HW_DEAD after worker is done | MEDIUM | 5.7 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-98698 | wifi: mac80211: handle empty FILS association request payload | MEDIUM | 5.7 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98705 | wifi: mac80211: account proxy paths against the mesh path limit | MEDIUM | 5.7 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-98749 | tty: serial: max3100: shut down timer before freeing port | MEDIUM | 5.7 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-98752 | tty: port: fix tty_port_tty_vhangup() race | MEDIUM | 5.7 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98762 | USB: dwc2: shut down wakeup timer before freeing HCD state | MEDIUM | 5.7 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98772 | USB: serial: fix port tear down use-after-free | MEDIUM | 5.7 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98773 | USB: cdc-acm: skip URB restart in port_shutdown if disconnected | MEDIUM | 5.7 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98859 | HID: multitouch: stop the release timer from being rearmed on remove | MEDIUM | 5.7 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-99039 | memstick: core: wait for request completion before freeing card | MEDIUM | 5.7 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-99095 | drm/vc4: drain the hangcheck timer and works on V3D unbind | MEDIUM | 5.7 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-105713 | Microsoft Office SharePoint Spoofing Vulnerability | MEDIUM | 5.7 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-85816 | Windows Wi-Fi Driver Information Disclosure Vulnerability | MEDIUM | 5.7 | 44%ile | Microsoft | 2026-10-13 |
| CVE-2026-98663 | iio: imu: adis16480: fix unprotected debugfs reads | MEDIUM | 5.7 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98666 | iio: gyro: adis16136: fix unprotected debugfs reads | MEDIUM | 5.7 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98670 | iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind | MEDIUM | 5.7 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98677 | iio: adc: ad_sigma_delta: fix use-after-free on unbind | MEDIUM | 5.7 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-98721 | mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ | MEDIUM | 5.7 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-98765 | USB: gadget: dummy-hcd: Fix wait for outstanding request completions | MEDIUM | 5.7 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98796 | net: ethernet: mtk_eth_soc: allocate dummy netdev sooner | MEDIUM | 5.7 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98532 | ipv6: do not let ipv6_find_hdr() return an offset past the packet end | MEDIUM | 5.6 | 49%ile | Microsoft | 2026-10-13 |
| CVE-2026-69978 | Microsoft Windows VMSwitch Denial of Service Vulnerability | MEDIUM | 5.6 | 33%ile | Microsoft | 2026-10-13 |
| CVE-2026-70097 | Windows Virtualization-Based Security (VBS) Enclave Spoofing Vulnerability | MEDIUM | 5.6 | 13%ile | Microsoft | 2026-10-13 |
| CVE-2026-83885 | Windows Virtualization-Based Security (VBS) Enclave Spoofing Vulnerability | MEDIUM | 5.6 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-96865 | Windows Secure Kernel Mode Information Disclosure Vulnerability | MEDIUM | 5.6 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-99118 | drm/i915/dmc: Harden DMC firmware payload parsing | MEDIUM | 5.5 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-99127 | page_pool: keep frag_offset aligned for odd-sized requests | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-99130 | io_uring/cancel: don't spin on local work the task can't run | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-99132 | xfs: don't hold buffer locks across sync transaction commit in xfs_sync_sb_buf | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-99133 | net/iucv: fix the recvmsg window update | MEDIUM | 5.5 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-99135 | dm-integrity: fix infinite loop on discard with large tag size | MEDIUM | 5.5 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-99140 | tracing: Fix hist trigger timestamps for buffered events | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-99155 | scsi: xen/scsifront: Check for a NULL shadow entry on a backend response | MEDIUM | 5.5 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-99166 | net: rds: fix uninitialized trans dereference in CM event handler | MEDIUM | 5.5 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-99169 | futex: Fix mm reuse handling for FUT_OFF_MMSHARED | MEDIUM | 5.5 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-99179 | watch_queue: Fix note pool publication race in watch_queue_set_size() | MEDIUM | 5.5 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-99187 | perf: Fix perf_pmu_migrate_context() leaving events behind | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-99189 | gpio: mxc: fix race between chained IRQ handler install and probe completion | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-99211 | netlink: reset skb headers before unicast and multicast filtering | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-99215 | power: supply: core: prevent unregistering a power supply while a callback runs | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-103531 | OpenSC card-setcos.c setcos_construct_fci_44 stack-based overflow | MEDIUM | 5.5 | 9%ile | Microsoft | 2026-10-13 |
| CVE-2026-110257 | OW2 ASM 5.0 before 9.11 Excessive Memory Allocation via BootstrapMethods Attribute | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-110258 | OW2 ASM 3.0 before 9.11 Excessive Memory Allocation via Multiple RET Instructions | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-110259 | OW2 ASM 3.0 before 9.11 Uncontrolled Recursion via ClassWriter.replaceAsmInstructions() | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-110260 | OW2 ASM 3.0 before 9.11 Quadratic Memory Allocation via Exception Handlers | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-110261 | OW2 ASM 3.0 before 9.11 Excessive CPU Consumption via ClassWriter COMPUTE_FRAMES | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-110263 | OW2 ASM 3.0 before 9.11 Uncontrolled Recursion in SignatureReader | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-110270 | OW2 ASM 3.0 before 9.11 Exponential Memory Allocation in JSRInlinerAdapter | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-110591 | OW2 ASM 1.4.3 before 9.11 Excessive Resource Consumption via Analyzer | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-110659 | ELFIO through 3.12 NULL Pointer Dereference via relocation_section_accessor get_entry | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-46571 | In NTFS-3G before 2026.7.7, a out-of-bounds read exists in ntfs_fix_file_name() in libntfs-3g/reparse.c that allows an a | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-10-13 |
| CVE-2026-61801 | github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-10-13 |
| CVE-2026-88838 | Busybox: busybox: non-root mount option filter bypass allows clearing fstab security restrictions | MEDIUM | 5.5 | 1%ile | Microsoft | 2026-10-13 |
| CVE-2026-89098 | Nfs-utils: nfs-utils: denial of service via assertion failure in fsidd | MEDIUM | 5.5 | 4%ile | Microsoft | 2026-10-13 |
| CVE-2026-92391 | curl_mime_free stack overflow by recursion | MEDIUM | 5.5 | 67%ile | Microsoft | 2026-10-13 |
| CVE-2026-94448 | Reset context tracking on consecutive template expressions in html/template | MEDIUM | 5.5 | 22%ile | Microsoft | 2026-10-13 |
| CVE-2026-95512 | Freetype: freetype: denial of service via repeated subroutine allocations in cid font loader | MEDIUM | 5.5 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-98173 | smb: client: fix use-after-free of iface in cifs_try_adding_channels() | MEDIUM | 5.5 | 28%ile | Microsoft | 2026-10-13 |
| CVE-2026-98182 | wifi: mac80211: refuse to make a monitor active when it has no queue | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98185 | wifi: mwifiex: validate scan response extents | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98195 | wifi: iwlegacy: fix broadcast stations deallocation | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98198 | hwmon: (pwm-fan) Stop RPM timer before freeing tach data | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98202 | Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98216 | IB/hfi1: Fix the PIO_CRED credit-return mmap | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-10-13 |
| CVE-2026-98227 | memstick: ms_block: destroy io_queue workqueue on removal | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98237 | net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98241 | ipv6: xfrm: use full sockets in local error paths | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-10-13 |
| CVE-2026-98247 | Bluetooth: hci_codec: validate vendor codec count length | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-98257 | rds: ib: use rds_conn_drop() on protocol version mismatch | MEDIUM | 5.5 | 43%ile | Microsoft | 2026-10-13 |
| CVE-2026-98260 | exec: Cleanup POSIX timers right after de_thread() | MEDIUM | 5.5 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-98262 | ata: libahci: clear PxCLBU and PxFBU for AHCI_HFLAG_32BIT_ONLY | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98266 | ALSA: core: Fix potential UAF after asynchronous card release | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98273 | x86/kprobes: Fix crash when probing CS CALL instructions | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98276 | net: lock the socket in sock_gettstamp() | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-10-13 |
| CVE-2026-98284 | netlink: do not free nlk->groups while lockless readers can use it | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-98285 | net: bridge: vlan: fix bugs caused by switchdev deletion errors | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-98286 | drop_monitor: use timer_shutdown_sync() to prevent timer rearming during teardown | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98290 | Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup | MEDIUM | 5.5 | 15%ile | Microsoft | 2026-10-13 |
| CVE-2026-98299 | tcp: do not let tcp_rmem be set below 4096 | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98300 | tcp: Don't call skb_clone_and_charge_r() for close()d listener in tcp_v6_do_rcv(). | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98302 | net: fddi: skfp: fix NULL deref when setting the MAC address while down | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98307 | wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98313 | drm/msm/dp: skip PUSH_IDLE when the link was never enabled | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98314 | ALSA: pcm: set timer->private_data before registering the PCM timer | MEDIUM | 5.5 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-98325 | wifi: mac80211: set up the TX info early to fix failure paths | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98334 | wifi: mac80211: reset state when starting AP fails | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98344 | dmaengine: Fix device kref underflow in dma_chan_put() | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98354 | RDMA/mad: Fix receive buffer leak when PKey enforcement fails | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98355 | RDMA/rtrs: guard against null kobj name | MEDIUM | 5.5 | 4%ile | Microsoft | 2026-10-13 |
| CVE-2026-98358 | IB/iser: reject a remote invalidation of an unregistered direction | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98367 | RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-10-13 |
| CVE-2026-98377 | vlan: require the MAC header to be present in __vlan_insert_inner_tag() | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98379 | netfilter: ip6t_rpfilter: reject routes without inet6_dev | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98380 | net/sched: reject IDR error pointers when deleting actions | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98382 | bpf: Reject dev-bound-only programs on other devices | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-98420 | ksmbd: follow SMB2 session expiration semantics | MEDIUM | 5.5 | 15%ile | Microsoft | 2026-10-13 |
| CVE-2026-98427 | net/sched: codel: bound the dropping loop per dequeue call | MEDIUM | 5.5 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-98476 | s390/cio: Fix NULL pointer dereference in ccw_device_get_util_str() | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98551 | perf/core: Fill branch entries with a single assignment | MEDIUM | 5.5 | 9%ile | Microsoft | 2026-10-13 |
| CVE-2026-98608 | drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98609 | drm/virtio: fix object leak when drm_gem_handle_create() fails | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98655 | perf: Require kernel access for text poke events | MEDIUM | 5.5 | 9%ile | Microsoft | 2026-10-13 |
| CVE-2026-98668 | iio: buffer: Ensure bounce buffer used for unaligned case is zeroed. | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98783 | drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98809 | Bluetooth: hci_sync: don't drain cmd_sync backlog on unregister | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98853 | net: gso: limit recursive IP-in-IP segmentation | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-98872 | freevxfs: don't BUG() on unknown typed-extent type | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-98873 | netfilter: nf_conntrack_expect: zero at allocation time | MEDIUM | 5.5 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-98875 | drm/nouveau/gsp: add SEC2 to GA100 chip table | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-98876 | host1x: bus: Fix missing ops null check in error teardown | MEDIUM | 5.5 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-98877 | irqchip/gic-v4: Don't advertise VLPIs if no ITS is probed | MEDIUM | 5.5 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-98878 | irqchip/gic-v5: Immediately exec priority drop following activate | MEDIUM | 5.5 | 9%ile | Microsoft | 2026-10-13 |
| CVE-2026-98879 | isofs: handle set_blocksize failures | MEDIUM | 5.5 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-98880 | ntfs3: handle set_blocksize failures | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98884 | mmc: core: Add validation for host-provided max_segs | MEDIUM | 5.5 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-98885 | ima: return error early if file xattr cannot be changed | MEDIUM | 5.5 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-98886 | drm/gma500: return errors from Oaktrail HDMI I2C reads | MEDIUM | 5.5 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-98887 | wifi: mac80211_hwsim: reject undersized HWSIM_ATTR_TX_INFO | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-98888 | arm64: kprobes: Allow reentering kprobes while single-stepping | MEDIUM | 5.5 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-98890 | wifi: libertas: reject short monitor TX frames | MEDIUM | 5.5 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-98892 | firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size | MEDIUM | 5.5 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-98893 | firmware: arm_scmi: Validate SENSOR_UPDATE payload size | MEDIUM | 5.5 | 13%ile | Microsoft | 2026-10-13 |
| CVE-2026-98895 | net/mlx5: HWS, Handle destroying table that has a miss table | MEDIUM | 5.5 | 4%ile | Microsoft | 2026-10-13 |
| CVE-2026-98898 | drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized | MEDIUM | 5.5 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-98905 | drm/amdkfd: Properly acquire queue buffers in CRIU restore | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98909 | net: cpsw_new: unregister devlink on port registration failure | MEDIUM | 5.5 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-98911 | dpaa2-switch: fix the error path in dpaa2_switch_rx() | MEDIUM | 5.5 | 25%ile | Microsoft | 2026-10-13 |
| CVE-2026-98914 | drm/amdgpu: cap ATOM command table nesting depth | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-98979 | namespace: refuse an automount below a mount that is in no namespace | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98989 | namespace: check a recursive bind mount for mount namespace loops | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-99041 | ip6_gre: remove obsolete ERSPAN PMTU update | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-102187 | Windows Kernel Information Disclosure Vulnerability | MEDIUM | 5.5 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-103560 | Role: DNS Server Tampering Vulnerability | MEDIUM | 5.5 | 25%ile | Microsoft | 2026-10-13 |
| CVE-2026-103567 | Windows Broadcast DVR User Service Information Disclosure Vulnerability | MEDIUM | 5.5 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-105726 | Microsoft Defender Information Disclosure Vulnerability | MEDIUM | 5.5 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-105731 | Microsoft Office Graphics Component Information Disclosure Vulnerability | MEDIUM | 5.5 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-108462 | Windows Kernel Information Disclosure Vulnerability | MEDIUM | 5.5 | 59%ile | Microsoft | 2026-10-13 |
| CVE-2026-110150 | Chromium CVE-2026-110150: Privilege elevation | MEDIUM | 5.5 | 0%ile | Microsoft | 2026-10-13 |
| CVE-2026-62687 | Windows Backup Engine Information Disclosure Vulnerability | MEDIUM | 5.5 | 42%ile | Microsoft | 2026-10-13 |
| CVE-2026-62879 | Windows SmartScreen Tampering Vulnerability | MEDIUM | 5.5 | 28%ile | Microsoft | 2026-10-13 |
| CVE-2026-69644 | Windows iSCSI Information Disclosure Vulnerability | MEDIUM | 5.5 | 61%ile | Microsoft | 2026-10-13 |
| CVE-2026-69675 | Windows Network File System Information Disclosure Vulnerability | MEDIUM | 5.5 | 41%ile | Microsoft | 2026-10-13 |
| CVE-2026-69721 | Windows iSCSI Information Disclosure Vulnerability | MEDIUM | 5.5 | 41%ile | Microsoft | 2026-10-13 |
| CVE-2026-69905 | Windows AppX Deployment Service Tampering Vulnerability | MEDIUM | 5.5 | 28%ile | Microsoft | 2026-10-13 |
| CVE-2026-69914 | Windows AppX Deployment Service Information Disclosure Vulnerability | MEDIUM | 5.5 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-69919 | Windows Cryptographic Services Information Disclosure Vulnerability | MEDIUM | 5.5 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-69954 | Windows Overlay Filter Information Disclosure Vulnerability | MEDIUM | 5.5 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-69967 | Windows Overlay Filter Information Disclosure Vulnerability | MEDIUM | 5.5 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-69971 | Windows Kernel-Mode Drivers Information Disclosure Vulnerability | MEDIUM | 5.5 | 34%ile | Microsoft | 2026-10-13 |
| CVE-2026-69979 | Windows AppX Deployment Service Security Feature Bypass Vulnerability | MEDIUM | 5.5 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-69999 | Windows Update Information Disclosure Vulnerability | MEDIUM | 5.5 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-70011 | Windows IP Over USB Service Information Disclosure Vulnerability | MEDIUM | 5.5 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-70017 | Windows Secure Kernel Mode Information Disclosure Vulnerability | MEDIUM | 5.5 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-70041 | Windows CD-ROM Driver Information Disclosure Vulnerability | MEDIUM | 5.5 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-70044 | Microsoft Windows Media Foundation Information Disclosure Vulnerability | MEDIUM | 5.5 | 48%ile | Microsoft | 2026-10-13 |
| CVE-2026-70055 | Windows Cryptographic Services Information Disclosure Vulnerability | MEDIUM | 5.5 | 61%ile | Microsoft | 2026-10-13 |
| CVE-2026-70057 | Windows Routing and Remote Access Service (RRAS) Security Feature Bypass Vulnerability | MEDIUM | 5.5 | 25%ile | Microsoft | 2026-10-13 |
| CVE-2026-70071 | Role: DNS Server Tampering Vulnerability | MEDIUM | 5.5 | 17%ile | Microsoft | 2026-10-13 |
| CVE-2026-70074 | Windows DNS Information Disclosure Vulnerability | MEDIUM | 5.5 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-70083 | Role: DNS Server Tampering Vulnerability | MEDIUM | 5.5 | 25%ile | Microsoft | 2026-10-13 |
| CVE-2026-70084 | Windows Projected File System Information Disclosure Vulnerability | MEDIUM | 5.5 | 42%ile | Microsoft | 2026-10-13 |
| CVE-2026-70085 | Role: DNS Server Tampering Vulnerability | MEDIUM | 5.5 | 25%ile | Microsoft | 2026-10-13 |
| CVE-2026-70087 | Role: DNS Server Security Feature Bypass Vulnerability | MEDIUM | 5.5 | 25%ile | Microsoft | 2026-10-13 |
| CVE-2026-70090 | Windows Netlogon Information Disclosure Vulnerability | MEDIUM | 5.5 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-70128 | HID Parser Library Information Disclosure Vulnerability | MEDIUM | 5.5 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-70135 | Windows Remote POS Driver Information Disclosure Vulnerability | MEDIUM | 5.5 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-70137 | Windows Remote Access Connection Manager Information Disclosure Vulnerability | MEDIUM | 5.5 | 34%ile | Microsoft | 2026-10-13 |
| CVE-2026-70141 | Microsoft Windows Search Component Information Disclosure Vulnerability | MEDIUM | 5.5 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-70173 | Microsoft Windows Search Component Information Disclosure Vulnerability | MEDIUM | 5.5 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-70199 | Windows Kernel Information Disclosure Vulnerability | MEDIUM | 5.5 | 61%ile | Microsoft | 2026-10-13 |
| CVE-2026-70201 | Windows DHCP Server Denial of Service Vulnerability | MEDIUM | 5.5 | 39%ile | Microsoft | 2026-10-13 |
| CVE-2026-70208 | HTTP.sys Information Disclosure Vulnerability | MEDIUM | 5.5 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-70211 | Win32k Information Disclosure Vulnerability | MEDIUM | 5.5 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-70214 | Microsoft Office Excel Information Disclosure Vulnerability | MEDIUM | 5.5 | 47%ile | Microsoft | 2026-10-13 |
| CVE-2026-70216 | Windows Mobile Device Management Tampering Vulnerability | MEDIUM | 5.5 | 28%ile | Microsoft | 2026-10-13 |
| CVE-2026-70227 | Windows Device Association Service Information Disclosure Vulnerability | MEDIUM | 5.5 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-70232 | Windows Kernel Information Disclosure Vulnerability | MEDIUM | 5.5 | 61%ile | Microsoft | 2026-10-13 |
| CVE-2026-70234 | Desktop Window Manager Information Disclosure Vulnerability | MEDIUM | 5.5 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-70235 | Windows Event Tracing Spoofing Vulnerability | MEDIUM | 5.5 | 25%ile | Microsoft | 2026-10-13 |
| CVE-2026-70260 | Microsoft Trace Data Helper Information Disclosure Vulnerability | MEDIUM | 5.5 | 61%ile | Microsoft | 2026-10-13 |
| CVE-2026-70261 | Microsoft Trace Data Helper Information Disclosure Vulnerability | MEDIUM | 5.5 | 61%ile | Microsoft | 2026-10-13 |
| CVE-2026-70264 | Microsoft Defender Information Disclosure Vulnerability | MEDIUM | 5.5 | 42%ile | Microsoft | 2026-10-13 |
| CVE-2026-70270 | Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability | MEDIUM | 5.5 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-70277 | Windows Fast FAT File System Driver Information Disclosure Vulnerability | MEDIUM | 5.5 | 50%ile | Microsoft | 2026-10-13 |
| CVE-2026-70284 | Win32k Information Disclosure Vulnerability | MEDIUM | 5.5 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-70288 | Win32k Information Disclosure Vulnerability | MEDIUM | 5.5 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-70292 | Win32k Information Disclosure Vulnerability | MEDIUM | 5.5 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-70293 | Win32k Information Disclosure Vulnerability | MEDIUM | 5.5 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-70294 | Win32k Information Disclosure Vulnerability | MEDIUM | 5.5 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-70295 | Win32k Information Disclosure Vulnerability | MEDIUM | 5.5 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-81964 | Windows Update Orchestrator Service Security Feature Bypass Vulnerability | MEDIUM | 5.5 | 28%ile | Microsoft | 2026-10-13 |
| CVE-2026-83507 | Windows Update Orchestrator Service Information Disclosure Vulnerability | MEDIUM | 5.5 | 42%ile | Microsoft | 2026-10-13 |
| CVE-2026-83565 | Windows Encrypting File System (EFS) Information Disclosure Vulnerability | MEDIUM | 5.5 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-83571 | Windows Audio Service Information Disclosure Vulnerability | MEDIUM | 5.5 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-83657 | Windows Modern Device Management (MDM) Tampering Vulnerability | MEDIUM | 5.5 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-83658 | Windows Error Reporting Information Disclosure Vulnerability | MEDIUM | 5.5 | 28%ile | Microsoft | 2026-10-13 |
| CVE-2026-83664 | Windows Portable Device File System Driver Information Disclosure Vulnerability | MEDIUM | 5.5 | 34%ile | Microsoft | 2026-10-13 |
| CVE-2026-83668 | Windows WLAN Service Information Disclosure Vulnerability | MEDIUM | 5.5 | 34%ile | Microsoft | 2026-10-13 |
| CVE-2026-83681 | Microsoft PowerToys Tampering Vulnerability | MEDIUM | 5.5 | 27%ile | Microsoft | 2026-10-13 |
| CVE-2026-83686 | Microsoft Windows Search Component Information Disclosure Vulnerability | MEDIUM | 5.5 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-83695 | Windows Event Logging Service Information Disclosure Vulnerability | MEDIUM | 5.5 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-83705 | HTTP.sys Information Disclosure Vulnerability | MEDIUM | 5.5 | 60%ile | Microsoft | 2026-10-13 |
| CVE-2026-83713 | Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability | MEDIUM | 5.5 | 61%ile | Microsoft | 2026-10-13 |
| CVE-2026-83714 | HTTP.sys Information Disclosure Vulnerability | MEDIUM | 5.5 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-83719 | Servicing Stack Updates Information Disclosure Vulnerability | MEDIUM | 5.5 | 34%ile | Microsoft | 2026-10-13 |
| CVE-2026-83723 | Windows Event Logging Service Information Disclosure Vulnerability | MEDIUM | 5.5 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-83733 | Windows Print Spooler Components Information Disclosure Vulnerability | MEDIUM | 5.5 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-83736 | Windows Kernel Elevation of Privilege Vulnerability | MEDIUM | 5.5 | 39%ile | Microsoft | 2026-10-13 |
| CVE-2026-83737 | Windows NTFS Information Disclosure Vulnerability | MEDIUM | 5.5 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-83747 | Windows Error Reporting Information Disclosure Vulnerability | MEDIUM | 5.5 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-83755 | Win32k Information Disclosure Vulnerability | MEDIUM | 5.5 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-83760 | Microsoft Bluetooth Driver Information Disclosure Vulnerability | MEDIUM | 5.5 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-83764 | Windows Clipboard User Service Information Disclosure Vulnerability | MEDIUM | 5.5 | 28%ile | Microsoft | 2026-10-13 |
| CVE-2026-83765 | Windows DWM Core Library Information Disclosure Vulnerability | MEDIUM | 5.5 | 34%ile | Microsoft | 2026-10-13 |
| CVE-2026-83773 | Windows MIDI Service Module Information Disclosure Vulnerability | MEDIUM | 5.5 | 61%ile | Microsoft | 2026-10-13 |
| CVE-2026-83787 | Windows DHCP Server Security Feature Bypass Vulnerability | MEDIUM | 5.5 | 25%ile | Microsoft | 2026-10-13 |
| CVE-2026-83794 | Windows Portable Device MTP Driver Information Disclosure Vulnerability | MEDIUM | 5.5 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-83798 | Windows Update Stack Spoofing Vulnerability | MEDIUM | 5.5 | 15%ile | Microsoft | 2026-10-13 |
| CVE-2026-83835 | Windows Common Log File System Driver Information Disclosure Vulnerability | MEDIUM | 5.5 | 59%ile | Microsoft | 2026-10-13 |
| CVE-2026-83849 | Windows Hello Information Disclosure Vulnerability | MEDIUM | 5.5 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-83854 | Windows Notification Information Disclosure Vulnerability | MEDIUM | 5.5 | 26%ile | Microsoft | 2026-10-13 |
| CVE-2026-83864 | Windows NTFS Information Disclosure Vulnerability | MEDIUM | 5.5 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-83870 | Windows Aggregated Data Platform Service Information Disclosure Vulnerability | MEDIUM | 5.5 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-83875 | Windows Human Interface Device Information Disclosure Vulnerability | MEDIUM | 5.5 | 30%ile | Microsoft | 2026-10-13 |
| CVE-2026-83884 | Windows Human Interface Device Information Disclosure Vulnerability | MEDIUM | 5.5 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-83887 | HID Parser Library Information Disclosure Vulnerability | MEDIUM | 5.5 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-83892 | Windows Human Interface Device Information Disclosure Vulnerability | MEDIUM | 5.5 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-83893 | Windows Clipboard User Service Information Disclosure Vulnerability | MEDIUM | 5.5 | 46%ile | Microsoft | 2026-10-13 |
| CVE-2026-83898 | HID Parser Library Information Disclosure Vulnerability | MEDIUM | 5.5 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-83904 | HID Parser Library Information Disclosure Vulnerability | MEDIUM | 5.5 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-83907 | Windows Hello Information Disclosure Vulnerability | MEDIUM | 5.5 | 61%ile | Microsoft | 2026-10-13 |
| CVE-2026-83933 | Windows Update Orchestrator Service Information Disclosure Vulnerability | MEDIUM | 5.5 | 41%ile | Microsoft | 2026-10-13 |
| CVE-2026-84011 | Windows SMB Client Security Feature Bypass Vulnerability | MEDIUM | 5.5 | 21%ile | Microsoft | 2026-10-13 |
| CVE-2026-85320 | Windows Print Spooler Components Information Disclosure Vulnerability | MEDIUM | 5.5 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-85336 | Windows Device Association Service Information Disclosure Vulnerability | MEDIUM | 5.5 | 33%ile | Microsoft | 2026-10-13 |
| CVE-2026-85374 | Windows Installer Information Disclosure Vulnerability | MEDIUM | 5.5 | 33%ile | Microsoft | 2026-10-13 |
| CVE-2026-85793 | Windows Sysmain Service Information Disclosure Vulnerability | MEDIUM | 5.5 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-85794 | Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability | MEDIUM | 5.5 | 33%ile | Microsoft | 2026-10-13 |
| CVE-2026-85812 | Windows Bind Filter Driver Information Disclosure Vulnerability | MEDIUM | 5.5 | 42%ile | Microsoft | 2026-10-13 |
| CVE-2026-85815 | Windows Device Association Service Information Disclosure Vulnerability | MEDIUM | 5.5 | 33%ile | Microsoft | 2026-10-13 |
| CVE-2026-85830 | Windows Installer Information Disclosure Vulnerability | MEDIUM | 5.5 | 33%ile | Microsoft | 2026-10-13 |
| CVE-2026-85831 | Windows Biometric Service Information Disclosure Vulnerability | MEDIUM | 5.5 | 33%ile | Microsoft | 2026-10-13 |
| CVE-2026-85835 | Servicing Stack Updates Information Disclosure Vulnerability | MEDIUM | 5.5 | 34%ile | Microsoft | 2026-10-13 |
| CVE-2026-85852 | Windows Management Instrumentation Information Disclosure Vulnerability | MEDIUM | 5.5 | 33%ile | Microsoft | 2026-10-13 |
| CVE-2026-85857 | Windows Kernel-Mode Drivers Information Disclosure Vulnerability | MEDIUM | 5.5 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-85865 | Windows DHCP Server Security Feature Bypass Vulnerability | MEDIUM | 5.5 | 21%ile | Microsoft | 2026-10-13 |
| CVE-2026-85909 | Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability | MEDIUM | 5.5 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-85910 | Windows StateRepository API Information Disclosure Vulnerability | MEDIUM | 5.5 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-85935 | Windows USB Driver Information Disclosure Vulnerability | MEDIUM | 5.5 | 33%ile | Microsoft | 2026-10-13 |
| CVE-2026-85938 | Windows Broadcast DVR User Service Information Disclosure Vulnerability | MEDIUM | 5.5 | 27%ile | Microsoft | 2026-10-13 |
| CVE-2026-87698 | Windows Remote Access Service Infrastructure Information Disclosure Vulnerability | MEDIUM | 5.5 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-87709 | Windows Host Guardian Service Tampering Vulnerability | MEDIUM | 5.5 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-88140 | Windows Key Storage Provider Information Disclosure Vulnerability | MEDIUM | 5.5 | 33%ile | Microsoft | 2026-10-13 |
| CVE-2026-88158 | Microsoft Digest Authentication Information Disclosure Vulnerability | MEDIUM | 5.5 | 21%ile | Microsoft | 2026-10-13 |
| CVE-2026-88162 | Windows Encrypting File System (EFS) Tampering Vulnerability | MEDIUM | 5.5 | 21%ile | Microsoft | 2026-10-13 |
| CVE-2026-95904 | Windows Event Logging Service Information Disclosure Vulnerability | MEDIUM | 5.5 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-96183 | Windows Health and Optimized Experiences Service Information Disclosure Vulnerability | MEDIUM | 5.5 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-96218 | Windows Update Stack Tampering Vulnerability | MEDIUM | 5.5 | 46%ile | Microsoft | 2026-10-13 |
| CVE-2026-96247 | Windows Kernel-Mode Drivers Information Disclosure Vulnerability | MEDIUM | 5.5 | 33%ile | Microsoft | 2026-10-13 |
| CVE-2026-96311 | Windows Network List Service Tampering Vulnerability | MEDIUM | 5.5 | 21%ile | Microsoft | 2026-10-13 |
| CVE-2026-96314 | Windows Audio Service Information Disclosure Vulnerability | MEDIUM | 5.5 | 33%ile | Microsoft | 2026-10-13 |
| CVE-2026-96315 | Windows Overlay Filter Tampering Vulnerability | MEDIUM | 5.5 | 21%ile | Microsoft | 2026-10-13 |
| CVE-2026-96316 | Windows Routing and Remote Access Service (RRAS) Tampering Vulnerability | MEDIUM | 5.5 | 21%ile | Microsoft | 2026-10-13 |
| CVE-2026-96321 | Remote Desktop Display Driver Information Disclosure Vulnerability | MEDIUM | 5.5 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-96846 | WebDAV Information Disclosure Vulnerability | MEDIUM | 5.5 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-96848 | Windows Win32 Kernel Subsystem Information Disclosure Vulnerability | MEDIUM | 5.5 | 33%ile | Microsoft | 2026-10-13 |
| CVE-2026-96849 | Windows Kernel-Mode Drivers Information Disclosure Vulnerability | MEDIUM | 5.5 | 33%ile | Microsoft | 2026-10-13 |
| CVE-2026-96850 | Windows Modern Device Management (MDM) Information Disclosure Vulnerability | MEDIUM | 5.5 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-96851 | Windows Management Instrumentation Information Disclosure Vulnerability | MEDIUM | 5.5 | 33%ile | Microsoft | 2026-10-13 |
| CVE-2026-96854 | Windows Device Association Service Information Disclosure Vulnerability | MEDIUM | 5.5 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-96855 | Windows Modern Device Management (MDM) Tampering Vulnerability | MEDIUM | 5.5 | 21%ile | Microsoft | 2026-10-13 |
| CVE-2026-96857 | Windows Projected File System Information Disclosure Vulnerability | MEDIUM | 5.5 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-96858 | Windows Security Account Manager Tampering Vulnerability | MEDIUM | 5.5 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-96859 | Windows Imaging Component Information Disclosure Vulnerability | MEDIUM | 5.5 | 33%ile | Microsoft | 2026-10-13 |
| CVE-2026-96860 | Windows USB Print Driver Information Disclosure Vulnerability | MEDIUM | 5.5 | 33%ile | Microsoft | 2026-10-13 |
| CVE-2026-96910 | Microsoft Windows Search Component Information Disclosure Vulnerability | MEDIUM | 5.5 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-96921 | Windows Message Queuing Queue Manager Information Disclosure Vulnerability | MEDIUM | 5.5 | 33%ile | Microsoft | 2026-10-13 |
| CVE-2026-96925 | Windows NTFS Information Disclosure Vulnerability | MEDIUM | 5.5 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-96926 | Role: DNS Server Tampering Vulnerability | MEDIUM | 5.5 | 25%ile | Microsoft | 2026-10-13 |
| CVE-2026-96927 | Windows NTFS Information Disclosure Vulnerability | MEDIUM | 5.5 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-96930 | Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability | MEDIUM | 5.5 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-96935 | Windows NTFS Information Disclosure Vulnerability | MEDIUM | 5.5 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-96944 | Windows Storage Information Disclosure Vulnerability | MEDIUM | 5.5 | 44%ile | Microsoft | 2026-10-13 |
| CVE-2026-96948 | Windows Client Side Caching driver (csc.sys) Information Disclosure Vulnerability | MEDIUM | 5.5 | 44%ile | Microsoft | 2026-10-13 |
| CVE-2026-97005 | Microsoft Office PowerPoint Information Disclosure Vulnerability | MEDIUM | 5.5 | 28%ile | Microsoft | 2026-10-13 |
| CVE-2026-97014 | Microsoft Office Excel Information Disclosure Vulnerability | MEDIUM | 5.5 | 43%ile | Microsoft | 2026-10-13 |
| CVE-2026-97744 | Microsoft Office PowerPoint Information Disclosure Vulnerability | MEDIUM | 5.5 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-97790 | Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering Vulnerability | MEDIUM | 5.5 | 33%ile | Microsoft | 2026-10-13 |
| CVE-2026-113680 | HarfBuzz 8.0.0 through 14.6.0 WebAssembly Shaper NULL Pointer Dereference DoS | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98433 | KVM: PPC: Book3S HV: fix secure device page leak on uv_page_in() failure | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98556 | gve: DQO: reject TSO packets with an out of range MSS | MEDIUM | 5.5 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-98672 | iio: adc: stm32-adc: fix possible division by zero in processed channel | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-115877 | Twisted: HTTP Request Smuggling in twisted.web via a Bare CR or LF in a Header Value | MEDIUM | 5.4 | 17%ile | Microsoft | 2026-10-13 |
| CVE-2026-88648 | Incomplete X.509 implementation in GnuTLS v3.8.13 allows attackers controlling a subordinate Certificate Authority to by | MEDIUM | 5.4 | 9%ile | Microsoft | 2026-10-13 |
| CVE-2026-98405 | smb: client: fix missing iov bounds check in parse_posix_sids() | MEDIUM | 5.4 | 41%ile | Microsoft | 2026-10-13 |
| CVE-2026-98901 | ksmbd: fix lease break and ack state handling | MEDIUM | 5.4 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-102305 | Chromium CVE-2026-102305: UI misrepresentation | MEDIUM | 5.4 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-102314 | Chromium CVE-2026-102314: UI misrepresentation | MEDIUM | 5.4 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-106179 | Chromium CVE-2026-106179: UI misrepresentation | MEDIUM | 5.4 | 16%ile | Microsoft | 2026-10-13 |
| CVE-2026-106182 | Chromium CVE-2026-106182: UI misrepresentation | MEDIUM | 5.4 | 16%ile | Microsoft | 2026-10-13 |
| CVE-2026-106229 | Chromium CVE-2026-106229: UI misrepresentation | MEDIUM | 5.4 | 16%ile | Microsoft | 2026-10-13 |
| CVE-2026-106232 | Chromium CVE-2026-106232: UI misrepresentation | MEDIUM | 5.4 | 16%ile | Microsoft | 2026-10-13 |
| CVE-2026-106236 | Chromium CVE-2026-106236: UI misrepresentation | MEDIUM | 5.4 | 14%ile | Microsoft | 2026-10-13 |
| CVE-2026-106246 | Chromium CVE-2026-106246: Incorrect authorization | MEDIUM | 5.4 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-106250 | Chromium CVE-2026-106250: Missing authorization | MEDIUM | 5.4 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-106251 | Chromium CVE-2026-106251: UI misrepresentation | MEDIUM | 5.4 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-106259 | Chromium CVE-2026-106259: Incorrect authorization | MEDIUM | 5.4 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-106264 | Chromium CVE-2026-106264: Missing authorization | MEDIUM | 5.4 | 14%ile | Microsoft | 2026-10-13 |
| CVE-2026-106265 | Chromium CVE-2026-106265: UI misrepresentation | MEDIUM | 5.4 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-106270 | Chromium CVE-2026-106270: Incorrect authorization | MEDIUM | 5.4 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-106272 | Chromium CVE-2026-106272: UI misrepresentation | MEDIUM | 5.4 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-106276 | Chromium CVE-2026-106276: UI misrepresentation | MEDIUM | 5.4 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-106285 | Chromium CVE-2026-106285: UI misrepresentation | MEDIUM | 5.4 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-106288 | Chromium CVE-2026-106288: Missing authorization | MEDIUM | 5.4 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-106299 | Chromium CVE-2026-106299: Improper input validation | MEDIUM | 5.4 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-106302 | Chromium CVE-2026-106302: UI misrepresentation | MEDIUM | 5.4 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-106306 | Chromium CVE-2026-106306: Incorrect authorization | MEDIUM | 5.4 | 3%ile | Microsoft | 2026-10-13 |
| CVE-2026-106311 | Chromium CVE-2026-106311: Clickjacking | MEDIUM | 5.4 | 9%ile | Microsoft | 2026-10-13 |
| CVE-2026-106316 | Chromium CVE-2026-106316: UI misrepresentation | MEDIUM | 5.4 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-106333 | Chromium CVE-2026-106333: Incorrect authorization | MEDIUM | 5.4 | 9%ile | Microsoft | 2026-10-13 |
| CVE-2026-106338 | Chromium CVE-2026-106338: UI misrepresentation | MEDIUM | 5.4 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-106343 | Chromium CVE-2026-106343: Improper state validation | MEDIUM | 5.4 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-106344 | Chromium CVE-2026-106344: Missing authorization | MEDIUM | 5.4 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-106356 | Chromium CVE-2026-106356: Clickjacking | MEDIUM | 5.4 | 16%ile | Microsoft | 2026-10-13 |
| CVE-2026-106416 | Chromium CVE-2026-106416: Code injection | MEDIUM | 5.4 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-106420 | Chromium CVE-2026-106420: Incorrect calculation | MEDIUM | 5.4 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-98482 | nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() | MEDIUM | 5.4 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-102342 | ammonia allows stored XSS through unsanitized SVG animate and set attributes | MEDIUM | 5.4 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-102407 | Incorrect Authorization in Elasticsearch Leading to Unauthorized Data Stream Modification | MEDIUM | 5.4 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-118131 | CVE-2026-118131 | MEDIUM | 5.3 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-99165 | sctp: revalidate output stream after association connect wait | MEDIUM | 5.3 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-19585 | Go-getter vulnerable to a path traversal in S3/GCS directory download handling | MEDIUM | 5.3 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-58415 | Apache HTTP Server: mod_dav_fs property database read access | MEDIUM | 5.3 | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-61702 | OpenPrinting CUPS: root-side banner file disclosure | MEDIUM | 5.3 | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-79768 | Apache HTTP Server: mod_userdir information disclosure | MEDIUM | 5.3 | 45%ile | Microsoft | 2026-10-13 |
| CVE-2026-92387 | never-ending loop via server response omission | MEDIUM | 5.3 | 64%ile | Microsoft | 2026-10-13 |
| CVE-2026-95101 | NGINX ngx_http_v3_module vulnerability | MEDIUM | 5.3 | 28%ile | Microsoft | 2026-10-13 |
| CVE-2026-98349 | wifi: libipw: reject too-short beacon and probe responses | MEDIUM | 5.3 | 16%ile | Microsoft | 2026-10-13 |
| CVE-2026-98459 | Bluetooth: ISO: balance the parent hold in hci_bind_bis() | MEDIUM | 5.3 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98488 | net: atl1e: fix soft lockup on out-of-range hw_next_to_clean read | MEDIUM | 5.3 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-98489 | net: atl1c: fix soft lockup on out-of-range tpd_cons read | MEDIUM | 5.3 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98494 | net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read | MEDIUM | 5.3 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-98550 | tipc: reject invalid and unexpected GRP_ACK_MSG to prevent bc_ackers underflow | MEDIUM | 5.3 | 52%ile | Microsoft | 2026-10-13 |
| CVE-2026-98554 | vlan: ensure sufficient headroom in vlan_dev_hard_header() | MEDIUM | 5.3 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-98964 | nvmet: use the local P2P device on metadata allocation failure | MEDIUM | 5.3 | 49%ile | Microsoft | 2026-10-13 |
| CVE-2026-99010 | Bluetooth: RFCOMM: free the skb when the DLC has no owner | MEDIUM | 5.3 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-102198 | Windows Remote Desktop Protocol Information Disclosure Vulnerability | MEDIUM | 5.3 | 56%ile | Microsoft | 2026-10-13 |
| CVE-2026-106181 | Chromium CVE-2026-106181: Incorrect reference resolution | MEDIUM | 5.3 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-106214 | Chromium CVE-2026-106214: Information leak | MEDIUM | 5.3 | 9%ile | Microsoft | 2026-10-13 |
| CVE-2026-106230 | Chromium CVE-2026-106230: Incorrect reference resolution | MEDIUM | 5.3 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-106243 | Chromium CVE-2026-106243: Incomplete cleanup | MEDIUM | 5.3 | 1%ile | Microsoft | 2026-10-13 |
| CVE-2026-106303 | Chromium CVE-2026-106303: Observable discrepancy | MEDIUM | 5.3 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-106351 | Chromium CVE-2026-106351: Observable discrepancy | MEDIUM | 5.3 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-106355 | Chromium CVE-2026-106355: Missing authorization | MEDIUM | 5.3 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-106364 | Chromium CVE-2026-106364: Incorrect authorization | MEDIUM | 5.3 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-106388 | Chromium CVE-2026-106388: Missing authorization | MEDIUM | 5.3 | 13%ile | Microsoft | 2026-10-13 |
| CVE-2026-108466 | Windows Kernel Denial of Service Vulnerability | MEDIUM | 5.3 | 53%ile | Microsoft | 2026-10-13 |
| CVE-2026-69640 | Windows Key Distribution Center Security Feature Bypass Vulnerability | MEDIUM | 5.3 | 53%ile | Microsoft | 2026-10-13 |
| CVE-2026-70025 | Windows Netlogon Denial of Service Vulnerability | MEDIUM | 5.3 | 65%ile | Microsoft | 2026-10-13 |
| CVE-2026-80092 | Microsoft Identity Web Elevation of Privilege Vulnerability | MEDIUM | 5.3 | 50%ile | Microsoft | 2026-10-13 |
| CVE-2026-85939 | Windows Kernel Security Feature Bypass Vulnerability | MEDIUM | 5.3 | 31%ile | Microsoft | 2026-10-13 |
| CVE-2026-88084 | Microsoft SQL Server Denial of Service Vulnerability | MEDIUM | 5.3 | 52%ile | Microsoft | 2026-10-13 |
| CVE-2026-88086 | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM | 5.3 | 30%ile | Microsoft | 2026-10-13 |
| CVE-2026-92707 | MessagePack-CSharp Denial of Service Vulnerability | MEDIUM | 5.3 | 52%ile | Microsoft | 2026-10-13 |
| CVE-2026-96234 | .NET Information Disclosure Vulnerability | MEDIUM | 5.3 | 26%ile | Microsoft | 2026-10-13 |
| CVE-2026-101025 | NGINX ngx_http_js_module vulnerability | MEDIUM | 5.3 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-110926 | Openssh: openssh: shared lz77 compression dictionary leaks plaintext across channels | MEDIUM | 5.3 | — | Microsoft | 2026-10-13 |
| CVE-2026-95117 | Buffer Overflow vulnerability in zserge jsmn jsmn HEAD 25647e6 allows a remote attacker to cause a denial of service via | MEDIUM | 5.3 | 33%ile | Microsoft | 2026-10-13 |
| CVE-2026-98577 | nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() | MEDIUM | 5.3 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-98664 | iio: imu: adis16400: fix unprotected debugfs reads | MEDIUM | 5.3 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-99024 | optee: register TEE devices only once fully initialized | MEDIUM | 5.3 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-107298 | msgpack5: Deeply nested input can exhaust the decoder stack | MEDIUM | 5.3 | 31%ile | Microsoft | 2026-10-13 |
| CVE-2026-98461 | Bluetooth: hci_sock: validate event length before filtering | MEDIUM | 5.2 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-98632 | Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel | MEDIUM | 5.2 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98656 | iio: trigger: cancel reenable_work before freeing trigger | MEDIUM | 5.2 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98696 | USB: serial: fix driver deregistration order | MEDIUM | 5.2 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98708 | wifi: mac80211: keep paired old chanctx alive | MEDIUM | 5.2 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98792 | netfilter: flowtable: generalize pending status bit | MEDIUM | 5.2 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98799 | bpf: Skip detached progs in trampoline images that are still in use | MEDIUM | 5.2 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-98800 | bpf: Wait for an RCU tasks grace period before freeing trampoline progs | MEDIUM | 5.2 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-98819 | Bluetooth: btintel: validate DDC record lengths | MEDIUM | 5.2 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-98824 | wifi: mac80211: validate TX status rate metadata | MEDIUM | 5.2 | 9%ile | Microsoft | 2026-10-13 |
| CVE-2026-98828 | wifi: ath9k: reject short WMI command responses | MEDIUM | 5.2 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-98855 | of/overlay: put property on deadprops only after changeset add succeeds | MEDIUM | 5.2 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98435 | EDAC/altera: Use parent device for devres in altr_portb_setup() | MEDIUM | 5.2 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-98578 | nfc: st21nfca: validate ISO15693 inventory length | MEDIUM | 5.2 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-98582 | nfc: st21nfca: validate received frame size | MEDIUM | 5.2 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-98657 | iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure | MEDIUM | 5.2 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98662 | iio: light: gp2ap020a00f: drain irq_work after free_irq | MEDIUM | 5.2 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98694 | thunderbolt: Fix KASAN reported use-after-free when request is canceled | MEDIUM | 5.2 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98754 | tty: vcc: hold port lock when clearing tty pointer in vcc_cleanup | MEDIUM | 5.2 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98758 | usb: typec: ucsi: glink: fix use-after-free of ucsi on remove | MEDIUM | 5.2 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98766 | usb: gadget: aspeed-vhub: cancel wake work on device removal | MEDIUM | 5.2 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98835 | iio: accel: kionix-kx022a: Fix array boundary check | MEDIUM | 5.2 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-107888 | OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference in cupsdCheckJobs() when a job marked job-held-on-cr | MEDIUM | 5.1 | 3%ile | Microsoft | 2026-10-13 |
| CVE-2026-98419 | drop_monitor: fix out-of-bounds write in reset_per_cpu_data() | MEDIUM | 5.1 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-98485 | netfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds read | MEDIUM | 5.1 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98623 | drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update | MEDIUM | 5.1 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98810 | wifi: mac80211: fix slab-out-of-bounds read in ieee80211_monitor_select_queue() | MEDIUM | 5.1 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-98605 | drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach | MEDIUM | 5.1 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98932 | EDAC/altera: Fix use-after-free in error paths | MEDIUM | 5.1 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98681 | smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races | MEDIUM | 5.0 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-115774 | Twisted: Denial of Service in the Twisted IMAP4 Server via a Negative Literal Size in SEARCH | MEDIUM | 4.9 | 44%ile | Microsoft | 2026-10-13 |
| CVE-2026-67628 | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM | 4.9 | 57%ile | Microsoft | 2026-10-13 |
| CVE-2026-70217 | Microsoft Office SharePoint Information Disclosure Vulnerability | MEDIUM | 4.9 | 62%ile | Microsoft | 2026-10-13 |
| CVE-2026-94520 | Microsoft SQL Server Denial of Service Vulnerability | MEDIUM | 4.9 | 58%ile | Microsoft | 2026-10-13 |
| CVE-2026-107708 | MIT krb5 through 1.22.2 KDC NULL Pointer Dereference via S4U2Proxy PAC | MEDIUM | 4.9 | 44%ile | Microsoft | 2026-10-13 |
| CVE-2026-106074 | A flaw in Node.js `crypto` causes the internal entropy caches used by `crypto.randomUUID()`, `crypto.randomUUIDv7()`, an | MEDIUM | 4.8 | 27%ile | Microsoft | 2026-10-13 |
| CVE-2026-115383 | Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 GC Heap Corruption via Tag Imports | MEDIUM | 4.8 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-87862 | HSTS cache import drops longer-lived child | MEDIUM | 4.8 | 63%ile | Microsoft | 2026-10-13 |
| CVE-2026-106402 | Chromium CVE-2026-106402: Incorrect authorization | MEDIUM | 4.8 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-83646 | Active Directory Federation Services (AD FS) Spoofing Vulnerability | MEDIUM | 4.8 | 31%ile | Microsoft | 2026-10-13 |
| CVE-2026-110924 | Openssh: openssh: gssapi delegated credentials can be stored after a failed authentication | MEDIUM | 4.8 | — | Microsoft | 2026-10-13 |
| CVE-2026-99171 | ntfs3: free the sbi after a grace period | MEDIUM | 4.7 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-99176 | KVM: nVMX: Reset MMU back to the root MMU if loading L2 state fails for !VM-Entry | MEDIUM | 4.7 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-115754 | serialize-javascript 7.0.1 before 7.1.3 XSS via unescaped </script in function body | MEDIUM | 4.7 | 14%ile | Microsoft | 2026-10-13 |
| CVE-2026-98196 | wifi: brcmsmac: fix UAF in brcms_free_timer() | MEDIUM | 4.7 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98347 | IB/IPoIB: Avoid restoring OPER_UP after multicast flush | MEDIUM | 4.7 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98386 | scsi: qla2xxx: Use memset_io() to clear QLAFX00 request ring slot | MEDIUM | 4.7 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-98404 | drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create() | MEDIUM | 4.7 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-98429 | RDMA/efa: Keep EQ resources alive while IRQ is registered | MEDIUM | 4.7 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-98430 | RDMA/efa: Keep admin queues alive while IRQ is registered | MEDIUM | 4.7 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-98455 | Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO | MEDIUM | 4.7 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98462 | Bluetooth: hci_conn: fix CIS hold ownership on reuse | MEDIUM | 4.7 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-98507 | mm/rmap: fix missing barrier between anon_vma init and vma->anon_vma publish | MEDIUM | 4.7 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98508 | drm/virtio: fix NULL pointer dereference on fence allocation failure | MEDIUM | 4.7 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-98622 | net/sched: act_ct: don't WARN on benign flow_offload_alloc() failure | MEDIUM | 4.7 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98717 | KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy | MEDIUM | 4.7 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-98751 | tty: abort break signalling on hangup | MEDIUM | 4.7 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98753 | tty: tty_port: restore TTY_IO_ERROR on activation failure | MEDIUM | 4.7 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98814 | nvme: fix command effects log lifetime for multipath heads | MEDIUM | 4.7 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-98840 | vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF | MEDIUM | 4.7 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98896 | thunderbolt: Keep the domain reference while processing hotplug | MEDIUM | 4.7 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-98903 | mailbox: imx: Add a channel shutdown field | MEDIUM | 4.7 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-98926 | drm/amd/display: Remove sink usage from DPMS | MEDIUM | 4.7 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-98943 | HID: steam: Clean up locking | MEDIUM | 4.7 | — | Microsoft | 2026-10-13 |
| CVE-2026-98946 | drm/vc4: Disable the V3D interrupt across runtime suspend | MEDIUM | 4.7 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98985 | namespace: check the mounts before reading their parents in pivot_root() | MEDIUM | 4.7 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98990 | namespace: check a submount for references right before unmounting it | MEDIUM | 4.7 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-99008 | Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown | MEDIUM | 4.7 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-99009 | Bluetooth: RFCOMM: connect the session socket without rfcomm_mutex | MEDIUM | 4.7 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-99035 | mmc: mtk-sd: Cancel request timeout work on remove | MEDIUM | 4.7 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-99040 | KEYS: Fix add_key() race with keyring restriction | MEDIUM | 4.7 | 9%ile | Microsoft | 2026-10-13 |
| CVE-2026-99043 | ice: fix metadata_dst refcount handling on representor teardown | MEDIUM | 4.7 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-99080 | fs: Free any excess xarray nodes in clear_inode() | MEDIUM | 4.7 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-99090 | drm/amdgpu: serialize vblank counter reads against GPU reset | MEDIUM | 4.7 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-102186 | Windows Network File System Information Disclosure Vulnerability | MEDIUM | 4.7 | 30%ile | Microsoft | 2026-10-13 |
| CVE-2026-102307 | Chromium CVE-2026-102307: Uninitialized resource | MEDIUM | 4.7 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-102313 | Chromium CVE-2026-102313: Uninitialized resource | MEDIUM | 4.7 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-102318 | Chromium CVE-2026-102318: Out of bounds read | MEDIUM | 4.7 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-106202 | Chromium CVE-2026-106202: Uninitialized resource | MEDIUM | 4.7 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-106215 | Chromium CVE-2026-106215: Uninitialized resource | MEDIUM | 4.7 | 21%ile | Microsoft | 2026-10-13 |
| CVE-2026-106231 | Chromium CVE-2026-106231: Uninitialized resource | MEDIUM | 4.7 | 18%ile | Microsoft | 2026-10-13 |
| CVE-2026-106258 | Chromium CVE-2026-106258: Uninitialized resource | MEDIUM | 4.7 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-106273 | Chromium CVE-2026-106273: Uninitialized resource | MEDIUM | 4.7 | 13%ile | Microsoft | 2026-10-13 |
| CVE-2026-106275 | Chromium CVE-2026-106275: Uninitialized resource | MEDIUM | 4.7 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-106284 | Chromium CVE-2026-106284: Out of bounds read | MEDIUM | 4.7 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-106300 | Chromium CVE-2026-106300: Race condition | MEDIUM | 4.7 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-106304 | Chromium CVE-2026-106304: Out of bounds read | MEDIUM | 4.7 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-106370 | Chromium CVE-2026-106370: Uninitialized resource | MEDIUM | 4.7 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-106376 | Chromium CVE-2026-106376: Uninitialized resource | MEDIUM | 4.7 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-69506 | Windows Key Storage Provider Information Disclosure Vulnerability | MEDIUM | 4.7 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-69969 | Windows AppX Deployment Service Information Disclosure Vulnerability | MEDIUM | 4.7 | 31%ile | Microsoft | 2026-10-13 |
| CVE-2026-69974 | Desktop Window Manager Information Disclosure Vulnerability | MEDIUM | 4.7 | 26%ile | Microsoft | 2026-10-13 |
| CVE-2026-70063 | Windows Kernel Information Disclosure Vulnerability | MEDIUM | 4.7 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-70077 | Windows Kernel Information Disclosure Vulnerability | MEDIUM | 4.7 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-70195 | Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability | MEDIUM | 4.7 | 18%ile | Microsoft | 2026-10-13 |
| CVE-2026-83504 | Windows SmartScreen Information Disclosure Vulnerability | MEDIUM | 4.7 | 19%ile | Microsoft | 2026-10-13 |
| CVE-2026-83582 | Windows Graphics Kernel Information Disclosure Vulnerability | MEDIUM | 4.7 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-83656 | Windows Modern Device Management (MDM) Tampering Vulnerability | MEDIUM | 4.7 | 18%ile | Microsoft | 2026-10-13 |
| CVE-2026-83672 | Windows Installer Information Disclosure Vulnerability | MEDIUM | 4.7 | 54%ile | Microsoft | 2026-10-13 |
| CVE-2026-83697 | Windows Modern Device Management (MDM) Tampering Vulnerability | MEDIUM | 4.7 | 13%ile | Microsoft | 2026-10-13 |
| CVE-2026-83774 | Windows Win32 Kernel Subsystem Information Disclosure Vulnerability | MEDIUM | 4.7 | 54%ile | Microsoft | 2026-10-13 |
| CVE-2026-83786 | Windows NTFS Information Disclosure Vulnerability | MEDIUM | 4.7 | 53%ile | Microsoft | 2026-10-13 |
| CVE-2026-83865 | Windows Internet (wininet.dll) Tampering Vulnerability | MEDIUM | 4.7 | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-83897 | Windows Win32 Kernel Subsystem Information Disclosure Vulnerability | MEDIUM | 4.7 | 53%ile | Microsoft | 2026-10-13 |
| CVE-2026-83905 | Windows Shell Information Disclosure Vulnerability | MEDIUM | 4.7 | 54%ile | Microsoft | 2026-10-13 |
| CVE-2026-83909 | Windows Win32 Kernel Subsystem Information Disclosure Vulnerability | MEDIUM | 4.7 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-83925 | Windows Kernel Information Disclosure Vulnerability | MEDIUM | 4.7 | 54%ile | Microsoft | 2026-10-13 |
| CVE-2026-84009 | Windows Projected File System Tampering Vulnerability | MEDIUM | 4.7 | 9%ile | Microsoft | 2026-10-13 |
| CVE-2026-85866 | Windows ALPC Information Disclosure Vulnerability | MEDIUM | 4.7 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-96853 | Windows Win32 Kernel Subsystem Information Disclosure Vulnerability | MEDIUM | 4.7 | 14%ile | Microsoft | 2026-10-13 |
| CVE-2026-98537 | workqueue: Fix NULL current_pwq deref in flush dependency check | MEDIUM | 4.7 | 13%ile | Microsoft | 2026-10-13 |
| CVE-2026-98745 | arm64/fpsimd: signal: Forbid non-streaming SVE payload on SME-only systems | MEDIUM | 4.7 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98777 | binder: fix leaked fd fixups on TF_UPDATE_TXN supersede | MEDIUM | 4.7 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98812 | net/mctp: publish the mctp_dev only after it is initialised | MEDIUM | 4.7 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-98917 | parisc: Increase kernel stack size to 32kb | MEDIUM | 4.7 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98942 | sched_ext: Build the cid tables privately and publish them with RCU | MEDIUM | 4.7 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-99045 | ibmveth: h_free logical LAN on open-fail after register | MEDIUM | 4.7 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-98711 | wifi: cw1200: fix TX padding OOB read leaking heap data to device | MEDIUM | 4.6 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98945 | HID: steam: Rearrange teardown sequence | MEDIUM | 4.6 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-102859 | Microsoft Office SharePoint Spoofing Vulnerability | MEDIUM | 4.6 | 35%ile | Microsoft | 2026-10-13 |
| CVE-2026-102864 | Microsoft Office SharePoint Spoofing Vulnerability | MEDIUM | 4.6 | 35%ile | Microsoft | 2026-10-13 |
| CVE-2026-106340 | Chromium CVE-2026-106340: Missing authorization | MEDIUM | 4.6 | 1%ile | Microsoft | 2026-10-13 |
| CVE-2026-83788 | Windows rndismp6.sys Information Disclosure Vulnerability | MEDIUM | 4.6 | 44%ile | Microsoft | 2026-10-13 |
| CVE-2026-88208 | Microsoft Office SharePoint Spoofing Vulnerability | MEDIUM | 4.6 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-88209 | Microsoft Office SharePoint Spoofing Vulnerability | MEDIUM | 4.6 | 30%ile | Microsoft | 2026-10-13 |
| CVE-2026-88226 | Windows Storage Port Driver Information Disclosure Vulnerability | MEDIUM | 4.6 | 44%ile | Microsoft | 2026-10-13 |
| CVE-2026-98481 | nfc: port100: reject frames whose declared length exceeds the received data | MEDIUM | 4.6 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-98583 | nfc: nfcmrvl: validate helper command length before pull | MEDIUM | 4.6 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-98665 | iio: health: max30102: fix NULL dereference in interrupt handler | MEDIUM | 4.6 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98837 | ALSA: caiaq: unregister the input device when probe fails | MEDIUM | 4.6 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-113724 | virtualenv: Deletion recovery can change a symlink target's mode | MEDIUM | 4.5 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-99057 | xen/netfront: don't leak the skb when xennet_fill_frags() fails | MEDIUM | 4.5 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-98465 | RISC-V: KVM: Serialize IMSIC attributes with vCPU migration | MEDIUM | 4.5 | 3%ile | Microsoft | 2026-10-13 |
| CVE-2026-99101 | ntfs: move attribute payload before shrinking its record | MEDIUM | 4.4 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-98493 | net: ipconfig: bound DHCP option construction | MEDIUM | 4.4 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-98531 | ipv6: sr: enforce exact attribute length for SEG6_ATTR_DST | MEDIUM | 4.4 | 13%ile | Microsoft | 2026-10-13 |
| CVE-2026-98547 | af_packet: fix integer overflow in prb_calc_retire_blk_tmo() | MEDIUM | 4.4 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-98565 | net: dsa: mt7530: fix NULL dereference on unbind of MT7531 and MT7621 | MEDIUM | 4.4 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-98569 | ip_gre: Reject enabling collect metadata through changelink | MEDIUM | 4.4 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-98636 | squashfs: Add dictionary size range check to prevent shift-out-of-bounds | MEDIUM | 4.4 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98640 | HID: amd_sfh: Validate PCI BAR size before mapping | MEDIUM | 4.4 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-98643 | bpf: Fix out-of-bounds read of rtt_min in sock_ops | MEDIUM | 4.4 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-98644 | bpf: Avoid soft lockup in __htab_map_lookup_and_delete_batch() | MEDIUM | 4.4 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-98646 | tcp: Skip cond_resched() in inet_csk_listen_stop() under BPF context | MEDIUM | 4.4 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98685 | smb: client: discard post-EOF pagecache when extending a file via clone range | MEDIUM | 4.4 | 9%ile | Microsoft | 2026-10-13 |
| CVE-2026-98722 | mtd: block2mtd: Fix divide error when erase_size is zero | MEDIUM | 4.4 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98747 | serial: core: fix NULL pointer dereference in serial_core_unregister_port() | MEDIUM | 4.4 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-98789 | bpf: Fix objects stuck in free_by_rcu_ttrace | MEDIUM | 4.4 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-98798 | net: bcmgenet: fix NULL dereference in set_coalesce before first open | MEDIUM | 4.4 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98833 | mtd: core: call _get_device() with the master MTD | MEDIUM | 4.4 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98931 | mtd: spinand: fix NULL pointer dereference with no ECC engine | MEDIUM | 4.4 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98954 | net: always dissect GSO packets in __virtio_net_hdr_to_skb() | MEDIUM | 4.4 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98992 | namespace: don't copy an unmounted mount tree | MEDIUM | 4.4 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-99031 | net: bridge: avoid recursive multicast port cleanup | MEDIUM | 4.4 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-99033 | net/packet: guard the ll header push in packet_rcv_spkt() | MEDIUM | 4.4 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-99087 | dm-integrity: fix NULL pointer dereference when the 'R' flag is used | MEDIUM | 4.4 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-102221 | Secure Boot Security Feature Bypass Vulnerability | MEDIUM | 4.4 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-70075 | Windows Virtualization-Based Security (VBS) Enclave Security Feature Bypass Vulnerability | MEDIUM | 4.4 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-70280 | Windows Hello Security Feature Bypass Vulnerability | MEDIUM | 4.4 | 33%ile | Microsoft | 2026-10-13 |
| CVE-2026-83926 | Windows Hello Security Feature Bypass Vulnerability | MEDIUM | 4.4 | 33%ile | Microsoft | 2026-10-13 |
| CVE-2026-98477 | perf/core: Fix NULL pmu_ctx passed to pmu->sched_task() | MEDIUM | 4.4 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98572 | bpf: Fix immediate JMP JEQ/JNE on MIPS32 | MEDIUM | 4.4 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-98593 | s390/debug: Fix NULL pointer dereference in debug_info_copy() | MEDIUM | 4.4 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98620 | net: ethernet: mtk_eth_soc: unregister net_devices in case of probe failure | MEDIUM | 4.4 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-98764 | usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC | MEDIUM | 4.4 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98767 | usb: dwc3: gadget: fix IRQ storm on invalid event buffer count | MEDIUM | 4.4 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98795 | net: sparx5: skip ptp deinit if init was skipped | MEDIUM | 4.4 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98825 | rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe() | MEDIUM | 4.4 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-98930 | KVM: s390: Fix IRQ injection with SIGP Stop and Store Status | MEDIUM | 4.4 | 9%ile | Microsoft | 2026-10-13 |
| CVE-2026-98957 | wifi: mt76: mt7915: disable rx napi when removing device | MEDIUM | 4.4 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-99022 | regulator: ltc3676: don't read the write-only HRST and CLIRQ registers | MEDIUM | 4.4 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-106454 | Twisted: IMAP wildcardToRegexp() ReDoS | MEDIUM | 4.3 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-109828 | libsndfile WAV Parsing wavlike.c wavlike_subchunk_parse uninitialized variable | MEDIUM | 4.3 | 22%ile | Microsoft | 2026-10-13 |
| CVE-2026-42528 | Apache HTTP Server: mod_dav shared lock overflow | MEDIUM | 4.3 | 34%ile | Microsoft | 2026-10-13 |
| CVE-2026-98265 | ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity | MEDIUM | 4.3 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98312 | ALSA: 6fire: fix OOB write from device-reported iso length | MEDIUM | 4.3 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98451 | smb: client: use finish_no_open() for non-regular inodes | MEDIUM | 4.3 | 34%ile | Microsoft | 2026-10-13 |
| CVE-2026-98452 | smb: client: clean up failed cached directory opens | MEDIUM | 4.3 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98453 | smb: client: close handle after create-context parsing failure | MEDIUM | 4.3 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98701 | wifi: mac80211: release mesh path quota on failed additions | MEDIUM | 4.3 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98891 | wifi: mac80211: validate deauth frame length before reason access | MEDIUM | 4.3 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-98897 | ksmbd: don't hold ci->m_lock while waiting for a lease break ack | MEDIUM | 4.3 | 9%ile | Microsoft | 2026-10-13 |
| CVE-2026-102303 | Chromium CVE-2026-102303: Uninitialized resource | MEDIUM | 4.3 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-102312 | Chromium CVE-2026-102312: UI misrepresentation | MEDIUM | 4.3 | 15%ile | Microsoft | 2026-10-13 |
| CVE-2026-102325 | Chromium CVE-2026-102325: Uninitialized resource | MEDIUM | 4.3 | 14%ile | Microsoft | 2026-10-13 |
| CVE-2026-105720 | Microsoft Office SharePoint Elevation of Privilege Vulnerability | MEDIUM | 4.3 | 42%ile | Microsoft | 2026-10-13 |
| CVE-2026-106184 | Chromium CVE-2026-106184: Uninitialized resource | MEDIUM | 4.3 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-106213 | Chromium CVE-2026-106213: Race condition | MEDIUM | 4.3 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-106217 | Chromium CVE-2026-106217: Missing authorization | MEDIUM | 4.3 | 15%ile | Microsoft | 2026-10-13 |
| CVE-2026-106245 | Chromium CVE-2026-106245: Uninitialized resource | MEDIUM | 4.3 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-106253 | Chromium CVE-2026-106253: Incorrect authorization | MEDIUM | 4.3 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-106260 | Chromium CVE-2026-106260: Incorrect authorization | MEDIUM | 4.3 | 9%ile | Microsoft | 2026-10-13 |
| CVE-2026-106277 | Chromium CVE-2026-106277: Information leak | MEDIUM | 4.3 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-106321 | Chromium CVE-2026-106321: Information leak | MEDIUM | 4.3 | 9%ile | Microsoft | 2026-10-13 |
| CVE-2026-106325 | Chromium CVE-2026-106325: Incorrect reference resolution | MEDIUM | 4.3 | 14%ile | Microsoft | 2026-10-13 |
| CVE-2026-106330 | Chromium CVE-2026-106330: Information leak | MEDIUM | 4.3 | 9%ile | Microsoft | 2026-10-13 |
| CVE-2026-106332 | Chromium CVE-2026-106332: Integer overflow | MEDIUM | 4.3 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-106336 | Chromium CVE-2026-106336: Observable discrepancy | MEDIUM | 4.3 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-106354 | Chromium CVE-2026-106354: Improper resource exposure | MEDIUM | 4.3 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-106360 | Chromium CVE-2026-106360: Information leak | MEDIUM | 4.3 | 17%ile | Microsoft | 2026-10-13 |
| CVE-2026-106379 | Chromium CVE-2026-106379: Uninitialized resource | MEDIUM | 4.3 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-106390 | Chromium CVE-2026-106390: Incorrect provision of specified functionality | MEDIUM | 4.3 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-106392 | Chromium CVE-2026-106392: Information leak | MEDIUM | 4.3 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-106394 | Chromium CVE-2026-106394: Incomplete cleanup | MEDIUM | 4.3 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-106398 | Chromium CVE-2026-106398: Incorrect authorization | MEDIUM | 4.3 | 9%ile | Microsoft | 2026-10-13 |
| CVE-2026-106415 | Chromium CVE-2026-106415: Information leak | MEDIUM | 4.3 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-110143 | Chromium CVE-2026-110143: Use of uninitialized variable | MEDIUM | 4.3 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-110170 | Chromium CVE-2026-110170: Use after free | MEDIUM | 4.3 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-110927 | Openssh: openssh: a compressed payload can expand past the maximum packet size | MEDIUM | 4.3 | — | Microsoft | 2026-10-13 |
| CVE-2026-98439 | smb/server: cancel async requests when closing connection | MEDIUM | 4.3 | 4%ile | Microsoft | 2026-10-13 |
| CVE-2026-98755 | tty: vcc: zero-initialize control packet in vcc_send_ctl() | MEDIUM | 4.3 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98771 | usb: storage: sierra_ms: reject short SWoC info transfers | MEDIUM | 4.3 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-106552 | In sftp in OpenSSH before 10.6, a server can trigger directory traversal (causing files to be written to unintended loca | MEDIUM | 4.2 | 30%ile | Microsoft | 2026-10-13 |
| CVE-2026-98449 | smb: client: delete compound mids on send failure before unlock | MEDIUM | 4.2 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-98695 | USB: serial: fix ioctl hangup race | MEDIUM | 4.2 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-98714 | KVM: SVM: Update control fields on #VMEXIT if and only if VMRUN succeeded | MEDIUM | 4.2 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-98977 | namespace: handle mount locking for automounts correctly | MEDIUM | 4.2 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-106187 | Chromium CVE-2026-106187: Missing authorization | MEDIUM | 4.2 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-106226 | Chromium CVE-2026-106226: Improper input validation | MEDIUM | 4.2 | 14%ile | Microsoft | 2026-10-13 |
| CVE-2026-106262 | Chromium CVE-2026-106262: Incomplete cleanup | MEDIUM | 4.2 | 9%ile | Microsoft | 2026-10-13 |
| CVE-2026-106295 | Chromium CVE-2026-106295: Incorrect authorization | MEDIUM | 4.2 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-106345 | Chromium CVE-2026-106345: Use of released resource | MEDIUM | 4.2 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-106391 | Chromium CVE-2026-106391: Incorrect authorization | MEDIUM | 4.2 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-106410 | Chromium CVE-2026-106410: Missing authorization | MEDIUM | 4.2 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-106413 | Chromium CVE-2026-106413: Race condition | MEDIUM | 4.2 | 3%ile | Microsoft | 2026-10-13 |
| CVE-2026-110160 | Chromium CVE-2026-110160: Missing authorization | MEDIUM | 4.2 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-70116 | Windows Resilient File System (ReFS) Security Feature Bypass Vulnerability | MEDIUM | 4.2 | 30%ile | Microsoft | 2026-10-13 |
| CVE-2026-83766 | Windows Hyper-V Security Feature Bypass Vulnerability | MEDIUM | 4.2 | 34%ile | Microsoft | 2026-10-13 |
| CVE-2026-99038 | memstick: rtsx_usb_ms: complete requests after eject instead of dropping them | MEDIUM | 4.2 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-99121 | ipv4: avoid divide by zero in fib_rebalance | MEDIUM | 4.1 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-99206 | scsi: target: iscsi: Fix race in discovery auth updates | MEDIUM | 4.1 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98389 | drm/amdgpu: skip gfx switch_power_profile during GPU reset | MEDIUM | 4.1 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-98409 | watchdog: rtd119x: Avoid division by zero | MEDIUM | 4.1 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-98536 | writeback: report a Tasks-RCU quiescent state per cgwb drain pass | MEDIUM | 4.1 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-98538 | writeback: bound cleanup_offline_cgwb() rescans by rotating scanned inodes | MEDIUM | 4.1 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-98558 | net: flush skb_defer_nodes in dev_cpu_dead() | MEDIUM | 4.1 | 9%ile | Microsoft | 2026-10-13 |
| CVE-2026-98598 | ipv6: Prevent rt6_insert_exception() for dying fib6_info. | MEDIUM | 4.1 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-98624 | netfilter: nfnetlink_queue: hold nfnl mutex in event notifier | MEDIUM | 4.1 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98647 | bpf: Fix divide-by-zero in btf_struct_walk() | MEDIUM | 4.1 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98748 | serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() | MEDIUM | 4.1 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98785 | drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend | MEDIUM | 4.1 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-98816 | bpf: Fix overflow of jump offset in constant blinding | MEDIUM | 4.1 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-98820 | blk-mq: set RQF_USE_SCHED when the operation is known | MEDIUM | 4.1 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-98838 | vt: skip screen update for DEC alignment test on backgroup consoles | MEDIUM | 4.1 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98848 | rtc: ac100: Assign .num before accessing .hws | MEDIUM | 4.1 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-98850 | net/packet: prevent TX_RING byte count overflow | MEDIUM | 4.1 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98854 | of/overlay: only treat a positive changeset id as registered | MEDIUM | 4.1 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-98899 | netfilter: ipset: mark the rcu locked areas properly | MEDIUM | 4.1 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98906 | net: lan966x: restore RX state on reload failure | MEDIUM | 4.1 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98924 | fs: avoid repeated scans in evict_inodes() | MEDIUM | 4.1 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-98972 | cgroup/cpuset: Don't access cpuset_cgrp_subsys.root in is_in_v2_mode() | MEDIUM | 4.1 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-99021 | regulator: of: fill in supply names in of_regulator_bulk_get_all() | MEDIUM | 4.1 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-99025 | openvswitch: fix soft lockup in the netlink flow dump | MEDIUM | 4.1 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-99036 | dm: fix reading free memory in do_resume | MEDIUM | 4.1 | 13%ile | Microsoft | 2026-10-13 |
| CVE-2026-99058 | workqueue: Fix NULL current_pwq deref in chained work check | MEDIUM | 4.1 | 9%ile | Microsoft | 2026-10-13 |
| CVE-2026-99061 | wifi: brcmfmac: fix P2P device removal race in brcmf_detach() | MEDIUM | 4.1 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-99072 | ipv4: stop route notification sizing when nexthop group shrinks | MEDIUM | 4.1 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-98504 | PCI: of_property: Omit bus properties without a subordinate bus | MEDIUM | 4.1 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-98652 | KVM: s390: Add missing srcu in kvm_s390_set_irq_state() | MEDIUM | 4.1 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-98740 | EDAC/altera: Drop __init from ECC setup paths for re-probe safety | MEDIUM | 4.1 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98756 | usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe | MEDIUM | 4.1 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98768 | usb: typec: anx7411 - stop the IRQ before destroying the workqueue | MEDIUM | 4.1 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98847 | rtc: spear: initialize IRQ state before requesting alarm IRQ | MEDIUM | 4.1 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98967 | cxgb4/ch_ktls: disable softirqs around tid_list erases | MEDIUM | 4.1 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-107655 | Cups: null pointer dereference via embedded job ticket comments allows remote denial of service | MEDIUM | 4.0 | 16%ile | Microsoft | 2026-10-13 |
| CVE-2026-98786 | drm/amd/display: guard dc_sink dereferences in MST mode validation | MEDIUM | 4.0 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-98944 | HID: steam: Refactor registration | MEDIUM | 4.0 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-106424 | Chromium CVE-2026-106424: Information leak | MEDIUM | 4.0 | 9%ile | Microsoft | 2026-10-13 |
| CVE-2026-106582 | In sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can be used even though this is contraindicated by the | LOW | 3.7 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-116137 | adm-zip through 0.6.1 Duplicate-Entry Validation Bypass via Canonically Equivalent Names | LOW | 3.7 | 18%ile | Microsoft | 2026-10-13 |
| CVE-2026-42356 | Apache HTTP Server: limited RCE for some internal redirects to non-CGI files in CGI directories | LOW | 3.7 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-92386 | server-set cookie aborts cookie jar load | LOW | 3.7 | 58%ile | Microsoft | 2026-10-13 |
| CVE-2026-95210 | Improper certificate validation in gnutls v3.8.13 causes the application to accept certificates containing invalid exten | LOW | 3.7 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-98402 | net: icmp: avoid invalid transport header access in icmp_send tracepoint | LOW | 3.7 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-98802 | seg6: ensure packet data is writable before modifying SRH and IPv6 DA | LOW | 3.7 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-98852 | net: extend IPv6 exthdr detection of tunneled packets | LOW | 3.7 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-107928 | info leak uploading over WebSockets with GnuTLS | LOW | 3.7 | 53%ile | Microsoft | 2026-10-13 |
| CVE-2026-88834 | Busybox: busybox: httpd user existence oracle in non-default shadow-disabled builds | LOW | 3.7 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-107296 | msgpack5: Decoding negative int64 values mutates the input buffer | LOW | 3.7 | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-105712 | gpgtar in GnuPG before 2.5.19 can allow file overwrite via crafted data in an archive. When extracting an untrusted arch | LOW | 3.6 | 2%ile | Microsoft | 2026-10-13 |
| CVE-2026-106587 | In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but w | LOW | 3.6 | 0%ile | Microsoft | 2026-10-13 |
| CVE-2026-17591 | Libarchive: libarchive: use-after-free via aliased mac metadata copy | LOW | 3.6 | 4%ile | Microsoft | 2026-10-13 |
| CVE-2026-98413 | selinux: always fill AVC decision in avc_has_perm_noaudit() | LOW | 3.6 | 13%ile | Microsoft | 2026-10-13 |
| CVE-2026-98743 | ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type | LOW | 3.6 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-115449 | Libslirp: libslirp: icmp echo reply length desynchronization leaks host ip to guest | LOW | 3.5 | 15%ile | Microsoft | 2026-10-13 |
| CVE-2026-98575 | nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() | LOW | 3.5 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-98484 | netfilter: nf_tables: skip expired catchall elements on insert and delete | LOW | 3.4 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-98495 | net: arp: terminate device name before lookup | LOW | 3.4 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-98629 | net/sched: cls_u32: fix manual hash table handle IDR aliasing | LOW | 3.4 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-98807 | net/mlx5: Fix slab-out-of-bounds when handling team device events | LOW | 3.4 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98950 | flow_dissector: avoid u16 truncation of hlen in bpf_flow_dissect() | LOW | 3.4 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-98955 | flow_dissector: avoid u16 truncation of skb->len when computing thoff | LOW | 3.4 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-102311 | Chromium CVE-2026-102311: Uninitialized resource | LOW | 3.4 | 17%ile | Microsoft | 2026-10-13 |
| CVE-2026-102315 | Chromium CVE-2026-102315: Uninitialized resource | LOW | 3.4 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-102319 | Chromium CVE-2026-102319: Uninitialized resource | LOW | 3.4 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-99106 | drm/amdgpu: free the userptr ranges when a CS fails after parser_bos | LOW | 3.3 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-99150 | drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gpr | LOW | 3.3 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-99201 | netlink: avoid hashing the network namespace pointer | LOW | 3.3 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-106073 | A flaw in Node.js Permission Model filesystem enforcement leaves `fs.realpathSync()` without the required read permissio | LOW | 3.3 | 17%ile | Microsoft | 2026-10-13 |
| CVE-2026-107885 | OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability in the submission-timeout handling of cups | LOW | 3.3 | 4%ile | Microsoft | 2026-10-13 |
| CVE-2026-107890 | OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference caused by repeated IPP group tags in job-creation re | LOW | 3.3 | 4%ile | Microsoft | 2026-10-13 |
| CVE-2026-110262 | OW2 ASM 3.1 before 9.11 Excessive Memory Allocation in AdviceAdapter | LOW | 3.3 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-55453 | CUPS ipp backend status-line injection can update queue PPD and lead to conditional RCE as lp via foomatic-rip | LOW | 3.3 | 9%ile | Microsoft | 2026-10-13 |
| CVE-2026-88842 | Busybox: busybox: dpkg stale field_start pointer causes out-of-bounds read and status file corruption | LOW | 3.3 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-98384 | bpf: Fix out-of-bounds read of sk_protocol in bpf_sock_destroy() | LOW | 3.3 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-98509 | drm/virtio: fix memory leak of fence event on execbuffer failure | LOW | 3.3 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-98511 | drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() | LOW | 3.3 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-98607 | drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() | LOW | 3.3 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98700 | wifi: mac80211: set info->band for 802.3 encap offload frames | LOW | 3.3 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98874 | wifi: iwlwifi: mld: don't WARN on WoWLAN suspend w/o netdetect | LOW | 3.3 | 9%ile | Microsoft | 2026-10-13 |
| CVE-2026-98894 | drm/amd/ras: reset CPER ring on corrupt entry size | LOW | 3.3 | 9%ile | Microsoft | 2026-10-13 |
| CVE-2026-98910 | drm/amdkfd: Unwind debug trap enable on copy_to_user failure | LOW | 3.3 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98912 | ALSA: seq: oss: Reject reads that cannot fit the next event | LOW | 3.3 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-98935 | rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak | LOW | 3.3 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-98937 | perf/core: Check kernel access when kernel callchains are requested | LOW | 3.3 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98969 | net/sched: em_text: reject unterminated algo before autoload | LOW | 3.3 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-106399 | Chromium CVE-2026-106399: Out of bounds read | LOW | 3.3 | 1%ile | Microsoft | 2026-10-13 |
| CVE-2026-86411 | FTP connection reuse inherits client-certificate | LOW | 3.3 | 38%ile | Microsoft | 2026-10-13 |
| CVE-2026-86412 | server-set cookie erases cookie jar | LOW | 3.3 | 58%ile | Microsoft | 2026-10-13 |
| CVE-2026-86415 | auto client cert connection reuse mixup | LOW | 3.3 | 36%ile | Microsoft | 2026-10-13 |
| CVE-2026-87861 | cross-origin reuse of a Negotiate connection | LOW | 3.3 | 52%ile | Microsoft | 2026-10-13 |
| CVE-2026-98661 | iio: light: rohm-bu27034: Fix infinite delay on error | LOW | 3.3 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98679 | iio: accel: kxcjk-1013: reject duplicate event disable | LOW | 3.3 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-99113 | ksmbd: zero the FS_OBJECT_ID_INFORMATION buffer before filling it in | LOW | 3.1 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-99114 | ksmbd: initialize FileSystemControlFlags in FS_CONTROL_INFORMATION | LOW | 3.1 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-99115 | ksmbd: fill in FileSysIdentifier in FS_POSIX_INFORMATION | LOW | 3.1 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98450 | smb: client: close completed creates on compound wait errors | LOW | 3.1 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-106180 | Chromium CVE-2026-106180: Observable discrepancy | LOW | 3.1 | 13%ile | Microsoft | 2026-10-13 |
| CVE-2026-106210 | Chromium CVE-2026-106210: Observable discrepancy | LOW | 3.1 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-106224 | Chromium CVE-2026-106224: Missing authorization | LOW | 3.1 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-106339 | Chromium CVE-2026-106339: Use of released resource | LOW | 3.1 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-110141 | Chromium CVE-2026-110141: Observable discrepancy | LOW | 3.1 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-91732 | Chromium CVE-2026-91732: Missing authorization | LOW | 3.1 | 18%ile | Microsoft | 2026-10-13 |
| CVE-2026-99146 | drm/i915/dmc: Add sanity check for DMC load address | LOW | 3.0 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98424 | wifi: cfg80211: undo netns switch if renaming the wiphy fails | LOW | 3.0 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-98839 | vt: selection: Fix unsigned underflow and slab-out-of-bounds read in paste_selection() | LOW | 3.0 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98971 | gpio: exar: initialize the ID before registering its cleanup | LOW | 3.0 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98929 | macsec: initialize SecY before registering the netdevice | LOW | 3.0 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-106589 | In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd-session can unexpected | LOW | 2.9 | 0%ile | Microsoft | 2026-10-13 |
| CVE-2026-98947 | vsock: Fix memory leak in vmci_transport_recv_dgram_cb() | LOW | 2.6 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-105326 | Cups: cups: argument injection in mailto notifier via notify-recipient-uri | LOW | 2.5 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-106583 | In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection. | LOW | 2.5 | 4%ile | Microsoft | 2026-10-13 |
| CVE-2026-106584 | In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mish | LOW | 2.5 | 0%ile | Microsoft | 2026-10-13 |
| CVE-2026-106586 | In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwar | LOW | 2.5 | 2%ile | Microsoft | 2026-10-13 |
| CVE-2026-55467 | CUPS fax option values bypass the CVE-2026-34980 control-character sanitizer (incomplete fix) | LOW | 2.5 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-98388 | exec: do_close_on_exec() before taking exec_update_lock | LOW | 2.5 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-98394 | af_unix: Return immediately when manage_oob() returns NULL for 0-length buffer. | LOW | 2.5 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-98406 | wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver | LOW | 2.5 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-98514 | drm/nouveau: Fix gem reference leak in validate_init() | LOW | 2.5 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-98684 | smb: client: flush and commit data before querying allocated ranges | LOW | 2.5 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98790 | perf: Fix race between perf_event_exit_task() and perf_pending_task() | LOW | 2.5 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98984 | dcache: don't put a mountpoint on a dentry that's being removed | LOW | 2.5 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-99005 | drm/i915/gt: Unmask interrupts only when ACTIVE is true | LOW | 2.5 | 9%ile | Microsoft | 2026-10-13 |
| CVE-2026-99007 | drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN | LOW | 2.5 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98744 | ASoC: codecs: max98363: fix uninitialized stream_config->type | LOW | 2.5 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98502 | HID: alps: unregister DualPoint Stick input device on remove | LOW | 2.4 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-98732 | Bluetooth: btintel: fix buffer over-read in btintel_hw_error() | LOW | 2.4 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-107886 | OpenPrinting CUPS before 2.4.20 contains a double-free in printer-class management. When CUPS-Add-Modify-Class replaces | LOW | 2.3 | 15%ile | Microsoft | 2026-10-13 |
| CVE-2026-98421 | wifi: mac80211: require a peer station for TDLS setup confirm | LOW | 2.3 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-98422 | wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown | LOW | 2.3 | 13%ile | Microsoft | 2026-10-13 |
| CVE-2026-98486 | net: ena: fix MMIO read buffer leak on probe failure | LOW | 2.3 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-98516 | drm/nouveau: Fix bridge reference leak in nv1a_ram_new() | LOW | 2.3 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-98535 | fsl/fman: Fix clk reference leak in read_dts_node() | LOW | 2.3 | 13%ile | Microsoft | 2026-10-13 |
| CVE-2026-98553 | autofs: fix sbi->pipe file reference leak in autofs_kill_sb() | LOW | 2.3 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-98594 | tg3: clean up PHYLIB resources on probe failure | LOW | 2.3 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-98628 | bpf: Make post-verification instruction rewrites killable | LOW | 2.3 | 9%ile | Microsoft | 2026-10-13 |
| CVE-2026-98710 | wifi: iwlegacy: 3945: free EEPROM data on remove | LOW | 2.3 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98784 | drm/amdgpu/gfx6: fix firmware leak on teardown | LOW | 2.3 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98831 | of/overlay: don't leak fragment references when changeset init fails | LOW | 2.3 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98851 | netfilter: nft_flow_offload: drop flowtable reference on init error path | LOW | 2.3 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98925 | bpf, sockmap: Fix self-redirect copied_seq double-counting | LOW | 2.3 | 9%ile | Microsoft | 2026-10-13 |
| CVE-2026-98948 | mlxsw: spectrum_flower: Fix port range register leak in tmplt_create() | LOW | 2.3 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98966 | bonding: fix the program leak when XDP is replaced | LOW | 2.3 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-98970 | drm/vc4: Free the BO cache size list on teardown | LOW | 2.3 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-99034 | mmc: sdhci-sprd: disable runtime PM on remove | LOW | 2.3 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-99063 | dm ioctl: don't let data_start run past the buffer | LOW | 2.3 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-99088 | net: openvswitch: validate transport header presence in set_ipv6_addr | LOW | 2.3 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98529 | gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() | LOW | 2.3 | 13%ile | Microsoft | 2026-10-13 |
| CVE-2026-98579 | nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure | LOW | 2.3 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-98671 | iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure | LOW | 2.3 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98746 | serial: ma35d1: Fix clock reference leak in ma35d1serial_probe() | LOW | 2.3 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98956 | ASoC: adau1372: allow sleepy powerdown GPIOs | LOW | 2.3 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-99019 | scsi: ch: Do not keep references to data transfer element devices | LOW | 2.3 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-99026 | net: team: free skb when broadcast has no txable port | LOW | 2.3 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-106553 | In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a GSSAPIAuthentication authenticati | LOW | 2.2 | 3%ile | Microsoft | 2026-10-13 |
| CVE-2026-106555 | In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly be persisted across authentica | LOW | 2.2 | 3%ile | Microsoft | 2026-10-13 |
| CVE-2026-98393 | net: ipv4: Fix UDP length overflow with PMTU discover and big MTU | LOW | 1.9 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-98423 | wifi: mac80211_hwsim: don't hand frames to mac80211 while stopping | LOW | 1.9 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-98425 | wifi: mac80211: don't warn when an IBSS has no channel to scan | LOW | 1.9 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-98426 | wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path | LOW | 1.9 | 13%ile | Microsoft | 2026-10-13 |
| CVE-2026-98473 | s390/vfio-ap: fix KVM GISC and page leak when queue removed from host config | LOW | 1.9 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98505 | mm/damon/vaddr: avoid hw-driven pte updates during damon_hugetlb_mkold() | LOW | 1.9 | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-98519 | drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() | LOW | 1.9 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-98527 | gpio: zynq: fix runtime PM leak on request error path | LOW | 1.9 | 13%ile | Microsoft | 2026-10-13 |
| CVE-2026-98697 | USB: serial: fix dynamic id driver deregistration race | LOW | 1.9 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98779 | drm/amdgpu: fix ACP MFD device leak on init failure | LOW | 1.9 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98780 | drm/amdgpu: fix IP instance memory leak on kobject add failure | LOW | 1.9 | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-98811 | net/sched: cls_api: reclaim an empty proto on the error path | LOW | 1.9 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98908 | net: microchip: sparx5: clean up PSFP resources on flower setup failure | LOW | 1.9 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98934 | ipv6: sr: use skb_get_hash_net() in seg6_make_flowlabel() | LOW | 1.9 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-99049 | gpio: xilinx: fix runtime PM leak on request error path | LOW | 1.9 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-99067 | btrfs: scrub: fix local_root reference leak in scrub_print_warning_inode() | LOW | 1.9 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-99070 | ipv6: do not warn on route notification size race | LOW | 1.9 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-99071 | ipv4: do not warn on route notification size race | LOW | 1.9 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-98936 | wifi: ath11k: reset ar->num_stations on hardware start | LOW | 1.9 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98761 | usb: typec: tcpm: recover after failure to start the frs ams | LOW | 1.8 | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-105236 | TLS 1.2 session resumption in ssl crosses SNI virtual-host client-certificate trust boundaries | UNKNOWN | — | 30%ile | Microsoft | 2026-10-13 |
| CVE-2026-106071 | A flaw in Node.js Permission Model filesystem enforcement can grant access to paths that do not match a wildcard `--allo | UNKNOWN | — | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-106547 | HDF5 heap buffer overflow in H5VM_array_fill via crafted fill-value metadata | UNKNOWN | — | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-114583 | tar filter allows writing outside destination via empty-named symlink | UNKNOWN | — | 14%ile | Microsoft | 2026-10-13 |
| CVE-2026-115557 | Distrust compromised intermediate certificates in ssl module | UNKNOWN | — | 45%ile | Microsoft | 2026-10-13 |
| CVE-2026-115775 | Twisted: Unauthenticated Remote Denial of Service in the Twisted words domish XML Element Stream via an Unbounded Elemen | UNKNOWN | — | 39%ile | Microsoft | 2026-10-13 |
| CVE-2026-115897 | Serialize JavaScript: Cross-site scripting (XSS) via unescaped </script at the end of a serialized function body | UNKNOWN | — | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-16762 | Denial-of-service vulnerability in the Qt Core QXmlStream parser (QXmlStreamReader) impacts Qt | UNKNOWN | — | 44%ile | Microsoft | 2026-10-13 |
| CVE-2026-19029 | HDF5 scale-offset filter heap buffer over-read via crafted chunk | UNKNOWN | — | 2%ile | Microsoft | 2026-10-13 |
| CVE-2026-63772 | Apache Thrift: Unauthenticated single-packet crash of Go Thrift servers via the THeader transform count | UNKNOWN | — | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-66054 | Apache Thrift: C++ THeaderTransport does not enforce configured maxFrameSize | UNKNOWN | — | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-66055 | Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TJSONProtocol accepts a single | UNKNOWN | — | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-66081 | Apache Thrift: c_glib read_message_begin leaves output parameters unset for non-versioned messages | UNKNOWN | — | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-66331 | Apache Thrift: Buffered transport reads are not accounted against MaxMessageSize | UNKNOWN | — | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-66837 | Apache Thrift: PHP accelerator sizes a stack buffer from a wire-controlled string length | UNKNOWN | — | 28%ile | Microsoft | 2026-10-13 |
| CVE-2026-66858 | Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: skip() does not apply the recu | UNKNOWN | — | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-66859 | Apache Thrift: c_glib multiplexed processor crashes on a message it cannot route | UNKNOWN | — | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-67418 | RabbitMQ MQTT 5: inapplicable PUBLISH property disconnects matching subscribers | UNKNOWN | — | 34%ile | Microsoft | 2026-10-13 |
| CVE-2026-75818 | Heap Buffer Overflow in GNU Aspell's prezip utility | UNKNOWN | — | 4%ile | Microsoft | 2026-10-13 |
| CVE-2026-75819 | Out-of-bounds Read in GNU Aspell | UNKNOWN | — | 2%ile | Microsoft | 2026-10-13 |
| CVE-2026-75820 | Integer Truncation Leading to Heap Corruption in GNU Aspell | UNKNOWN | — | 3%ile | Microsoft | 2026-10-13 |
| CVE-2026-82458 | Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, | UNKNOWN | — | 28%ile | Microsoft | 2026-10-13 |
| CVE-2026-82459 | Apache Thrift: Integer underflow in C++ THeaderTransport allows an unauthenticated remote peer to terminate a 32-bit pro | UNKNOWN | — | 28%ile | Microsoft | 2026-10-13 |
| CVE-2026-83632 | Apache Thrift: C++ THttpTransport grows its line buffer without bound | UNKNOWN | — | 22%ile | Microsoft | 2026-10-13 |
| CVE-2026-83663 | Apache Thrift: TFramedTransport and THeaderTransport re-enter Read once per frame that carries no payload (Go) | UNKNOWN | — | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-83745 | Apache Thrift, Apache Thrift: WebSocket frame decoders allocate the payload buffer from the declared length, not the byt | UNKNOWN | — | 28%ile | Microsoft | 2026-10-13 |
| CVE-2026-85087 | Apache Thrift: Python ≥3.12 host-name check silently becomes a no-op | UNKNOWN | — | 4%ile | Microsoft | 2026-10-13 |
| CVE-2026-85088 | Apache Thrift, Apache Thrift: The C++ and D clients fall back to the certificate Common Name when subjectAltName entries | UNKNOWN | — | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-85476 | Apache Thrift: c_glib `read_all` spins when the underlying read returns 0 | UNKNOWN | — | 26%ile | Microsoft | 2026-10-13 |
| CVE-2026-85483 | Apache Thrift: c_glib TZlibTransport reports a full read after a premature stream end | UNKNOWN | — | 28%ile | Microsoft | 2026-10-13 |
| CVE-2026-85494 | Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, | UNKNOWN | — | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-91135 | Apache Thrift: C++ `THeaderTransport::transform()` heap buffer overflow (write direction) | UNKNOWN | — | 27%ile | Microsoft | 2026-10-13 |
| CVE-2026-92542 | Blind VXLAN injection into encrypted overlay networks from cluster peer | UNKNOWN | — | 0%ile | Microsoft | 2026-10-13 |
| CVE-2026-92543 | Docker Engine insecure-registry fallback via malicious DNS responses | UNKNOWN | — | 0%ile | Microsoft | 2026-10-13 |
| CVE-2026-92834 | Apache Thrift: C++ WebSocket server transport does not read a full request length | UNKNOWN | — | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-93318 | Cache poisoning via unvalidated image layer DiffIDs | UNKNOWN | — | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-93319 | A malicious frontend can cause a daemon panic | UNKNOWN | — | 0%ile | Microsoft | 2026-10-13 |
| CVE-2026-93320 | BuildKit improperly handles special files in build snapshots | UNKNOWN | — | 1%ile | Microsoft | 2026-10-13 |
| CVE-2026-93321 | Malformed LLB file operation can crash buildkitd | UNKNOWN | — | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-93322 | Malformed MergeOp can crash the BuildKit daemon | UNKNOWN | — | 2%ile | Microsoft | 2026-10-13 |
| CVE-2026-93323 | Oversized Dockerfile or .dockerignore can exhaust buildkitd memory | UNKNOWN | — | 1%ile | Microsoft | 2026-10-13 |
| CVE-2026-93326 | Crafted Git build source can bypass certain policy validation | UNKNOWN | — | 16%ile | Microsoft | 2026-10-13 |
| CVE-2026-93925 | Apache Thrift: C++ `THeaderTransport::writeVarint32()` stack buffer overflow on a negative protocol id | UNKNOWN | — | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-93926 | Apache Thrift: C++ `THeaderTransport::untransform()` leaks the zlib stream on the error path | UNKNOWN | — | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-94200 | TLS 1.3 client ticket store crashed by NewSessionTicket with empty early_data extension in ssl | UNKNOWN | — | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-94634 | Apache Thrift: Python `TJSONProtocol` has a string length limit that is off by default | UNKNOWN | — | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-94636 | Apache Thrift: Python `TZlibTransport` stops enforcing its decompressed-size limit once the limit is exactly used up | UNKNOWN | — | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-94637 | Apache Thrift: Go `THeaderTransport` does not bound the inflated size of a ZLIB frame | UNKNOWN | — | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-94650 | Apache Thrift: c_glib generated struct readers have no recursion-depth guard (native stack exhaustion) | UNKNOWN | — | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-94652 | Apache Thrift: C++ `TEvhttpServer` leaks its `RequestContext` when the processor throws before calling back | UNKNOWN | — | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-94654 | Apache Thrift: Python `TNonblockingServer` busy-loops and stops selecting all fds after an 8192-byte-boundary frame | UNKNOWN | — | 26%ile | Microsoft | 2026-10-13 |
| CVE-2026-94656 | Apache Thrift: rb `TJsonProtocol`/`TJSONProtocol` has no string size bound | UNKNOWN | — | 28%ile | Microsoft | 2026-10-13 |
| CVE-2026-95838 | containerd: Unpack DoS via repeated opaque whiteouts | UNKNOWN | — | 13%ile | Microsoft | 2026-10-13 |
| CVE-2026-96277 | Apache Thrift: Ruby `SimpleServer` ends `serve()` on any non-Transport/Protocol exception | UNKNOWN | — | 28%ile | Microsoft | 2026-10-13 |
| CVE-2026-96286 | Apache Thrift: Perl servers end `serve()` when serving one connection fails | UNKNOWN | — | 28%ile | Microsoft | 2026-10-13 |
| CVE-2026-96287 | Apache Thrift: Perl `FramedTransport` reads and TLS socket writes re-slice the remaining buffer on every call (quadratic | UNKNOWN | — | 28%ile | Microsoft | 2026-10-13 |
| CVE-2026-102300 | Chromium CVE-2026-102300: Uninitialized resource in WebGPU | UNKNOWN | — | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-102327 | Chromium CVE-2026-102327: Incorrect authorization in WebView | UNKNOWN | — | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-103621 | Chromium CVE-2026-103621: Integer overflow | UNKNOWN | — | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-103622 | Chromium CVE-2026-103622: Use after free | UNKNOWN | — | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-103623 | Chromium CVE-2026-103623: Use after free | UNKNOWN | — | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-103624 | Chromium CVE-2026-103624: Use after free | UNKNOWN | — | 21%ile | Microsoft | 2026-10-13 |
| CVE-2026-103625 | Chromium CVE-2026-103625: Type confusion | UNKNOWN | — | 25%ile | Microsoft | 2026-10-13 |
| CVE-2026-103626 | Chromium CVE-2026-103626: Incorrect authorization | UNKNOWN | — | 26%ile | Microsoft | 2026-10-13 |
| CVE-2026-103627 | Chromium CVE-2026-103627: Information leak | UNKNOWN | — | 16%ile | Microsoft | 2026-10-13 |
| CVE-2026-103628 | Chromium CVE-2026-103628: Out of bounds write | UNKNOWN | — | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-103629 | Chromium CVE-2026-103629: Integer overflow | UNKNOWN | — | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-103630 | Chromium CVE-2026-103630: Use after free | UNKNOWN | — | 26%ile | Microsoft | 2026-10-13 |
| CVE-2026-103631 | Chromium CVE-2026-103631: Buffer overflow | UNKNOWN | — | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-106192 | Chromium CVE-2026-106192: Information leak in Mobile | UNKNOWN | — | 3%ile | Microsoft | 2026-10-13 |
| CVE-2026-106206 | Chromium CVE-2026-106206: Improper input validation in Mobile | UNKNOWN | — | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-106209 | Chromium CVE-2026-106209: UI misrepresentation in Mobile | UNKNOWN | — | 17%ile | Microsoft | 2026-10-13 |
| CVE-2026-106216 | Chromium CVE-2026-106216: Cross-site request forgery | UNKNOWN | — | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-106221 | Chromium CVE-2026-106221: Confused deputy in WebAPKs | UNKNOWN | — | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-106223 | Chromium CVE-2026-106223: Uninitialized resource in GPU | UNKNOWN | — | 21%ile | Microsoft | 2026-10-13 |
| CVE-2026-106254 | Chromium CVE-2026-106254: Information leak in Mobile | UNKNOWN | — | 0%ile | Microsoft | 2026-10-13 |
| CVE-2026-106261 | Chromium CVE-2026-106261: Uninitialized resource | UNKNOWN | — | 16%ile | Microsoft | 2026-10-13 |
| CVE-2026-106266 | Chromium CVE-2026-106266: Confused deputy | UNKNOWN | — | 14%ile | Microsoft | 2026-10-13 |
| CVE-2026-106267 | Chromium CVE-2026-106267: Missing authorization | UNKNOWN | — | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-106282 | Chromium CVE-2026-106282: UI misrepresentation in WebOTP | UNKNOWN | — | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-106286 | Chromium CVE-2026-106286: Confused deputy | UNKNOWN | — | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-106287 | Chromium CVE-2026-106287: Information loss | UNKNOWN | — | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-106289 | Chromium CVE-2026-106289: Missing authorization | UNKNOWN | — | 14%ile | Microsoft | 2026-10-13 |
| CVE-2026-106290 | Chromium CVE-2026-106290: Uninitialized resource in GPU | UNKNOWN | — | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-106294 | Chromium CVE-2026-106294: Incomplete cleanup | UNKNOWN | — | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-106296 | Chromium CVE-2026-106296: Improper privilege management in UI | UNKNOWN | — | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-106297 | Chromium CVE-2026-106297: Incorrect authorization | UNKNOWN | — | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-106298 | Chromium CVE-2026-106298: Use after free in Chrome Tabs | UNKNOWN | — | 28%ile | Microsoft | 2026-10-13 |
| CVE-2026-106305 | Chromium CVE-2026-106305: UI misrepresentation in Mobile | UNKNOWN | — | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-106313 | Chromium CVE-2026-106313: Incorrect authorization in Browser | UNKNOWN | — | 0%ile | Microsoft | 2026-10-13 |
| CVE-2026-106317 | Chromium CVE-2026-106317: UI misrepresentation in FullScreen | UNKNOWN | — | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-106320 | Chromium CVE-2026-106320: Use of released resource in UI | UNKNOWN | — | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-106326 | Chromium CVE-2026-106326: Confused deputy in UI | UNKNOWN | — | 0%ile | Microsoft | 2026-10-13 |
| CVE-2026-106327 | Chromium CVE-2026-106327: Incorrect authorization | UNKNOWN | — | 9%ile | Microsoft | 2026-10-13 |
| CVE-2026-106331 | Chromium CVE-2026-106331: Improper input validation | UNKNOWN | — | 14%ile | Microsoft | 2026-10-13 |
| CVE-2026-106337 | Chromium CVE-2026-106337: UI misrepresentation in UI | UNKNOWN | — | 9%ile | Microsoft | 2026-10-13 |
| CVE-2026-106353 | Chromium CVE-2026-106353: Improper input validation in Mobile | UNKNOWN | — | 14%ile | Microsoft | 2026-10-13 |
| CVE-2026-106359 | Chromium CVE-2026-106359: Confused deputy | UNKNOWN | — | 17%ile | Microsoft | 2026-10-13 |
| CVE-2026-106361 | Chromium CVE-2026-106361: Incorrect provision of specified functionality in Mobile | UNKNOWN | — | 21%ile | Microsoft | 2026-10-13 |
| CVE-2026-106362 | Chromium CVE-2026-106362: Missing authorization | UNKNOWN | — | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-106365 | Chromium CVE-2026-106365: Missing authorization | UNKNOWN | — | 16%ile | Microsoft | 2026-10-13 |
| CVE-2026-106366 | Chromium CVE-2026-106366: Incomplete cleanup in CustomTabs | UNKNOWN | — | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-106367 | Chromium CVE-2026-106367: Missing authorization in Mobile | UNKNOWN | — | 0%ile | Microsoft | 2026-10-13 |
| CVE-2026-106368 | Chromium CVE-2026-106368: UI misrepresentation in UI | UNKNOWN | — | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-106369 | Chromium CVE-2026-106369: Missing authorization | UNKNOWN | — | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-106372 | Chromium CVE-2026-106372: Incorrect authorization in UI | UNKNOWN | — | 28%ile | Microsoft | 2026-10-13 |
| CVE-2026-106380 | Chromium CVE-2026-106380: UI misrepresentation in UI | UNKNOWN | — | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-106381 | Chromium CVE-2026-106381: Incorrect authorization | UNKNOWN | — | 16%ile | Microsoft | 2026-10-13 |
| CVE-2026-106384 | Chromium CVE-2026-106384: Missing authorization | UNKNOWN | — | 15%ile | Microsoft | 2026-10-13 |
| CVE-2026-106385 | Chromium CVE-2026-106385: Race condition | UNKNOWN | — | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-106387 | Chromium CVE-2026-106387: Missing authorization in Mobile | UNKNOWN | — | 25%ile | Microsoft | 2026-10-13 |
| CVE-2026-106395 | Chromium CVE-2026-106395: Uninitialized resource in Dawn | UNKNOWN | — | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-106396 | Chromium CVE-2026-106396: Improper input validation | UNKNOWN | — | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-106397 | Chromium CVE-2026-106397: Incorrect authorization in Mobile | UNKNOWN | — | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-106400 | Chromium CVE-2026-106400: Clickjacking in Messages | UNKNOWN | — | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-106405 | Chromium CVE-2026-106405: Race condition in CustomTabs | UNKNOWN | — | 0%ile | Microsoft | 2026-10-13 |
| CVE-2026-106406 | Chromium CVE-2026-106406: Missing authorization in Mobile | UNKNOWN | — | 9%ile | Microsoft | 2026-10-13 |
| CVE-2026-106408 | Chromium CVE-2026-106408: Protection mechanism failure in Mobile | UNKNOWN | — | 13%ile | Microsoft | 2026-10-13 |
| CVE-2026-106414 | Chromium CVE-2026-106414: Improper input validation in Mobile | UNKNOWN | — | 27%ile | Microsoft | 2026-10-13 |
| CVE-2026-106418 | Chromium CVE-2026-106418: Missing authorization | UNKNOWN | — | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-106419 | Chromium CVE-2026-106419: Use after free in ANGLE | UNKNOWN | — | 26%ile | Microsoft | 2026-10-13 |
| CVE-2026-106422 | Chromium CVE-2026-106422: Incorrect authorization | UNKNOWN | — | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-106425 | Chromium CVE-2026-106425: Missing authorization | UNKNOWN | — | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-106427 | Chromium CVE-2026-106427: Confused deputy in Mobile | UNKNOWN | — | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-110158 | Chromium CVE-2026-110158: Use after free in Passwords | UNKNOWN | — | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-110913 | Chromium CVE-2026-110913: Memory corruption in DOM | UNKNOWN | — | 26%ile | Microsoft | 2026-10-13 |
| CVE-2026-110914 | Chromium CVE-2026-110914: Memory corruption in Workers | UNKNOWN | — | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-110915 | Chromium CVE-2026-110915: Use after free in Compositing | UNKNOWN | — | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-110916 | Chromium CVE-2026-110916: Improper input validation in Desktop | UNKNOWN | — | 30%ile | Microsoft | 2026-10-13 |
| CVE-2026-110917 | Chromium CVE-2026-110917: Memory corruption in SVG | UNKNOWN | — | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-110918 | Chromium CVE-2026-110918: Memory corruption in Core | UNKNOWN | — | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-110919 | Chromium CVE-2026-110919: Use after free in V8 | UNKNOWN | — | 17%ile | Microsoft | 2026-10-13 |
| CVE-2026-110920 | Chromium CVE-2026-110920: Memory corruption in V8 | UNKNOWN | — | 17%ile | Microsoft | 2026-10-13 |
| CVE-2026-110921 | Chromium CVE-2026-110921: Use after free in V8 | UNKNOWN | — | 17%ile | Microsoft | 2026-10-13 |
| CVE-2026-110922 | Chromium CVE-2026-110922: Use after free in Prerender | UNKNOWN | — | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-113196 | Chromium CVE-2026-113196: Improper access control | UNKNOWN | — | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-113212 | Chromium CVE-2026-113212: Memory corruption | UNKNOWN | — | 26%ile | Microsoft | 2026-10-13 |
| CVE-2026-62840 | Linux Kernel Elevation of Privilege Vulnerability | UNKNOWN | — | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-104150 | AdonisJS HTTP Server: Uncontrolled Resource Consumption and Inefficient Regular Expression Complexity | UNKNOWN | — | 31%ile | Microsoft | 2026-10-13 |
| CVE-2026-98184 | wifi: mwifiex: prevent authentication frame length truncation | UNKNOWN | — | 13%ile | Microsoft | 2026-10-13 |
| CVE-2026-98223 | mm: filemap: retain mapped dropbehind folios | UNKNOWN | — | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98224 | mm/vma: correctly unaccount on mmap_prepare() failure | UNKNOWN | — | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98226 | mm, swap: fix SWAP_USAGE_OFFLIST_BIT collision with real usage count | UNKNOWN | — | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98228 | mips: select CONFIG_WEAK_REORDERING_BEYOND_LLSC from CONFIG_EYEQ | UNKNOWN | — | 2%ile | Microsoft | 2026-10-13 |
| CVE-2026-98230 | xfrm: use hlist_del_init_rcu for state_cache and state_cache_input | UNKNOWN | — | 2%ile | Microsoft | 2026-10-13 |
| CVE-2026-98235 | net/sched: act_api: release tail references on DELACTION failure | UNKNOWN | — | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98240 | net: ip_tunnel: initialize `options_len` before referencing options | UNKNOWN | — | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-98244 | btrfs: clear free space tree creation state on rebuild failure | UNKNOWN | — | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98256 | signal: Prevent exec() race | UNKNOWN | — | 4%ile | Microsoft | 2026-10-13 |
| CVE-2026-98258 | posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list | UNKNOWN | — | 2%ile | Microsoft | 2026-10-13 |
| CVE-2026-98259 | fs/dax: check zero or empty entry before converting xarray entry | UNKNOWN | — | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98267 | 9p: Fix v9fs_issue_write() to update i_size and remote_i_size | UNKNOWN | — | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98274 | net: psp: avoid conflicts with skb->decrypted and sk_validate_xmit_skb() | UNKNOWN | — | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98277 | eth: fbnic: ring the doorbell if a burst ends in a drop | UNKNOWN | — | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98281 | futex: Also allocate private hash on vfork() | UNKNOWN | — | 2%ile | Microsoft | 2026-10-13 |
| CVE-2026-98291 | Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit | UNKNOWN | — | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98296 | Bluetooth: btintel_pcie: validate TX skb length in send_sync | UNKNOWN | — | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-98318 | smb: client: validate absolute native symlink targets before NT fixups | UNKNOWN | — | 2%ile | Microsoft | 2026-10-13 |
| CVE-2026-98346 | wifi: cfg80211: don't get the radio mask for netdev-less wdevs | UNKNOWN | — | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98350 | wifi: brcmfmac: cyw: pass PMKID to firmware if present | UNKNOWN | — | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-98356 | RDMA/bnxt_re: check create_singlethread_workqueue() in DCB setup | UNKNOWN | — | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-98361 | RDMA/rxe: Restore HMM_PFN_WRITE check in ODP write paths | UNKNOWN | — | 2%ile | Microsoft | 2026-10-13 |
| CVE-2026-98371 | xfrm: iptfs: fix runt reassembly panic from short inner tot_len | UNKNOWN | — | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-98372 | xfrm: iptfs: fix stack OOB read in iptfs_skb_reset_frag_walk() | UNKNOWN | — | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-98376 | bpf: Use array_map_meta_equal for percpu array inner map replacement | UNKNOWN | — | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-98390 | x86/amd_node: Avoid divide by zero on virtualized systems | UNKNOWN | — | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-98392 | Bluetooth: btintel_pcie: fix tx_handle bounds off-by-one | UNKNOWN | — | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-98408 | watchdog: rzv2h: Avoid division by zero | UNKNOWN | — | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-98411 | power: sequencing: fix NULL-pointer dereference in pwrseq_device_register() | UNKNOWN | — | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-98412 | power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new() | UNKNOWN | — | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-98414 | memcg: avoid charging the root memcg from obj_cgroup_charge_pages() | UNKNOWN | — | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-98415 | soc: samsung: exynos-pmu: fix use-after-free of interrupt generator node | UNKNOWN | — | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-98431 | RDMA/uverbs: Fix mmap_lock/disassociation_lock circular dependency | UNKNOWN | — | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-98437 | media: qcom: iris: fix runtime PM reference leaks | UNKNOWN | — | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-98440 | KVM: arm64: nv: Delay freeing of shadow S2 structures until VM destruction | UNKNOWN | — | 2%ile | Microsoft | 2026-10-13 |
| CVE-2026-98444 | xfs: drop dquot flush lock when we can't find a buffer to flush | UNKNOWN | — | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-98445 | xfs: don't let memory failures leak blocks and kill repairs | UNKNOWN | — | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98446 | xfs: don't let hidden_space go negative in xfs_metafile_resv_init | UNKNOWN | — | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98447 | xfs: fix wild memcpy access when formatting ondisk rtrefcount btree roots | UNKNOWN | — | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98448 | xfs: release orphanage dir inode if chown fails | UNKNOWN | — | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98467 | KVM: arm64: nv: Fix null ptr deref on nested wp/unmap, teardown race | UNKNOWN | — | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98468 | KVM: arm64: Fix spurious warning for benign stage 2 teardown race | UNKNOWN | — | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-98469 | KVM: arm64: Fix AArch32 DBGBXVR<n> handling | UNKNOWN | — | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98472 | KVM: SEV: Free have_run_cpus during VM destruction even if VM is no longer SEV | UNKNOWN | — | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98474 | s390/pci: Fix missing device lock in zpci_report_status() | UNKNOWN | — | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98475 | s390/cmf: Fix virtual vs physical address confusion | UNKNOWN | — | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98480 | nfc: trf7970a: power down on startup RX gain failure | UNKNOWN | — | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-98487 | net: bridge: mdb: restart port group walk after deletion | UNKNOWN | — | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98492 | net: macb: fix dma_alloc_coherent() leak on macb_alloc() error paths | UNKNOWN | — | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-98496 | net: airoha: npu: cancel wdt_work after releasing the WDT IRQ | UNKNOWN | — | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-98497 | net/mlx5e: fix swapped IPv6 IPsec policy masks | UNKNOWN | — | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-98510 | drm/xe/vm: nuke PTs only after unlinking contested VMAs | UNKNOWN | — | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98512 | drm/nouveau: RCU-free the scheduler-containing nouveau_sched | UNKNOWN | — | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-98513 | drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() | UNKNOWN | — | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-98522 | drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl() | UNKNOWN | — | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-98523 | drm/client: fix restore of partially initialized client | UNKNOWN | — | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-98528 | gpio: cdev: fix kernel stack leak to user-space in error path | UNKNOWN | — | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-98533 | ipe: protect the dm-verity root hash with RCU | UNKNOWN | — | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-98534 | ipe: fix use-after-free when auditing a newly loaded policy | UNKNOWN | — | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-98542 | cgroup/cpuset: Return PERR_NOCPUS in remote_partition_enable() on subpartitions_cpus conflict | UNKNOWN | — | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-98543 | bpf: fs/xattr: don't assume the inode is locked in path_unlink/path_rmdir | UNKNOWN | — | 4%ile | Microsoft | 2026-10-13 |
| CVE-2026-98546 | arm64/boot: Disable trapping of PMZR_EL0 writes to EL2 | UNKNOWN | — | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-98552 | perf/core: Fix a refcount leak in attach_perf_ctx_data() | UNKNOWN | — | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-98562 | net: libwx: fix races in Tx timestamp handling | UNKNOWN | — | 9%ile | Microsoft | 2026-10-13 |
| CVE-2026-98563 | net: phylink: record the PHY only once bringup cannot fail | UNKNOWN | — | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-98564 | net: dsa: mt7530: leave the MDIO IRQ mappings to regmap-irq | UNKNOWN | — | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-98566 | drm/imagination: clamp freelist reconstruction requests | UNKNOWN | — | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-98571 | net: stmmac: clear stale buf->page after recycling on skb build failure | UNKNOWN | — | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-98574 | net: bcmgenet: stop Tx NAPI before disabling the queues | UNKNOWN | — | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-98584 | net/sched: fix potential stack infoleak in em_text_dump() | UNKNOWN | — | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-98585 | eth: fbnic: Avoid rounding zero ring sizes | UNKNOWN | — | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98592 | net: spacemit: clear TX descriptor on fragment mapping failure | UNKNOWN | — | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-98595 | udp: remove a disconnected socket from the 4-tuple hash table | UNKNOWN | — | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-98596 | ipv6: Fix dst leak for uncached routes. | UNKNOWN | — | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-98601 | Bluetooth: btintel_pcie: validate device-supplied DMA indices | UNKNOWN | — | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-98603 | ovpn: replace bind when clearing stale local source | UNKNOWN | — | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-98604 | ovpn: replace bind when learning local endpoint | UNKNOWN | — | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-98611 | bpf: Check params size before reading reserved fields | UNKNOWN | — | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98613 | bpf: Bound ownership depth through local kptrs and graph roots | UNKNOWN | — | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-98615 | eth: fbnic: Set AW_FLUSH_MODE alongside AW_FLUSH when flushing the mailbox | UNKNOWN | — | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98616 | eth: fbnic: reset num_napi when the napi vectors are freed | UNKNOWN | — | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98617 | eth: fbnic: use the Rx queue napi pointer to find the napi vector | UNKNOWN | — | 9%ile | Microsoft | 2026-10-13 |
| CVE-2026-98618 | eth: fbnic: Handle maximum standalone channels | UNKNOWN | — | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-98630 | eth: fbnic: Fix payload page pool error cleanup | UNKNOWN | — | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-98633 | Bluetooth: btnxpuart: Fix skb leak in nxp_process_fw_dump() | UNKNOWN | — | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98637 | KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure | UNKNOWN | — | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98638 | KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve() | UNKNOWN | — | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98639 | KVM: riscv: Fix NACL hfence entry update order | UNKNOWN | — | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98641 | bpf, arm64: set up the frame pointer for the exception callback | UNKNOWN | — | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98648 | s390/uv: Prevent potential out-of-bounds read | UNKNOWN | — | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98658 | iio: proximity: aw96103: validate firmware data length | UNKNOWN | — | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-98659 | iio: pressure: rohm-bm1390: Return error when read fails | UNKNOWN | — | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-98673 | iio: adc: pac1934: check ACPI label duplication | UNKNOWN | — | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-98674 | iio: adc: adi-axi-adc: Initialize state mutex | UNKNOWN | — | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98675 | iio: adc: ade9000: handle Phase C dip events in IRQ1 handler | UNKNOWN | — | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98676 | iio: adc: ade9000: fix NULL pointer dereference in clkout registration | UNKNOWN | — | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-98678 | iio: adc: ad4030: fix invalid oversampling_ratio validation | UNKNOWN | — | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98680 | iio: accel: kionix-kx022a: Prevent memory leak and fix state | UNKNOWN | — | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98682 | smb: client: drain and invalidate before server-side copy/clone | UNKNOWN | — | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-98683 | smb: client: flush dirty data before zeroing a range | UNKNOWN | — | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98689 | thunderbolt: Don't access a DP tunnel after its DPRX read was canceled | UNKNOWN | — | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98690 | thunderbolt: Fix domain reference leak when DPRX read is canceled | UNKNOWN | — | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98691 | thunderbolt: Tear down inactive DP tunnels when the domain is stopped | UNKNOWN | — | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98692 | thunderbolt: Make the DP tunnel activation callback mandatory | UNKNOWN | — | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-98693 | thunderbolt: Hold a router reference for each allocated HopID | UNKNOWN | — | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-98702 | wifi: mac80211: reject invalid 320 MHz CSA bandwidth | UNKNOWN | — | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98713 | KVM: arm64: Apply the fine-grained UNDEFs without FEAT_FGT | UNKNOWN | — | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98723 | nvmet: copy the hostid into the ctrl before creating PR pc_refs | UNKNOWN | — | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-98724 | nvmet: pci-epf: reject too-short SGL segments | UNKNOWN | — | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-98727 | nvme-multipath: set BLK_FEAT_ZONED only after the zone info is known | UNKNOWN | — | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-98728 | tpm: fix off-by-four bounds check in tpm2_get_random() | UNKNOWN | — | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98729 | x86/mm: Don't apply va_align to hugetlb mappings on AMD F15h | UNKNOWN | — | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98730 | Bluetooth: btintel_pcie: reject oversized TX packets in send_frame() | UNKNOWN | — | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98731 | Bluetooth: btintel_pcie: fix plen overflow in btintel_pcie_recv_frame() | UNKNOWN | — | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-98759 | usb: typec: tipd: fix uninitialized typec_partner_desc in cd321x_update_work() | UNKNOWN | — | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-98774 | rust_binder: cancel deferred work items in thread exit | UNKNOWN | — | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98788 | futex: Fix private hash use-after-free on resize | UNKNOWN | — | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-98791 | net/mlx5e: Fix AF_XDP TX timestamp teardown NULL dereference | UNKNOWN | — | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98804 | net: page_pool: fix use-after-free in page_pool_recycle_ring_bulk() | UNKNOWN | — | 10%ile | Microsoft | 2026-10-13 |
| CVE-2026-98806 | octeontx2-pf: Fix aura BPID assignment when CONFIG_DCB is enabled | UNKNOWN | — | 8%ile | Microsoft | 2026-10-13 |
| CVE-2026-98818 | mm/slab: do not wake up kswapd in __kfree_rcu_sheaf() | UNKNOWN | — | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-98821 | block: reject polled dio with user integrity metadata | UNKNOWN | — | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98841 | virt: vmgenid: set driver_data before registering notification handlers | UNKNOWN | — | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98842 | module: fix lost error code from codetag_load_module() | UNKNOWN | — | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98843 | netfs: zero gaps in read-gaps folio to avoid writing back stale data | UNKNOWN | — | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98844 | netfs: clear post-EOF pagecache when extending a file via write | UNKNOWN | — | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-98845 | tpm: Disable TPM on null key name mismatch | UNKNOWN | — | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-98849 | pfcp: fix socket lifetime on netdevice registration failure | UNKNOWN | — | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98858 | io_uring: fix task_work add use-after-free with SQPOLL | UNKNOWN | — | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-98867 | dm-pcache: bound the logical key offset from persistent memory | UNKNOWN | — | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-98868 | dm-pcache: reject a kset that overruns its segment | UNKNOWN | — | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-108266 | Privasys rustls fork: RA-TLS challenge mode did not bind attestation evidence to the TLS session | UNKNOWN | — | 2%ile | Microsoft | 2026-10-13 |
| CVE-2026-108267 | Privasys Go fork: RA-TLS challenge mode did not bind attestation evidence to the TLS session | UNKNOWN | — | 2%ile | Microsoft | 2026-10-13 |
| CVE-2026-61373 | Apache Thrift: Java TSaslNonblockingServer pre-auth unbounded SASL frame allocation | UNKNOWN | — | 37%ile | Microsoft | 2026-10-13 |
| CVE-2026-61374 | Apache Thrift: Java TSaslTransport post-auth data-frame missing size limit | UNKNOWN | — | 16%ile | Microsoft | 2026-10-13 |
| CVE-2026-85086 | Apache Thrift: Perl TLS client disables certificate verification by default | UNKNOWN | — | 7%ile | Microsoft | 2026-10-13 |
| CVE-2026-85493 | Apache Thrift, Apache Thrift: TProtocolUtil.skip follows peer-chosen nesting to any depth the stack allows (Dart, Java M | UNKNOWN | — | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-86535 | Apache Thrift: A JSON member name can stall the Node server's event loop indefinitely | UNKNOWN | — | 30%ile | Microsoft | 2026-10-13 |
| CVE-2026-86536 | Apache Thrift, Apache Thrift, Apache Thrift: A map key from the wire can replace a decoded object's prototype in generat | UNKNOWN | — | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-86537 | Apache Thrift: A truncated HTTP request stops the D library's server, allowing an unauthenticated remote attacker to den | UNKNOWN | — | 30%ile | Microsoft | 2026-10-13 |
| CVE-2026-87117 | Apache Thrift: PHP `thrift_protocol` accelerator dereferences a missing container-element spec | UNKNOWN | — | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-90440 | Apache Thrift: An exception escaping a libevent callback stops the D library's non-blocking server, allowing an unauthen | UNKNOWN | — | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-91137 | Apache Thrift: PHP `thrift_protocol` accelerator: zero-byte container elements | UNKNOWN | — | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-94633 | Apache Thrift: Dart `TBinaryProtocol.readMessageBegin` allocates from the pre-versioned name length | UNKNOWN | — | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-94635 | Apache Thrift: Lua `TBinaryProtocol:readMessageBegin` bypasses `checkStringSize` on the pre-versioned name | UNKNOWN | — | 28%ile | Microsoft | 2026-10-13 |
| CVE-2026-94638 | Apache Thrift: PHP `thrift_protocol` C extension ignores the configured `maxStringSize` | UNKNOWN | — | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-94639 | Apache Thrift: Java `TSaslNonblockingServer`: residual of CVE-2026-61373 (thread-death black hole + no cross-connection | UNKNOWN | — | 28%ile | Microsoft | 2026-10-13 |
| CVE-2026-94642 | Apache Thrift: PHP `TSimpleServer` exits the whole process on any non-transport exception | UNKNOWN | — | 31%ile | Microsoft | 2026-10-13 |
| CVE-2026-94644 | Apache Thrift: PHP `TJSONProtocol` string/number readers have no size bound | UNKNOWN | — | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-94645 | Apache Thrift: Node.js `TJSONProtocol` uses a peer-declared container size as an unbounded loop bound | UNKNOWN | — | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-94646 | Apache Thrift: Node.js `server.js` ends the process on any per-connection error (+ two triggers) | UNKNOWN | — | 23%ile | Microsoft | 2026-10-13 |
| CVE-2026-94648 | Apache Thrift: dart `TJsonProtocol`/`TJSONProtocol` has no string size bound | UNKNOWN | — | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-94651 | Apache Thrift: Java `TSaslNonblockingServer` `Computation.run` orphans a connection on a pre-auth parse error | UNKNOWN | — | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-94653 | Apache Thrift: PHP framed/memory/HTTP transports re-slice the buffer on every read (quadratic) | UNKNOWN | — | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-94655 | Apache Thrift: Lua `TJsonProtocol` string/number readers have no size bound and are quadratic | UNKNOWN | — | 28%ile | Microsoft | 2026-10-13 |
| CVE-2026-94657 | Apache Thrift: javame `TJsonProtocol`/`TJSONProtocol` has no string size bound | UNKNOWN | — | 28%ile | Microsoft | 2026-10-13 |
| CVE-2026-94658 | Apache Thrift: Lua `TFramedTransport`/`THttpTransport` re-slice the buffer on every read (quadratic) | UNKNOWN | — | 28%ile | Microsoft | 2026-10-13 |
| CVE-2026-96288 | Apache Thrift: Erlang generated struct reads have no recursion-depth guard (unbounded memory) | UNKNOWN | — | 28%ile | Microsoft | 2026-10-13 |
| CVE-2026-96289 | Apache Thrift: php `--gen php:inlined` struct readers (and `TProtocol::skipBinary`) have no recursion-depth guard | UNKNOWN | — | 28%ile | Microsoft | 2026-10-13 |
| CVE-2026-96292 | Apache Thrift: Lua `THttpTransport:_parseHeaders` matches each header line with a backtracking pattern (quadratic) | UNKNOWN | — | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-96294 | Apache Thrift: nodejs web server: no `error` listener on an upgraded WebSocket connection | UNKNOWN | — | 20%ile | Microsoft | 2026-10-13 |
| CVE-2026-96990 | Apache Thrift: Erlang thrift_json_protocol reads a whole message with no size bound | UNKNOWN | — | 31%ile | Microsoft | 2026-10-13 |
| CVE-2026-62874 | Azure Billing Elevation of Privilege Vulnerability | CRITICAL | 10.0 | 26%ile | Microsoft | 2026-09-08 |
| CVE-2026-69843 | Microsoft Fabric Elevation of Privilege Vulnerability | CRITICAL | 10.0 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-69865 | Microsoft Container Registry Elevation of Privilege Vulnerability | CRITICAL | 10.0 | 56%ile | Microsoft | 2026-09-08 |
| CVE-2026-70200 | Azure Logic Apps Elevation of Privilege Vulnerability | CRITICAL | 10.0 | 49%ile | Microsoft | 2026-09-08 |
| CVE-2026-70352 | Azure AI Language Elevation of Privilege Vulnerability | CRITICAL | 10.0 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-83711 | Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability | CRITICAL | 10.0 | 56%ile | Microsoft | 2026-09-08 |
| CVE-2026-83944 | Azure Logic Apps Elevation of Privilege Vulnerability | CRITICAL | 10.0 | 38%ile | Microsoft | 2026-09-08 |
| CVE-2026-85889 | Azure AI Foundry Elevation of Privilege Vulnerability | CRITICAL | 10.0 | 52%ile | Microsoft | 2026-09-08 |
| CVE-2026-69399 | Azure Arc Elevation of Privilege Vulnerability | CRITICAL | 9.9 | 48%ile | Microsoft | 2026-09-08 |
| CVE-2026-83941 | Entra ID Elevation of Privilege Vulnerability | CRITICAL | 9.9 | 56%ile | Microsoft | 2026-09-08 |
| CVE-2026-85878 | Azure Database for PostgreSQL Elevation of Privilege Vulnerability | CRITICAL | 9.9 | 56%ile | Microsoft | 2026-09-08 |
| CVE-2026-85885 | Microsoft 365 Copilot Elevation of Privilege Vulnerability | CRITICAL | 9.9 | 54%ile | Microsoft | 2026-09-08 |
| CVE-2026-100075 | RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters | CRITICAL | 9.8 | 37%ile | Microsoft | 2026-09-08 |
| CVE-2026-78030 | DBI versions before 1.653 for Perl load arbitrary modules via unvalidated dbm_type and dbm_mldbm attributes in DBD::DBM | CRITICAL | 9.8 | 37%ile | Microsoft | 2026-09-08 |
| CVE-2026-85504 | FreeIPMI before 1.6.19 has a stack-based buffer overflow in _ipmi_sel_oem_fujitsu_get_sel_entry_long_text in libfreeipmi | CRITICAL | 9.8 | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-85506 | ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _get_dell_system_info_idrac_info in ipmi-oem/ipm | CRITICAL | 9.8 | 42%ile | Microsoft | 2026-09-08 |
| CVE-2026-85507 | ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_info in ipmi-oem/ip | CRITICAL | 9.8 | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-85508 | ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_ipv6_info in ipmi-o | CRITICAL | 9.8 | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-85509 | FreeIPMI before 1.6.19 has a stack-based buffer overflow in _read_fru_data in libfreeipmi/fru/ipmi-fru.c when a BMC retu | CRITICAL | 9.8 | 42%ile | Microsoft | 2026-09-08 |
| CVE-2026-89479 | sctp: stop processing a packet once its association is deleted | CRITICAL | 9.8 | 43%ile | Microsoft | 2026-09-08 |
| CVE-2026-89551 | SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow | CRITICAL | 9.8 | 44%ile | Microsoft | 2026-09-08 |
| CVE-2026-89675 | nfsd: fix UAF in async copy cancel and shutdown | CRITICAL | 9.8 | 38%ile | Microsoft | 2026-09-08 |
| CVE-2026-89778 | isofs: fix out-of-bounds page array access on empty zisofs block | CRITICAL | 9.8 | 53%ile | Microsoft | 2026-09-08 |
| CVE-2026-89783 | xfrm6: fix out-of-bounds write in xfrm6_input_addr() when secpath is full | CRITICAL | 9.8 | 54%ile | Microsoft | 2026-09-08 |
| CVE-2026-89788 | ksmbd: fix tree connection use-after-free in smb2_tree_connect() | CRITICAL | 9.8 | 51%ile | Microsoft | 2026-09-08 |
| CVE-2026-89847 | scsi: qla2xxx: Avoid double completion in async IOCB timeout | CRITICAL | 9.8 | 53%ile | Microsoft | 2026-09-08 |
| CVE-2026-89969 | nvmet-tcp: fix out-of-bounds write when receiving an over-long PDU | CRITICAL | 9.8 | 54%ile | Microsoft | 2026-09-08 |
| CVE-2026-89970 | nvmet-auth: Synchronize timeout work during SQ teardown | CRITICAL | 9.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-89972 | nvme: add missing SRCU grace period in error path | CRITICAL | 9.8 | 54%ile | Microsoft | 2026-09-08 |
| CVE-2026-90036 | NFSD: Prevent client use-after-free during blocked-lock reaping | CRITICAL | 9.8 | 42%ile | Microsoft | 2026-09-08 |
| CVE-2026-90037 | NFSD: Prevent client use-after-free during close_lru reaping | CRITICAL | 9.8 | 44%ile | Microsoft | 2026-09-08 |
| CVE-2026-90042 | ceph: properly decrypt filenames in vmalloc() buffers | CRITICAL | 9.8 | 43%ile | Microsoft | 2026-09-08 |
| CVE-2026-90048 | fs/ntfs3: fix slab-out-of-bounds write in ni_create_attr_list() | CRITICAL | 9.8 | 54%ile | Microsoft | 2026-09-08 |
| CVE-2026-93207 | SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry | CRITICAL | 9.8 | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-67631 | Microsoft SQL Server Remote Code Execution Vulnerability | CRITICAL | 9.8 | 62%ile | Microsoft | 2026-09-08 |
| CVE-2026-67643 | Microsoft SQL Server Remote Code Execution Vulnerability | CRITICAL | 9.8 | 62%ile | Microsoft | 2026-09-08 |
| CVE-2026-68839 | Windows USB Mass Storage Class Driver Remote Code Execution Vulnerability | CRITICAL | 9.8 | 64%ile | Microsoft | 2026-09-08 |
| CVE-2026-69276 | Microsoft UxTheme Library (uxtheme.dll) Remote Code Execution Vulnerability | CRITICAL | 9.8 | 62%ile | Microsoft | 2026-09-08 |
| CVE-2026-69408 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | CRITICAL | 9.8 | 62%ile | Microsoft | 2026-09-08 |
| CVE-2026-69431 | Telnet Client Remote Code Execution Vulnerability | CRITICAL | 9.8 | 62%ile | Microsoft | 2026-09-08 |
| CVE-2026-69463 | Windows NTFS Remote Code Execution Vulnerability | CRITICAL | 9.8 | 62%ile | Microsoft | 2026-09-08 |
| CVE-2026-69491 | Microsoft DirectMusic Remote Code Execution Vulnerability | CRITICAL | 9.8 | 62%ile | Microsoft | 2026-09-08 |
| CVE-2026-69493 | Windows Event Logging Service Remote Code Execution Vulnerability | CRITICAL | 9.8 | 62%ile | Microsoft | 2026-09-08 |
| CVE-2026-69496 | Windows Compressed Folder Remote Code Execution Vulnerability | CRITICAL | 9.8 | 62%ile | Microsoft | 2026-09-08 |
| CVE-2026-69525 | Remote Desktop Services Remote Code Execution Vulnerability | CRITICAL | 9.8 | 62%ile | Microsoft | 2026-09-08 |
| CVE-2026-69579 | Windows Message Queuing Remote Code Execution Vulnerability | CRITICAL | 9.8 | 62%ile | Microsoft | 2026-09-08 |
| CVE-2026-69586 | Microsoft Windows PDF Remote Code Execution Vulnerability | CRITICAL | 9.8 | 62%ile | Microsoft | 2026-09-08 |
| CVE-2026-69590 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | CRITICAL | 9.8 | 62%ile | Microsoft | 2026-09-08 |
| CVE-2026-69595 | Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability | CRITICAL | 9.8 | 62%ile | Microsoft | 2026-09-08 |
| CVE-2026-69715 | Windows Direct Show Remote Code Execution Vulnerability | CRITICAL | 9.8 | 62%ile | Microsoft | 2026-09-08 |
| CVE-2026-69730 | Windows DNS Server Remote Code Execution Vulnerability | CRITICAL | 9.8 | 62%ile | Microsoft | 2026-09-08 |
| CVE-2026-69768 | Windows RNDIS Remote Code Execution Vulnerability | CRITICAL | 9.8 | 62%ile | Microsoft | 2026-09-08 |
| CVE-2026-69769 | Windows HTTP Print Provider Remote Code Execution Vulnerability | CRITICAL | 9.8 | 62%ile | Microsoft | 2026-09-08 |
| CVE-2026-69819 | RPC Runtime Library Remote Code Execution Vulnerability | CRITICAL | 9.8 | 62%ile | Microsoft | 2026-09-08 |
| CVE-2026-69824 | Microsoft Standard XPS Remote Code Execution Vulnerability | CRITICAL | 9.8 | 62%ile | Microsoft | 2026-09-08 |
| CVE-2026-69829 | Windows Shell Remote Code Execution Vulnerability | CRITICAL | 9.8 | 62%ile | Microsoft | 2026-09-08 |
| CVE-2026-69845 | Windows DHCP Server Remote Code Execution Vulnerability | CRITICAL | 9.8 | 64%ile | Microsoft | 2026-09-08 |
| CVE-2026-69910 | Windows Hyper-V Remote Code Execution Vulnerability | CRITICAL | 9.8 | 62%ile | Microsoft | 2026-09-08 |
| CVE-2026-70296 | Windows Imaging Component Remote Code Execution Vulnerability | CRITICAL | 9.8 | 62%ile | Microsoft | 2026-09-08 |
| CVE-2026-72979 | Windows DHCP Server Remote Code Execution Vulnerability | CRITICAL | 9.8 | 62%ile | Microsoft | 2026-09-08 |
| CVE-2026-72982 | Windows Netlogon Remote Code Execution Vulnerability | CRITICAL | 9.8 | 62%ile | Microsoft | 2026-09-08 |
| CVE-2026-72983 | Internet Connection Sharing (ICS) Remote Code Execution Vulnerability | CRITICAL | 9.8 | 62%ile | Microsoft | 2026-09-08 |
| CVE-2026-73009 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability | CRITICAL | 9.8 | 62%ile | Microsoft | 2026-09-08 |
| CVE-2026-73010 | Microsoft Failover Cluster Remote Code Execution Vulnerability | CRITICAL | 9.8 | 62%ile | Microsoft | 2026-09-08 |
| CVE-2026-73025 | Windows iSCSI Security Feature Bypass Vulnerability | CRITICAL | 9.8 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-77493 | Windows Graphics Component Remote Code Execution Vulnerability | CRITICAL | 9.8 | 62%ile | Microsoft | 2026-09-08 |
| CVE-2026-78445 | Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability | CRITICAL | 9.8 | 62%ile | Microsoft | 2026-09-08 |
| CVE-2026-78509 | Microsoft Office Outlook Remote Code Execution Vulnerability | CRITICAL | 9.8 | 62%ile | Microsoft | 2026-09-08 |
| CVE-2026-65669 | Microsoft SQL Server Elevation of Privilege Vulnerability | CRITICAL | 9.6 | 59%ile | Microsoft | 2026-09-08 |
| CVE-2026-81376 | Visual Studio Code Security Feature Bypass Vulnerability | CRITICAL | 9.6 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-87701 | Azure Cosmos DB Elevation of Privilege Vulnerability | CRITICAL | 9.6 | 56%ile | Microsoft | 2026-09-08 |
| CVE-2026-91710 | Chromium CVE-2026-91710: Use after free | CRITICAL | 9.6 | 24%ile | Microsoft | 2026-09-08 |
| CVE-2026-91716 | Chromium CVE-2026-91716: Use after free | CRITICAL | 9.6 | 24%ile | Microsoft | 2026-09-08 |
| CVE-2026-91718 | Chromium CVE-2026-91718: Use after free | CRITICAL | 9.6 | 26%ile | Microsoft | 2026-09-08 |
| CVE-2026-91728 | Chromium CVE-2026-91728: Integer overflow | CRITICAL | 9.6 | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-91729 | Chromium CVE-2026-91729: Use after free | CRITICAL | 9.6 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-91738 | Chromium CVE-2026-91738: Improper input validation | CRITICAL | 9.6 | 26%ile | Microsoft | 2026-09-08 |
| CVE-2026-91749 | Chromium CVE-2026-91749: Use after free | CRITICAL | 9.6 | 32%ile | Microsoft | 2026-09-08 |
| CVE-2026-95277 | Chromium CVE-2026-95277: Use after free in Views | CRITICAL | 9.6 | 28%ile | Microsoft | 2026-09-08 |
| CVE-2026-95281 | Chromium CVE-2026-95281: Buffer overflow in ANGLE | CRITICAL | 9.6 | 46%ile | Microsoft | 2026-09-08 |
| CVE-2026-95283 | Chromium CVE-2026-95283: Buffer overflow in Tint | CRITICAL | 9.6 | 33%ile | Microsoft | 2026-09-08 |
| CVE-2026-95284 | Chromium CVE-2026-95284: Buffer overflow in ANGLE | CRITICAL | 9.6 | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-95299 | Chromium CVE-2026-95299: Use after free in GPU | CRITICAL | 9.6 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-95310 | Chromium CVE-2026-95310: Use after free in AdFilter | CRITICAL | 9.6 | 39%ile | Microsoft | 2026-09-08 |
| CVE-2026-95311 | Chromium CVE-2026-95311: Free of non-heap memory in Fonts | CRITICAL | 9.6 | 28%ile | Microsoft | 2026-09-08 |
| CVE-2026-95313 | Chromium CVE-2026-95313: Use after free in Fullscreen | CRITICAL | 9.6 | 39%ile | Microsoft | 2026-09-08 |
| CVE-2026-95318 | Chromium CVE-2026-95318: Buffer overflow in Video | CRITICAL | 9.6 | 33%ile | Microsoft | 2026-09-08 |
| CVE-2026-95325 | Chromium CVE-2026-95325: Use after free in ANGLE | CRITICAL | 9.6 | 28%ile | Microsoft | 2026-09-08 |
| CVE-2026-95329 | Chromium CVE-2026-95329: Out of bounds write in WebGL | CRITICAL | 9.6 | 39%ile | Microsoft | 2026-09-08 |
| CVE-2026-95331 | Chromium CVE-2026-95331: Out of bounds write in ANGLE | CRITICAL | 9.6 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-95339 | Chromium CVE-2026-95339: Use after free in ServiceWorker | CRITICAL | 9.6 | 41%ile | Microsoft | 2026-09-08 |
| CVE-2026-95347 | Chromium CVE-2026-95347: Use after free in Updater | CRITICAL | 9.6 | 23%ile | Microsoft | 2026-09-08 |
| CVE-2026-95349 | Chromium CVE-2026-95349: Buffer overflow in WebGL | CRITICAL | 9.6 | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-95350 | Chromium CVE-2026-95350: Buffer overflow in ANGLE | CRITICAL | 9.6 | 44%ile | Microsoft | 2026-09-08 |
| CVE-2026-95356 | Chromium CVE-2026-95356: Use after free in WindowDialog | CRITICAL | 9.6 | 36%ile | Microsoft | 2026-09-08 |
| CVE-2026-95357 | Chromium CVE-2026-95357: Out of bounds write in GPU | CRITICAL | 9.6 | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-89542 | SUNRPC: harden gss_krb5_unwrap_v2 against short tokens | CRITICAL | 9.4 | 44%ile | Microsoft | 2026-09-08 |
| CVE-2026-89930 | KVM: nVMX: Service local TLB flushes on failed nested VM-Enter | CRITICAL | 9.3 | 8%ile | Microsoft | 2026-09-08 |
| CVE-2026-90049 | net: skbuff: don't skb_tx_error() the source skb in skb_zerocopy() | CRITICAL | 9.3 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-69356 | Microsoft Exchange Server Spoofing Vulnerability | CRITICAL | 9.3 | 55%ile | Microsoft | 2026-09-08 |
| CVE-2026-70009 | Azure Arc Elevation of Privilege Vulnerability | CRITICAL | 9.3 | 45%ile | Microsoft | 2026-09-08 |
| CVE-2026-80098 | Copilot Studio Elevation of Privilege Vulnerability | CRITICAL | 9.3 | 42%ile | Microsoft | 2026-09-08 |
| CVE-2026-102268 | PyJWT: Asymmetric-PEM detection bypass: whitespace/line-ending-mutated public keys skip the HS/asymmetric confusion guar | CRITICAL | 9.1 | 15%ile | Microsoft | 2026-09-08 |
| CVE-2026-89526 | svcrdma: Validate Read chunk positions before reconstruction | CRITICAL | 9.1 | 52%ile | Microsoft | 2026-09-08 |
| CVE-2026-89631 | smb: client: reject a tree connect response whose byte count is too small | CRITICAL | 9.1 | 42%ile | Microsoft | 2026-09-08 |
| CVE-2026-89653 | ceph: reject export_targets ranks >= CEPH_MAX_MDS in mdsmap decode | CRITICAL | 9.1 | 43%ile | Microsoft | 2026-09-08 |
| CVE-2026-89779 | fs/ntfs3: validate ef->size covers the record's name and value | CRITICAL | 9.1 | 53%ile | Microsoft | 2026-09-08 |
| CVE-2026-89786 | ext4: fix out-of-bounds read in ext4_read_inline_dir() | CRITICAL | 9.1 | 53%ile | Microsoft | 2026-09-08 |
| CVE-2026-90011 | scsi: target: iscsi: Reserve a terminator byte for the login payload | CRITICAL | 9.1 | 58%ile | Microsoft | 2026-09-08 |
| CVE-2026-90413 | IB/isert: reject login PDUs declaring more data than was received | CRITICAL | 9.1 | 58%ile | Microsoft | 2026-09-08 |
| CVE-2026-97959 | net/sched: cls_route: free emptied bucket on filter move | CRITICAL | 9.1 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-97984 | net: ipv6: Fix UDP length overflow with PMTU discover and big MTU | CRITICAL | 9.1 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-62916 | Microsoft Entra ID Elevation of Privilege Vulnerability | CRITICAL | 9.1 | 59%ile | Microsoft | 2026-09-08 |
| CVE-2026-69641 | Microsoft Exchange Server Elevation of Privilege Vulnerability | CRITICAL | 9.1 | 59%ile | Microsoft | 2026-09-08 |
| CVE-2026-34182 | CMS AuthEnvelopedData Processing May Accept Forged Messages | CRITICAL | 9.1 | 64%ile | Microsoft | 2026-09-08 |
| CVE-2026-44950 | fs_read_glyphs() heap buffer overflow via cumulative glyph data overflow in libXfont2 | CRITICAL | 9.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-59679 | fs_read_glyphs() heap OOB read/write via encoding array index mismatch in libXfont2 | CRITICAL | 9.0 | 17%ile | Microsoft | 2026-09-08 |
| CVE-2026-67378 | Microsoft SQL Server Remote Code Execution Vulnerability | CRITICAL | 9.0 | 53%ile | Microsoft | 2026-09-08 |
| CVE-2026-67636 | Microsoft SQL Server Remote Code Execution Vulnerability | CRITICAL | 9.0 | 53%ile | Microsoft | 2026-09-08 |
| CVE-2026-69854 | Spring Cloud Azure Elevation of Privilege Vulnerability | CRITICAL | 9.0 | 53%ile | Microsoft | 2026-09-08 |
| CVE-2026-77903 | Microsoft Dataverse Elevation of Privilege Vulnerability | CRITICAL | 9.0 | 31%ile | Microsoft | 2026-09-08 |
| CVE-2026-53940 | Conda: Entry-point path traversal in noarch:python install (arbitrary file write) — canonical Python implementation | HIGH | 8.8 | 46%ile | Microsoft | 2026-09-08 |
| CVE-2026-82412 | ntopng: Remote Code Execution via OS Command Injection in Vulnerability-Scan REST API | HIGH | 8.8 | 51%ile | Microsoft | 2026-09-08 |
| CVE-2026-84990 | ntopng: Missing Authorization on System Configuration Backup Download and Listing | HIGH | 8.8 | 28%ile | Microsoft | 2026-09-08 |
| CVE-2026-87587 | Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside | HIGH | 8.8 | 36%ile | Microsoft | 2026-09-08 |
| CVE-2026-87612 | Type confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside | HIGH | 8.8 | 39%ile | Microsoft | 2026-09-08 |
| CVE-2026-87625 | Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to | HIGH | 8.8 | 32%ile | Microsoft | 2026-09-08 |
| CVE-2026-87766 | Bubblewrap: bubblewrap: symlink traversal via /oldroot allows writing files outside sandbox during setup | HIGH | 8.8 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-89777 | vfio/pci: clear vdev->msi_perm after freeing it on init failure | HIGH | 8.8 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-89811 | drm/amdkfd: Add TLB flush after MES queue eviction/suspension | HIGH | 8.8 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-89844 | scsi: qla2xxx: Hold vport_slock for host map update in report ID acquisition | HIGH | 8.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-89849 | scsi: qla2xxx: Reject non-SCSI SRB on status IOCB fast path | HIGH | 8.8 | 30%ile | Microsoft | 2026-09-08 |
| CVE-2026-89860 | scsi: qla2xxx: Initialize NVMe abort_work once at submission | HIGH | 8.8 | 28%ile | Microsoft | 2026-09-08 |
| CVE-2026-89913 | KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables | HIGH | 8.8 | 8%ile | Microsoft | 2026-09-08 |
| CVE-2026-89929 | KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU | HIGH | 8.8 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-89932 | KVM: nVMX: Always flush vpid02 on first use | HIGH | 8.8 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-89959 | s390/vfio-ap: Fix control domain removal in vfio_ap_mdev_cfg_remove | HIGH | 8.8 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-89960 | s390/vfio-ap: fix stale pqap_hook pointer on error in vfio_ap_mdev_set_kvm() | HIGH | 8.8 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-89995 | dma-direct: return struct page from dma_direct_alloc_from_pool() | HIGH | 8.8 | 29%ile | Microsoft | 2026-09-08 |
| CVE-2026-90000 | HID: rmi: fix OOB access with undersized RMI reports | HIGH | 8.8 | 29%ile | Microsoft | 2026-09-08 |
| CVE-2026-90018 | staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr() | HIGH | 8.8 | 39%ile | Microsoft | 2026-09-08 |
| CVE-2026-90041 | HID: sony: clean up device list on probe failure | HIGH | 8.8 | 24%ile | Microsoft | 2026-09-08 |
| CVE-2026-93228 | svcrdma: Reject Write/Reply chunks with segcount 0 | HIGH | 8.8 | 43%ile | Microsoft | 2026-09-08 |
| CVE-2026-93280 | greybus: audio: bound the topology section sizes against the fetched size | HIGH | 8.8 | 25%ile | Microsoft | 2026-09-08 |
| CVE-2026-93834 | Qemu-kvm: 9pfs: use-after-free race in tlcreate/twalk allows vm guest escape | HIGH | 8.8 | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-97527 | scsi: qla2xxx: Serialize NVMe unsol ctx list with a per-fcport lock | HIGH | 8.8 | 28%ile | Microsoft | 2026-09-08 |
| CVE-2026-97528 | scsi: qla2xxx: Unlink NVMe unsol ctx before freeing on LS reject error | HIGH | 8.8 | 28%ile | Microsoft | 2026-09-08 |
| CVE-2026-97555 | smb: client: fix heap overflow in DACL owner/group rewrite | HIGH | 8.8 | 48%ile | Microsoft | 2026-09-08 |
| CVE-2026-97957 | net: hinic: fix mailbox segment buffer overflow | HIGH | 8.8 | 4%ile | Microsoft | 2026-09-08 |
| CVE-2026-98115 | ksmbd: safely drain sessions during logoff | HIGH | 8.8 | 20%ile | Microsoft | 2026-09-08 |
| CVE-2026-62706 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-62744 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-62895 | Azure Arc SQL Server Extension Elevation of Privilege Vulnerability | HIGH | 8.8 | 56%ile | Microsoft | 2026-09-08 |
| CVE-2026-65772 | Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability | HIGH | 8.8 | 77%ile | Microsoft | 2026-09-08 |
| CVE-2026-66814 | Microsoft SQL Server Elevation of Privilege Vulnerability | HIGH | 8.8 | 56%ile | Microsoft | 2026-09-08 |
| CVE-2026-66818 | Microsoft SQL Server Elevation of Privilege Vulnerability | HIGH | 8.8 | 56%ile | Microsoft | 2026-09-08 |
| CVE-2026-66819 | Microsoft SQL Server Elevation of Privilege Vulnerability | HIGH | 8.8 | 62%ile | Microsoft | 2026-09-08 |
| CVE-2026-66820 | SQL Server Elevation of Privilege Vulnerability | HIGH | 8.8 | 62%ile | Microsoft | 2026-09-08 |
| CVE-2026-67368 | Microsoft SQL Server Elevation of Privilege Vulnerability | HIGH | 8.8 | 64%ile | Microsoft | 2026-09-08 |
| CVE-2026-67370 | Microsoft SQL Server Elevation of Privilege Vulnerability | HIGH | 8.8 | 62%ile | Microsoft | 2026-09-08 |
| CVE-2026-67373 | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-67380 | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-67381 | Microsoft SQL Server Elevation of Privilege Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-67384 | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-67385 | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-67388 | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-67638 | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-67639 | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-67642 | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-68775 | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-68786 | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-68828 | Remote Desktop Client Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-69266 | Windows DHCP Server Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-69268 | Microsoft Office SharePoint Remote Code Execution Vulnerability | HIGH | 8.8 | 56%ile | Microsoft | 2026-09-08 |
| CVE-2026-69273 | Microsoft Office SharePoint Remote Code Execution Vulnerability | HIGH | 8.8 | 56%ile | Microsoft | 2026-09-08 |
| CVE-2026-69282 | Microsoft Office SharePoint Remote Code Execution Vulnerability | HIGH | 8.8 | 56%ile | Microsoft | 2026-09-08 |
| CVE-2026-69285 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-69291 | Windows Volume Manager Extension Driver Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-69334 | Windows Volume Manager Extension Driver Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-69355 | Microsoft Exchange Server Remote Code Execution Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-69386 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-69434 | Windows URL Moniker Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-69439 | .NET and Visual Studio Elevation of Privilege Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-69442 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-69461 | Windows NTFS Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-69464 | Microsoft Office SharePoint Elevation of Privilege Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-69465 | Microsoft Office SharePoint Remote Code Execution Vulnerability | HIGH | 8.8 | 56%ile | Microsoft | 2026-09-08 |
| CVE-2026-69485 | Remote Desktop Client Remote Code Execution Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-69486 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-69494 | Windows Event Logging Service Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-69495 | Windows Event Logging Service Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-69499 | Windows Imaging Component Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-69511 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-69518 | Windows Remote Desktop Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-69522 | .NET and Visual Studio Remote Code Execution Vulnerability | HIGH | 8.8 | 58%ile | Microsoft | 2026-09-08 |
| CVE-2026-69529 | Microsoft Office Access Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-69547 | Windows DHCP Server Remote Code Execution Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-69551 | Windows DNS Server Remote Code Execution Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-69556 | Microsoft Office Word Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-69598 | Windows iSCSI Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-69601 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-69603 | Windows Hyper-V Remote Code Execution Vulnerability | HIGH | 8.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69614 | Microsoft Office Access Remote Code Execution Vulnerability | HIGH | 8.8 | 58%ile | Microsoft | 2026-09-08 |
| CVE-2026-69628 | Windows iSCSI Remote Code Execution Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-69629 | Microsoft Office Outlook Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-69632 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-69649 | Raw Image Extension Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-69669 | Windows Kernel Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-69671 | Microsoft Office Word Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-69676 | Windows Kerberos Remote Code Execution Vulnerability | HIGH | 8.8 | 56%ile | Microsoft | 2026-09-08 |
| CVE-2026-69678 | Microsoft Office PowerPoint Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-69686 | Microsoft Office Word Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-69712 | Windows Key Distribution Center Remote Code Execution Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-69716 | Microsoft Office SharePoint Elevation of Privilege Vulnerability | HIGH | 8.8 | 62%ile | Microsoft | 2026-09-08 |
| CVE-2026-69722 | Microsoft Office Word Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-69724 | Microsoft Office SharePoint Remote Code Execution Vulnerability | HIGH | 8.8 | 56%ile | Microsoft | 2026-09-08 |
| CVE-2026-69729 | Windows Credential Providers Remote Code Execution Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-69740 | Windows Hello Elevation of Privilege Vulnerability | HIGH | 8.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69742 | Microsoft Office Publisher Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-69759 | Microsoft Office Word Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-69764 | Microsoft Office Word Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-69767 | Microsoft Office PowerPoint Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-69772 | Windows Network File System Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-69778 | Microsoft Office Access Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-69784 | Windows Hello Elevation of Privilege Vulnerability | HIGH | 8.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69797 | Microsoft Office PowerPoint Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-69860 | Windows Imaging Component Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-70203 | Windows Media Player Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-70351 | Microsoft WebP Image Extension Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-70586 | Windows Paint Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-71328 | .NET and Visual Studio Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-71336 | Windows Work Folder Service Remote Code Execution Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-71352 | Windows Remote Access Connection Manager Remote Code Execution Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-72933 | Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-72940 | Windows Schannel Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-72950 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-72959 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-72960 | Windows Media Player Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-72972 | Microsoft Office Word Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-72973 | Microsoft Office Word Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-72986 | Graphic Fonts Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-73006 | DirectWrite Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-73012 | Windows Management Services Elevation of Privilege Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-73013 | Windows Imaging Component Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-73018 | Graphic Fonts Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-73023 | Windows Imaging Component Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-73028 | SQL Server Elevation of Privilege Vulnerability | HIGH | 8.8 | 56%ile | Microsoft | 2026-09-08 |
| CVE-2026-77480 | SQL Server Elevation of Privilege Vulnerability | HIGH | 8.8 | 56%ile | Microsoft | 2026-09-08 |
| CVE-2026-77481 | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-77482 | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-77483 | SQL Server Elevation of Privilege Vulnerability | HIGH | 8.8 | 56%ile | Microsoft | 2026-09-08 |
| CVE-2026-77484 | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH | 8.8 | 77%ile | Microsoft | 2026-09-08 |
| CVE-2026-77486 | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-77487 | SQL Server Elevation of Privilege Vulnerability | HIGH | 8.8 | 56%ile | Microsoft | 2026-09-08 |
| CVE-2026-77495 | Windows Imaging Component Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-77504 | Microsoft Office Word Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-77901 | Microsoft Office Word Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-77906 | Visual Studio Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-77907 | Visual Studio Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-77908 | Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability | HIGH | 8.8 | 62%ile | Microsoft | 2026-09-08 |
| CVE-2026-78439 | Microsoft Office Graphics Component Remote Code Execution Vulnerability | HIGH | 8.8 | 58%ile | Microsoft | 2026-09-08 |
| CVE-2026-78442 | Windows OLE DB Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-78456 | SQL Server Remote Code Execution Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-78462 | Visual Studio Code Security Feature Bypass Vulnerability | HIGH | 8.8 | 55%ile | Microsoft | 2026-09-08 |
| CVE-2026-78463 | Remote Desktop Client Remote Code Execution Vulnerability | HIGH | 8.8 | 59%ile | Microsoft | 2026-09-08 |
| CVE-2026-78504 | Microsoft Office Word Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-78505 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-78507 | Microsoft Office Word Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-78511 | Microsoft Office Word Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-78512 | Microsoft Office Word Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-78514 | Microsoft Office Word Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-78517 | Microsoft Office Word Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-78518 | Microsoft Office Excel Remote Code Execution Vulnerability | HIGH | 8.8 | 58%ile | Microsoft | 2026-09-08 |
| CVE-2026-78519 | Microsoft Office Outlook Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-78521 | Microsoft Office Word Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-78524 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-78525 | Microsoft Office Outlook Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-78526 | Microsoft Office Word Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-80074 | Remote Desktop Client Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-80077 | Remote Desktop Client Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-80080 | Microsoft Office Word Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-80081 | Microsoft Office PowerPoint Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-80083 | Windows Hyper-V Remote Code Execution Vulnerability | HIGH | 8.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-80085 | Microsoft Office Word Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-80096 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-81352 | Web Media Extensions Remote Code Execution Vulnerability | HIGH | 8.8 | 47%ile | Microsoft | 2026-09-08 |
| CVE-2026-81385 | Microsoft Office Publisher Remote Code Execution Vulnerability | HIGH | 8.8 | 70%ile | Microsoft | 2026-09-08 |
| CVE-2026-81952 | Microsoft Word Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-81955 | Windows Graphics Component Remote Code Execution Vulnerability | HIGH | 8.8 | 58%ile | Microsoft | 2026-09-08 |
| CVE-2026-83992 | Windows Imaging Component Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-83996 | Windows Error Reporting Elevation of Privilege Vulnerability | HIGH | 8.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-83998 | Remote Desktop Client Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-85877 | Windows Print Spooler Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-85893 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-87489 | Chromium CVE-2026-87489: Memory corruption in V8 | HIGH | 8.8 | 32%ile | Microsoft | 2026-09-08 |
| CVE-2026-87536 | Chromium CVE-2026-87536: Use after free in V8 | HIGH | 8.8 | 36%ile | Microsoft | 2026-09-08 |
| CVE-2026-91709 | Chromium CVE-2026-91709: Type confusion | HIGH | 8.8 | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-91711 | Chromium CVE-2026-91711: Out of bounds write | HIGH | 8.8 | 24%ile | Microsoft | 2026-09-08 |
| CVE-2026-91715 | Chromium CVE-2026-91715: Type confusion | HIGH | 8.8 | 26%ile | Microsoft | 2026-09-08 |
| CVE-2026-91721 | Chromium CVE-2026-91721: Use after free | HIGH | 8.8 | 33%ile | Microsoft | 2026-09-08 |
| CVE-2026-91722 | Chromium CVE-2026-91722: Use after free | HIGH | 8.8 | 24%ile | Microsoft | 2026-09-08 |
| CVE-2026-91731 | Chromium CVE-2026-91731: Type confusion | HIGH | 8.8 | 39%ile | Microsoft | 2026-09-08 |
| CVE-2026-91736 | Chromium CVE-2026-91736: Use after free | HIGH | 8.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-91737 | Chromium CVE-2026-91737: Use after free | HIGH | 8.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-91741 | Chromium CVE-2026-91741: Type confusion | HIGH | 8.8 | 39%ile | Microsoft | 2026-09-08 |
| CVE-2026-91745 | Chromium CVE-2026-91745: Use after free | HIGH | 8.8 | 30%ile | Microsoft | 2026-09-08 |
| CVE-2026-95282 | Chromium CVE-2026-95282: Use after free in Platform | HIGH | 8.8 | 29%ile | Microsoft | 2026-09-08 |
| CVE-2026-95286 | Chromium CVE-2026-95286: Type confusion in Bindings | HIGH | 8.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-95304 | Chromium CVE-2026-95304: Out of bounds write in V8 | HIGH | 8.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-95306 | Chromium CVE-2026-95306: Type confusion in V8 | HIGH | 8.8 | 26%ile | Microsoft | 2026-09-08 |
| CVE-2026-95338 | Chromium CVE-2026-95338: Use after free in PDFium | HIGH | 8.8 | 20%ile | Microsoft | 2026-09-08 |
| CVE-2026-95343 | Chromium CVE-2026-95343: Use after free in WebAudio | HIGH | 8.8 | 31%ile | Microsoft | 2026-09-08 |
| CVE-2026-95345 | Chromium CVE-2026-95345: Use after free in Actor | HIGH | 8.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-95353 | Chromium CVE-2026-95353: Use after free in Bindings | HIGH | 8.8 | 22%ile | Microsoft | 2026-09-08 |
| CVE-2026-95362 | Chromium CVE-2026-95362: Cross-site request forgery in DevTools | HIGH | 8.8 | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-95365 | Chromium CVE-2026-95365: Type confusion in IndexedDB | HIGH | 8.8 | 25%ile | Microsoft | 2026-09-08 |
| CVE-2026-95369 | Chromium CVE-2026-95369: Inappropriate implementation in XML | HIGH | 8.8 | 16%ile | Microsoft | 2026-09-08 |
| CVE-2026-95373 | Chromium CVE-2026-95373: Use after free in DevTools | HIGH | 8.8 | 19%ile | Microsoft | 2026-09-08 |
| CVE-2026-95380 | Chromium CVE-2026-95380: Type confusion in V8 | HIGH | 8.8 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-97413 | RDMA/rtrs-srv: Fix integer underflow in process_read and process_write | HIGH | 8.8 | 43%ile | Microsoft | 2026-09-08 |
| CVE-2026-72649 | Deserialization of Untrusted Data in Elasticsearch Leading to Remote Code Execution | HIGH | 8.8 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-0799 | OOBR and OOBW in libpcap before 1.10.7 | HIGH | 8.7 | 1%ile | Microsoft | 2026-09-08 |
| CVE-2026-102556 | Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion | HIGH | 8.6 | 31%ile | Microsoft | 2026-09-08 |
| CVE-2026-102557 | Libsoup: libsoup: heap buffer overflow during websocket message reassembly | HIGH | 8.6 | 31%ile | Microsoft | 2026-09-08 |
| CVE-2026-102558 | Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth | HIGH | 8.6 | 41%ile | Microsoft | 2026-09-08 |
| CVE-2026-102559 | Libsoup: libsoup: heap buffer overflow during websocket client-frame masking | HIGH | 8.6 | 43%ile | Microsoft | 2026-09-08 |
| CVE-2026-102560 | Libsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growth | HIGH | 8.6 | 43%ile | Microsoft | 2026-09-08 |
| CVE-2026-68791 | Azure Machine Learning Information Disclosure Vulnerability | HIGH | 8.6 | 45%ile | Microsoft | 2026-09-08 |
| CVE-2026-78501 | Microsoft 365 Copilot Business Chat Information Disclosure Vulnerability | HIGH | 8.6 | 45%ile | Microsoft | 2026-09-08 |
| CVE-2026-80097 | Microsoft Authenticator Elevation of Privilege Vulnerability | HIGH | 8.6 | 45%ile | Microsoft | 2026-09-08 |
| CVE-2026-65818 | Power Automate Elevation of Privilege Vulnerability | HIGH | 8.5 | 50%ile | Microsoft | 2026-09-08 |
| CVE-2026-67379 | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH | 8.5 | 52%ile | Microsoft | 2026-09-08 |
| CVE-2026-69857 | Azure Cosmos DB Spoofing Vulnerability | HIGH | 8.5 | 50%ile | Microsoft | 2026-09-08 |
| CVE-2026-70178 | Microsoft Fabric Elevation of Privilege Vulnerability | HIGH | 8.5 | 50%ile | Microsoft | 2026-09-08 |
| CVE-2026-80884 | ntb: Store original DMA address for future release | HIGH | 8.4 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-89638 | smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions | HIGH | 8.4 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-89781 | fs/ntfs3: fix out-of-bounds read in read_log_rec_buf() | HIGH | 8.4 | 8%ile | Microsoft | 2026-09-08 |
| CVE-2026-89795 | PCI: Allow per function PCI slots to fix slot reset on s390 | HIGH | 8.4 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-89806 | drm/sysfb: ofdrm: Fix integer overflow in fb_size calculation | HIGH | 8.4 | 8%ile | Microsoft | 2026-09-08 |
| CVE-2026-89856 | scsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncation | HIGH | 8.4 | 8%ile | Microsoft | 2026-09-08 |
| CVE-2026-89992 | cpuidle: dt_idle_genpd: kfree() the original name allocation | HIGH | 8.4 | 8%ile | Microsoft | 2026-09-08 |
| CVE-2026-69479 | Windows NTFS Remote Code Execution Vulnerability | HIGH | 8.4 | 30%ile | Microsoft | 2026-09-08 |
| CVE-2026-69638 | Windows NTFS Remote Code Execution Vulnerability | HIGH | 8.4 | 30%ile | Microsoft | 2026-09-08 |
| CVE-2026-77503 | Windows NTFS Elevation of Privilege Vulnerability | HIGH | 8.4 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-78510 | Microsoft Outlook and Word Remote Code Execution Vulnerability | HIGH | 8.4 | 31%ile | Microsoft | 2026-09-08 |
| CVE-2026-95278 | Chromium CVE-2026-95278: Missing authorization in WakeLock | HIGH | 8.4 | 16%ile | Microsoft | 2026-09-08 |
| CVE-2026-95285 | Chromium CVE-2026-95285: Missing authorization in WebView | HIGH | 8.4 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-95326 | Chromium CVE-2026-95326: Incomplete cleanup in Bluetooth | HIGH | 8.4 | 25%ile | Microsoft | 2026-09-08 |
| CVE-2026-69646 | Skype for Business Spoofing Vulnerability | HIGH | 8.3 | 25%ile | Microsoft | 2026-09-08 |
| CVE-2026-91712 | Chromium CVE-2026-91712: Race condition | HIGH | 8.3 | 19%ile | Microsoft | 2026-09-08 |
| CVE-2026-91724 | Chromium CVE-2026-91724: Use after free | HIGH | 8.3 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-91733 | Chromium CVE-2026-91733: Improper state validation | HIGH | 8.3 | 24%ile | Microsoft | 2026-09-08 |
| CVE-2026-91735 | Chromium CVE-2026-91735: Incorrect authorization | HIGH | 8.3 | 24%ile | Microsoft | 2026-09-08 |
| CVE-2026-91743 | Chromium CVE-2026-91743: Race condition | HIGH | 8.3 | 17%ile | Microsoft | 2026-09-08 |
| CVE-2026-91748 | Chromium CVE-2026-91748: Race condition | HIGH | 8.3 | 14%ile | Microsoft | 2026-09-08 |
| CVE-2026-95274 | Chromium CVE-2026-95274: Improper output encoding in DevTools | HIGH | 8.3 | 23%ile | Microsoft | 2026-09-08 |
| CVE-2026-95276 | Chromium CVE-2026-95276: Improper input validation in Themes | HIGH | 8.3 | 34%ile | Microsoft | 2026-09-08 |
| CVE-2026-95319 | Chromium CVE-2026-95319: Use after free in Printing | HIGH | 8.3 | 22%ile | Microsoft | 2026-09-08 |
| CVE-2026-95322 | Chromium CVE-2026-95322: Out of bounds write in GPU | HIGH | 8.3 | 34%ile | Microsoft | 2026-09-08 |
| CVE-2026-95334 | Chromium CVE-2026-95334: Incorrect reference resolution in WebProtect | HIGH | 8.3 | 25%ile | Microsoft | 2026-09-08 |
| CVE-2026-95335 | Chromium CVE-2026-95335: Use after free in HID | HIGH | 8.3 | 22%ile | Microsoft | 2026-09-08 |
| CVE-2026-95341 | Chromium CVE-2026-95341: Improper input validation in Desktop | HIGH | 8.3 | 22%ile | Microsoft | 2026-09-08 |
| CVE-2026-95348 | Chromium CVE-2026-95348: Use after free in Bluetooth | HIGH | 8.3 | 21%ile | Microsoft | 2026-09-08 |
| CVE-2026-95351 | Chromium CVE-2026-95351: Use after free in Views | HIGH | 8.3 | 21%ile | Microsoft | 2026-09-08 |
| CVE-2026-95354 | Chromium CVE-2026-95354: Use after free in Verifier | HIGH | 8.3 | 19%ile | Microsoft | 2026-09-08 |
| CVE-2026-95355 | Chromium CVE-2026-95355: Incorrect authorization in Navigation | HIGH | 8.3 | 20%ile | Microsoft | 2026-09-08 |
| CVE-2026-95372 | Chromium CVE-2026-95372: Use after free in Chromecast | HIGH | 8.3 | 15%ile | Microsoft | 2026-09-08 |
| CVE-2026-95381 | Chromium CVE-2026-95381: Improper input validation in Printing | HIGH | 8.3 | 22%ile | Microsoft | 2026-09-08 |
| CVE-2026-93282 | ksmbd: fix maximum allowed access checks | HIGH | 8.3 | 32%ile | Microsoft | 2026-09-08 |
| CVE-2026-102555 | Libsoup: libsoup: heap buffer overflow via uninitialized length in data-uri base64 decoding | HIGH | 8.2 | 39%ile | Microsoft | 2026-09-08 |
| CVE-2026-18329 | NGINX ngx_http_js_module vulnerability | HIGH | 8.2 | 51%ile | Microsoft | 2026-09-08 |
| CVE-2026-81627 | Qemu-kvm: vapic writable rom alias can escape the option-rom window and expose locked smram | HIGH | 8.2 | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-84782 | DTLS Retransmits Handshake Messages From a Stale Buffer Offset | HIGH | 8.2 | 58%ile | Microsoft | 2026-09-08 |
| CVE-2026-86145 | PCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write because reuse of a cached workspace block, in a recursiv | HIGH | 8.2 | 37%ile | Microsoft | 2026-09-08 |
| CVE-2026-69820 | Windows Hello Elevation of Privilege Vulnerability | HIGH | 8.2 | 28%ile | Microsoft | 2026-09-08 |
| CVE-2026-69846 | Windows Secure Kernel Mode Elevation of Privilege Vulnerability | HIGH | 8.2 | 28%ile | Microsoft | 2026-09-08 |
| CVE-2026-69874 | Windows ALPC Elevation of Privilege Vulnerability | HIGH | 8.2 | 22%ile | Microsoft | 2026-09-08 |
| CVE-2026-69906 | Windows Secure Kernel Mode Elevation of Privilege Vulnerability | HIGH | 8.2 | 28%ile | Microsoft | 2026-09-08 |
| CVE-2026-72958 | Windows Credential Guard Elevation of Privilege Vulnerability | HIGH | 8.2 | 28%ile | Microsoft | 2026-09-08 |
| CVE-2026-72961 | Windows Hyper-V Elevation of Privilege Vulnerability | HIGH | 8.2 | 28%ile | Microsoft | 2026-09-08 |
| CVE-2026-72962 | Windows USB Video Driver Elevation of Privilege Vulnerability | HIGH | 8.2 | 28%ile | Microsoft | 2026-09-08 |
| CVE-2026-81354 | Windows Hello Elevation of Privilege Vulnerability | HIGH | 8.2 | 28%ile | Microsoft | 2026-09-08 |
| CVE-2026-81356 | Visual Studio Code Security Feature Bypass Vulnerability | HIGH | 8.2 | 46%ile | Microsoft | 2026-09-08 |
| CVE-2026-81357 | Visual Studio Code Security Feature Bypass Vulnerability | HIGH | 8.2 | 44%ile | Microsoft | 2026-09-08 |
| CVE-2026-81378 | Visual Studio Code Security Feature Bypass Vulnerability | HIGH | 8.2 | 46%ile | Microsoft | 2026-09-08 |
| CVE-2026-81379 | Visual Studio Code Security Feature Bypass Vulnerability | HIGH | 8.2 | 46%ile | Microsoft | 2026-09-08 |
| CVE-2026-83939 | Windows Secure Kernel Mode Elevation of Privilege Vulnerability | HIGH | 8.2 | 28%ile | Microsoft | 2026-09-08 |
| CVE-2026-83946 | Azure Portal Spoofing Vulnerability | HIGH | 8.2 | 25%ile | Microsoft | 2026-09-08 |
| CVE-2026-85921 | Windows Secure Kernel Mode Elevation of Privilege Vulnerability | HIGH | 8.2 | 28%ile | Microsoft | 2026-09-08 |
| CVE-2026-71971 | U-Boot before 2026.10-rc3 Out-of-Bounds Write in IP Fragment Reassembly | HIGH | 8.2 | 32%ile | Microsoft | 2026-09-08 |
| CVE-2026-74220 | U-Boot before 2026.10-rc5 Buffer Overflow via NFS READ Reply | HIGH | 8.2 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-74221 | U-Boot before 2026.10-rc5 Buffer Overflow via NFS READLINK | HIGH | 8.2 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-6485 | UEFI BIOS embedded Shell can be used to bypass Secure Boot | HIGH | 8.2 | 8%ile | Microsoft | 2026-09-08 |
| CVE-2026-82209 | domain-scoped PSL domain cookie | HIGH | 8.2 | 31%ile | Microsoft | 2026-09-08 |
| CVE-2026-103111 | PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of- | HIGH | 8.1 | 19%ile | Microsoft | 2026-09-08 |
| CVE-2026-78689 | NGINX ngx_http_js_module vulnerablility | HIGH | 8.1 | 55%ile | Microsoft | 2026-09-08 |
| CVE-2026-80792 | ipv6: fix use-after-free in ip6_finish_output2() | HIGH | 8.1 | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-83621 | ntopng: Missing Authorization Check in REST API Allows Non-Admin Users to Tamper Threat Intelligence Blacklist URLs | HIGH | 8.1 | 45%ile | Microsoft | 2026-09-08 |
| CVE-2026-89861 | scsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition() | HIGH | 8.1 | 48%ile | Microsoft | 2026-09-08 |
| CVE-2026-89952 | mtd: rawnand: validate ONFI extended parameter page sections | HIGH | 8.1 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-89999 | HID: wacom: validate report length in wacom_intuos_pro2_bt_irq | HIGH | 8.1 | 31%ile | Microsoft | 2026-09-08 |
| CVE-2026-97565 | smb: client: reject short READ responses in CIFSSMBRead() | HIGH | 8.1 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-97573 | bnxt_en: Handle buffer allocation failure in bnxt_rx_ring_reset() | HIGH | 8.1 | 49%ile | Microsoft | 2026-09-08 |
| CVE-2026-98069 | net/rds: acquire the fastpath locks in rds_conn_shutdown() | HIGH | 8.1 | 47%ile | Microsoft | 2026-09-08 |
| CVE-2026-98070 | net/rds: acquire RDS_IN_XMIT in rds_tcp_reset_callbacks() | HIGH | 8.1 | 41%ile | Microsoft | 2026-09-08 |
| CVE-2026-98089 | bonding: alb: fix uninitialized transport header access in alb_determine_nd() | HIGH | 8.1 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-98130 | sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START | HIGH | 8.1 | 39%ile | Microsoft | 2026-09-08 |
| CVE-2026-47297 | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH | 8.1 | 66%ile | Microsoft | 2026-09-08 |
| CVE-2026-55007 | Microsoft Exchange Server Remote Code Execution Vulnerability | HIGH | 8.1 | 53%ile | Microsoft | 2026-09-08 |
| CVE-2026-69325 | Microsoft JScript Remote Code Execution Vulnerability | HIGH | 8.1 | 53%ile | Microsoft | 2026-09-08 |
| CVE-2026-69380 | Microsoft Exchange Server Elevation of Privilege Vulnerability | HIGH | 8.1 | 53%ile | Microsoft | 2026-09-08 |
| CVE-2026-69438 | Microsoft JScript Remote Code Execution Vulnerability | HIGH | 8.1 | 53%ile | Microsoft | 2026-09-08 |
| CVE-2026-69510 | Windows DHCP Server Remote Code Execution Vulnerability | HIGH | 8.1 | 53%ile | Microsoft | 2026-09-08 |
| CVE-2026-69524 | Windows Active Directory Domain Services Remote Code Execution Vulnerability | HIGH | 8.1 | 53%ile | Microsoft | 2026-09-08 |
| CVE-2026-69530 | Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability | HIGH | 8.1 | 53%ile | Microsoft | 2026-09-08 |
| CVE-2026-69546 | Windows Active Directory Domain Services Remote Code Execution Vulnerability | HIGH | 8.1 | 53%ile | Microsoft | 2026-09-08 |
| CVE-2026-69620 | Windows DHCP Server Remote Code Execution Vulnerability | HIGH | 8.1 | 53%ile | Microsoft | 2026-09-08 |
| CVE-2026-69680 | Windows DNS Spoofing Vulnerability | HIGH | 8.1 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69782 | Windows DNS Server Remote Code Execution Vulnerability | HIGH | 8.1 | 46%ile | Microsoft | 2026-09-08 |
| CVE-2026-69786 | Windows Text Shaping Remote Code Execution Vulnerability | HIGH | 8.1 | 53%ile | Microsoft | 2026-09-08 |
| CVE-2026-69813 | Windows DNS Server Remote Code Execution Vulnerability | HIGH | 8.1 | 53%ile | Microsoft | 2026-09-08 |
| CVE-2026-69827 | Windows DNS Server Remote Code Execution Vulnerability | HIGH | 8.1 | 46%ile | Microsoft | 2026-09-08 |
| CVE-2026-69858 | Windows DNS Server Remote Code Execution Vulnerability | HIGH | 8.1 | 53%ile | Microsoft | 2026-09-08 |
| CVE-2026-69989 | Windows DNS Server Remote Code Execution Vulnerability | HIGH | 8.1 | 53%ile | Microsoft | 2026-09-08 |
| CVE-2026-70342 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | HIGH | 8.1 | 53%ile | Microsoft | 2026-09-08 |
| CVE-2026-70563 | Windows Shell Spoofing Vulnerability | HIGH | 8.1 | 58%ile | Microsoft | 2026-09-08 |
| CVE-2026-72936 | Windows SMB Client Remote Code Execution Vulnerability | HIGH | 8.1 | 53%ile | Microsoft | 2026-09-08 |
| CVE-2026-72981 | IP Helper Remote Code Execution Vulnerability | HIGH | 8.1 | 53%ile | Microsoft | 2026-09-08 |
| CVE-2026-72987 | Windows DNS Remote Code Execution Vulnerability | HIGH | 8.1 | 53%ile | Microsoft | 2026-09-08 |
| CVE-2026-77505 | Windows DNS Server Remote Code Execution Vulnerability | HIGH | 8.1 | 53%ile | Microsoft | 2026-09-08 |
| CVE-2026-78444 | Microsoft Failover Cluster Remote Code Execution Vulnerability | HIGH | 8.1 | 53%ile | Microsoft | 2026-09-08 |
| CVE-2026-78449 | Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability | HIGH | 8.1 | 53%ile | Microsoft | 2026-09-08 |
| CVE-2026-78450 | Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability | HIGH | 8.1 | 53%ile | Microsoft | 2026-09-08 |
| CVE-2026-83997 | Windows Message Queuing Remote Code Execution Vulnerability | HIGH | 8.1 | 53%ile | Microsoft | 2026-09-08 |
| CVE-2026-88097 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | HIGH | 8.1 | 17%ile | Microsoft | 2026-09-08 |
| CVE-2026-91727 | Chromium CVE-2026-91727: Incorrect reference resolution | HIGH | 8.1 | 1%ile | Microsoft | 2026-09-08 |
| CVE-2026-95301 | Chromium CVE-2026-95301: Missing authorization in Extensions | HIGH | 8.1 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-95314 | Chromium CVE-2026-95314: Incorrect authorization in HID | HIGH | 8.1 | 15%ile | Microsoft | 2026-09-08 |
| CVE-2026-95333 | Chromium CVE-2026-95333: Use after free in Metrics | HIGH | 8.1 | 24%ile | Microsoft | 2026-09-08 |
| CVE-2026-93786 | ksmbd: preserve VFS inherited POSIX ACL mask | HIGH | 8.1 | 28%ile | Microsoft | 2026-09-08 |
| CVE-2026-61548 | Rsyslog: mmpstrucdata stack buffer overflow with oversized RFC5424 structured data | HIGH | 8.1 | 48%ile | Microsoft | 2026-09-08 |
| CVE-2026-80798 | nfc: llcp: reject PDUs shorter than the LLCP header | HIGH | 8.1 | 14%ile | Microsoft | 2026-09-08 |
| CVE-2026-80799 | nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers | HIGH | 8.1 | 14%ile | Microsoft | 2026-09-08 |
| CVE-2026-80800 | nfc: llcp: bound the connect_sn TLV walk to the skb | HIGH | 8.1 | 14%ile | Microsoft | 2026-09-08 |
| CVE-2026-80803 | nfc: digital: clamp SENSF_RES length to the destination buffer | HIGH | 8.1 | 16%ile | Microsoft | 2026-09-08 |
| CVE-2026-80823 | nfc: st21nfca: validate ATR_REQ length against the received frame | HIGH | 8.1 | 16%ile | Microsoft | 2026-09-08 |
| CVE-2026-86140 | In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow. | HIGH | 8.0 | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-89947 | clk: meson: align gxbb_32k_clk_sel number of parents with actual count | HIGH | 8.0 | 8%ile | Microsoft | 2026-09-08 |
| CVE-2026-68827 | Windows GDI+ Elevation of Privilege Vulnerability | HIGH | 8.0 | 56%ile | Microsoft | 2026-09-08 |
| CVE-2026-68834 | Windows NTFS Elevation of Privilege Vulnerability | HIGH | 8.0 | 56%ile | Microsoft | 2026-09-08 |
| CVE-2026-68838 | Windows NTFS Elevation of Privilege Vulnerability | HIGH | 8.0 | 56%ile | Microsoft | 2026-09-08 |
| CVE-2026-68876 | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability | HIGH | 8.0 | 56%ile | Microsoft | 2026-09-08 |
| CVE-2026-68878 | Windows Fast FAT Driver Elevation of Privilege Vulnerability | HIGH | 8.0 | 56%ile | Microsoft | 2026-09-08 |
| CVE-2026-68880 | Windows Win32k Elevation of Privilege Vulnerability | HIGH | 8.0 | 56%ile | Microsoft | 2026-09-08 |
| CVE-2026-68894 | Windows Error Reporting Elevation of Privilege Vulnerability | HIGH | 8.0 | 56%ile | Microsoft | 2026-09-08 |
| CVE-2026-69271 | Microsoft Standard XPS Elevation of Privilege Vulnerability | HIGH | 8.0 | 56%ile | Microsoft | 2026-09-08 |
| CVE-2026-69301 | Windows Win32k Elevation of Privilege Vulnerability | HIGH | 8.0 | 56%ile | Microsoft | 2026-09-08 |
| CVE-2026-69322 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | HIGH | 8.0 | 56%ile | Microsoft | 2026-09-08 |
| CVE-2026-69332 | Windows NTFS Elevation of Privilege Vulnerability | HIGH | 8.0 | 56%ile | Microsoft | 2026-09-08 |
| CVE-2026-69346 | Windows Print Spooler Components Elevation of Privilege Vulnerability | HIGH | 8.0 | 56%ile | Microsoft | 2026-09-08 |
| CVE-2026-69365 | Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability | HIGH | 8.0 | 56%ile | Microsoft | 2026-09-08 |
| CVE-2026-69371 | Windows Overlay Filter Elevation of Privilege Vulnerability | HIGH | 8.0 | 56%ile | Microsoft | 2026-09-08 |
| CVE-2026-69412 | Windows DHCP Server Remote Code Execution Vulnerability | HIGH | 8.0 | 48%ile | Microsoft | 2026-09-08 |
| CVE-2026-69418 | Volume Manager Driver Elevation of Privilege Vulnerability | HIGH | 8.0 | 56%ile | Microsoft | 2026-09-08 |
| CVE-2026-69427 | Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability | HIGH | 8.0 | 56%ile | Microsoft | 2026-09-08 |
| CVE-2026-69458 | Windows BitLocker Elevation of Privilege Vulnerability | HIGH | 8.0 | 56%ile | Microsoft | 2026-09-08 |
| CVE-2026-69462 | Windows Error Reporting Elevation of Privilege Vulnerability | HIGH | 8.0 | 56%ile | Microsoft | 2026-09-08 |
| CVE-2026-69481 | Windows Enterprise App Management Elevation of Privilege Vulnerability | HIGH | 8.0 | 56%ile | Microsoft | 2026-09-08 |
| CVE-2026-69503 | Windows USB Driver Elevation of Privilege Vulnerability | HIGH | 8.0 | 56%ile | Microsoft | 2026-09-08 |
| CVE-2026-69505 | Windows NTFS Elevation of Privilege Vulnerability | HIGH | 8.0 | 56%ile | Microsoft | 2026-09-08 |
| CVE-2026-69512 | Windows Spaceport.sys Elevation of Privilege Vulnerability | HIGH | 8.0 | 56%ile | Microsoft | 2026-09-08 |
| CVE-2026-69619 | Windows exFAT File System Elevation of Privilege Vulnerability | HIGH | 8.0 | 56%ile | Microsoft | 2026-09-08 |
| CVE-2026-69625 | Connected User Experiences and Telemetry Elevation of Privilege Vulnerability | HIGH | 8.0 | 56%ile | Microsoft | 2026-09-08 |
| CVE-2026-69643 | Windows Spaceport.sys Elevation of Privilege Vulnerability | HIGH | 8.0 | 56%ile | Microsoft | 2026-09-08 |
| CVE-2026-69681 | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability | HIGH | 8.0 | 56%ile | Microsoft | 2026-09-08 |
| CVE-2026-69689 | Windows Win32k Elevation of Privilege Vulnerability | HIGH | 8.0 | 56%ile | Microsoft | 2026-09-08 |
| CVE-2026-69714 | Windows Device Association Service Elevation of Privilege Vulnerability | HIGH | 8.0 | 56%ile | Microsoft | 2026-09-08 |
| CVE-2026-69717 | Windows Group Policy Elevation of Privilege Vulnerability | HIGH | 8.0 | 56%ile | Microsoft | 2026-09-08 |
| CVE-2026-69727 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 8.0 | 56%ile | Microsoft | 2026-09-08 |
| CVE-2026-69762 | Windows Win32k Elevation of Privilege Vulnerability | HIGH | 8.0 | 56%ile | Microsoft | 2026-09-08 |
| CVE-2026-69773 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 8.0 | 56%ile | Microsoft | 2026-09-08 |
| CVE-2026-69777 | Windows DHCP Client Elevation of Privilege Vulnerability | HIGH | 8.0 | 48%ile | Microsoft | 2026-09-08 |
| CVE-2026-69807 | PowerShell Elevation of Privilege Vulnerability | HIGH | 8.0 | 59%ile | Microsoft | 2026-09-08 |
| CVE-2026-69826 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 8.0 | 56%ile | Microsoft | 2026-09-08 |
| CVE-2026-69847 | Windows DHCP Server Remote Code Execution Vulnerability | HIGH | 8.0 | 48%ile | Microsoft | 2026-09-08 |
| CVE-2026-69875 | Windows NTFS Elevation of Privilege Vulnerability | HIGH | 8.0 | 56%ile | Microsoft | 2026-09-08 |
| CVE-2026-69876 | Windows DHCP Server Remote Code Execution Vulnerability | HIGH | 8.0 | 48%ile | Microsoft | 2026-09-08 |
| CVE-2026-83948 | Microsoft Azure CLI Remote Code Execution Vulnerability | HIGH | 8.0 | 48%ile | Microsoft | 2026-09-08 |
| CVE-2026-95344 | Chromium CVE-2026-95344: Race condition in DevTools | HIGH | 8.0 | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-95376 | Chromium CVE-2026-95376: Externally controlled reference in DevTools | HIGH | 8.0 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-78408 | Util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority | HIGH | 7.9 | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-90083 | net/sched: act_ife: Only operate on Ethernet frames | HIGH | 7.9 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-100078 | wifi: iwlwifi: mei: pass correct argument to function | HIGH | 7.8 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-102925 | virtualenv bash and fish activation scripts execute commands embedded in paths | HIGH | 7.8 | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-76642 | util-linux libmount Privilege Escalation via Failed Mount Helper | HIGH | 7.8 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-78410 | Util-linux: util-linux: restricted bind mounts do not pin the source, allowing x-mount.owner/group/mode redirection | HIGH | 7.8 | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-80909 | drm/amdgpu: Reject UVD message with invalid number of h265 refs | HIGH | 7.8 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-84838 | Rpm: command injection in rpmuncompress via unescaped filenames passed to popen() | HIGH | 7.8 | 66%ile | Microsoft | 2026-09-08 |
| CVE-2026-89789 | gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free | HIGH | 7.8 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-89793 | ublk: clear VM_MAYWRITE on read-only ublk char device mmap | HIGH | 7.8 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-89799 | bpf: Disable preemption in bpf_get_stackid | HIGH | 7.8 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-89801 | drm/nouveau/uvmm: fix premature region free on failed OP_UNMAP_SPARSE | HIGH | 7.8 | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-89810 | drm/amdkfd: Fix error path at svm_migrate_copy_to_ram | HIGH | 7.8 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-89823 | drm: fix race between partial drm_dev_register() failure and ioctl | HIGH | 7.8 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-89853 | scsi: qla2xxx: Fix FCE trace use-after-free during firmware dump | HIGH | 7.8 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-89854 | scsi: qla2xxx: Fix cs84xx use-after-free on host teardown | HIGH | 7.8 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-89864 | scsi: qla2xxx: Bound i2c->length in I2C bsg handlers | HIGH | 7.8 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-89870 | media: zoran: Avoid freeing a registered video_device twice | HIGH | 7.8 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-89883 | media: rc: sunxi-cir: Unregister rc device on probe failure | HIGH | 7.8 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-89887 | media: i2c: ov7740: fix use-after-destroy in remove | HIGH | 7.8 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-89888 | media: i2c: ov02a10: fix endpoint parsing use-after-free | HIGH | 7.8 | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-89890 | media: go7007: defer the ALSA v4l2 put until card release | HIGH | 7.8 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-89893 | media: cx23885: cancel NetUP CI work before teardown | HIGH | 7.8 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-89894 | media: cx231xx: reject geometry changes while the VBI queue is busy | HIGH | 7.8 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-89899 | media: cec: disable delayed work before freeing an interrupted transmit | HIGH | 7.8 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-89902 | LoongArch: Avoid preempt count underflow without probe | HIGH | 7.8 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-89906 | LoongArch: BPF: Refactor jump offset calculation in tail call | HIGH | 7.8 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-89920 | KVM: s390: Fix memory corruption by not reinjecting CK machine checks | HIGH | 7.8 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-89922 | KVM: s390: Take srcu when importing watchpoint data | HIGH | 7.8 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-89938 | iio: chemical: atlas-sensor: use iio_trigger_poll_nested() to fix remove UAF | HIGH | 7.8 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-89956 | s390/vfio-ap: Fix missing lock required to access list of ap_matrix_mdev objects | HIGH | 7.8 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-89961 | powerpc/mm: fix wrong addr_pfn tracking in compound vmemmap population | HIGH | 7.8 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-89965 | nvdimm/btt: reject an arena whose nfree is below the lane count | HIGH | 7.8 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-89988 | kprobes: Protect kprobe_blacklist with RCU | HIGH | 7.8 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-90002 | ftrace: Take trace_array reference before accessing its ftrace_ops | HIGH | 7.8 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-90007 | scsi: pm8001: Use rollback index when freeing MSI-X vectors | HIGH | 7.8 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-90013 | tracing: Take trace_array reference when opening options file | HIGH | 7.8 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-90022 | usb: gadget: f_midi2: fix use-after-free in string attribute show path | HIGH | 7.8 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-90027 | usb: typec: qcom-pmic-typec: disable cc_debounce_dwork on stop | HIGH | 7.8 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-90030 | usb: dwc3: clear forceRM when issuing EndTransfer | HIGH | 7.8 | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-90032 | media: usbtv: keep device alive while ALSA card exists | HIGH | 7.8 | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-90045 | USB: gadget: ffs: fix mm lifetime handling | HIGH | 7.8 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-90081 | net/rds: use wq_has_sleeper() in rds_cong_map_updated() | HIGH | 7.8 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-90140 | cuse: wait for pending RCU callbacks on module exit | HIGH | 7.8 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90141 | ipvs: fix integer overflow in ftp helper port/address parsing | HIGH | 7.8 | 39%ile | Microsoft | 2026-09-08 |
| CVE-2026-90169 | ksmbd: free preauth sessions on connection teardown | HIGH | 7.8 | 16%ile | Microsoft | 2026-09-08 |
| CVE-2026-90188 | null_blk: free global tag_set on init error path | HIGH | 7.8 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90189 | null_blk: register configfs subsystem after creating default devices | HIGH | 7.8 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-90222 | nfc: pn533: hold a reference to the request skb during send_frame | HIGH | 7.8 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90227 | nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() | HIGH | 7.8 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-90253 | Bluetooth: MGMT: free the mesh send cancel command when it is cancelled | HIGH | 7.8 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90263 | btrfs: check if root is readonly when setting posix acl | HIGH | 7.8 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90279 | md/raid5: round bitmap stripes with sector division | HIGH | 7.8 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-90291 | module/dups: Fix use-after-free in kmod_dup_req lifetime handling | HIGH | 7.8 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-90292 | RDMA/siw: Fix use-after-free in siw_accept() | HIGH | 7.8 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-90295 | cpufreq: imx6q: fix out-of-bounds write when probed more than once | HIGH | 7.8 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90302 | ocfs2: synchronize heartbeat callbacks with o2net teardown | HIGH | 7.8 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-90321 | ocfs2: validate inline xattrs during inode block validation | HIGH | 7.8 | 8%ile | Microsoft | 2026-09-08 |
| CVE-2026-90327 | phonet: pep: do not write beyond optlen in getsockopt | HIGH | 7.8 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-90334 | tty: clear cdev pointer after cdev_add() failure | HIGH | 7.8 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-90347 | arm64: ptrace: Keep 'orig_x0' in-sync with x0 on syscall entry | HIGH | 7.8 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-92495 | RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap | HIGH | 7.8 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-92496 | wifi: ath11k: Avoid buffer overread in ath11k_wmi_tlv_op_rx() | HIGH | 7.8 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-92506 | firmware: arm_scmi: Fix requested device removal race | HIGH | 7.8 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-92509 | RDMA/core: Fix potential use after free in counter_release() | HIGH | 7.8 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-92510 | RDMA/core: Fix potential use after free in ib_destroy_srq_user() | HIGH | 7.8 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-92514 | RDMA/erdma: Fix CEQ tasklet use-after-free on removal | HIGH | 7.8 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-93051 | misc: ad525x_dpot: use driver core groups for sysfs files | HIGH | 7.8 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-93108 | RDMA/ipoib: Drain RCU callbacks during module teardown | HIGH | 7.8 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-93123 | serial: qcom-geni: do not advance stale DMA completions | HIGH | 7.8 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-93137 | bpf: Fix use-after-free on mm_struct in bpf_find_vma() | HIGH | 7.8 | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-93141 | usb: gadget: r8a66597: avoid double free of ep0_req in probe error path | HIGH | 7.8 | 13%ile | Microsoft | 2026-09-08 |
| CVE-2026-93250 | vxlan: mdb: Fix use-after-free in vxlan_mdb_flush() | HIGH | 7.8 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-93262 | md/raid5-ppl: fix use-after-free in ppl_do_flush() | HIGH | 7.8 | 4%ile | Microsoft | 2026-09-08 |
| CVE-2026-95519 | Rpm: code execution via macro expansion of manifest entries in `rpmgi` (`-q -p` / verify manifest flows) | HIGH | 7.8 | 4%ile | Microsoft | 2026-09-08 |
| CVE-2026-95521 | Rpm: rpm: shell command injection via macro expansion of source/spec file basenames when installing a source rpm | HIGH | 7.8 | 48%ile | Microsoft | 2026-09-08 |
| CVE-2026-96442 | Emacs: emacs: arbitrary code execution in flymake mode | HIGH | 7.8 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-96512 | Sudo: sudo: tz environment variable allows bypass of notbefore/notafter time-based authorization | HIGH | 7.8 | 25%ile | Microsoft | 2026-09-08 |
| CVE-2026-96889 | Librsvg: use-after-free when xml includes have duplicated entities | HIGH | 7.8 | 47%ile | Microsoft | 2026-09-08 |
| CVE-2026-97535 | scsi: qla2xxx: Bound VP index against VP_CTRL IOCB bitmap size | HIGH | 7.8 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-97564 | smb: client: reject userspace cifs.idmap descriptions | HIGH | 7.8 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-97575 | media: v4l2-ctrls: validate AV1 tile counts | HIGH | 7.8 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-97576 | media: v4l2-ctrls: validate HEVC tile counts | HIGH | 7.8 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-97578 | media: verisilicon: rockchip: guard VPU981 AV1 divisor and tile buffer | HIGH | 7.8 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-97581 | media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity | HIGH | 7.8 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-97582 | hwmon: (gpio-fan) Fix use-after-free in alarm work | HIGH | 7.8 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-97594 | landlock: Fix use-after-free of the source's parent directory | HIGH | 7.8 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-97598 | ipv4: fib: bound automatic table ID allocation | HIGH | 7.8 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-97602 | inet: frags: invalidate queues before flushing them | HIGH | 7.8 | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-97611 | net: openvswitch: fix use-after-free of the flow table mask array | HIGH | 7.8 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-97612 | net: mpls: clear inner_protocol when the last label is popped | HIGH | 7.8 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-97910 | ASoC: sprd: validate compress buffer sizes against fixed allocations | HIGH | 7.8 | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-97940 | ipv6: fix fib6 walker UAF on seq stop | HIGH | 7.8 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-97991 | vdpa_sim_blk: reject out-of-range sector starts | HIGH | 7.8 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-97992 | vhost-vdpa: protect config_ctx from being freed under the config callback | HIGH | 7.8 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-97995 | virtio_console: do not free control-out buffers on remove | HIGH | 7.8 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-98015 | net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put | HIGH | 7.8 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-98017 | net/sched: defer qdisc freeing after failed creation | HIGH | 7.8 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-98023 | vxlan: reject dynamic fdb entries that reference a nexthop id | HIGH | 7.8 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-98033 | bpf: Preserve inner map identity in callback frames | HIGH | 7.8 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-98052 | net: bcmasp: clear txcb->last before writing each descriptor | HIGH | 7.8 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-98073 | net: Remove conflicting altnames for dying netns in __dev_change_net_namespace(). | HIGH | 7.8 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-98076 | tracing/probes: Fix use-after-free on field name/type of events with multiple probes | HIGH | 7.8 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-98116 | ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF | HIGH | 7.8 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-98122 | vxlan: mdb: Fix use-after-free in vxlan_mdb_remote_src_del() | HIGH | 7.8 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-98148 | drm/gud: validate GUD_ROTATION_0 is present in supported rotations | HIGH | 7.8 | 1%ile | Microsoft | 2026-09-08 |
| CVE-2026-98160 | staging: rtl8723bs: fix mismatched free of HalData in rtw_sdio_if1_init() | HIGH | 7.8 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-56172 | Windows VHD miniport driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-56177 | Windows Server Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-56198 | Microsoft Trace Data Helper Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-58599 | HEVC Video Extensions Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-58600 | HEVC Video Extensions Elevation of Privilege Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-58611 | Xbox Gaming Services Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-09-08 |
| CVE-2026-62697 | Windows Push Notifications Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-62804 | Microsoft Word Remote Code Execution Vulnerability | HIGH | 7.8 | 49%ile | Microsoft | 2026-09-08 |
| CVE-2026-62810 | Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-68787 | Microsoft SQL Server Remote Code Execution Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-68832 | Windows NTFS Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-68841 | Windows NTFS Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-68844 | Windows Storage Spaces Controller Remote Code Execution Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-68845 | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-68848 | Windows Print Spooler Components Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-68850 | Microsoft Account Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-68877 | Windows Storage Spaces Controller Remote Code Execution Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-68885 | Microsoft Standard XPS Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-68888 | Microsoft Standard XPS Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-68890 | Microsoft Standard XPS Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-68892 | Microsoft Standard XPS Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-68896 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | HIGH | 7.8 | 31%ile | Microsoft | 2026-09-08 |
| CVE-2026-69269 | Microsoft Standard XPS Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69270 | Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69277 | Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69289 | Windows Setup Files Cleanup Elevation of Privilege Vulnerability | HIGH | 7.8 | 31%ile | Microsoft | 2026-09-08 |
| CVE-2026-69290 | Windows Storage Spaces Controller Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69293 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69295 | Windows USB Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69298 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69307 | Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69312 | Windows NTFS Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69323 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69324 | Windows Performance Monitor Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69328 | Windows Storage Elevation of Privilege Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-69348 | Windows Win32k Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69352 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69359 | Active Directory Domain Services Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69368 | Windows Overlay Filter Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69377 | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability | HIGH | 7.8 | 22%ile | Microsoft | 2026-09-08 |
| CVE-2026-69389 | Windows Storage Management Provider Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69391 | Windows Broker Infrastructure Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69392 | Windows Shell Elevation of Privilege Vulnerability | HIGH | 7.8 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69407 | Volume Manager Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69420 | Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69421 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69424 | Windows Distributed File System (DFS) Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69426 | Windows VOLSNAP.SYS Remote Code Execution Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69432 | Volume Manager Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69433 | Windows Error Reporting Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69436 | Windows State Repository Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69444 | Microsoft Windows Speech Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69445 | Windows Compressed Folder Elevation of Privilege Vulnerability | HIGH | 7.8 | 31%ile | Microsoft | 2026-09-08 |
| CVE-2026-69447 | Windows Audio Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69450 | Windows Error Reporting Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69455 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69456 | Microsoft Windows Speech Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69459 | Windows Power Dependency Coordinator Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69467 | Microsoft Graphics Component Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69475 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69476 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69480 | Windows Partition Management Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69489 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69508 | Windows MIDI Service Module Elevation of Privileges Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69509 | Role: Windows Fax Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69513 | Windows Error Reporting Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69528 | Windows Shell Elevation of Privilege Vulnerability | HIGH | 7.8 | 22%ile | Microsoft | 2026-09-08 |
| CVE-2026-69532 | Windows NTFS Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69534 | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 25%ile | Microsoft | 2026-09-08 |
| CVE-2026-69535 | Windows Spaceport.sys Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69538 | Windows Spaceport.sys Remote Code Execution Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69541 | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69542 | Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69544 | Windows SMB Client Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69561 | Windows CD-ROM Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69571 | Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69576 | Graphic Fonts Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69580 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69582 | Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69583 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69584 | Windows USB Video Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69585 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69589 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69592 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69593 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69594 | Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69604 | Windows Audio Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69608 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69612 | Windows Error Reporting Elevation of Privilege Vulnerability | HIGH | 7.8 | 31%ile | Microsoft | 2026-09-08 |
| CVE-2026-69685 | Windows Kerberos Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69687 | Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69691 | Windows Spaceport.sys Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69707 | Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69709 | Windows NTFS Remote Code Execution Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69720 | Windows MIDI Service Module Elevation of Privileges Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69725 | Windows Hello Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69731 | HID Class Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69738 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69758 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69785 | Windows Smart Card Elevation of Privilege Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-69787 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69790 | Windows Credential Providers Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69799 | Windows Hello Elevation of Privilege Vulnerability | HIGH | 7.8 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-69801 | Windows Audio Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69821 | Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69822 | Windows Kerberos Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69841 | Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69844 | Windows Win32k Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69864 | Windows Hello Elevation of Privilege Vulnerability | HIGH | 7.8 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69900 | Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69907 | Windows Enterprise App Management Elevation of Privilege Vulnerability | HIGH | 7.8 | 22%ile | Microsoft | 2026-09-08 |
| CVE-2026-69921 | Windows Print Spooler Components Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-70125 | Microsoft Office Outlook Remote Code Execution Vulnerability | HIGH | 7.8 | 26%ile | Microsoft | 2026-09-08 |
| CVE-2026-70289 | Windows Win32k Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-70334 | Visual Studio Code Security Feature Bypass Vulnerability | HIGH | 7.8 | 42%ile | Microsoft | 2026-09-08 |
| CVE-2026-70564 | Windows Print Spooler Components Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-70569 | Windows Spaceport.sys Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-70572 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-70574 | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-70581 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-70584 | Windows Core Messaging Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-71334 | Windows NFS Portmapper Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-71337 | Windows Storage Management Provider Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-71343 | Windows Remote Access Connection Manager Remote Code Execution Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-71345 | Windows Spaceport.sys Remote Code Execution Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-72929 | Windows Installer Elevation of Privilege Vulnerability | HIGH | 7.8 | 14%ile | Microsoft | 2026-09-08 |
| CVE-2026-72941 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-72944 | Role: Windows Fax Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-72946 | Microsoft Storage Port Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-72953 | Windows USB Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-72957 | Windows Deployment Services Remote Code Execution Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-72965 | Windows WebClient Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-72967 | Windows Network Connection Broker Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-72988 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-72990 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-72991 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-72992 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-72993 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-72994 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-72995 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-72996 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-72997 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-73000 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-73001 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-73002 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-73007 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-73011 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-73014 | Data Sharing Service Client Elevation of Privilege Vulnerability | HIGH | 7.8 | 22%ile | Microsoft | 2026-09-08 |
| CVE-2026-73015 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-73020 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-73021 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-73024 | Windows Services for NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-73026 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-77489 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-77500 | Windows Device Association Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-77904 | Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-78447 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-78448 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-80075 | Windows Work Folders Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-81353 | HEIF Image Extensions Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-81386 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-81388 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-81396 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-81397 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-81398 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-81947 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-81948 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-81949 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-81950 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-81951 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-81953 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-81954 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-81956 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-81957 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-81959 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-81960 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-81963 | Windows Update Stack Elevation of Privilege Vulnerability | HIGH | 7.8 | 34%ile | Microsoft | 2026-09-08 |
| CVE-2026-83498 | Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-83942 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.8 | 22%ile | Microsoft | 2026-09-08 |
| CVE-2026-83952 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-83954 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-83955 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-83967 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-83968 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-83969 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-83970 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-83971 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-83972 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-83973 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-83974 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-83975 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-83976 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-83977 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-83978 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-83979 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-83980 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-83981 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-83982 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-83983 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-83985 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-83986 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-83987 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-83988 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-83990 | Microsoft Graphics Component Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-83995 | Windows NTFS Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-84000 | Microsoft Graphics Component Remote Code Execution Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-85880 | Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability | HIGH | 7.8 | 33%ile | Microsoft | 2026-09-08 |
| CVE-2026-85892 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | HIGH | 7.8 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-95298 | Chromium CVE-2026-95298: Use after free in Browser | HIGH | 7.8 | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-95315 | Chromium CVE-2026-95315: Use after free in Aura | HIGH | 7.8 | 4%ile | Microsoft | 2026-09-08 |
| CVE-2026-19499 | Buffer overflow in strfmon and strfmon_l right-justification padding | HIGH | 7.7 | 22%ile | Microsoft | 2026-09-08 |
| CVE-2026-90025 | usb: typec: ucsi: displayport: Fix OOB altmode array index | HIGH | 7.7 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-95619 | Gcc: libstdc++ integer overflow in `new` operator | HIGH | 7.7 | 39%ile | Microsoft | 2026-09-08 |
| CVE-2026-77909 | Azure CycleCloud Information Disclosure Vulnerability | HIGH | 7.7 | 48%ile | Microsoft | 2026-09-08 |
| CVE-2026-85887 | M365 Copilot Information Disclosure Vulnerability | HIGH | 7.7 | 58%ile | Microsoft | 2026-09-08 |
| CVE-2026-85197 | Libsoup: libsoup: heap use-after-free in libsoup http/2 client on_data_read() via goaway during body upload | HIGH | 7.6 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-102253 | iperf3 < 3.22 UDP Receive Worker Infinite Loop DoS | HIGH | 7.5 | 37%ile | Microsoft | 2026-09-08 |
| CVE-2026-14957 | FIPS mode assertion failure via malicious CERT payload | HIGH | 7.5 | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-19666 | Use-after-free in query_addnoqnameproof() via the DNS64 filter64 path | HIGH | 7.5 | 47%ile | Microsoft | 2026-09-08 |
| CVE-2026-19667 | Remote assertion failure via 16-bit length truncation in `dns_ncache_add()` | HIGH | 7.5 | 47%ile | Microsoft | 2026-09-08 |
| CVE-2026-19888 | NULL pointer dereference in SCRAM client-final-message parsing in PgBouncer | HIGH | 7.5 | 33%ile | Microsoft | 2026-09-08 |
| CVE-2026-33630 | c-ares : Use-after-free / double-free in c-ares query-completion handling, remotely triggerable via ares_getaddrinfo() o | HIGH | 7.5 | 58%ile | Microsoft | 2026-09-08 |
| CVE-2026-54873 | QUIC STREAM Fragment Metadata DoS | HIGH | 7.5 | 54%ile | Microsoft | 2026-09-08 |
| CVE-2026-56855 | Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh | HIGH | 7.5 | 43%ile | Microsoft | 2026-09-08 |
| CVE-2026-6668 | Integer overflow causes an infinite loop in packet buffer growth in PgBouncer | HIGH | 7.5 | 47%ile | Microsoft | 2026-09-08 |
| CVE-2026-69184 | c-ares: CPU-exhaustion denial of service via unbounded DNS name compression pointer chains | HIGH | 7.5 | 41%ile | Microsoft | 2026-09-08 |
| CVE-2026-72897 | Out-of-Bounds Access After SSL_set_SSL_CTX() During a Handshake | HIGH | 7.5 | 33%ile | Microsoft | 2026-09-08 |
| CVE-2026-76163 | named aborts on a TKEY query when the user configuration has no global options statement | HIGH | 7.5 | 47%ile | Microsoft | 2026-09-08 |
| CVE-2026-78130 | strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser. | HIGH | 7.5 | 28%ile | Microsoft | 2026-09-08 |
| CVE-2026-78132 | strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for ietfAttrSyntax | HIGH | 7.5 | 28%ile | Microsoft | 2026-09-08 |
| CVE-2026-78133 | libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision handling. | HIGH | 7.5 | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-78222 | NGINX ngx_http_js_module vulnerability | HIGH | 7.5 | 50%ile | Microsoft | 2026-09-08 |
| CVE-2026-78662 | Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh | HIGH | 7.5 | 37%ile | Microsoft | 2026-09-08 |
| CVE-2026-80229 | OpenSSL provider use-after-free | HIGH | 7.5 | 47%ile | Microsoft | 2026-09-08 |
| CVE-2026-80274 | Validating resolver can abort while caching a mismatched NOQNAME proof | HIGH | 7.5 | 47%ile | Microsoft | 2026-09-08 |
| CVE-2026-80788 | nvmet-tcp: Do not WARN on remotely-controlled oversized SGL allocations | HIGH | 7.5 | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-80789 | nvmet-tcp: bound SGL data length before allocating command buffers | HIGH | 7.5 | 14%ile | Microsoft | 2026-09-08 |
| CVE-2026-81563 | SVCB AliasMode additional-data error leaks qpcache references | HIGH | 7.5 | 47%ile | Microsoft | 2026-09-08 |
| CVE-2026-81634 | Possible heap buffer overflow during DNSSEC canonicalization | HIGH | 7.5 | 41%ile | Microsoft | 2026-09-08 |
| CVE-2026-84304 | gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation | HIGH | 7.5 | 49%ile | Microsoft | 2026-09-08 |
| CVE-2026-84784 | QUIC: Unbounded RETIRE_CONNECTION_ID Backlog | HIGH | 7.5 | 49%ile | Microsoft | 2026-09-08 |
| CVE-2026-85505 | ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer over-read in ipmi_oem_fujitsu_get_sel_entry_long_text in ipm | HIGH | 7.5 | 29%ile | Microsoft | 2026-09-08 |
| CVE-2026-87601 | Race condition in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside | HIGH | 7.5 | 22%ile | Microsoft | 2026-09-08 |
| CVE-2026-88372 | libsndfile 1.2.2 contains an integer overflow vulnerability in mat4_read_header() when parsing crafted MAT4 (MATLAB v4) | HIGH | 7.5 | 33%ile | Microsoft | 2026-09-08 |
| CVE-2026-88806 | libX11 XkbGetMap Reply Heap-based Buffer Overflow | HIGH | 7.5 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-88816 | DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in FetchHashKeyName | HIGH | 7.5 | 33%ile | Microsoft | 2026-09-08 |
| CVE-2026-89477 | sctp: fix NULL deref on untransmitted RECONF completion | HIGH | 7.5 | 43%ile | Microsoft | 2026-09-08 |
| CVE-2026-89528 | svcrdma: Reject Read lists that exceed the page budget | HIGH | 7.5 | 53%ile | Microsoft | 2026-09-08 |
| CVE-2026-89532 | svcrdma: Fix pcl_for_each_segment for empty chunks | HIGH | 7.5 | 43%ile | Microsoft | 2026-09-08 |
| CVE-2026-89647 | ceph: do not repeat ceph_trim_dentries() if no progress possible | HIGH | 7.5 | 52%ile | Microsoft | 2026-09-08 |
| CVE-2026-89648 | ceph: cap delegated inode count in ceph_parse_deleg_inos() | HIGH | 7.5 | 52%ile | Microsoft | 2026-09-08 |
| CVE-2026-89649 | ceph: bound xattr value length in __build_xattrs() | HIGH | 7.5 | 52%ile | Microsoft | 2026-09-08 |
| CVE-2026-89650 | ceph: bound num_export_targets array for mds info v2/v3 | HIGH | 7.5 | 44%ile | Microsoft | 2026-09-08 |
| CVE-2026-89669 | nfsd: initialize copy-notify stateid before publishing it | HIGH | 7.5 | 53%ile | Microsoft | 2026-09-08 |
| CVE-2026-89685 | nfsd: fix clock domain mismatch in clients_still_reclaiming() | HIGH | 7.5 | 49%ile | Microsoft | 2026-09-08 |
| CVE-2026-89708 | nfsd: RCU-protect cl_cb_session to fix use-after-free on session teardown | HIGH | 7.5 | 39%ile | Microsoft | 2026-09-08 |
| CVE-2026-89863 | scsi: qla2xxx: edif: Fix NULL pointer deref in RX SA delete check | HIGH | 7.5 | 52%ile | Microsoft | 2026-09-08 |
| CVE-2026-89897 | media: cec: Serialize exclusive follower delivery | HIGH | 7.5 | 24%ile | Microsoft | 2026-09-08 |
| CVE-2026-89968 | nvmet-tcp: reject unsolicited H2CData PDUs | HIGH | 7.5 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-91765 | SOAP: Unbounded Recursion in Server-Side cleanup_xml_node | HIGH | 7.5 | 32%ile | Microsoft | 2026-09-08 |
| CVE-2026-92987 | roxmltree through 0.21.1 Denial of Service via Quadratic Parsing | HIGH | 7.5 | 50%ile | Microsoft | 2026-09-08 |
| CVE-2026-93221 | nfsd: convert nfsd_net boolean flags to unsigned long flags word | HIGH | 7.5 | 36%ile | Microsoft | 2026-09-08 |
| CVE-2026-93450 | go-openapi/swag jsonutils before 0.27.1 Uncontrolled Recursion in Ordered JSON Marshal and Unmarshal | HIGH | 7.5 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-93599 | rustls-webpki before 0.103.13 Panic via empty BIT STRING | HIGH | 7.5 | 28%ile | Microsoft | 2026-09-08 |
| CVE-2026-93990 | Expat through 2.8.4 Malformed UTF-16 Acceptance via Unchecked Surrogate | HIGH | 7.5 | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-94640 | Rpcbind: unbounded memory allocation in rpcbind statistics tracking allows unauthenticated remote denial of service | HIGH | 7.5 | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-97417 | netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() | HIGH | 7.5 | 42%ile | Microsoft | 2026-09-08 |
| CVE-2026-97523 | mptcp: close race between scheduler and state change | HIGH | 7.5 | 54%ile | Microsoft | 2026-09-08 |
| CVE-2026-97524 | mptcp: avoid unneeded actions on subflow reset | HIGH | 7.5 | 55%ile | Microsoft | 2026-09-08 |
| CVE-2026-97531 | scsi: qla2xxx: Skip vport under deletion in report ID acquisition | HIGH | 7.5 | 23%ile | Microsoft | 2026-09-08 |
| CVE-2026-97536 | scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown | HIGH | 7.5 | 23%ile | Microsoft | 2026-09-08 |
| CVE-2026-97557 | smb: client: avoid leaking refcount in cifs_queue_oplock_break() | HIGH | 7.5 | 53%ile | Microsoft | 2026-09-08 |
| CVE-2026-97562 | smb: client: pin DFS superblock in iterator callback | HIGH | 7.5 | 36%ile | Microsoft | 2026-09-08 |
| CVE-2026-97595 | mac802154: fix use-after-free of sdata via queued RX frames | HIGH | 7.5 | 21%ile | Microsoft | 2026-09-08 |
| CVE-2026-97990 | vdpa_sim_net: check TX pull result before RX copy | HIGH | 7.5 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-98056 | nvme: remove stale namespaces by NSID range during scan | HIGH | 7.5 | 49%ile | Microsoft | 2026-09-08 |
| CVE-2026-98108 | Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan | HIGH | 7.5 | 15%ile | Microsoft | 2026-09-08 |
| CVE-2026-57098 | Microsoft Remote Desktop App for Windows Information Disclosure Vulnerability | HIGH | 7.5 | 51%ile | Microsoft | 2026-09-08 |
| CVE-2026-57099 | ASP.NET Core Denial of Service Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-09-08 |
| CVE-2026-62759 | Windows Netlogon Spoofing Vulnerability | HIGH | 7.5 | 32%ile | Microsoft | 2026-09-08 |
| CVE-2026-62813 | Windows Active Directory Domain Services Remote Code Execution Vulnerability | HIGH | 7.5 | 52%ile | Microsoft | 2026-09-08 |
| CVE-2026-66304 | Skype for Business Information Disclosure Vulnerability | HIGH | 7.5 | 62%ile | Microsoft | 2026-09-08 |
| CVE-2026-66307 | Skype for Business and Lync Denial of Service Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-09-08 |
| CVE-2026-67376 | Microsoft SQL Server Denial of Service Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-09-08 |
| CVE-2026-68887 | Windows Message Queuing Queue Manager Denial of Service Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-09-08 |
| CVE-2026-69329 | BranchCache Denial of Service Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-09-08 |
| CVE-2026-69342 | Windows DHCP Server Denial of Service Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-09-08 |
| CVE-2026-69378 | Microsoft Exchange Server Denial of Service Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-09-08 |
| CVE-2026-69397 | Microsoft OpenSSH for Windows Remote Code Execution Vulnerability | HIGH | 7.5 | 49%ile | Microsoft | 2026-09-08 |
| CVE-2026-69428 | Windows LDAP - Lightweight Directory Access Protocol Denial of Service Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-09-08 |
| CVE-2026-69429 | Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability | HIGH | 7.5 | 52%ile | Microsoft | 2026-09-08 |
| CVE-2026-69443 | Windows Device Health Attestation (DHA) Information Disclosure Vulnerability | HIGH | 7.5 | 64%ile | Microsoft | 2026-09-08 |
| CVE-2026-69514 | Remote Desktop Services Remote Code Execution Vulnerability | HIGH | 7.5 | 52%ile | Microsoft | 2026-09-08 |
| CVE-2026-69539 | Remote Desktop Services Remote Code Execution Vulnerability | HIGH | 7.5 | 52%ile | Microsoft | 2026-09-08 |
| CVE-2026-69587 | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-09-08 |
| CVE-2026-69588 | Windows TCP/IP Denial of Service Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-09-08 |
| CVE-2026-69599 | Remote Desktop Services Remote Code Execution Vulnerability | HIGH | 7.5 | 52%ile | Microsoft | 2026-09-08 |
| CVE-2026-69607 | Windows Deployment Services Remote Code Execution Vulnerability | HIGH | 7.5 | 49%ile | Microsoft | 2026-09-08 |
| CVE-2026-69631 | Windows DNS Denial of Service Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-09-08 |
| CVE-2026-69710 | Windows Hello Elevation of Privilege Vulnerability | HIGH | 7.5 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-69744 | Windows Kerberos Denial of Service Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-09-08 |
| CVE-2026-69760 | Windows Kerberos Denial of Service Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-09-08 |
| CVE-2026-69793 | Windows TCP/IP Security Feature Bypass Vulnerability | HIGH | 7.5 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-69804 | Microsoft Office SharePoint Remote Code Execution Vulnerability | HIGH | 7.5 | 43%ile | Microsoft | 2026-09-08 |
| CVE-2026-69805 | .NET Elevation of Privilege Vulnerability | HIGH | 7.5 | 43%ile | Microsoft | 2026-09-08 |
| CVE-2026-69809 | Windows Active Directory Domain Services Denial of Service Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-09-08 |
| CVE-2026-69852 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | HIGH | 7.5 | 52%ile | Microsoft | 2026-09-08 |
| CVE-2026-69881 | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-09-08 |
| CVE-2026-69890 | Windows Virtual Trusted Platform Module Elevation of Privilege Vulnerability | HIGH | 7.5 | 20%ile | Microsoft | 2026-09-08 |
| CVE-2026-70065 | Windows DHCP Server Denial of Service Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-09-08 |
| CVE-2026-70570 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | HIGH | 7.5 | 53%ile | Microsoft | 2026-09-08 |
| CVE-2026-70579 | Windows Mobile Broadband Information Disclosure Vulnerability | HIGH | 7.5 | 64%ile | Microsoft | 2026-09-08 |
| CVE-2026-70587 | Windows Remote Desktop Protocol Information Disclosure Vulnerability | HIGH | 7.5 | 64%ile | Microsoft | 2026-09-08 |
| CVE-2026-71330 | Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability | HIGH | 7.5 | 64%ile | Microsoft | 2026-09-08 |
| CVE-2026-72928 | Windows DNS Server Remote Code Execution Vulnerability | HIGH | 7.5 | 52%ile | Microsoft | 2026-09-08 |
| CVE-2026-72932 | Windows Message Queuing Queue Manager Information Disclosure Vulnerability | HIGH | 7.5 | 64%ile | Microsoft | 2026-09-08 |
| CVE-2026-72943 | Windows Deployment Services Remote Code Execution Vulnerability | HIGH | 7.5 | 52%ile | Microsoft | 2026-09-08 |
| CVE-2026-72949 | Windows SMB Server Network Transport Driver (srvnet.sys) Denial of Service Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-09-08 |
| CVE-2026-72954 | Windows Deployment Services Remote Code Execution Vulnerability | HIGH | 7.5 | 52%ile | Microsoft | 2026-09-08 |
| CVE-2026-72989 | Windows Failover Cluster Information Disclosure Vulnerability | HIGH | 7.5 | 64%ile | Microsoft | 2026-09-08 |
| CVE-2026-73017 | Graphics Kernel Remote Code Execution Vulnerability | HIGH | 7.5 | 20%ile | Microsoft | 2026-09-08 |
| CVE-2026-77494 | Windows DHCP Server Denial of Service Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-09-08 |
| CVE-2026-77498 | Windows DHCP Server Denial of Service Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-09-08 |
| CVE-2026-77499 | Windows DHCP Server Denial of Service Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-09-08 |
| CVE-2026-77501 | Windows DHCP Server Denial of Service Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-09-08 |
| CVE-2026-77502 | Windows DHCP Server Denial of Service Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-09-08 |
| CVE-2026-77886 | Windows DHCP Server Denial of Service Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-09-08 |
| CVE-2026-77888 | Windows DHCP Server Denial of Service Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-09-08 |
| CVE-2026-77889 | Windows DHCP Server Denial of Service Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-09-08 |
| CVE-2026-77890 | Windows DHCP Server Denial of Service Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-09-08 |
| CVE-2026-77893 | Windows DHCP Server Denial of Service Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-09-08 |
| CVE-2026-77895 | Windows DHCP Server Denial of Service Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-09-08 |
| CVE-2026-77898 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 7.5 | 49%ile | Microsoft | 2026-09-08 |
| CVE-2026-78446 | Windows Distributed File System (DFS) Remote Code Execution Vulnerability | HIGH | 7.5 | 41%ile | Microsoft | 2026-09-08 |
| CVE-2026-81355 | Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability | HIGH | 7.5 | 19%ile | Microsoft | 2026-09-08 |
| CVE-2026-83989 | Windows Services for NFS ONCRPC XDR Driver Denial of Service Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-09-08 |
| CVE-2026-84001 | Windows Key Distribution Center Denial of Service Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-09-08 |
| CVE-2026-85917 | Azure AI Foundry Elevation of Privilege Vulnerability | HIGH | 7.5 | 62%ile | Microsoft | 2026-09-08 |
| CVE-2026-95280 | Chromium CVE-2026-95280: Race condition in V8 | HIGH | 7.5 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-102276 | brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion | HIGH | 7.5 | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-102278 | brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion | HIGH | 7.5 | 42%ile | Microsoft | 2026-09-08 |
| CVE-2026-63209 | Integer Overflow or Wraparound and Out-of-bounds Write in compress | HIGH | 7.5 | 47%ile | Microsoft | 2026-09-08 |
| CVE-2025-70873 | An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier al | HIGH | 7.5 | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-93687 | braces through 3.0.3 Stack Overflow via Deeply Nested Patterns | HIGH | 7.5 | 55%ile | Microsoft | 2026-09-08 |
| CVE-2026-93748 | http-cache-semantics through 4.2.0 Cross-User Cache Disclosure via max-stale | HIGH | 7.5 | 47%ile | Microsoft | 2026-09-08 |
| CVE-2026-93749 | source-map-js through 1.2.1 Event Loop Denial of Service | HIGH | 7.5 | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-87776 | compression vulnerable to Denial of Service via memory leak on premature response close | HIGH | 7.5 | 41%ile | Microsoft | 2026-09-08 |
| CVE-2026-80791 | nvmet-auth: zero the AUTH_RECEIVE response buffer | HIGH | 7.5 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-85393 | node-forge through 1.4.0 RSA PKCS#1 v1.5 Signature Forgery via Nested DigestAlgorithm Padding | HIGH | 7.5 | 16%ile | Microsoft | 2026-09-08 |
| CVE-2026-85396 | rubyzip before 3.4.0 Path Traversal in Zip::Entry#extract via Sibling-Directory Prefix | HIGH | 7.5 | 47%ile | Microsoft | 2026-09-08 |
| CVE-2026-102266 | PyJWK accepts empty HMAC keys, bypassing PyJWT's empty-key validation | HIGH | 7.4 | 13%ile | Microsoft | 2026-09-08 |
| CVE-2026-102267 | PyJWT: PyJWKClient follows redirects when fetching JWKS | HIGH | 7.4 | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-102271 | PyJWT: Public keys in DER form are accepted as HMAC secrets, bypassing the CVE-2022-29217 guard | HIGH | 7.4 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-102272 | PyJWT BOM Bypass | HIGH | 7.4 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-102273 | PyJWT accepts public JWK containers as HMAC secrets | HIGH | 7.4 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-42784 | Sequoia-openpgp: sequoia-openpgp: cryptographic integrity compromise via key flag confusion | HIGH | 7.4 | 24%ile | Microsoft | 2026-09-08 |
| CVE-2026-67404 | RabbitMQ: OAuth2 silent verify_none fallback for JWKS fetch | HIGH | 7.4 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-78254 | Apache Ant: Path traversal in ftp and scp tasks allows arbitrary file write | HIGH | 7.4 | 44%ile | Microsoft | 2026-09-08 |
| CVE-2026-80837 | netfilter: nf_tables: don't queue packet path object notifications | HIGH | 7.4 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-80840 | ipv6: seg6: clear IPv4 control block on IPIP decapsulation | HIGH | 7.4 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-85091 | zlib 1.3.1.2 through 1.3.2 Heap Buffer Overflow via gz_vacate | HIGH | 7.4 | 41%ile | Microsoft | 2026-09-08 |
| CVE-2026-86098 | ntop nDPI before 6.0 Heap Buffer Overflow via ndpi_json_string_escape | HIGH | 7.4 | 48%ile | Microsoft | 2026-09-08 |
| CVE-2026-89482 | nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone | HIGH | 7.4 | 54%ile | Microsoft | 2026-09-08 |
| CVE-2026-93543 | Out-of-bounds read in libXi's XI2 class parser | HIGH | 7.4 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-98096 | ipv6: sr: restore network header before routing and forwarding | HIGH | 7.4 | 43%ile | Microsoft | 2026-09-08 |
| CVE-2026-62906 | Microsoft Discovery Studio Information Disclosure Vulnerability | HIGH | 7.4 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-69347 | Windows Fast FAT Driver Remote Code Execution Vulnerability | HIGH | 7.4 | 21%ile | Microsoft | 2026-09-08 |
| CVE-2026-78461 | Visual Studio Code Security Feature Bypass Vulnerability | HIGH | 7.4 | 64%ile | Microsoft | 2026-09-08 |
| CVE-2026-81383 | Visual Studio Code Information Disclosure Vulnerability | HIGH | 7.4 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-84003 | Microsoft Authentication Library (MSAL) for Node.js Spoofing Vulnerability | HIGH | 7.4 | 49%ile | Microsoft | 2026-09-08 |
| CVE-2026-91734 | Chromium CVE-2026-91734: Incorrect authorization | HIGH | 7.4 | 1%ile | Microsoft | 2026-09-08 |
| CVE-2026-89161 | In PCRE2 before 10.48, pcre2_jit_match mishandles a previously copied subject being passed in as a context. An incorrect | HIGH | 7.4 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-82208 | wolfSSL CA-cache hit overrides callback | HIGH | 7.4 | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-85013 | Environment-modules: command injection in environment-modules bash completion via malicious module names containing shel | HIGH | 7.3 | 14%ile | Microsoft | 2026-09-08 |
| CVE-2026-97563 | smb: client: reject out-of-bounds DataOffset in CIFSSMBRead() | HIGH | 7.3 | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-69402 | Microsoft Office SharePoint Spoofing Vulnerability | HIGH | 7.3 | 39%ile | Microsoft | 2026-09-08 |
| CVE-2026-69417 | Microsoft Office SharePoint Spoofing Vulnerability | HIGH | 7.3 | 39%ile | Microsoft | 2026-09-08 |
| CVE-2026-69477 | Microsoft Office Access Remote Code Execution Vulnerability | HIGH | 7.3 | 37%ile | Microsoft | 2026-09-08 |
| CVE-2026-89656 | libceph: reject buckets with mismatched CRUSH ids | HIGH | 7.2 | 44%ile | Microsoft | 2026-09-08 |
| CVE-2026-81349 | Azure HDInsight Ambari Elevation of Privilege Vulnerability | HIGH | 7.2 | 63%ile | Microsoft | 2026-09-08 |
| CVE-2026-100071 | net: hsr: free learned nodes on device setup failure | HIGH | 7.1 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-100072 | ACPI: platform: Use acpi_bus_get_primary_device() | HIGH | 7.1 | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-100077 | drm/msm: Recover HW before retire hung submit | HIGH | 7.1 | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-103242 | Rpm: heap-based buffer overflow write in hex2binv() via a mistyped rpmtag_filesignatures header tag | HIGH | 7.1 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-19774 | BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability | HIGH | 7.1 | 19%ile | Microsoft | 2026-09-08 |
| CVE-2026-78134 | strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a | HIGH | 7.1 | 39%ile | Microsoft | 2026-09-08 |
| CVE-2026-78807 | An issue in wpa_supplicant all versions before v.2.12 allows a local attacker to bypass proper network context and AKMP | HIGH | 7.1 | 0%ile | Microsoft | 2026-09-08 |
| CVE-2026-80732 | ata: pata_sl82c105: fix bridge revision use-after-free | HIGH | 7.1 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-80737 | serial: amba-pl011: synchronize DMA teardown | HIGH | 7.1 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-80786 | fbdev: Wrap user-invoked calls to fb_set_var() in helper | HIGH | 7.1 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-86090 | ntopng before 6.7.260717 Missing Authorization on the Notification Endpoint and Recipient Delete Handlers | HIGH | 7.1 | 39%ile | Microsoft | 2026-09-08 |
| CVE-2026-86091 | ntopng before 6.7.260717 Missing Authorization on the Host Pool Bulk Delete Handler | HIGH | 7.1 | 44%ile | Microsoft | 2026-09-08 |
| CVE-2026-89596 | forcedeth: fix off-by-one when saving/restoring non-PCI config space | HIGH | 7.1 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-89694 | nfsd: check client ownership when cancelling a copy-notify stateid | HIGH | 7.1 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-89785 | fs/ntfs3: fix out-of-bounds read of INDEX_ROOT in reparse/objid init | HIGH | 7.1 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-89787 | ext4: check dir entry fits before reading the hash trailer in ext4_search_dir() | HIGH | 7.1 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-89797 | power: supply: ab8500_fg: fix use-after-free on remove | HIGH | 7.1 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-89817 | drm/gud: NUL-terminate TV mode names read from the device | HIGH | 7.1 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-89818 | drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check | HIGH | 7.1 | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-89837 | f2fs: fix dentry folio leak in find_in_level | HIGH | 7.1 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-89839 | f2fs: use the mount idmap for the owner check in f2fs_xattr_advise_set() | HIGH | 7.1 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-89840 | f2fs: validate MOVE_RANGE destination size | HIGH | 7.1 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-89842 | scsi: qla2xxx: Skip NVMe LS reject IOCB when FW not started | HIGH | 7.1 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-89843 | scsi: qla2xxx: Zero-init bsg stack buffers to avoid info leak | HIGH | 7.1 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-89845 | scsi: qla2xxx: Avoid req_q_map double-read in qla2x00_error_entry() | HIGH | 7.1 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-89852 | scsi: qla2xxx: Zero mailbox struct in qla2x00_get_firmware_state() | HIGH | 7.1 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-89858 | scsi: qla2xxx: Bound image count in qla2x00_update_fru_versions() | HIGH | 7.1 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-89859 | scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak | HIGH | 7.1 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-89862 | scsi: qla2xxx: Fix BSG job leak on validate flash image error path | HIGH | 7.1 | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-89874 | media: v4l2-async: avoid deleting unlinked ASC entry on link error | HIGH | 7.1 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-89878 | media: s2255: check firmware size before reading trailing marker | HIGH | 7.1 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-89884 | media: platform: mtk-mdp3: fix NULL deref on failed SCP lookup | HIGH | 7.1 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-89891 | media: em28xx: fix use-after-free of dev_next->devlist on disconnect | HIGH | 7.1 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-89892 | media: em28xx: defer audio-only extension registration | HIGH | 7.1 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-89923 | KVM: s390: Free guest debug data on vcpu destroy | HIGH | 7.1 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-89927 | KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock | HIGH | 7.1 | 8%ile | Microsoft | 2026-09-08 |
| CVE-2026-89934 | iio: light: ltrf216a: fix runtime PM reference leak in error path | HIGH | 7.1 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-89939 | iio: chemical: atlas-sensor: fix PM reference leak in buffer postenable | HIGH | 7.1 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-89948 | batman-adv: bla: fix freeing of claims on meshif deletion | HIGH | 7.1 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-89962 | powerpc/kexec_file: Prevent kexec range truncation | HIGH | 7.1 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-89984 | perf/x86/intel: Fix kernel address leakages in LBR stack | HIGH | 7.1 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-90016 | staging: rtl8723bs: fix OOB read in rtw_restruct_wmm_ie() | HIGH | 7.1 | 34%ile | Microsoft | 2026-09-08 |
| CVE-2026-90017 | staging: rtl8723bs: fix OOB read in rtw_action_frame_parse() | HIGH | 7.1 | 30%ile | Microsoft | 2026-09-08 |
| CVE-2026-90031 | usb-storage: ene_ub6250: fix race between scan work and probe | HIGH | 7.1 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-90033 | ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() | HIGH | 7.1 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-90067 | libceph: validate banner payload length | HIGH | 7.1 | 52%ile | Microsoft | 2026-09-08 |
| CVE-2026-90092 | Bluetooth: L2CAP: reject accept queue add unless BT_LISTEN | HIGH | 7.1 | 30%ile | Microsoft | 2026-09-08 |
| CVE-2026-90102 | NFSv4/pnfs: key the data server cache on the NFS version | HIGH | 7.1 | 53%ile | Microsoft | 2026-09-08 |
| CVE-2026-90104 | NFSv4.1: zero referring call lists before decoding | HIGH | 7.1 | 52%ile | Microsoft | 2026-09-08 |
| CVE-2026-90106 | net: bridge: arp/nd proxy: fix reading neigh ha | HIGH | 7.1 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-90108 | net/smc: free stashed qentry before overwrite in REQ_ADD_LINK to ADD_LINK transition | HIGH | 7.1 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90124 | irqchip/renesas-rzg2l: Fix loss of interrupt | HIGH | 7.1 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90126 | rtc: pcf8563: fix clock provider leak on unbind | HIGH | 7.1 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-90143 | net: kcm: Hold RCU read lock while running BPF parser | HIGH | 7.1 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-90154 | ksmbd: scope session state changes to bound connections | HIGH | 7.1 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90170 | ksmbd: validate ipc response length before dereferencing its fields | HIGH | 7.1 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-90204 | ocfs2: validate DIO orphan slot during inode read | HIGH | 7.1 | 8%ile | Microsoft | 2026-09-08 |
| CVE-2026-90205 | ocfs2: validate orphan slot during inode read | HIGH | 7.1 | 8%ile | Microsoft | 2026-09-08 |
| CVE-2026-90226 | nfc: llcp: avoid userspace overflow on invalid optlen | HIGH | 7.1 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90230 | nvmet: fix heap out-of-bounds read in nvmet_auth_negotiate() | HIGH | 7.1 | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-90235 | sunrpc: xprtsock: annotate shared socket callbacks with READ_ONCE/WRITE_ONCE | HIGH | 7.1 | 52%ile | Microsoft | 2026-09-08 |
| CVE-2026-90255 | Bluetooth: hci_conn: fix the SCO setup context lifetime | HIGH | 7.1 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-90298 | drm/sun4i: tcon: Drop TCON TOP device reference | HIGH | 7.1 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90300 | bpf: Clear buf on error in __bpf_get_task_stack | HIGH | 7.1 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-90301 | ocfs2: o2hb: quiesce negotiate handlers and timeout work | HIGH | 7.1 | 48%ile | Microsoft | 2026-09-08 |
| CVE-2026-90313 | bpf, cgroup: Fix invalid storage access after __cgroup_bpf_attach failed | HIGH | 7.1 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90314 | remoteproc: fix OOB read via signed offset in rsc_table_for_each_entry() | HIGH | 7.1 | 14%ile | Microsoft | 2026-09-08 |
| CVE-2026-90318 | fat: release buffer head after rebuilding parent | HIGH | 7.1 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-90319 | rapidio: clear mport->net when rio_add_net() fails | HIGH | 7.1 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90330 | HID: logitech-hidpp: Fix FF device cleanup on init failure | HIGH | 7.1 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-90362 | drm/msm/dsi: Drop dev_pm_opp_set_rate(0) | HIGH | 7.1 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-90366 | wifi: mt76: mt7996: reserve space for the CSA-abort countdown TLV | HIGH | 7.1 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-90374 | wifi: mt76: mt7996: validate RX band_idx before dereferencing phys[] | HIGH | 7.1 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90383 | misc: sgi-gru: remove interrupt-context page-table walks | HIGH | 7.1 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-90389 | md: scope memalloc_noio to allocation critical sections | HIGH | 7.1 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-90394 | power: supply: sc2731_charger: cancel work on remove | HIGH | 7.1 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90411 | nvme-fc: unmap cmd_iu DMA on rsp_iu mapping failure in init_request | HIGH | 7.1 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-90415 | RDMA/cxgb4: free STAG index when TPT entry write fails | HIGH | 7.1 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-90419 | nilfs2: prevent out-of-bounds read in super root block parsing | HIGH | 7.1 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-92477 | scsi: ufs: debugfs: Reserve space for a string terminator | HIGH | 7.1 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-92484 | cxl/region: Fix use-after-free in find_pos_and_ways() error path | HIGH | 7.1 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-92489 | xfrm: Fix skb double-free in xfrm_dev_direct_output() | HIGH | 7.1 | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-92508 | RDMA/core: Fix potential use after free in ib_free_cq() | HIGH | 7.1 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-92522 | ACPI: processor: validate MADT IOAPIC entry bounds | HIGH | 7.1 | 3%ile | Microsoft | 2026-09-08 |
| CVE-2026-93050 | ipack: ipoctal: fix UAF, null-ptr-deref, and use-after-free in cleanup on remove | HIGH | 7.1 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-93055 | UDF symlink pathComponent header OOB read | HIGH | 7.1 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-93062 | wifi: iwlwifi: guard against division by zero in iwl_dbg_tlv_alloc_fragments | HIGH | 7.1 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-93063 | wifi: iwlwifi: mei: check SAP message length before reading it | HIGH | 7.1 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-93064 | wifi: iwlwifi: mvm: fix off-by-one in TXF key sanitiser | HIGH | 7.1 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-93067 | drm/bridge: tc358767: clamp the reported AUX read size to the request | HIGH | 7.1 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-93073 | dax: read holder_ops once in dax_holder_notify_failure() | HIGH | 7.1 | 8%ile | Microsoft | 2026-09-08 |
| CVE-2026-93086 | firmware: arm_scmi: Avoid IDR updates while cleaning channels | HIGH | 7.1 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-93092 | firmware: arm_scmi: Unregister device notifier before IDR teardown | HIGH | 7.1 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-93117 | usb: fix UAF when probe runs concurrent to dyn ID removal | HIGH | 7.1 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-93129 | platform/x86: dell-wmi-base: Fix handling of ultra performance key | HIGH | 7.1 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-93144 | bpf: Reject writes through untrusted BTF pointers | HIGH | 7.1 | 8%ile | Microsoft | 2026-09-08 |
| CVE-2026-93145 | clk: qcom: gdsc: tear down per-domain genpds in gdsc_unregister() | HIGH | 7.1 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-93151 | nvmet-rdma: fix response resource leak on queue teardown | HIGH | 7.1 | 52%ile | Microsoft | 2026-09-08 |
| CVE-2026-93156 | crypto: rk3288 - fail ahash requests on HASH idle timeout | HIGH | 7.1 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-93177 | drm/amdgpu/pm/powerplay: bounds-check voltage index in Vega10 lookup | HIGH | 7.1 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-93178 | drm/amdgpu/pm/powerplay: bounds-check voltage index in SMU7 lookup | HIGH | 7.1 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-93188 | HID: roccat: bound device-supplied profile index | HIGH | 7.1 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-93200 | i3c: master: Fix use-after-free of master->this | HIGH | 7.1 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-93203 | batman-adv: bla: avoid CRC corruption due to parallel claim add | HIGH | 7.1 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-93783 | Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame | HIGH | 7.1 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-93803 | wifi: libipw: fix key index receive bound checks | HIGH | 7.1 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-93806 | wifi: cfg80211: validate assoc response length before status and IE access | HIGH | 7.1 | 17%ile | Microsoft | 2026-09-08 |
| CVE-2026-94286 | Out-of-bounds read in libXtst's RECORD reply parser | HIGH | 7.1 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-95520 | Rpm: rpm: integer overflow in iterreadarchivenext() leads to heap-based buffer overflow when parsing untrusted rpm packa | HIGH | 7.1 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-97498 | drm/amdgpu/userq: pin mqd and fw object bo to avoid eviction | HIGH | 7.1 | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-97505 | PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() | HIGH | 7.1 | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-97529 | scsi: qla2xxx: Validate BSG request_len before reading vendor_cmd[] | HIGH | 7.1 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-97539 | usb: xusbatm: don't rely on id table pointer arithmetic | HIGH | 7.1 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-97540 | net: usb: pegasus: don't rely on id table pointer arithmetic | HIGH | 7.1 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-97554 | smb: client: avoid using uninitialized SIDs in cifs_posix_to_fattr() | HIGH | 7.1 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-97556 | smb: client: avoid leaking refcount when cifs_sb_tlink() fails | HIGH | 7.1 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-97558 | smb: client: fix cifsFileInfo reference leak in deferred close | HIGH | 7.1 | 14%ile | Microsoft | 2026-09-08 |
| CVE-2026-97568 | mptcp: syncookies: remember the request backup flag | HIGH | 7.1 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-97592 | s390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithm | HIGH | 7.1 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-97599 | ieee802154: hwsim: serialize pib updates to fix double-free | HIGH | 7.1 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-97604 | fbdev: vfb: defer cleanup until the last reference | HIGH | 7.1 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-97615 | net: bridge: use option bits for CFM/MRP frame handlers | HIGH | 7.1 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-97616 | net/sched: act_api: release all action references on NEWACTION failure | HIGH | 7.1 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-97619 | io_uring/rw: end write accounting from ->ki_complete | HIGH | 7.1 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-97901 | genetlink: pin family module during policy dump | HIGH | 7.1 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-97907 | Bluetooth: btrtl: Don't leak return code when parsing firmware format v2 | HIGH | 7.1 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-97919 | tracing: Take the reference before publishing the named histogram trigger | HIGH | 7.1 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-97935 | tracing: Set the trace clock before registering the histogram trigger | HIGH | 7.1 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-97949 | configfs: unhash the dentry before dropping the item in rmdir | HIGH | 7.1 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-97950 | configfs: pin the symlink target's dirent instead of chasing ->ci_dentry | HIGH | 7.1 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-97961 | perf/core: Allow list_del during perf_event_overflow() | HIGH | 7.1 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-97962 | net/mlx5e: Move representor vnic reporter to eswitch devlink port | HIGH | 7.1 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-97964 | ppp_synctty: ensure a writeable skb header | HIGH | 7.1 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-97965 | vxlan: initialize _md in vxlan_xmit_one() | HIGH | 7.1 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-97986 | virtio_input: stop callbacks before unregistering input device | HIGH | 7.1 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-97997 | virtio_ring: fix stale descriptor flags after a failed packed add | HIGH | 7.1 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-98014 | net/mlx5: E-Switch, prevent mc_list repopulation during vport disable | HIGH | 7.1 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-98016 | net/mlx5e: Fix use-after-free race in sample_restore_put() | HIGH | 7.1 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-98021 | net: reject oversized tx_queue_len at netlink parse time | HIGH | 7.1 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-98024 | s390/ism: folio_put() after error | HIGH | 7.1 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-98034 | bpf: Mark NULL kptr stores precise | HIGH | 7.1 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-98044 | bpf: Reject legacy packet loads from callbacks | HIGH | 7.1 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-98046 | bpf: Mark bpf_btf_find_by_name_kind() as sleepable | HIGH | 7.1 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-98058 | bpf: Mark syscall helpers as sleepable | HIGH | 7.1 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-98063 | bpf: Fix NULL-ptr-deref in btf_var_show() | HIGH | 7.1 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-98064 | bpf: Fix NULL-ptr-deref when showing a void BTF type | HIGH | 7.1 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-98072 | net/rds: use wq_has_sleeper() in release_in_xmit() | HIGH | 7.1 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-98075 | bpf: reject BPF_PSEUDO_FUNC reference to the main program | HIGH | 7.1 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-98095 | af_packet: Don't cast tpacket_hdr.tp_len to int in tpacket_parse_header(). | HIGH | 7.1 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-98099 | ipv6: mcast: use rcu_assign_pointer() for __rcu list updates | HIGH | 7.1 | 0%ile | Microsoft | 2026-09-08 |
| CVE-2026-98102 | ipv6: mcast: fix RCU list diversion in ip6_mc_del1_src() | HIGH | 7.1 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-98104 | net/sched: cls_u32: fix duplicate handle when node ID pool is exhausted | HIGH | 7.1 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-98111 | Bluetooth: btintel: validate version TLV value lengths | HIGH | 7.1 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-98131 | net: stmmac: fix dma mapping leak in stmmac_tso_xmit() | HIGH | 7.1 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-98159 | wifi: mt76: mt7921: validate CLC firmware records | HIGH | 7.1 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-66305 | Skype for Business Spoofing Vulnerability | HIGH | 7.1 | 45%ile | Microsoft | 2026-09-08 |
| CVE-2026-68835 | Windows Print Spooler Components Elevation of Privilege Vulnerability | HIGH | 7.1 | 47%ile | Microsoft | 2026-09-08 |
| CVE-2026-68846 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.1 | 47%ile | Microsoft | 2026-09-08 |
| CVE-2026-68889 | Microsoft Standard XPS Elevation of Privilege Vulnerability | HIGH | 7.1 | 47%ile | Microsoft | 2026-09-08 |
| CVE-2026-68893 | Remote Desktop Licensing Service Elevation of Privilege Vulnerability | HIGH | 7.1 | 47%ile | Microsoft | 2026-09-08 |
| CVE-2026-69272 | Microsoft Standard XPS Elevation of Privilege Vulnerability | HIGH | 7.1 | 47%ile | Microsoft | 2026-09-08 |
| CVE-2026-69274 | Windows Win32k Elevation of Privilege Vulnerability | HIGH | 7.1 | 47%ile | Microsoft | 2026-09-08 |
| CVE-2026-69296 | Windows Device Association Service Elevation of Privilege Vulnerability | HIGH | 7.1 | 47%ile | Microsoft | 2026-09-08 |
| CVE-2026-69305 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | HIGH | 7.1 | 47%ile | Microsoft | 2026-09-08 |
| CVE-2026-69313 | Microsoft Standard XPS Elevation of Privilege Vulnerability | HIGH | 7.1 | 47%ile | Microsoft | 2026-09-08 |
| CVE-2026-69314 | Windows Device Association Broker Service Elevation of Privilege Vulnerability | HIGH | 7.1 | 47%ile | Microsoft | 2026-09-08 |
| CVE-2026-69336 | Microsoft Standard XPS Elevation of Privilege Vulnerability | HIGH | 7.1 | 47%ile | Microsoft | 2026-09-08 |
| CVE-2026-69337 | Windows Registry Elevation of Privilege Vulnerability | HIGH | 7.1 | 47%ile | Microsoft | 2026-09-08 |
| CVE-2026-69338 | Remote Desktop Gateway Service Elevation of Privilege Vulnerability | HIGH | 7.1 | 47%ile | Microsoft | 2026-09-08 |
| CVE-2026-69340 | Windows NTFS Elevation of Privilege Vulnerability | HIGH | 7.1 | 47%ile | Microsoft | 2026-09-08 |
| CVE-2026-69357 | Windows NDIS Elevation of Privilege Vulnerability | HIGH | 7.1 | 47%ile | Microsoft | 2026-09-08 |
| CVE-2026-69358 | Remote Desktop Client Remote Code Execution Vulnerability | HIGH | 7.1 | 47%ile | Microsoft | 2026-09-08 |
| CVE-2026-69364 | Windows Print Spooler Components Elevation of Privilege Vulnerability | HIGH | 7.1 | 38%ile | Microsoft | 2026-09-08 |
| CVE-2026-69366 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.1 | 47%ile | Microsoft | 2026-09-08 |
| CVE-2026-69384 | Virtual Hard Disk (VHD) Miniport Driver Denial of Service Vulnerability | HIGH | 7.1 | 36%ile | Microsoft | 2026-09-08 |
| CVE-2026-69396 | Windows NDIS Elevation of Privilege Vulnerability | HIGH | 7.1 | 47%ile | Microsoft | 2026-09-08 |
| CVE-2026-69451 | Windows Management Instrumentation Elevation of Privilege Vulnerability | HIGH | 7.1 | 47%ile | Microsoft | 2026-09-08 |
| CVE-2026-69460 | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability | HIGH | 7.1 | 47%ile | Microsoft | 2026-09-08 |
| CVE-2026-69482 | Windows Error Reporting Tampering Vulnerability | HIGH | 7.1 | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-69536 | Remote Desktop Services Remote Code Execution Vulnerability | HIGH | 7.1 | 47%ile | Microsoft | 2026-09-08 |
| CVE-2026-69553 | Windows Hyper-V Elevation of Privilege Vulnerability | HIGH | 7.1 | 42%ile | Microsoft | 2026-09-08 |
| CVE-2026-69597 | Windows HTTP.sys Elevation of Privilege Vulnerability | HIGH | 7.1 | 47%ile | Microsoft | 2026-09-08 |
| CVE-2026-69602 | Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability | HIGH | 7.1 | 47%ile | Microsoft | 2026-09-08 |
| CVE-2026-69688 | Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability | HIGH | 7.1 | 47%ile | Microsoft | 2026-09-08 |
| CVE-2026-69706 | Windows Win32k Elevation of Privilege Vulnerability | HIGH | 7.1 | 47%ile | Microsoft | 2026-09-08 |
| CVE-2026-69757 | Windows TCP/IP Elevation of Privilege Vulnerability | HIGH | 7.1 | 47%ile | Microsoft | 2026-09-08 |
| CVE-2026-69761 | Windows TCP/IP Elevation of Privilege Vulnerability | HIGH | 7.1 | 47%ile | Microsoft | 2026-09-08 |
| CVE-2026-69775 | Windows DWM Core Library Elevation of Privilege Vulnerability | HIGH | 7.1 | 47%ile | Microsoft | 2026-09-08 |
| CVE-2026-93816 | f2fs: validate inline dentry name lengths before conversion | HIGH | 7.1 | 3%ile | Microsoft | 2026-09-08 |
| CVE-2026-100419 | gitoxide gix-fs before 0.23.0 Worktree Escape via Symlink | HIGH | 7.0 | 13%ile | Microsoft | 2026-09-08 |
| CVE-2026-102010 | Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if | HIGH | 7.0 | 28%ile | Microsoft | 2026-09-08 |
| CVE-2026-71220 | Gfs2-utils: gfs2-utils: stack out-of-bounds write via unchecked di_height in gfs2_edit | HIGH | 7.0 | 3%ile | Microsoft | 2026-09-08 |
| CVE-2026-71221 | Gfs2-utils: gfs2-utils: stack out-of-bounds write via unchecked height in savemeta | HIGH | 7.0 | 3%ile | Microsoft | 2026-09-08 |
| CVE-2026-80977 | net: skbuff: don't touch shared zerocopy state in skb_tx_error() | HIGH | 7.0 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-80982 | net/smc: fix use-after-free in smc_rx_pipe_buf_release() | HIGH | 7.0 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-84233 | Rpm: command execution via macro expansion in `rpmuncompress -x` for crafted `.gem` filenames | HIGH | 7.0 | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-89545 | sunrpc: defer rq_argp and rq_resp free until after RCU grace period | HIGH | 7.0 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-89610 | ntfs: verify run length exceeding volume boundary | HIGH | 7.0 | 46%ile | Microsoft | 2026-09-08 |
| CVE-2026-89750 | tracing/user_events: Clear copied tracing state before fork duplication | HIGH | 7.0 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-90162 | ksmbd: defer publishing granted locks to prevent UAF/double-free race | HIGH | 7.0 | 53%ile | Microsoft | 2026-09-08 |
| CVE-2026-95508 | Libslirp: libslirp: heap buffer overflow in dhcpv6/tftp response builders on small interface mtu | HIGH | 7.0 | 47%ile | Microsoft | 2026-09-08 |
| CVE-2026-97608 | netfilter: nf_log: unregister loggers before per-net teardown | HIGH | 7.0 | 4%ile | Microsoft | 2026-09-08 |
| CVE-2026-97609 | netfilter: cttimeout: prevent UAF during module unload | HIGH | 7.0 | 4%ile | Microsoft | 2026-09-08 |
| CVE-2026-97926 | ufs: validate cylinder group metadata before caching it | HIGH | 7.0 | 4%ile | Microsoft | 2026-09-08 |
| CVE-2026-97931 | ALSA: us122l: Prevent write upgrades for read mappings | HIGH | 7.0 | 4%ile | Microsoft | 2026-09-08 |
| CVE-2026-97953 | net: stmmac: fix TX descriptor availability check for TSO traffic | HIGH | 7.0 | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-98027 | net: dsa: mv88e6xxx: bound the policy rule dump by the caller's buffer size | HIGH | 7.0 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-98030 | net: dsa: bcm_sf2: bound the CFP rule dump by the caller's buffer size | HIGH | 7.0 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-98041 | bpf: Don't predict JMP32 pointer vs zero comparisons | HIGH | 7.0 | 4%ile | Microsoft | 2026-09-08 |
| CVE-2026-98068 | net/rds: don't let rds_conn_shutdown() consume a concurrent drop | HIGH | 7.0 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-98083 | btrfs: fix transaction use-after-free in raid stripe insertion | HIGH | 7.0 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-98154 | nvme-rdma: fix -EIO cleanup order in queue_rq | HIGH | 7.0 | 1%ile | Microsoft | 2026-09-08 |
| CVE-2026-50349 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-62694 | Windows Installer Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-68824 | Connected User Experiences and Telemetry Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-68825 | Windows Bind Filter Driver Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-68837 | Windows File History Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-68840 | Windows USB Driver Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-68847 | Connected User Experiences and Telemetry Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-68884 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-68897 | Microsoft Standard XPS Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69275 | Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69279 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69280 | Windows Push Notifications Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69281 | Windows License Manager Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69287 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69292 | Remote Desktop Gateway Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69299 | Microsoft COM for Windows Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69300 | Windows Push Notifications Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69309 | Windows Print Spooler Components Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69310 | Windows DNS Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69311 | Windows Audio Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69319 | Windows USB Video Driver Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-69331 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69333 | Windows Win32k Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69335 | Windows Win32k Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69341 | Windows Image Acquisition Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69362 | Windows Error Reporting Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69379 | Windows NTFS Elevation of Privilege Vulnerability | HIGH | 7.0 | 21%ile | Microsoft | 2026-09-08 |
| CVE-2026-69383 | Windows Shell Elevation of Privilege Vulnerability | HIGH | 7.0 | 30%ile | Microsoft | 2026-09-08 |
| CVE-2026-69385 | Windows TCP/IP Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-69388 | Windows Bluetooth Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69394 | Windows Audio Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69398 | Windows Bluetooth Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-69401 | Audio Video Control Transport Protocol Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69404 | Windows TCP/IP Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-69410 | Windows Win32k Elevation of Privilege Vulnerability | HIGH | 7.0 | 19%ile | Microsoft | 2026-09-08 |
| CVE-2026-69413 | Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69422 | Windows USB Video Driver Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69430 | Windows Embedded Mode Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 19%ile | Microsoft | 2026-09-08 |
| CVE-2026-69440 | Windows MIDI Service Module Elevation of Privileges Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-69441 | Windows Installer Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-69448 | Windows Bluetooth Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-69466 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-69468 | Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69470 | Connected User Experiences and Telemetry Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69472 | Windows Devices Human Interface Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69488 | Windows Device Association Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69492 | Windows Partition Management Driver Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69498 | Windows Win32k Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69500 | Windows Image Acquisition Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69501 | Windows Secure Kernel Mode Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69516 | Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69517 | Windows Wireless Networking Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69540 | Windows Audio Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69549 | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability | HIGH | 7.0 | 24%ile | Microsoft | 2026-09-08 |
| CVE-2026-69560 | Windows Work Folder Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69563 | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-69564 | Windows Online Certificate Status Protocol (OCSP) Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69567 | Windows NTFS Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69573 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69574 | Windows Device Association Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69575 | Windows Storage Spaces Controller Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69578 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69581 | Windows Device Association Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-69600 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69605 | Microsoft Install Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69606 | Windows Shell Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69610 | Windows Win32k Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69611 | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69613 | Windows Image Acquisition Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69617 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69621 | Role: Windows Fax Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69630 | Windows Win32k Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69645 | Windows Message Queuing Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69648 | Windows Notification Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69652 | Windows Win32k Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69654 | Windows Accounts Control Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69682 | Windows Host Guardian Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-69692 | Windows Audio Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69693 | Windows Device Association Broker Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69694 | Windows IP Address Management (IPAM) Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 86%ile | Microsoft | 2026-09-08 |
| CVE-2026-69708 | Windows Web Platform Storage Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69711 | Windows Device Association Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69735 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69779 | Windows Win32k Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-69791 | Windows Device Association Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69806 | .NET Elevation of Privilege Vulnerability | HIGH | 7.0 | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-69814 | Windows Credential Providers Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69816 | Windows Accounts Control Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69817 | Windows Bluetooth Port Driver Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69818 | Windows Win32k Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69834 | Windows ALPC Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69838 | Windows Print Spooler Components Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69859 | Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-69866 | Windows Device Association Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69889 | Windows Bluetooth Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69891 | Windows Media Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69896 | Windows Error Reporting Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69911 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-70283 | Windows Win32k Elevation of Privilege Vulnerability | HIGH | 7.0 | 15%ile | Microsoft | 2026-09-08 |
| CVE-2026-70562 | Windows Audio Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-70565 | Windows AF_UNIX Socket Provider Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-70567 | Windows Display Enhancement Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-70568 | Windows Defender Firewall Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-70573 | Windows Biometric Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 21%ile | Microsoft | 2026-09-08 |
| CVE-2026-70577 | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-70578 | Windows Credential Guard Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-70585 | Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-71332 | Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-71333 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-71340 | Windows File History Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-71342 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-71351 | Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-71353 | Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-72926 | Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-72930 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-72952 | Windows Spaceport.sys Remote Code Execution Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-72963 | Windows Modern Execution Server Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-73003 | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-73005 | Windows Authentication Methods Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-73022 | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-77485 | SQL Server Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-77894 | Windows Installer Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-77897 | Microsoft Power Automate Desktop Elevation of Privilege Vulnerability | HIGH | 7.0 | 21%ile | Microsoft | 2026-09-08 |
| CVE-2026-77899 | Windows Security Center Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-77905 | Windows Management Instrumentation Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-78457 | Windows Security Health Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-78464 | Windows MIDI Service Module Elevation of Privileges Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-80093 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | HIGH | 7.0 | 25%ile | Microsoft | 2026-09-08 |
| CVE-2026-81389 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.0 | 31%ile | Microsoft | 2026-09-08 |
| CVE-2026-83940 | Windows Device Association Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-83999 | Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 21%ile | Microsoft | 2026-09-08 |
| CVE-2026-85360 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-86138 | In libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer overflow and resultant heap-based buffer overflow. | MEDIUM | 6.9 | 3%ile | Microsoft | 2026-09-08 |
| CVE-2026-86142 | In libxml2 before 2.15.4, there is a heap-based buffer overflow in xmlXPtrEvalXPtrPart because of xmlXPtrEval xpointer l | MEDIUM | 6.9 | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-86143 | In xmlIO in libxml2 before 2.15.4, an inconsistency in xmlOutputWriteCallback and xmlBufUse causes negative lengths to r | MEDIUM | 6.9 | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-86139 | In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow. | MEDIUM | 6.9 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-89729 | HID: sensor-hub: Fix out-of-bounds write in sensor_hub_get_feature | MEDIUM | 6.8 | 29%ile | Microsoft | 2026-09-08 |
| CVE-2026-65812 | Microsoft Teams for Android Information Disclosure Vulnerability | MEDIUM | 6.8 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-69490 | Windows USB Mass Storage Class Driver Elevation of Privilege Vulnerability | MEDIUM | 6.8 | 38%ile | Microsoft | 2026-09-08 |
| CVE-2026-69566 | Windows NTFS Remote Code Execution Vulnerability | MEDIUM | 6.8 | 38%ile | Microsoft | 2026-09-08 |
| CVE-2026-71329 | Windows NTFS Remote Code Execution Vulnerability | MEDIUM | 6.8 | 38%ile | Microsoft | 2026-09-08 |
| CVE-2026-71348 | Windows Spaceport.sys Remote Code Execution Vulnerability | MEDIUM | 6.8 | 38%ile | Microsoft | 2026-09-08 |
| CVE-2026-71349 | Windows Spaceport.sys Remote Code Execution Vulnerability | MEDIUM | 6.8 | 38%ile | Microsoft | 2026-09-08 |
| CVE-2026-71350 | Windows Spaceport.sys Remote Code Execution Vulnerability | MEDIUM | 6.8 | 38%ile | Microsoft | 2026-09-08 |
| CVE-2026-72985 | Volume Shadow Copy Elevation of Privilege Vulnerability | MEDIUM | 6.8 | 38%ile | Microsoft | 2026-09-08 |
| CVE-2026-72999 | Windows USB Hub Driver Elevation of Privilege Vulnerability | MEDIUM | 6.8 | 38%ile | Microsoft | 2026-09-08 |
| CVE-2026-77892 | Windows Boot Manager Elevation of Privilege Vulnerability | MEDIUM | 6.8 | 38%ile | Microsoft | 2026-09-08 |
| CVE-2026-78451 | Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability | MEDIUM | 6.8 | 38%ile | Microsoft | 2026-09-08 |
| CVE-2026-97442 | wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi | MEDIUM | 6.8 | 17%ile | Microsoft | 2026-09-08 |
| CVE-2025-24890 | gix-sec safe.directory protections absent for elevated administrators | MEDIUM | 6.8 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-88839 | Busybox: busybox: passwd/group parser writes heap pointers out of bounds due to stale tokenize() endpoint | MEDIUM | 6.7 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-89573 | dm array: reject an array block whose value size is not the caller's | MEDIUM | 6.7 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-89746 | tracing: Fix use-after-free with same-name named triggers | MEDIUM | 6.7 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-97427 | drm/amd/pm: bound pp_dpm_set_pp_table() memcpy | MEDIUM | 6.7 | 8%ile | Microsoft | 2026-09-08 |
| CVE-2026-69350 | Windows Overlay Filter Elevation of Privilege Vulnerability | MEDIUM | 6.7 | 28%ile | Microsoft | 2026-09-08 |
| CVE-2026-69373 | Windows Overlay Filter Elevation of Privilege Vulnerability | MEDIUM | 6.7 | 28%ile | Microsoft | 2026-09-08 |
| CVE-2026-69449 | Windows BitLocker Remote Code Execution Vulnerability | MEDIUM | 6.7 | 28%ile | Microsoft | 2026-09-08 |
| CVE-2026-72927 | Winsock Elevation of Privilege Vulnerability | MEDIUM | 6.7 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-72935 | Windows NTFS Elevation of Privilege Vulnerability | MEDIUM | 6.7 | 28%ile | Microsoft | 2026-09-08 |
| CVE-2026-97412 | pds_core: quiesce DMA before freeing resources | MEDIUM | 6.7 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-93287 | i2c: smbus: reject oversized block transfers in the common path | MEDIUM | 6.6 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-98006 | ALSA: caiaq: Decoupling ep1_in_urb in caiaq dev | MEDIUM | 6.6 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-69469 | Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability | MEDIUM | 6.6 | 42%ile | Microsoft | 2026-09-08 |
| CVE-2026-19444 | Kubernetes kubectl cp path traversal on Windows allows arbitrary file writes | MEDIUM | 6.5 | 14%ile | Microsoft | 2026-09-08 |
| CVE-2025-14181 | Integer overflow to buffer overflow in soap HTTP parsing | MEDIUM | 6.5 | 24%ile | Microsoft | 2026-09-08 |
| CVE-2026-100070 | netfilter: nf_nat_sip: rewind offset when NAT shrinks the packet | MEDIUM | 6.5 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-102275 | PyJWT accepts inconsistent OKP x/d JWKs, causing public/private key identity confusion | MEDIUM | 6.5 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-102623 | Kubevirt: kubevirt: virt-controller nil-pointer dereference via malformed ephemeral volume | MEDIUM | 6.5 | 24%ile | Microsoft | 2026-09-08 |
| CVE-2026-103001 | PyJWT.decode() reintroduces options-dict mutation, enabling silent claim-verification bypass on dict reuse | MEDIUM | 6.5 | 17%ile | Microsoft | 2026-09-08 |
| CVE-2026-19931 | Negotiate ambient user conn reuse | MEDIUM | 6.5 | 66%ile | Microsoft | 2026-09-08 |
| CVE-2026-66076 | RabbitMQ: Cross-vhost quorum-queue status and stream tracking disclosure | MEDIUM | 6.5 | 26%ile | Microsoft | 2026-09-08 |
| CVE-2026-67220 | RabbitMQ: JMS topic exchange erl_scan atom exhaustion | MEDIUM | 6.5 | 24%ile | Microsoft | 2026-09-08 |
| CVE-2026-67409 | RabbitMQ: JWKS Fetch Ignores HTTP Response Status Code - Signing Key Destruction Causes Authentication DoS | MEDIUM | 6.5 | 36%ile | Microsoft | 2026-09-08 |
| CVE-2026-78227 | Use-after-free in DoQ stream output buffer on reset re-transmission | MEDIUM | 6.5 | 28%ile | Microsoft | 2026-09-08 |
| CVE-2026-80819 | Bluetooth: RFCOMM: take rfcomm_mutex for the deferred setup accept | MEDIUM | 6.5 | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-85769 | Libtpms: libtpms: heap out-of-bounds read in tpm2 state unmarshalling via unchecked block_skip_read() blocksize | MEDIUM | 6.5 | 36%ile | Microsoft | 2026-09-08 |
| CVE-2026-89158 | PCRE2 before 10.48, on 32-bit platforms, has a pcre2_compile_32 integer overflow and resultant out-of-bounds write. | MEDIUM | 6.5 | 16%ile | Microsoft | 2026-09-08 |
| CVE-2026-89476 | sctp: fix stream->outcnt underflow on duplicate RECONF responses | MEDIUM | 6.5 | 53%ile | Microsoft | 2026-09-08 |
| CVE-2026-89481 | nvme-tcp: fix host memory disclosure on R2T for a read command | MEDIUM | 6.5 | 38%ile | Microsoft | 2026-09-08 |
| CVE-2026-89537 | SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2 | MEDIUM | 6.5 | 53%ile | Microsoft | 2026-09-08 |
| CVE-2026-89632 | smb: client: fix use-before-check of ReparseDataLength in reparse_buf_ptr() | MEDIUM | 6.5 | 46%ile | Microsoft | 2026-09-08 |
| CVE-2026-89657 | libceph: validate OSD extent maps before cursor advance | MEDIUM | 6.5 | 49%ile | Microsoft | 2026-09-08 |
| CVE-2026-89671 | nfsd: gate nfs3 setacl by argp->mask | MEDIUM | 6.5 | 46%ile | Microsoft | 2026-09-08 |
| CVE-2026-89699 | nfsd: validate symlink target length in NFSv4 CREATE | MEDIUM | 6.5 | 43%ile | Microsoft | 2026-09-08 |
| CVE-2026-90015 | xhci: fix lost bounce buffers on TDs spanning several ring segments | MEDIUM | 6.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-90078 | net/sched: act_skbmod: fix length calculations and avoid invalid header warnings | MEDIUM | 6.5 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90088 | Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop | MEDIUM | 6.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-91767 | Heap-buffer-overflow in php_openssl_matches_wildcard_name on crafted server cert wildcard CN | MEDIUM | 6.5 | 1%ile | Microsoft | 2026-09-08 |
| CVE-2026-91768 | IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison (memcmp 12 bytes) | MEDIUM | 6.5 | 32%ile | Microsoft | 2026-09-08 |
| CVE-2026-93541 | Out-of-bounds read in libXi's XQueryDeviceState() | MEDIUM | 6.5 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-93542 | Out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes() | MEDIUM | 6.5 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-93544 | Out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing | MEDIUM | 6.5 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-93545 | Out-of-bounds read in libXi's XListInputDevices() | MEDIUM | 6.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-94281 | Out-of-bounds read in libXi's XListInputDevices() class parsing | MEDIUM | 6.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-94283 | Out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser | MEDIUM | 6.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-97409 | nvme-fc: Do not cancel requests in io target before it is initialized | MEDIUM | 6.5 | 17%ile | Microsoft | 2026-09-08 |
| CVE-2026-97476 | rds: filter RDS_INFO_* getsockopt by caller's netns | MEDIUM | 6.5 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-97561 | smb: client: honor forceuid/forcegid when mapping SIDs to uid/gid | MEDIUM | 6.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-97939 | ipmr: account multicast table and route memory | MEDIUM | 6.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-97952 | sunvdc: unmap LDC cookies when the descriptor send fails | MEDIUM | 6.5 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-98123 | sctp: fix soft lockup from unpadded ASCONF-ACK parameter iteration | MEDIUM | 6.5 | 1%ile | Microsoft | 2026-09-08 |
| CVE-2026-58649 | .NET Information Disclosure Vulnerability | MEDIUM | 6.5 | 30%ile | Microsoft | 2026-09-08 |
| CVE-2026-62762 | Windows Active Directory Domain Services Denial of Service Vulnerability | MEDIUM | 6.5 | 67%ile | Microsoft | 2026-09-08 |
| CVE-2026-62801 | Microsoft PowerShell Security Feature Bypass Vulnerability | MEDIUM | 6.5 | 55%ile | Microsoft | 2026-09-08 |
| CVE-2026-63523 | Skype for Business Spoofing Vulnerability | MEDIUM | 6.5 | 46%ile | Microsoft | 2026-09-08 |
| CVE-2026-64918 | Microsoft Office Spoofing Vulnerability | MEDIUM | 6.5 | 59%ile | Microsoft | 2026-09-08 |
| CVE-2026-66303 | Skype for Business and Lync Denial of Service Vulnerability | MEDIUM | 6.5 | 67%ile | Microsoft | 2026-09-08 |
| CVE-2026-66306 | Skype for Business Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-66308 | Skype for Business and Lync Denial of Service Vulnerability | MEDIUM | 6.5 | 67%ile | Microsoft | 2026-09-08 |
| CVE-2026-66816 | Microsoft SQL Server Security Feature Bypass Vulnerability | MEDIUM | 6.5 | 63%ile | Microsoft | 2026-09-08 |
| CVE-2026-67369 | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 63%ile | Microsoft | 2026-09-08 |
| CVE-2026-67383 | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 63%ile | Microsoft | 2026-09-08 |
| CVE-2026-67386 | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 63%ile | Microsoft | 2026-09-08 |
| CVE-2026-67389 | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 63%ile | Microsoft | 2026-09-08 |
| CVE-2026-67390 | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 63%ile | Microsoft | 2026-09-08 |
| CVE-2026-67393 | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 63%ile | Microsoft | 2026-09-08 |
| CVE-2026-67624 | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 63%ile | Microsoft | 2026-09-08 |
| CVE-2026-67629 | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 63%ile | Microsoft | 2026-09-08 |
| CVE-2026-67630 | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 63%ile | Microsoft | 2026-09-08 |
| CVE-2026-67633 | Microsoft SQL Server Denial of Service Vulnerability | MEDIUM | 6.5 | 67%ile | Microsoft | 2026-09-08 |
| CVE-2026-67641 | Microsoft SQL Server Denial of Service Vulnerability | MEDIUM | 6.5 | 67%ile | Microsoft | 2026-09-08 |
| CVE-2026-67645 | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 63%ile | Microsoft | 2026-09-08 |
| CVE-2026-67648 | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 63%ile | Microsoft | 2026-09-08 |
| CVE-2026-68776 | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 63%ile | Microsoft | 2026-09-08 |
| CVE-2026-68777 | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 63%ile | Microsoft | 2026-09-08 |
| CVE-2026-68778 | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 63%ile | Microsoft | 2026-09-08 |
| CVE-2026-68779 | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 63%ile | Microsoft | 2026-09-08 |
| CVE-2026-68780 | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 63%ile | Microsoft | 2026-09-08 |
| CVE-2026-68781 | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 63%ile | Microsoft | 2026-09-08 |
| CVE-2026-68784 | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 63%ile | Microsoft | 2026-09-08 |
| CVE-2026-68898 | Windows iSCSI Denial of Service Vulnerability | MEDIUM | 6.5 | 59%ile | Microsoft | 2026-09-08 |
| CVE-2026-69267 | Windows Connected User Experiences and Telemetry Information Disclosure Vulnerability | MEDIUM | 6.5 | 29%ile | Microsoft | 2026-09-08 |
| CVE-2026-69297 | Windows DHCP Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 58%ile | Microsoft | 2026-09-08 |
| CVE-2026-69361 | Microsoft Exchange Server Spoofing Vulnerability | MEDIUM | 6.5 | 58%ile | Microsoft | 2026-09-08 |
| CVE-2026-69374 | Windows SMB Server Denial of Service Vulnerability | MEDIUM | 6.5 | 67%ile | Microsoft | 2026-09-08 |
| CVE-2026-69375 | Microsoft Exchange Server Tampering Vulnerability | MEDIUM | 6.5 | 51%ile | Microsoft | 2026-09-08 |
| CVE-2026-69395 | Active Directory Certificate Services (AD CS) Information Disclosure Vulnerability | MEDIUM | 6.5 | 63%ile | Microsoft | 2026-09-08 |
| CVE-2026-69409 | Microsoft Office SharePoint Information Disclosure Vulnerability | MEDIUM | 6.5 | 63%ile | Microsoft | 2026-09-08 |
| CVE-2026-69497 | Windows DHCP Server Denial of Service Vulnerability | MEDIUM | 6.5 | 67%ile | Microsoft | 2026-09-08 |
| CVE-2026-69562 | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-69624 | Active Directory Certificate Services (AD CS) Tampering Vulnerability | MEDIUM | 6.5 | 54%ile | Microsoft | 2026-09-08 |
| CVE-2026-69626 | Microsoft Office Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-69636 | Microsoft Office SharePoint Information Disclosure Vulnerability | MEDIUM | 6.5 | 63%ile | Microsoft | 2026-09-08 |
| CVE-2026-69642 | Skype for Business Spoofing Vulnerability | MEDIUM | 6.5 | 36%ile | Microsoft | 2026-09-08 |
| CVE-2026-69683 | Microsoft Office SharePoint Information Disclosure Vulnerability | MEDIUM | 6.5 | 58%ile | Microsoft | 2026-09-08 |
| CVE-2026-69719 | Microsoft Office Word Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-69734 | Microsoft Office Word Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-69739 | Microsoft Office Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-69839 | Windows iSCSI Target Service Denial of Service Vulnerability | MEDIUM | 6.5 | 67%ile | Microsoft | 2026-09-08 |
| CVE-2026-70019 | Windows Compressed Folder Information Disclosure Vulnerability | MEDIUM | 6.5 | 64%ile | Microsoft | 2026-09-08 |
| CVE-2026-72938 | Microsoft Office PowerPoint Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-72939 | Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability | MEDIUM | 6.5 | 67%ile | Microsoft | 2026-09-08 |
| CVE-2026-72942 | Windows Spaceport.sys Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-72956 | Microsoft Office PowerPoint Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-72974 | Microsoft Office Excel Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-72975 | Microsoft Office PowerPoint Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-72977 | Microsoft Office PowerPoint Information Disclosure Vulnerability | MEDIUM | 6.5 | 62%ile | Microsoft | 2026-09-08 |
| CVE-2026-73029 | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 63%ile | Microsoft | 2026-09-08 |
| CVE-2026-77896 | Windows Remote Desktop Client Denial of Service Vulnerability | MEDIUM | 6.5 | 53%ile | Microsoft | 2026-09-08 |
| CVE-2026-77911 | Microsoft Office Word Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-78441 | Windows OLE DB Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-78453 | Microsoft Windows SCSI Class System File Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-78502 | Microsoft Office Word Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-78503 | Microsoft Office Word Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-78515 | Microsoft Office Excel Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-78520 | Microsoft Office Outlook Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-78522 | Microsoft Office Word Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-80073 | Microsoft Office Outlook Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-80076 | Microsoft Office Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-80078 | Microsoft Office Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-80079 | Microsoft Office Word Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-80082 | Microsoft Office Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-80084 | Microsoft Office Outlook Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-80086 | Microsoft Office PowerPoint Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-80087 | Microsoft Office Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-80088 | Microsoft Office Word Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-80089 | Microsoft Office Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-80090 | Microsoft Office Word Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-80091 | Microsoft Office Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-81377 | Visual Studio Code Tampering Vulnerability | MEDIUM | 6.5 | 55%ile | Microsoft | 2026-09-08 |
| CVE-2026-81381 | GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability | MEDIUM | 6.5 | 59%ile | Microsoft | 2026-09-08 |
| CVE-2026-95275 | Chromium CVE-2026-95275: Incorrect reference resolution in MediaStream | MEDIUM | 6.5 | 20%ile | Microsoft | 2026-09-08 |
| CVE-2026-95297 | Chromium CVE-2026-95297: Missing authorization in Contextual Tasks | MEDIUM | 6.5 | 14%ile | Microsoft | 2026-09-08 |
| CVE-2026-95303 | Chromium CVE-2026-95303: Incomplete cleanup in SmartCard | MEDIUM | 6.5 | 20%ile | Microsoft | 2026-09-08 |
| CVE-2026-95327 | Chromium CVE-2026-95327: Information leak in Networking | MEDIUM | 6.5 | 16%ile | Microsoft | 2026-09-08 |
| CVE-2026-95328 | Chromium CVE-2026-95328: Confused deputy in Mobile | MEDIUM | 6.5 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-95330 | Chromium CVE-2026-95330: Improper state validation in Downloads | MEDIUM | 6.5 | 14%ile | Microsoft | 2026-09-08 |
| CVE-2026-95336 | Chromium CVE-2026-95336: Information leak in Transactions Platform | MEDIUM | 6.5 | 16%ile | Microsoft | 2026-09-08 |
| CVE-2026-95366 | Chromium CVE-2026-95366: Use of released resource in Core | MEDIUM | 6.5 | 13%ile | Microsoft | 2026-09-08 |
| CVE-2026-95374 | Chromium CVE-2026-95374: Incorrect authorization in Network | MEDIUM | 6.5 | 8%ile | Microsoft | 2026-09-08 |
| CVE-2026-95382 | Chromium CVE-2026-95382: Improper input validation in Auth | MEDIUM | 6.5 | 14%ile | Microsoft | 2026-09-08 |
| CVE-2026-95385 | Chromium CVE-2026-95385: Inappropriate implementation in PlatformIntegration | MEDIUM | 6.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-102991 | Mako: Path traversal via drive-letter URI on Windows in TemplateLookup | MEDIUM | 6.5 | 29%ile | Microsoft | 2026-09-08 |
| CVE-2026-89102 | OCSP stapling v2 multi accepts non-CA chain certificates as issuers | MEDIUM | 6.5 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-80757 | selinux: reject a class permission count below its inherited common | MEDIUM | 6.4 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-80952 | i3c: master: Fix info leak and UAF in device unregister path | MEDIUM | 6.4 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-89448 | iommu/vt-d: Force requesting ACS when tboot is enabled | MEDIUM | 6.4 | 4%ile | Microsoft | 2026-09-08 |
| CVE-2026-89547 | SUNRPC: Check svc pool percpu counter allocation | MEDIUM | 6.4 | 47%ile | Microsoft | 2026-09-08 |
| CVE-2026-89548 | SUNRPC: always drain cache_cleaner before destroying a cache_detail | MEDIUM | 6.4 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-89625 | HID: sony: fix UAF of ghl_poke_timer / ghl_urb at driver unbind | MEDIUM | 6.4 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-89643 | audit: avoid dropping live tree ref on fsnotify rule autoremove | MEDIUM | 6.4 | 54%ile | Microsoft | 2026-09-08 |
| CVE-2026-89659 | NFSD: Prevent client use-after-free during delegation revoke | MEDIUM | 6.4 | 41%ile | Microsoft | 2026-09-08 |
| CVE-2026-93820 | PCI: rockchip: Protect root bus removal with rescan lock | MEDIUM | 6.4 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-97503 | genirq/proc: Size interrupt directory names for 10-digit interrupt numbers | MEDIUM | 6.4 | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-69878 | Windows DHCP Server Remote Code Execution Vulnerability | MEDIUM | 6.4 | 20%ile | Microsoft | 2026-09-08 |
| CVE-2026-70582 | Windows Management Instrumentation Elevation of Privilege Vulnerability | MEDIUM | 6.4 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-71338 | Windows Failover Cluster Elevation of Privilege Vulnerability | MEDIUM | 6.4 | 20%ile | Microsoft | 2026-09-08 |
| CVE-2026-72947 | Windows File History Service Elevation of Privilege Vulnerability | MEDIUM | 6.4 | 19%ile | Microsoft | 2026-09-08 |
| CVE-2026-77887 | Windows DHCP Server Remote Code Execution Vulnerability | MEDIUM | 6.4 | 20%ile | Microsoft | 2026-09-08 |
| CVE-2026-77891 | Windows DHCP Server Remote Code Execution Vulnerability | MEDIUM | 6.4 | 20%ile | Microsoft | 2026-09-08 |
| CVE-2026-93260 | powerpc/xive: propagate IPI init errors to prevent use-after-free | MEDIUM | 6.4 | 4%ile | Microsoft | 2026-09-08 |
| CVE-2026-97509 | thunderbolt: Keep XDomain reference during the lifetime of a service | MEDIUM | 6.4 | 15%ile | Microsoft | 2026-09-08 |
| CVE-2026-80785 | fbdev: serialize mode sysfs access with lock_fb_info() | MEDIUM | 6.3 | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-80831 | crypto: mxs-dcp - fix source scatterlist length access | MEDIUM | 6.3 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-80980 | net/smc: stop killed, freed and out_of_sync sharing a byte | MEDIUM | 6.3 | 52%ile | Microsoft | 2026-09-08 |
| CVE-2026-81002 | xdp: fix zero-copy frame layout | MEDIUM | 6.3 | 44%ile | Microsoft | 2026-09-08 |
| CVE-2026-86805 | AT_SECURE programs may load attacker-controlled code via $ORIGIN | MEDIUM | 6.3 | 1%ile | Microsoft | 2026-09-08 |
| CVE-2026-90091 | Bluetooth: L2CAP: fix race l2cap_sock_cleanup_listen() vs. put_chan | MEDIUM | 6.3 | 30%ile | Microsoft | 2026-09-08 |
| CVE-2026-90206 | nvmet: fix max_qid race between configfs and controller allocation | MEDIUM | 6.3 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-97415 | btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF | MEDIUM | 6.3 | 3%ile | Microsoft | 2026-09-08 |
| CVE-2026-97425 | drm/amdgpu: fix buffer overflow during vBIOS update | MEDIUM | 6.3 | 8%ile | Microsoft | 2026-09-08 |
| CVE-2026-97451 | ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) | MEDIUM | 6.3 | 4%ile | Microsoft | 2026-09-08 |
| CVE-2026-97493 | drm/amdgpu: Bound GPIO I2C table entry count from VBIOS | MEDIUM | 6.3 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-97495 | drm/amdkfd: Check bounds on allocate_doorbell | MEDIUM | 6.3 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-97497 | drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id | MEDIUM | 6.3 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-98084 | bpf: backtracking shouldn't clear outer frame R1-R5 for callbacks | MEDIUM | 6.3 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-95375 | Chromium CVE-2026-95375: Incorrect authorization in BrowserTag | MEDIUM | 6.3 | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-97423 | cxl/region: Validate partition index before array access | MEDIUM | 6.3 | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-88383 | libical 4.0.6 contains an incompatible function pointer in icalparameter_string_to_kind(). When parsing iCalendar data c | MEDIUM | 6.2 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-88815 | DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in sql_type_cast_svpv | MEDIUM | 6.2 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-89329 | Device-mapper-multipath: local denial of service via blocking ipc send operations | MEDIUM | 6.2 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-97981 | net: ethernet: cortina: Count dropped frames as NAPI work | MEDIUM | 6.2 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-98158 | ppp_async: drop the errored frame instead of resetting its headroom | MEDIUM | 6.2 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-18090 | Gdk-pixbuf: gdk-pixbuf: heap out-of-bounds read in uncompress() via crafted icns rle block | MEDIUM | 6.1 | 14%ile | Microsoft | 2026-09-08 |
| CVE-2026-80931 | w1: ds28e17: reject an oversize length on an I2C block read | MEDIUM | 6.1 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-88832 | Busybox: busybox: romfs volume id parsing performs unbounded memcpy into fixed-size label buffer, causing heap overflow | MEDIUM | 6.1 | 3%ile | Microsoft | 2026-09-08 |
| CVE-2026-88835 | Busybox: busybox: dpkg read_package_field() steps past nul terminator, causing out-of-bounds read on malformed .deb pack | MEDIUM | 6.1 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-90184 | null_blk: serialize configfs attribute updates with device setup | MEDIUM | 6.1 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90251 | Bluetooth: MSFT: validate evt_prefix_len against the response length | MEDIUM | 6.1 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-97908 | Bluetooth: btqcomsmd: destroy RPMsg endpoints before freeing hci_dev | MEDIUM | 6.1 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-97945 | x86/mm: Fix user-space data loss with MADV_FREE and THP | MEDIUM | 6.1 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-55946 | Microsoft Copilot Information Disclosure Vulnerability | MEDIUM | 6.1 | 33%ile | Microsoft | 2026-09-08 |
| CVE-2026-77490 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | MEDIUM | 6.1 | 36%ile | Microsoft | 2026-09-08 |
| CVE-2026-80755 | selinux: reject a permission value exceeding the class permission count | MEDIUM | 6.0 | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-80844 | xfrm: ah6: validate routing header segments_left | MEDIUM | 6.0 | 38%ile | Microsoft | 2026-09-08 |
| CVE-2026-80852 | tls: device: fix out-of-bounds write in tls_append_frag() | MEDIUM | 6.0 | 8%ile | Microsoft | 2026-09-08 |
| CVE-2026-97435 | net: dsa: sja1105: flower: reject cross-chip redirect | MEDIUM | 6.0 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-97494 | drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fw | MEDIUM | 6.0 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-80807 | nilfs2: reject invalid block index in GC ioctl | MEDIUM | 6.0 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-102274 | PyJWT: Malformed RSA JWK aborts parsing of an entire JWK Set | MEDIUM | 5.9 | 46%ile | Microsoft | 2026-09-08 |
| CVE-2026-18149 | undici vulnerable to Denial of Service via orphaned RetryHandler response body | MEDIUM | 5.9 | 42%ile | Microsoft | 2026-09-08 |
| CVE-2026-18924 | HTTP/2 server push UAF | MEDIUM | 5.9 | 48%ile | Microsoft | 2026-09-08 |
| CVE-2026-19662 | qpcache NOQNAME proof use-after-free crashes recursive resolver | MEDIUM | 5.9 | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-19941 | checkwildcard() accepts an out-of-zone NSEC as a wildcard-nonexistence proof | MEDIUM | 5.9 | 13%ile | Microsoft | 2026-09-08 |
| CVE-2026-77117 | SHIFT_JISX0213 decoding may hang on crafted input | MEDIUM | 5.9 | 30%ile | Microsoft | 2026-09-08 |
| CVE-2026-78129 | strongSwan 4.6.2 through 6.0.7 has an infinite loop in PKCS#5 decryption. | MEDIUM | 5.9 | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-80489 | EUC_JISX0213 decoding may hang on crafted input | MEDIUM | 5.9 | 30%ile | Microsoft | 2026-09-08 |
| CVE-2026-80783 | HID: magicmouse: prevent unbounded recursion in magicmouse_raw_event() | MEDIUM | 5.9 | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-80829 | ALSA: usb-audio: fix OOB write in snd_usbmidi_novation_output() | MEDIUM | 5.9 | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-80904 | net/tls: Fail tls_sw_splice_read() after a failed async decrypt | MEDIUM | 5.9 | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-82720 | Use-after-free in DoH stream cleanup code path | MEDIUM | 5.9 | 32%ile | Microsoft | 2026-09-08 |
| CVE-2026-85534 | Libsoup: libsoup: http/2 client crash in on_data_source_read_callback when settings initial_window_size shrinks during d | MEDIUM | 5.9 | 24%ile | Microsoft | 2026-09-08 |
| CVE-2026-86003 | CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP | MEDIUM | 5.9 | 38%ile | Microsoft | 2026-09-08 |
| CVE-2026-89531 | svcrdma: Reject connection when transport allocation fails | MEDIUM | 5.9 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-89550 | SUNRPC: svcauth_gss: enforce krb5 token minimum length | MEDIUM | 5.9 | 42%ile | Microsoft | 2026-09-08 |
| CVE-2026-89564 | ip: orphan prefetched skbs before multicast forwarding | MEDIUM | 5.9 | 3%ile | Microsoft | 2026-09-08 |
| CVE-2026-91766 | Cross-origin credential leak in HTTP stream wrapper redirects | MEDIUM | 5.9 | 21%ile | Microsoft | 2026-09-08 |
| CVE-2026-92842 | OOB read / info leak in convert.* stream filters when line-break-chars contains NUL | MEDIUM | 5.9 | 20%ile | Microsoft | 2026-09-08 |
| CVE-2026-93790 | wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif | MEDIUM | 5.9 | 17%ile | Microsoft | 2026-09-08 |
| CVE-2026-93830 | net: stmmac: xgmac2: disable RBUE in default RX interrupt mask | MEDIUM | 5.9 | 42%ile | Microsoft | 2026-09-08 |
| CVE-2026-69304 | ASP.NET Core Denial of Service Vulnerability | MEDIUM | 5.9 | 58%ile | Microsoft | 2026-09-08 |
| CVE-2026-69382 | Microsoft Exchange Server Information Disclosure Vulnerability | MEDIUM | 5.9 | 41%ile | Microsoft | 2026-09-08 |
| CVE-2026-69803 | Windows DHCP Server Information Disclosure Vulnerability | MEDIUM | 5.9 | 58%ile | Microsoft | 2026-09-08 |
| CVE-2026-69929 | Windows DHCP Server Information Disclosure Vulnerability | MEDIUM | 5.9 | 58%ile | Microsoft | 2026-09-08 |
| CVE-2026-69930 | Windows DHCP Server Information Disclosure Vulnerability | MEDIUM | 5.9 | 58%ile | Microsoft | 2026-09-08 |
| CVE-2026-70091 | Windows DNS Denial of Service Vulnerability | MEDIUM | 5.9 | 51%ile | Microsoft | 2026-09-08 |
| CVE-2026-70124 | Windows DHCP Server Information Disclosure Vulnerability | MEDIUM | 5.9 | 58%ile | Microsoft | 2026-09-08 |
| CVE-2026-72978 | Active Directory Federation Services (AD FS) Denial of Service Vulnerability | MEDIUM | 5.9 | 62%ile | Microsoft | 2026-09-08 |
| CVE-2026-78523 | Windows DNS Server Denial of Service Vulnerability | MEDIUM | 5.9 | 62%ile | Microsoft | 2026-09-08 |
| CVE-2026-102633 | libexpat 2.7.2 through 2.8.5 Integer Overflow in expat_realloc | MEDIUM | 5.9 | 31%ile | Microsoft | 2026-09-08 |
| CVE-2026-6669 | Unbounded SCRAM iteration count causes CPU exhaustion in PgBouncer | MEDIUM | 5.9 | 36%ile | Microsoft | 2026-09-08 |
| CVE-2026-71972 | U-Boot through 2026.10-rc5 Out-of-Bounds Write in BMP RLE8 Decoder | MEDIUM | 5.9 | 13%ile | Microsoft | 2026-09-08 |
| CVE-2026-93750 | http-cache-semantics through 4.2.0 Cross-Client Cache Disclosure via Vary Wildcard | MEDIUM | 5.9 | 39%ile | Microsoft | 2026-09-08 |
| CVE-2026-80780 | HID: pidff: fix OOB write when hid->inputs is empty | MEDIUM | 5.9 | 8%ile | Microsoft | 2026-09-08 |
| CVE-2026-80802 | nfc: fdp: bound the device-reported read length and fix an skb leak | MEDIUM | 5.9 | 16%ile | Microsoft | 2026-09-08 |
| CVE-2026-80846 | xfrm: drop ESP-in-TCP packets with no ingress device | MEDIUM | 5.9 | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-80848 | xfrm: espintcp: fix UAF during close | MEDIUM | 5.9 | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-80891 | KVM: s390: pci: Validate AIBV and AISB before pinning guest pages | MEDIUM | 5.9 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-78301 | Out-of-zone database nodes can become authoritative zone cuts | MEDIUM | 5.8 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-93682 | Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header | MEDIUM | 5.8 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-93817 | perf: Fix addr_filter_ranges lifetime | MEDIUM | 5.8 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-97421 | RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() | MEDIUM | 5.8 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-97429 | drm/amdkfd: fix UAF race in destroy_queue_cpsch | MEDIUM | 5.8 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-69559 | Microsoft Teams for Android Information Disclosure Vulnerability | MEDIUM | 5.8 | 25%ile | Microsoft | 2026-09-08 |
| CVE-2026-80731 | net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header | MEDIUM | 5.7 | 3%ile | Microsoft | 2026-09-08 |
| CVE-2026-80841 | net/packet: defer vmalloc TX_RING free until skbs finish | MEDIUM | 5.7 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-80842 | net: bridge: mcast: fix use-after-free of a master VLAN's multicast context | MEDIUM | 5.7 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-80947 | wifi: rtl8xxxu: fix use-after-free from rx_urb_wq on stop | MEDIUM | 5.7 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-80979 | net/smc: unregister the connection before draining the rx tasklet | MEDIUM | 5.7 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-80991 | net: ravb: serialize PTP clock teardown | MEDIUM | 5.7 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-89157 | PCRE2 before 10.48, on 32-bit platforms, has a pcre2_pattern_convert out-of-bounds write when an attacker can provide a | MEDIUM | 5.7 | 28%ile | Microsoft | 2026-09-08 |
| CVE-2026-89469 | power: supply: lp8727: fix use-after-free in lp8727_release_irq() | MEDIUM | 5.7 | 3%ile | Microsoft | 2026-09-08 |
| CVE-2026-89510 | RDMA/cxgb4: Cancel reg_work before freeing device on remove | MEDIUM | 5.7 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-89611 | ntfs: validate non-resident attribute offsets | MEDIUM | 5.7 | 46%ile | Microsoft | 2026-09-08 |
| CVE-2026-89740 | serial: imx: serialize imx_uart_ports[] lifetime | MEDIUM | 5.7 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-89741 | Revert "media: v4l2-dev: fix error handling in __video_register_device()" | MEDIUM | 5.7 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-68874 | Windows Program Compatibility Assistant Service Information Disclosure Vulnerability | MEDIUM | 5.7 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-69317 | Windows Remote Desktop Client Information Disclosure Vulnerability | MEDIUM | 5.7 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-69349 | Windows Management Instrumentation Information Disclosure Vulnerability | MEDIUM | 5.7 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-69372 | Windows Network File System Denial of Service Vulnerability | MEDIUM | 5.7 | 58%ile | Microsoft | 2026-09-08 |
| CVE-2026-69393 | Windows Spaceport.sys Information Disclosure Vulnerability | MEDIUM | 5.7 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-69405 | Windows DHCP Server Denial of Service Vulnerability | MEDIUM | 5.7 | 51%ile | Microsoft | 2026-09-08 |
| CVE-2026-69416 | Windows DHCP Server Denial of Service Vulnerability | MEDIUM | 5.7 | 51%ile | Microsoft | 2026-09-08 |
| CVE-2026-69507 | Microsoft Windows Search Component Information Disclosure Vulnerability | MEDIUM | 5.7 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-69552 | Windows Print Spooler Components Information Disclosure Vulnerability | MEDIUM | 5.7 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-69569 | Windows Print Spooler Components Denial of Service Vulnerability | MEDIUM | 5.7 | 58%ile | Microsoft | 2026-09-08 |
| CVE-2026-69572 | Windows SMB Client Information Disclosure Vulnerability | MEDIUM | 5.7 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-69591 | Windows NTFS Information Disclosure Vulnerability | MEDIUM | 5.7 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-69637 | Windows DHCP Server Denial of Service Vulnerability | MEDIUM | 5.7 | 51%ile | Microsoft | 2026-09-08 |
| CVE-2026-69679 | Windows DHCP Server Denial of Service Vulnerability | MEDIUM | 5.7 | 51%ile | Microsoft | 2026-09-08 |
| CVE-2026-69723 | Windows Kernel Information Disclosure Vulnerability | MEDIUM | 5.7 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-93237 | LoongArch: Add DIRECT_MAP_PHYSMEM_END definition | MEDIUM | 5.7 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-93782 | vhost-scsi: flush backend after device ioctls | MEDIUM | 5.7 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-97439 | fs/ntfs3: preserve non-DOS attribute bits in system.dos_attrib | MEDIUM | 5.7 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-80790 | nvmet-fc: fix invalid free in LS IOD error path | MEDIUM | 5.7 | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-80851 | gtp: serialize PDP context updates | MEDIUM | 5.7 | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-80854 | usb: gadget: f_tcm: keep port count until LUN teardown completes | MEDIUM | 5.7 | 8%ile | Microsoft | 2026-09-08 |
| CVE-2026-19542 | Stack-based out-of-bounds write in tdelete during tree rebalancing | MEDIUM | 5.6 | 13%ile | Microsoft | 2026-09-08 |
| CVE-2026-78135 | libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because CREATE_CH | MEDIUM | 5.6 | 37%ile | Microsoft | 2026-09-08 |
| CVE-2026-86144 | In xinclude in libxml2 before 2.15.4, xmlXIncludeProcess and xmlXIncludeProcessTree do not propagate parseFlags. This ha | MEDIUM | 5.6 | 8%ile | Microsoft | 2026-09-08 |
| CVE-2026-93802 | wifi: rsi: validate beacon length before fixed buffer copy | MEDIUM | 5.6 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-94282 | Out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion | MEDIUM | 5.6 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-97445 | ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() | MEDIUM | 5.6 | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-97456 | ACPICA: Fix condition check in acpi_ps_parse_loop() | MEDIUM | 5.6 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-98156 | drm/virtio: use the DMA API for resource backing on Xen | MEDIUM | 5.6 | 3%ile | Microsoft | 2026-09-08 |
| CVE-2026-69832 | Win32k Information Disclosure Vulnerability | MEDIUM | 5.6 | 31%ile | Microsoft | 2026-09-08 |
| CVE-2026-80768 | HID: ft260: fix stack-use-after-return write in I2C read race | MEDIUM | 5.6 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-100074 | bpf: Mark bpf_refcount field as unique | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-100079 | usb: typec: ucsi: unregister debugfs entries on teardown | MEDIUM | 5.5 | 1%ile | Microsoft | 2026-09-08 |
| CVE-2026-31911 | abort() in libpcap before 1.10.7 on an invalid BPF opcode | MEDIUM | 5.5 | 1%ile | Microsoft | 2026-09-08 |
| CVE-2026-31912 | OOBR in libpcap before 1.10.7 | MEDIUM | 5.5 | 1%ile | Microsoft | 2026-09-08 |
| CVE-2026-6244 | division by zero in libpcap before 1.10.7 | MEDIUM | 5.5 | 4%ile | Microsoft | 2026-09-08 |
| CVE-2026-6554 | infinte loop in libpcap before 1.10.7 | MEDIUM | 5.5 | 38%ile | Microsoft | 2026-09-08 |
| CVE-2026-77159 | Libvirt: unsafe chown in qemutpmemulatorpreparehost() allows arbitrary file ownership change via symlink | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-80728 | Revert "drm/amdgpu: fix aperture mapping leak" | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-80730 | ring-buffer: Fix crash passing ERR_PTR to kthread_stop() | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-80733 | net: remove WARN_ON_ONCE() from sk_mc_loop() | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-80738 | bpf: Check sk_state before sk_protocol in bpf_tcp_*_syncookie | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-80742 | af_packet: Don't send zero-byte data in tpacket_snd(). | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-80743 | ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-80747 | drm/amdkfd: Add bounds check for CRAT subtype length | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-09-08 |
| CVE-2026-80752 | Input: psxpad-spi - set driver data before use | MEDIUM | 5.5 | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-80888 | drm/vmwgfx: drop dma_buf reference on foreign-fd prime import | MEDIUM | 5.5 | 8%ile | Microsoft | 2026-09-08 |
| CVE-2026-80905 | net: tap: fix wrong transport_header when sending VLAN-tagged frame | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-82560 | Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting d | MEDIUM | 5.5 | 50%ile | Microsoft | 2026-09-08 |
| CVE-2026-88386 | libsndfile 1.2.2 contains a misaligned memory access issue in psf_binheader_readf() while parsing WAV fmt chunks. A spec | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-89472 | power: supply: charger-manager: register regulators before exposing sysfs | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-89604 | efivarfs: Rate limit statfs() handler | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-89742 | rapidio: mport_cdev: fix use-after-free in dma_req_free() | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-89784 | SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-89796 | mm/damon/core: avoid infinite kdamond_merge_regions() internal loop | MEDIUM | 5.5 | 14%ile | Microsoft | 2026-09-08 |
| CVE-2026-89800 | drm/nouveau/uvmm: clear the dirty flag when unwinding an OP_UNMAP_SPARSE | MEDIUM | 5.5 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-89802 | drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op | MEDIUM | 5.5 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-89809 | drm/amdkfd: fix scope of mqd_mgr dereference in pqm_debugfs_mqds | MEDIUM | 5.5 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-89812 | drm/amdgpu: force complete the MES ring fences on reset | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-89813 | drm/amdgpu: force complete the KIQ ring fences on reset | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-89816 | drm: Fix drm_crtc_commit leak if signaled when PAGE_FLIP_EVENT is used | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-89821 | drm/amd/display: avoid divide-by-zero in __is_lut_linear() | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-89822 | drm/i915: Guard against NULL driver_data in i915_pci_probe() | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-89833 | f2fs: fix to avoid potential deadloop in f2fs_fsync_node_pages() | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-89850 | scsi: qla2xxx: Don't query firmware state while chip is down | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-89865 | scsi: qla2xxx: Zero SFP DMA buffer in FRU/I2C bsg handlers | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-89871 | media: video-i2c: fix kthread error pointer left in kthread_vid_cap on failure | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-89872 | media: v4l2-fwnode: Fix fwnode leak in v4l2_fwnode_parse_link | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-89879 | media: s2255: bound JPEG frame size before copying into the buffer | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-89881 | media: rtl2832_sdr: use vb2_video_unregister_device() on remove to fix DMA leak | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-89896 | media: cedrus: fix memory leak in cedrus_init_ctrls() | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-89900 | media: cec: core: Fix kmemleak due to missed rc_free_device() call | MEDIUM | 5.5 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-89901 | media: airspy: use vb2_video_unregister_device() on disconnect to fix NULL deref | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-89924 | KVM: s390: Fix old_data leak in guest debug error path | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-89933 | iio: pressure: dps310: fix NULL pointer dereference on ACPI probe | MEDIUM | 5.5 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-89937 | iio: chemical: sgp30: Handle IAQ thread creation failure | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-89945 | ASoC: cs35l34: drain threaded IRQ before runtime suspend | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-89946 | ASoC: cs35l33: drain threaded IRQ before runtime suspend | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-89953 | mtd: mtdoops: free page bitmap when the backing MTD is removed | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-89955 | s390/vfio-ap: Fix NULL deref in status_show() during queue probe | MEDIUM | 5.5 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-89975 | nvme-fabrics: fix DHCHAP secret leak on parse failure | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-89982 | i2c: mux: Fix channel node leak on adapter add failure | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-89987 | mm/huge_memory: transfer the pmd dirty bit to the folio on zap | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-89989 | ima: Check for ERR_PTR from dentry_path() in validate_hash_algo() | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-89993 | dmaengine: dw-edma: Initialize IRQ data before requesting IRQs | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90019 | usb: gadget: fix null pointer dereference in usb_put_function_instance() | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-90020 | USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90023 | usb: gadget: f_mass_storage: fix null pointer dereference in fsg_common_set_num_buffers() | MEDIUM | 5.5 | 14%ile | Microsoft | 2026-09-08 |
| CVE-2026-90035 | drm/amd/display: fix division by zero in get_estimated_bw() | MEDIUM | 5.5 | 8%ile | Microsoft | 2026-09-08 |
| CVE-2026-90056 | net: fec: only stop PTP if it was initialized | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-90062 | netfilter: nf_tables: move hardware offload step after building the chain blob | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-90066 | samples/ftrace: Fix kthread_stop() on ERR_PTR in ftrace-direct-multi-modify | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90071 | net/sched: sch_teql: restore skb->dev on the slave failure path | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-90073 | net/sched: hhf: clamp quantum before hhf_change() to avoid overflow | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-90074 | net/sched: fq_pie: clamp default quantum to avoid signed overflow | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-90075 | net/sched: fq_codel: clamp default quantum and mtu | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-90098 | net: sparx5: fix sleep in atomic context in MAC table access | MEDIUM | 5.5 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-90107 | net/smc: free pending qentry in smc_llc_flow_stop() before memset | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-90109 | net: sched: fix 32-bit backlog wrap in gred, bfifo and plug enqueue | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-90119 | ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup | MEDIUM | 5.5 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-90130 | vdpa_sim: fix cleanup after worker creation failure | MEDIUM | 5.5 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-90148 | NFSv4: Fix incorrect argument passed to nfs4_delete_lease() in nfs4_add_lease() | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-90150 | pnfs/blocklayout: Fix device leaks on parse failure | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-90156 | ksmbd: safely discard unregistered deferred locks | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-90161 | erofs: fix interlaced ztailpacking pclusters | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-90166 | smb/server: fix null-ptr-deref in ksmbd_ipc_tree_connect_request() | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-90175 | smb: server: fix leak of ksmbd_ipc_login_request_ext() returned buffer | MEDIUM | 5.5 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-90182 | blk-iocost: clear delay state when freeing policy data | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90202 | scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-90208 | clocksource/drivers/samsung_pwm: Switch to raw_spinlock_t type | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-90213 | firewire: core: fix memory leak in error path of build_tree() | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-90218 | RDMA/cma: Fix WARNING in res_to_rt | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-90229 | nvme-apple: Destroy the admin queue on removal | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-90237 | netfilter: nft_ct: move custom expectation support to helper | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-90245 | fbdev: kyro: Validate overlay viewport coordinates | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90250 | bpf, cgroup: Fix storage null-ptr-deref after replacing prog | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-90264 | btrfs: always wait for ordered extents to avoid OE races | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90265 | btrfs: defrag: fix deadlock between defrag and delalloc space reservation | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-90274 | coresight: etm4x: fix underflow for usage of (nrseqstate - 1) | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-90280 | phy: qcom: qmp-usb: Fix possible NULL-deref on early runtime suspend | MEDIUM | 5.5 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-90281 | phy: qcom: snps-femto-v2: Fix possible NULL-deref on early runtime suspend | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90282 | phy: qcom: qmp-usb-legacy: Fix possible NULL-deref on early runtime suspend | MEDIUM | 5.5 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-90284 | firmware_loader: do not queue completed sysfs fallback requests | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-90285 | scsi: qla2xxx: Remove redundant VPD flash read in sysfs read path | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-90297 | drm/sun4i: crtc: Propagate layer initialization error | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90307 | RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-90308 | RDMA/erdma: Hold QP references for AE and CM processing | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-90309 | RDMA/erdma: Hold CQ references when processing EQ events | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-90329 | HID: synchronize input before cleaning up a failed probe | MEDIUM | 5.5 | 28%ile | Microsoft | 2026-09-08 |
| CVE-2026-90333 | dm-integrity: replace forgeable discard filler with a keyed sector marker | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-90346 | wifi: nl80211: clean up color-change beacon data on errors | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-90352 | wifi: mt76: mt7915: release hif2 reference on probe IRQ failure | MEDIUM | 5.5 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-90364 | ACPI: processor: Unregister cpufreq notifier on init failure | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90368 | wifi: mt76: mt7915: unwind state on add_interface failure | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90370 | wifi: mt76: mt7996: bound TLV walk in mt7996_mcu_get_chip_config | MEDIUM | 5.5 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-90379 | wifi: mt76: mt7921: Add PCIe AER handler support to prevent system crash | MEDIUM | 5.5 | 32%ile | Microsoft | 2026-09-08 |
| CVE-2026-90387 | swiotlb: Preserve allocation virtual address for dynamic pools | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-90388 | iommu/dma: Check atomic pool allocation result directly | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-90391 | lib/test_hmm: fail dmirror_fault() when the mirrored mm is gone | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90395 | power: supply: isp1704_charger: cancel work on remove | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-90397 | firmware: qcom: scm: Fix NULL dereference in IRQ handler before __scm is published | MEDIUM | 5.5 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-90417 | RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-90418 | nilfs2: fix BUG in nilfs_copy_dirty_pages() on dirty state mismatch | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-90422 | clk: mediatek: pllfh: Fix IO remapping leak in register_pllfhs error path | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-92476 | crypto: keembay - Initialize completion before requesting IRQ | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-92482 | pinctrl: mediatek: use devm_gpiochip_add_data() for GPIO chip | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-92493 | cpufreq: amd-pstate-ut: Skip tests when amd-pstate driver is not active | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-92494 | ext4: fix buffer_head leak in ext4_init_orphan_info | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-92503 | ext4: fix ABBA deadlock in ext4_xattr_inode_cache_find() | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-92519 | riscv, bpf: Fix memory leak in bpf_jit_free | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-92520 | bpf: Zero queue and stack outputs on lock failure | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-92523 | RDMA/nldev: validate dynamic counter attribute length | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-93042 | dmaengine: dw-edma: Terminate all descriptors without callbacks | MEDIUM | 5.5 | 34%ile | Microsoft | 2026-09-08 |
| CVE-2026-93047 | drm/v3d: Associate BOs with every job that accesses them | MEDIUM | 5.5 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-93048 | mtd: part: reject MTDPART_OFS_RETAIN in mtd_add_partition() | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-93052 | misc: bcm-vk: Use acquire/release for msgq_inited | MEDIUM | 5.5 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-93054 | uio: Fix stale info pointer in failed registration path | MEDIUM | 5.5 | 4%ile | Microsoft | 2026-09-08 |
| CVE-2026-93058 | drm/msm: Only fini scheduler after successful init | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-93072 | irqchip/renesas-irqc: Fix generic interrupt chip leak on remove | MEDIUM | 5.5 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-93090 | firmware: arm_scmi: Clean up channels on setup failure | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-93091 | firmware: arm_scmi: Quiesce notifications before teardown | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-93093 | firmware: arm_scmi: Publish channel state before callbacks | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-93097 | cxl/mbox: Break poison list loop on an empty payload | MEDIUM | 5.5 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-93099 | fs/resctrl: Fix UAF from worker threads when domains are removed | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-93103 | RDMA/hfi1: Preserve unit 0 on allocation failure | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-93104 | RDMA/rvt: Return NULL after port allocation failure | MEDIUM | 5.5 | 8%ile | Microsoft | 2026-09-08 |
| CVE-2026-93105 | esp: do not unref managed frag pages in esp_ssg_unref() | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-93114 | platform/surface: acpi-notify: Check ACPI companion before use | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-93116 | platform/x86: asus-wmi: fix resource leaks on probe failure | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-93118 | usb: gadget: aspeed_udc: check endpoint DMA allocation | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-93125 | bpf: Reject rdonly/rdwr_buf_size kfunc arguments that exceed u32 max | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-09-08 |
| CVE-2026-93142 | thermal/drivers/rcar: Fix error checking in probe() | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-93149 | wifi: mac80211_hwsim: avoid NULL skb in stop queue drain | MEDIUM | 5.5 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-93150 | cgroup/cpuset: Make nr_deadline_tasks an atomic_t | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-93160 | crypto: atmel-ecc - reject hardware ECDH without a public key | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-93179 | drm/amd/powerplay: fix VoltageObjectInfo zero-stride loop and OOB read | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-93183 | drm/lima: call drm_mm_init() with a valid allocation range | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-93185 | ASoC: rt700-sdw: always drain jack work on remove | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-93186 | cxl/mbox: Clamp mailbox output allocation to the payload size | MEDIUM | 5.5 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-93192 | drm/v3d: Clear queue->active_job when v3d_fence_create() fails | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-93202 | i3c: master: Fix recursive locking during device registration | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-93243 | mm/secretmem: properly account locked pages | MEDIUM | 5.5 | 17%ile | Microsoft | 2026-09-08 |
| CVE-2026-93286 | net: appletalk: fix NULL pointer dereference in aarp_send_ddp() | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-93433 | Libstoragemgmt: libstoragemgmt: denial of service via stack buffer overflow in scsi vpd page parsing | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-93819 | PCI: mediatek: Protect root bus removal with rescan lock | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-93823 | drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-94284 | Out-of-bounds read vulnerability in libX11's XIM trigger-keyregistration parser.registration parser | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-09-08 |
| CVE-2026-97501 | pinctrl: mediatek: paris: bypass pinctrl GPIO layer in set GPIO direction | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-97516 | wifi: rtw88: Add NULL check for chip->edcca_th in rtw_fw_adaptivity_result() | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-97522 | mptcp: fix bad accounting in __mptcp_subflow_push_pending() | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-97530 | scsi: qla2xxx: Fix soft lockup polling continuation IOCB signature | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-97532 | scsi: qla2xxx: Null out freed pointers in qla2x00_mem_alloc() error path | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-97534 | f2fs: accurately adjust free_sections during free_segment_range | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-97541 | wifi: ath9k_htc: don't store usb_device_id | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-97572 | bnxt_en: Propagate RX ring init failures in bnxt_init_nic() | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-97577 | media: verisilicon: rockchip: reject AV1 frames exceeding the tile capacity | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-97579 | media: mediatek: vcodec: bound AV1 tile-start copy to the array capacity | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-97587 | perf: RISC-V: store available counter mask as bitmap | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-97597 | ipv6: flowlabel: cap duplicate leases per socket | MEDIUM | 5.5 | 13%ile | Microsoft | 2026-09-08 |
| CVE-2026-97600 | ieee802154: cc2520: fix FIFOP work use-after-free | MEDIUM | 5.5 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-97601 | ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-97605 | erofs: preserve LZMA decoders on resize failure | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-97607 | vdpa: ifcvf: Put device on unsupported feature error | MEDIUM | 5.5 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-97613 | net: mana: Reserve extra CQ slot for the fence completion CQE | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-97900 | drm/drm_exec: fix up contended obj when num_objects is 0 | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-97904 | cpufreq: initialize policy rwsem before sysfs publication | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-97905 | cpufreq: zero-initialize policy cpumask before sysfs publication | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-97906 | bootconfig: Fix integer overflow in initrd size check | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-97909 | ASoC: sti: initialize IRQ lock before requesting IRQ | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-97915 | accel/ivpu: Limit firmware log name prints to field size | MEDIUM | 5.5 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-97917 | accel/ivpu: Validate full buffer range in ivpu_to_cpu_addr | MEDIUM | 5.5 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-97918 | tracing: Undo the registration when enabling the histogram trigger fails | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-97920 | tracing: Keep the entry count when the histogram stats allocation fails | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-97921 | tracing: Free histogram the field rejected for a bad modifier | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-97922 | tracing: Free histogram var refs regardless of how often they are referenced | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-97923 | tracing: Free histogram the var ref when its initialization fails | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-97924 | tracing/user_events: Don't destroy fields when event removal fails | MEDIUM | 5.5 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-97927 | ufs: create the root dentry after loading cylinder metadata | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-97933 | tracing: Take trace_array reference when opening a tracer options file | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-97934 | tracing: Fix memory corruption from a "STACKTRACE" histogram key | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-97936 | tracing: Fix memory corruption from the histogram stacktrace modifier | MEDIUM | 5.5 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-97951 | scsi: target: iscsi: Fix hang for aborted WRITE_PENDING commands | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-97954 | net/rds: fix tcp stream corruption with large pages | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-97958 | net/sched: cls_api: Don't replay RTM_GETCHAIN in tc_ctl_chain(). | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-97960 | perf/x86/intel: Prevent drain_pebs() reentry | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-97963 | net: stmmac: initialize ptp_lock at probe time | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-97969 | watchdog: msc313e: Fix clock leak and spurious timer in settimeout() | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-97970 | watchdog: msc313e: Avoid division by zero | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-97977 | Bluetooth: btusb: Fix UAF of btusb_data by rx_work | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-97979 | ice: add missing xa_destroy for sched_node_ids | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-97982 | net: ethernet: cortina: Fix budget accounting | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-97985 | af_unix: Update last skb marker in manage_oob(). | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-97987 | virtio_input: reset device if input_register_device() fails | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-97988 | vhost: invalidate vring access on IOTLB transitions | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-97989 | vduse: validate virtqueue alignment | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-97993 | vhost-vdpa: don't install the eventfd_ctx_fdget() error in config_ctx | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-97994 | vhost/vdpa: reject VRING_NUM larger than device max | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-97998 | netfilter: nfnetlink_log: cope with concurrent instance destruction | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-98003 | iommu/amd: Do not reallocate GA log buffers on resume | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-98007 | bpf: Reject non-scalar bpf_loop iteration counts | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-98008 | net: macb: fix NULL pointer dereference on unbind with fixed-link | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-98009 | net/sched: ets: clamp quantum in parse and fallback paths | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-98010 | net/sched: drr: clamp quantum in change class | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-98011 | net/sched: hhf: clamp quantum in change and init paths | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-98012 | net/sched: sfq: clamp quantum in change path | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-98013 | net/sched: fq_pie: clamp quantum in change path | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-98019 | bpf: mark a NULL call argument precise | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-98020 | pds_core: fix cmd_regs access racing BAR unmap on reset | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-98022 | net: cap tx_queue_len at S16_MAX to prevent oversized ring allocations | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-98025 | net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow | MEDIUM | 5.5 | 15%ile | Microsoft | 2026-09-08 |
| CVE-2026-98031 | nexthop: Initialize extack in remove_nh_grp_entry() | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-98043 | bpf: Don't infer non-NULL from a pointer with an unbounded offset | MEDIUM | 5.5 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-98051 | net: bcmasp: fix tx_spb_ring_full() checking same slot cnt times | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-98066 | ALSA: caiaq: Fix potential double-free at error path | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-98067 | erofs: disable LZ4 rolling decompression for now | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-98071 | net/rds: clear cp_flags bits individually in rds_conn_path_reset() | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-98074 | bonding: do not clear curr_active_slave prematurely when releasing all slaves | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-98077 | netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-98079 | btrfs: zstd: fix lost wakeup when waiting for a workspace | MEDIUM | 5.5 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-98081 | btrfs: zoned: finish active block group cleanup if call_zone_finish() fails | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-98085 | bpf: backtrack_insn(): Handle ld_{abs,ind} subprog exit edge | MEDIUM | 5.5 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-98086 | ALSA: ump: do not touch legacy_rmidi before it exists | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-98087 | sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-98094 | staging: fbtft: make dirty_lock IRQ-safe | MEDIUM | 5.5 | 1%ile | Microsoft | 2026-09-08 |
| CVE-2026-98098 | tipc: fix NULL deref in tipc_named_node_up() on empty publication list | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-98103 | igmp: convert struct ip_sf_list to RCU | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-98109 | Bluetooth: hci_core: Fix race condition during device registration | MEDIUM | 5.5 | 0%ile | Microsoft | 2026-09-08 |
| CVE-2026-98113 | ksmbd: rate limit unmapped SID errors | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-98114 | ksmbd: propagate DACL parsing errors | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-98121 | watchdog: msc313e: Fix NULL pointer dereference in PM callbacks | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-98129 | scsi: mpi3mr: Fix NULL pointer dereference in mpi3mr_sas_port_add() | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-98134 | bpf: check_cond_jmp_op(): properly infer if register is null | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-98142 | drm/cirrus-qemu: Validate BAR0 size during probe | MEDIUM | 5.5 | 1%ile | Microsoft | 2026-09-08 |
| CVE-2026-98157 | EDAC/device_sysfs: Use kstrtouint() for poll_msec to prevent truncation | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-98161 | nvdimm: pmem: keep PREFLUSH before data writes | MEDIUM | 5.5 | 1%ile | Microsoft | 2026-09-08 |
| CVE-2026-98164 | KVM: x86/mmu: Check write tracking in all address spaces | MEDIUM | 5.5 | 4%ile | Microsoft | 2026-09-08 |
| CVE-2026-68830 | Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability | MEDIUM | 5.5 | 31%ile | Microsoft | 2026-09-08 |
| CVE-2026-68831 | Windows Defender Firewall Service Information Disclosure Vulnerability | MEDIUM | 5.5 | 46%ile | Microsoft | 2026-09-08 |
| CVE-2026-68842 | Windows MIDI Service Module Information Disclosure Vulnerability | MEDIUM | 5.5 | 41%ile | Microsoft | 2026-09-08 |
| CVE-2026-68843 | Microsoft Office Word Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-68851 | Windows NTFS Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-68852 | Microsoft Account Information Disclosure Vulnerability | MEDIUM | 5.5 | 41%ile | Microsoft | 2026-09-08 |
| CVE-2026-68873 | Windows Program Compatibility Assistant Service Information Disclosure Vulnerability | MEDIUM | 5.5 | 41%ile | Microsoft | 2026-09-08 |
| CVE-2026-68881 | Microsoft Standard XPS Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-68886 | Windows Network Connection Broker Information Disclosure Vulnerability | MEDIUM | 5.5 | 41%ile | Microsoft | 2026-09-08 |
| CVE-2026-68895 | Internet Storage Name Service Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-69286 | Windows USB Audio Class Driver Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-69288 | Windows GDI+ Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-69294 | Microsoft COM for Windows Information Disclosure Vulnerability | MEDIUM | 5.5 | 41%ile | Microsoft | 2026-09-08 |
| CVE-2026-69303 | Push Message Routing Service Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-69308 | Microsoft Standard XPS Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-69315 | Windows License Manager Information Disclosure Vulnerability | MEDIUM | 5.5 | 41%ile | Microsoft | 2026-09-08 |
| CVE-2026-69318 | Windows Imaging Component Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-69321 | Windows Power Dependency Coordinator Tampering Vulnerability | MEDIUM | 5.5 | 23%ile | Microsoft | 2026-09-08 |
| CVE-2026-69339 | Windows MIDI Service Module Information Disclosure Vulnerability | MEDIUM | 5.5 | 41%ile | Microsoft | 2026-09-08 |
| CVE-2026-69343 | Windows Overlay Filter Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-69344 | Windows Print Spooler Components Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-69345 | Microsoft Standard XPS Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-69351 | Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability | MEDIUM | 5.5 | 41%ile | Microsoft | 2026-09-08 |
| CVE-2026-69353 | Windows Text Shaping Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-69367 | Microsoft Standard XPS Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-69369 | Windows DNS Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-69376 | Microsoft Standard XPS Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-69390 | Windows Spaceport.sys Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-69403 | Windows SMB Server Information Disclosure Vulnerability | MEDIUM | 5.5 | 29%ile | Microsoft | 2026-09-08 |
| CVE-2026-69406 | Windows Kernel Information Disclosure Vulnerability | MEDIUM | 5.5 | 41%ile | Microsoft | 2026-09-08 |
| CVE-2026-69453 | Microsoft Windows Search Component Tampering Vulnerability | MEDIUM | 5.5 | 23%ile | Microsoft | 2026-09-08 |
| CVE-2026-69457 | Windows USB Driver Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-69504 | Windows NTFS Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-69527 | Windows USB Mass Storage Class Driver Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-69531 | Microsoft Windows Speech Tampering Vulnerability | MEDIUM | 5.5 | 23%ile | Microsoft | 2026-09-08 |
| CVE-2026-69554 | Microsoft Windows Search Component Tampering Vulnerability | MEDIUM | 5.5 | 23%ile | Microsoft | 2026-09-08 |
| CVE-2026-69568 | Storage Spaces Controller Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-69609 | Win32k Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-69616 | Windows Remote Desktop Services Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-69618 | Windows SMB Client Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-69627 | Windows Remote Desktop Licensing Service Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-69672 | Windows DNS Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-69674 | Windows Modern Device Management (MDM) Security Feature Bypass Vulnerability | MEDIUM | 5.5 | 23%ile | Microsoft | 2026-09-08 |
| CVE-2026-69684 | Windows Error Reporting Information Disclosure Vulnerability | MEDIUM | 5.5 | 41%ile | Microsoft | 2026-09-08 |
| CVE-2026-69741 | Windows Spaceport.sys Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-69770 | Windows Spaceport.sys Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-69794 | Windows Encrypting File System (EFS) Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-69808 | Win32k Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-69862 | Windows Wireless Wide Area Network Service Information Disclosure Vulnerability | MEDIUM | 5.5 | 41%ile | Microsoft | 2026-09-08 |
| CVE-2026-70145 | Microsoft Windows Search Component Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-70290 | Win32k Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-71341 | Windows Partition Management Driver Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-72937 | Windows Storage Port Driver Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-72945 | Windows Task Scheduler Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-72964 | Windows Internet Connection Sharing (ICS) Tampering Vulnerability | MEDIUM | 5.5 | 23%ile | Microsoft | 2026-09-08 |
| CVE-2026-72966 | Windows Remote Access Connection Manager Tampering Vulnerability | MEDIUM | 5.5 | 23%ile | Microsoft | 2026-09-08 |
| CVE-2026-73004 | Windows Autopilot Tampering Vulnerability | MEDIUM | 5.5 | 23%ile | Microsoft | 2026-09-08 |
| CVE-2026-73008 | Windows Biometric Service Information Disclosure Vulnerability | MEDIUM | 5.5 | 41%ile | Microsoft | 2026-09-08 |
| CVE-2026-77488 | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-77491 | Windows GDI Information Disclosure Vulnerability | MEDIUM | 5.5 | 38%ile | Microsoft | 2026-09-08 |
| CVE-2026-77492 | Windows Storage Port Driver Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-78454 | Windows CD-ROM Driver Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-78506 | Microsoft Office Word Information Disclosure Vulnerability | MEDIUM | 5.5 | 46%ile | Microsoft | 2026-09-08 |
| CVE-2026-78513 | Microsoft Office PowerPoint Information Disclosure Vulnerability | MEDIUM | 5.5 | 46%ile | Microsoft | 2026-09-08 |
| CVE-2026-81387 | Microsoft Excel Information Disclosure Vulnerability | MEDIUM | 5.5 | 46%ile | Microsoft | 2026-09-08 |
| CVE-2026-81390 | Microsoft Excel Information Disclosure Vulnerability | MEDIUM | 5.5 | 46%ile | Microsoft | 2026-09-08 |
| CVE-2026-81391 | Microsoft Excel Information Disclosure Vulnerability | MEDIUM | 5.5 | 46%ile | Microsoft | 2026-09-08 |
| CVE-2026-81392 | Microsoft Excel Information Disclosure Vulnerability | MEDIUM | 5.5 | 46%ile | Microsoft | 2026-09-08 |
| CVE-2026-81393 | Microsoft Excel Information Disclosure Vulnerability | MEDIUM | 5.5 | 46%ile | Microsoft | 2026-09-08 |
| CVE-2026-81394 | Microsoft Excel Information Disclosure Vulnerability | MEDIUM | 5.5 | 46%ile | Microsoft | 2026-09-08 |
| CVE-2026-81395 | Microsoft Excel Information Disclosure Vulnerability | MEDIUM | 5.5 | 46%ile | Microsoft | 2026-09-08 |
| CVE-2026-81399 | Microsoft Excel Information Disclosure Vulnerability | MEDIUM | 5.5 | 46%ile | Microsoft | 2026-09-08 |
| CVE-2026-81400 | Microsoft Excel Information Disclosure Vulnerability | MEDIUM | 5.5 | 46%ile | Microsoft | 2026-09-08 |
| CVE-2026-81401 | Microsoft Excel Information Disclosure Vulnerability | MEDIUM | 5.5 | 46%ile | Microsoft | 2026-09-08 |
| CVE-2026-81958 | Microsoft Excel Information Disclosure Vulnerability | MEDIUM | 5.5 | 46%ile | Microsoft | 2026-09-08 |
| CVE-2026-83501 | Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-83949 | Microsoft Office Word Information Disclosure Vulnerability | MEDIUM | 5.5 | 46%ile | Microsoft | 2026-09-08 |
| CVE-2026-83951 | Microsoft Office Word Information Disclosure Vulnerability | MEDIUM | 5.5 | 46%ile | Microsoft | 2026-09-08 |
| CVE-2026-83991 | Windows Cloud Files Mini Filter Driver Tampering Vulnerability | MEDIUM | 5.5 | 23%ile | Microsoft | 2026-09-08 |
| CVE-2026-85875 | Microsoft Office Excel Information Disclosure Vulnerability | MEDIUM | 5.5 | 46%ile | Microsoft | 2026-09-08 |
| CVE-2026-80832 | crypto: qce - fix CCM AAD buffer underallocation | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-91986 | gitoxide gix-transport before 0.59.2 CR/LF/NUL Injection | MEDIUM | 5.4 | 14%ile | Microsoft | 2026-09-08 |
| CVE-2026-93787 | smb: client: bound dirent name against end of SMB response in cifs_filldir | MEDIUM | 5.4 | 28%ile | Microsoft | 2026-09-08 |
| CVE-2026-93805 | wifi: cfg80211: validate rx/tx MLME callback frame lengths before access | MEDIUM | 5.4 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-95279 | Chromium CVE-2026-95279: UI misrepresentation in Omnibox | MEDIUM | 5.4 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-95287 | Chromium CVE-2026-95287: Missing authorization in Navigation | MEDIUM | 5.4 | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-95288 | Chromium CVE-2026-95288: UI misrepresentation in Mobile | MEDIUM | 5.4 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-95290 | Chromium CVE-2026-95290: Missing authorization in NFC | MEDIUM | 5.4 | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-95291 | Chromium CVE-2026-95291: UI misrepresentation in SecurityIndicators | MEDIUM | 5.4 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-95294 | Chromium CVE-2026-95294: UI misrepresentation in Browser | MEDIUM | 5.4 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-95307 | Chromium CVE-2026-95307: UI misrepresentation in ExtensionsMenu | MEDIUM | 5.4 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-95309 | Chromium CVE-2026-95309: UI misrepresentation in Mobile | MEDIUM | 5.4 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-95320 | Chromium CVE-2026-95320: Missing authorization in Navigation | MEDIUM | 5.4 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-95321 | Chromium CVE-2026-95321: UI misrepresentation in Payments | MEDIUM | 5.4 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-95323 | Chromium CVE-2026-95323: UI misrepresentation in Chromium | MEDIUM | 5.4 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-95337 | Chromium CVE-2026-95337: UI misrepresentation in Messages | MEDIUM | 5.4 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-95352 | Chromium CVE-2026-95352: Incorrect authorization in DevTools | MEDIUM | 5.4 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-95363 | Chromium CVE-2026-95363: UI misrepresentation in FileSystem | MEDIUM | 5.4 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-95364 | Chromium CVE-2026-95364: Improper input validation in Passwords | MEDIUM | 5.4 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-95370 | Chromium CVE-2026-95370: Inappropriate implementation in NFC | MEDIUM | 5.4 | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-95371 | Chromium CVE-2026-95371: Missing authorization in Views | MEDIUM | 5.4 | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-94419 | Client session cache reference poisoning allows resumption with wrong server | MEDIUM | 5.4 | 1%ile | Microsoft | 2026-09-08 |
| CVE-2026-93281 | wifi: rtw89: fix HE extended capability length check | MEDIUM | 5.4 | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-78607 | Missing Authorization in Elasticsearch Leading to Information Disclosure | MEDIUM | 5.4 | 26%ile | Microsoft | 2026-09-08 |
| CVE-2026-101917 | PyJWT: PyJWKClient still amplifies unauthenticated JWKS fetches on unknown kid values (incomplete fix of CVE-2026-48524) | MEDIUM | 5.3 | 37%ile | Microsoft | 2026-09-08 |
| CVE-2026-101918 | PyJWT: Unauthenticated RecursionError DoS in pre-verification payload parse (PyJWKClient.get_signing_key_from_jwt / veri | MEDIUM | 5.3 | 36%ile | Microsoft | 2026-09-08 |
| CVE-2026-102265 | PyJWT: Uncaught RecursionError in jwt.decode() on deeply nested token header | MEDIUM | 5.3 | 28%ile | Microsoft | 2026-09-08 |
| CVE-2026-103399 | Libsoup: soupserver: http/1 request smuggling via undrained expect: 100-continue body | MEDIUM | 5.3 | 16%ile | Microsoft | 2026-09-08 |
| CVE-2026-19668 | Resource Exhaustion via Excessive DNSSEC Cryptographic Material Matching | MEDIUM | 5.3 | 41%ile | Microsoft | 2026-09-08 |
| CVE-2026-35189 | Excessive Memory Allocation in Relative CRLDP Processing | MEDIUM | 5.3 | 25%ile | Microsoft | 2026-09-08 |
| CVE-2026-42772 | Potential CPU DoS via O(n^2) Fragment Reassembly in QUIC | MEDIUM | 5.3 | 43%ile | Microsoft | 2026-09-08 |
| CVE-2026-69186 | c-ares: Memory-amplification denial of service via unvalidated DNS header record counts | MEDIUM | 5.3 | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-71222 | Gfs2-utils: gfs2-utils: heap out-of-bounds read via unchecked ea_num_ptrs in extended attribute processing | MEDIUM | 5.3 | 1%ile | Microsoft | 2026-09-08 |
| CVE-2026-75804 | QUIC Connection-Level Flow Control is Not Enforced for Streams | MEDIUM | 5.3 | 45%ile | Microsoft | 2026-09-08 |
| CVE-2026-75805 | NULL Pointer Dereference in CMP Client Revocation Response Handling | MEDIUM | 5.3 | 26%ile | Microsoft | 2026-09-08 |
| CVE-2026-75806 | Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS | MEDIUM | 5.3 | 66%ile | Microsoft | 2026-09-08 |
| CVE-2026-80225 | Possible degradation of service from continuous queries on the same TCP/DoT connection | MEDIUM | 5.3 | 42%ile | Microsoft | 2026-09-08 |
| CVE-2026-85501 | Retrap: Novel Vulnerabilities to launch Algorithmic Complexity Attacks on DNSSEC | MEDIUM | 5.3 | 42%ile | Microsoft | 2026-09-08 |
| CVE-2026-8674 | Assertion failure in the DNS stub resolver with a long search domain | MEDIUM | 5.3 | 24%ile | Microsoft | 2026-09-08 |
| CVE-2026-88831 | Busybox: busybox: httpd silently fails open when ip deny rules contain invalid cidr prefix lengths | MEDIUM | 5.3 | 15%ile | Microsoft | 2026-09-08 |
| CVE-2026-89538 | SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field | MEDIUM | 5.3 | 54%ile | Microsoft | 2026-09-08 |
| CVE-2026-89569 | Bluetooth: RFCOMM: serialize security confirmation handling | MEDIUM | 5.3 | 28%ile | Microsoft | 2026-09-08 |
| CVE-2026-89662 | NFSD: Prevent lock owner use-after-free during client teardown | MEDIUM | 5.3 | 53%ile | Microsoft | 2026-09-08 |
| CVE-2026-89686 | nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke | MEDIUM | 5.3 | 54%ile | Microsoft | 2026-09-08 |
| CVE-2026-89755 | mm/migrate_device: clear stale mapping after freeing swapcache | MEDIUM | 5.3 | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-90801 | GNU Binutils ld cache.c cache_bwrite buffer overflow | MEDIUM | 5.3 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90831 | GNU Binutils ELF String Table elf-strtab.c _bfd_elf_strtab_delref memory corruption | MEDIUM | 5.3 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-93826 | HID: hidpp: fix potential UAF in hidpp_connect_event() | MEDIUM | 5.3 | 14%ile | Microsoft | 2026-09-08 |
| CVE-2026-70575 | Windows Schannel Denial of Service Vulnerability | MEDIUM | 5.3 | 61%ile | Microsoft | 2026-09-08 |
| CVE-2026-81380 | GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability | MEDIUM | 5.3 | 52%ile | Microsoft | 2026-09-08 |
| CVE-2026-91714 | Chromium CVE-2026-91714: Observable discrepancy | MEDIUM | 5.3 | 15%ile | Microsoft | 2026-09-08 |
| CVE-2026-91725 | Chromium CVE-2026-91725: Observable discrepancy | MEDIUM | 5.3 | 15%ile | Microsoft | 2026-09-08 |
| CVE-2026-91744 | Chromium CVE-2026-91744: Race condition | MEDIUM | 5.3 | 14%ile | Microsoft | 2026-09-08 |
| CVE-2026-95360 | Chromium CVE-2026-95360: Race condition in Editing | MEDIUM | 5.3 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-95367 | Chromium CVE-2026-95367: Information leak in DataTransfer | MEDIUM | 5.3 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-95384 | Chromium CVE-2026-95384: Race condition in Transactions Platform | MEDIUM | 5.3 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-102277 | brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of service | MEDIUM | 5.3 | 37%ile | Microsoft | 2026-09-08 |
| CVE-2026-94417 | CRL check skipped when OCSP enabled and certificate has no OCSP URL | MEDIUM | 5.3 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-97058 | sprintf-js through 1.1.3 Denial of Service via Unbounded Precision | MEDIUM | 5.3 | — | Microsoft | 2026-09-08 |
| CVE-2026-93812 | ksmbd: fix sd_ndr.data memory leak in ksmbd_vfs_set_sd_xattr | MEDIUM | 5.3 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-97500 | wifi: rtw89: phy: check length before parsing PHY status IE | MEDIUM | 5.3 | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-97508 | thunderbolt: Set tb->root_switch to NULL when domain is stopped | MEDIUM | 5.3 | 13%ile | Microsoft | 2026-09-08 |
| CVE-2026-89762 | apparmor: fix cred UAF caused by begin_current_label_crit_section() | MEDIUM | 5.2 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-93251 | ACPI: bus: Introduce acpi_bus_get_primary_device() | MEDIUM | 5.2 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-93288 | netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state | MEDIUM | 5.2 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-93796 | wifi: iwlwifi: pcie: null RX pointers after free | MEDIUM | 5.2 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-93821 | PCI: altera: Protect root bus removal with rescan lock | MEDIUM | 5.2 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-97448 | ACPICA: Add validation for node in acpi_ns_build_normalized_path() | MEDIUM | 5.2 | 3%ile | Microsoft | 2026-09-08 |
| CVE-2026-97450 | ACPICA: validate handler object type in two places | MEDIUM | 5.2 | 4%ile | Microsoft | 2026-09-08 |
| CVE-2026-97455 | ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() | MEDIUM | 5.2 | 3%ile | Microsoft | 2026-09-08 |
| CVE-2026-97492 | wifi: mac80211: don't call ieee80211_handle_reconfig_failure when not needed | MEDIUM | 5.2 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-71973 | U-Boot before 2026.10-rc4 Integer Overflow in SquashFS Directory Table Allocation | MEDIUM | 5.2 | 8%ile | Microsoft | 2026-09-08 |
| CVE-2026-93285 | f2fs: embed f2fs_gc_kthread in f2fs_sb_info | MEDIUM | 5.2 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-97499 | coresight: perf: Retrieve path and source from event data | MEDIUM | 5.2 | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-93788 | wifi: iwlwifi: acpi: validate WGDS table revision index | MEDIUM | 5.1 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-93789 | wifi: iwlwifi: bound aligned TLV advance in FW parser | MEDIUM | 5.1 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-94285 | Out-of-bounds read in libX11's byte-oriented codeset parser | MEDIUM | 5.1 | 4%ile | Microsoft | 2026-09-08 |
| CVE-2026-97428 | drm/amdgpu: harden FRU PIA parsing with bounded helpers | MEDIUM | 5.1 | 4%ile | Microsoft | 2026-09-08 |
| CVE-2026-97432 | wifi: iwlwifi: mvm: fix P2P-Device binding handling | MEDIUM | 5.1 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-97444 | ACPICA: add boundary checks in two places | MEDIUM | 5.1 | 4%ile | Microsoft | 2026-09-08 |
| CVE-2026-97453 | ACPICA: validate byte_count in acpi_ps_get_next_package_length() | MEDIUM | 5.1 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-97474 | wifi: iwlwifi: mld: purge async notifications upon nic error | MEDIUM | 5.1 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-97484 | usbip: vhci_hcd: fix NULL deref in status_show_vhci | MEDIUM | 5.1 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-97517 | wifi: nl80211: reject beacons with bad HE operation | MEDIUM | 5.1 | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-91717 | Chromium CVE-2026-91717: Missing authorization | MEDIUM | 5.1 | 0%ile | Microsoft | 2026-09-08 |
| CVE-2026-93244 | drm/sysfb: simpledrm: Improve stride validation | MEDIUM | 5.1 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-18238 | OOBR in rpcap client in libpcap before 1.10.7 | MEDIUM | 5.0 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-72976 | Microsoft Office Word Information Disclosure Vulnerability | MEDIUM | 5.0 | 44%ile | Microsoft | 2026-09-08 |
| CVE-2026-97438 | fs/ntfs3: validate index entry key bounds | MEDIUM | 5.0 | 3%ile | Microsoft | 2026-09-08 |
| CVE-2026-68785 | Microsoft SQL Server Remote Code Execution Vulnerability | MEDIUM | 4.9 | 66%ile | Microsoft | 2026-09-08 |
| CVE-2026-93808 | ALSA: usb-audio: caiaq: validate EP1 reply lengths | MEDIUM | 4.9 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-56143 | Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service | MEDIUM | 4.9 | 38%ile | Microsoft | 2026-09-08 |
| CVE-2026-102269 | PyJWT: Non-canonical signature segments enable raw-token revocation bypass | MEDIUM | 4.8 | 13%ile | Microsoft | 2026-09-08 |
| CVE-2026-80890 | sctp: reject stale cookies with mismatched verification tags | MEDIUM | 4.8 | 8%ile | Microsoft | 2026-09-08 |
| CVE-2026-93247 | Bluetooth: mgmt: fix 'hdev->discovery.uuids' NULL dereference | MEDIUM | 4.8 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-97596 | ipvs: reject invalid states in connection template sync records | MEDIUM | 4.8 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-69474 | Windows Overlay Filter Information Disclosure Vulnerability | MEDIUM | 4.8 | 51%ile | Microsoft | 2026-09-08 |
| CVE-2026-91742 | Chromium CVE-2026-91742: Confused deputy | MEDIUM | 4.8 | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-95292 | Chromium CVE-2026-95292: Incorrect authorization in Safebrowsing | MEDIUM | 4.8 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-95300 | Chromium CVE-2026-95300: Missing authorization in DevTools | MEDIUM | 4.8 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-95305 | Chromium CVE-2026-95305: UI misrepresentation in Chromoting | MEDIUM | 4.8 | 13%ile | Microsoft | 2026-09-08 |
| CVE-2026-95346 | Chromium CVE-2026-95346: UI misrepresentation in Chromoting | MEDIUM | 4.8 | 20%ile | Microsoft | 2026-09-08 |
| CVE-2026-71219 | Gfs2-utils: gfs2-utils: stack overflow via alloca(1<<di_depth) in hash table traversal | MEDIUM | 4.7 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-71224 | Gfs2-utils: gfs2-utils: stack overflow via alloca(i_height) in metadata walk | MEDIUM | 4.7 | 4%ile | Microsoft | 2026-09-08 |
| CVE-2026-80726 | KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page | MEDIUM | 4.7 | — | Microsoft | 2026-09-08 |
| CVE-2026-80767 | HID: sensor: custom: Fix use-after-free in enable_sensor | MEDIUM | 4.7 | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-80855 | fuse: fix invalidate lock leak on open O_TRUNC DAX failure | MEDIUM | 4.7 | 8%ile | Microsoft | 2026-09-08 |
| CVE-2026-80856 | fuse: fix invalidate lock leak on setattr writeback failure | MEDIUM | 4.7 | 8%ile | Microsoft | 2026-09-08 |
| CVE-2026-80864 | RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp | MEDIUM | 4.7 | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-80923 | xhci: dbgtty: Fix unregister on tty_register_driver() failure | MEDIUM | 4.7 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-89487 | openvswitch: only skb_tx_error() a packet we are about to drop | MEDIUM | 4.7 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-89567 | jbd2: bound shrinker scans by examined checkpoint buffers | MEDIUM | 4.7 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-89598 | fbdev: ssd1307fb: defer I2C transfers from damage callbacks | MEDIUM | 4.7 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-89642 | cifs: call pagecache_isize_extended() in cifs_setsize() when extending | MEDIUM | 4.7 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-89753 | mm/vmscan: report RCU-tasks quiescent states in shrink_lruvec() | MEDIUM | 4.7 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-89756 | mm/migrate: report RCU-tasks quiescent states in migrate_pages_batch() | MEDIUM | 4.7 | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-93239 | arm64: mm: Fix the lockless page-table walk in show_pte() | MEDIUM | 4.7 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-93268 | ext4: skip extra isize expansion during mount to prevent deadlock | MEDIUM | 4.7 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-93269 | ext4: fix circular lock dependency in ext4_ext_migrate | MEDIUM | 4.7 | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-93781 | scsi: core: Do not block on tag allocation in scsi_eh_lock_door() | MEDIUM | 4.7 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-93795 | blk-cgroup: fix leaks and online flag on radix_tree_insert failure | MEDIUM | 4.7 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-93804 | wifi: mac80211: ibss: wait for in-flight TX on disconnect | MEDIUM | 4.7 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-97430 | xhci: Prevent queuing new commands if xhci is inaccessible | MEDIUM | 4.7 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-97440 | net: qrtr: fix node refcount leak on ctrl packet alloc failure | MEDIUM | 4.7 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-97512 | spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM | MEDIUM | 4.7 | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-97518 | wifi: cfg80211: reject duplicate wiphy cipher suite entries | MEDIUM | 4.7 | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-97537 | scsi: qla2xxx: Fix queue teardown NULL dma_free and bitmap locking | MEDIUM | 4.7 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-97567 | mptcp: prevent race between disconnect() and rtx | MEDIUM | 4.7 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-97925 | tick/broadcast: Plug clockevents replacement race | MEDIUM | 4.7 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-97938 | reboot: fix cad_pid use-after-free race | MEDIUM | 4.7 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-97948 | powerpc/eeh: Fix recursive locking on devices without EEH sensitive driver | MEDIUM | 4.7 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-97975 | Bluetooth: hci_sysfs: Fix NULL pointer dereference in device_del() | MEDIUM | 4.7 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-98080 | btrfs: do not force reloc root creation during qgroup_account_snapshot() | MEDIUM | 4.7 | 3%ile | Microsoft | 2026-09-08 |
| CVE-2026-68849 | Windows Bluetooth Port Driver Information Disclosure Vulnerability | MEDIUM | 4.7 | 24%ile | Microsoft | 2026-09-08 |
| CVE-2026-68891 | Microsoft Standard XPS Information Disclosure Vulnerability | MEDIUM | 4.7 | 24%ile | Microsoft | 2026-09-08 |
| CVE-2026-69316 | Windows Overlay Filter Information Disclosure Vulnerability | MEDIUM | 4.7 | 24%ile | Microsoft | 2026-09-08 |
| CVE-2026-69425 | Windows NTFS Tampering Vulnerability | MEDIUM | 4.7 | 21%ile | Microsoft | 2026-09-08 |
| CVE-2026-69483 | Windows Image Acquisition Information Disclosure Vulnerability | MEDIUM | 4.7 | 24%ile | Microsoft | 2026-09-08 |
| CVE-2026-69771 | Windows Container Manager Service Security Feature Bypass Vulnerability | MEDIUM | 4.7 | 25%ile | Microsoft | 2026-09-08 |
| CVE-2026-69792 | Windows Win32K Security Feature Bypass Vulnerability | MEDIUM | 4.7 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-69853 | Win32k Information Disclosure Vulnerability | MEDIUM | 4.7 | 24%ile | Microsoft | 2026-09-08 |
| CVE-2026-69895 | Windows Spaceport.sys Information Disclosure Vulnerability | MEDIUM | 4.7 | 24%ile | Microsoft | 2026-09-08 |
| CVE-2026-72931 | Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability | MEDIUM | 4.7 | 28%ile | Microsoft | 2026-09-08 |
| CVE-2026-91720 | Chromium CVE-2026-91720: Uninitialized resource | MEDIUM | 4.7 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-91726 | Chromium CVE-2026-91726: Out of bounds read | MEDIUM | 4.7 | 19%ile | Microsoft | 2026-09-08 |
| CVE-2026-95293 | Chromium CVE-2026-95293: Uninitialized resource in GPU | MEDIUM | 4.7 | 15%ile | Microsoft | 2026-09-08 |
| CVE-2026-95332 | Chromium CVE-2026-95332: Use of uninitialized variable in Tint | MEDIUM | 4.7 | 15%ile | Microsoft | 2026-09-08 |
| CVE-2026-93236 | media: meson: vdec: fix NULL pointer deref in vdec_try_fmt_common | MEDIUM | 4.7 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-93252 | ocfs2: fix circular locking dependency in ocfs2_init_acl() | MEDIUM | 4.7 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-93261 | locking/lockdep: Fix NULL pointer dereference in __lock_set_class() | MEDIUM | 4.7 | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-97418 | ALSA: es18xx: check control allocation before private data setup | MEDIUM | 4.7 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-97506 | crypto: ixp4xx - fix buffer chain unwind on allocation failure | MEDIUM | 4.7 | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-97513 | media: chips-media: wave5: Release m2m_ctx after Instance Removed from List | MEDIUM | 4.7 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-97514 | media: chips-media: wave5: Fix Reports from Kernel Lock Validator | MEDIUM | 4.7 | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-80771 | HID: nintendo: register input device after capabilities are set | MEDIUM | 4.7 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-80809 | ocfs2: fix missing metadata reservation for large xattrs | MEDIUM | 4.7 | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-80833 | crypto: sun8i-ss - Remove crypto_rng interface | MEDIUM | 4.7 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-80834 | crypto: sun8i-ce - Remove crypto_rng interface | MEDIUM | 4.7 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-97419 | hsr: broadcast netlink notifications in the device's net namespace | MEDIUM | 4.6 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-97441 | ata: ahci: fail probe if BAR too small for claimed ports | MEDIUM | 4.6 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-98078 | ipvs: fix reversed sequence option serialization | MEDIUM | 4.6 | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-69381 | Windows Storage Port Driver Information Disclosure Vulnerability | MEDIUM | 4.6 | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-69548 | Windows RNDIS Information Disclosure Vulnerability | MEDIUM | 4.6 | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-69690 | Microsoft Office SharePoint Spoofing Vulnerability | MEDIUM | 4.6 | 34%ile | Microsoft | 2026-09-08 |
| CVE-2026-78452 | Microsoft Windows SCSI Class System File Information Disclosure Vulnerability | MEDIUM | 4.6 | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-78508 | Windows CD-ROM Driver Information Disclosure Vulnerability | MEDIUM | 4.6 | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-95295 | Chromium CVE-2026-95295: Information leak in Mobile | MEDIUM | 4.6 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-97482 | usb: gadget: goku_udc: avoid NULL deref of dev->driver in INT_USBRESET log | MEDIUM | 4.6 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-97502 | mmc: davinci: avoid NULL deref of host->data in IRQ handler | MEDIUM | 4.6 | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-80765 | HID: hyperv: validate initial device info bounds | MEDIUM | 4.5 | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-79705 | Podman: buildah: buildah/copier: directory escape via crafted tar symlinks when used outside buildah by non-root callers | MEDIUM | 4.5 | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-102270 | PyJWT: ReDoS vulnerability when calling the `is_pem_format` function. | MEDIUM | 4.4 | 16%ile | Microsoft | 2026-09-08 |
| CVE-2026-80756 | selinux: do not cancel a policy conversion that never started | MEDIUM | 4.4 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-80793 | ipv4: reject undersized MTUs in ip_do_fragment() | MEDIUM | 4.4 | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-80805 | xfs: validate attr entry pointer before field access | MEDIUM | 4.4 | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-80847 | tcp: clamp route advmss to TCP_MIN_MSS | MEDIUM | 4.4 | 8%ile | Microsoft | 2026-09-08 |
| CVE-2026-80863 | RDMA/rxe: Fix OOB in free_rd_atomic_resources() | MEDIUM | 4.4 | 8%ile | Microsoft | 2026-09-08 |
| CVE-2026-80902 | dmaengine: sun6i-dma: Fix reclaim descriptors while terminating DMA | MEDIUM | 4.4 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-80912 | selinux: reject an unclaimed class value in security_get_classes() | MEDIUM | 4.4 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-80913 | selinux: require every boolean value to be defined | MEDIUM | 4.4 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-80999 | net: dsa: realtek: use gpiod_set_value_cansleep for reset GPIO | MEDIUM | 4.4 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-89539 | SUNRPC: reject duplicate CREDS_VALUE options | MEDIUM | 4.4 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-89544 | SUNRPC: fix gssx_dec_option_array error path bugs | MEDIUM | 4.4 | 52%ile | Microsoft | 2026-09-08 |
| CVE-2026-89726 | lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen() | MEDIUM | 4.4 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-90781 | alsa-lib through 1.2.16.1 Off-by-One Stack Buffer Overflow in __snd_ctl_ascii_elem_id_parse() | MEDIUM | 4.4 | 8%ile | Microsoft | 2026-09-08 |
| CVE-2026-93602 | rustls-webpki before 0.103.10 CRL Revocation Check Bypass | MEDIUM | 4.4 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-93784 | wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() | MEDIUM | 4.4 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-93813 | btrfs: tree-checker: validate INODE_REF's namelen | MEDIUM | 4.4 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-93825 | spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data() | MEDIUM | 4.4 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-96674 | alsa-lib through 1.2.16.1 Integer Overflow via Topology File | MEDIUM | 4.4 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-97420 | bpf: NUL-terminate replaced sysctl value | MEDIUM | 4.4 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-97424 | drm/amdgpu/ras: add ras_suspend callback and use it for cp_ecc_error_irq | MEDIUM | 4.4 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-97446 | ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() | MEDIUM | 4.4 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-97452 | ACPICA: Prevent adding invalid references | MEDIUM | 4.4 | 4%ile | Microsoft | 2026-09-08 |
| CVE-2026-97454 | ACPICA: add boundary checks in acpi_ps_get_next_field() | MEDIUM | 4.4 | 4%ile | Microsoft | 2026-09-08 |
| CVE-2026-97480 | tty: serial: 8250: protect against NULL uart->port.dev in register | MEDIUM | 4.4 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-97491 | net/rds: Don't sleep inside rds_ib_conn_path_shutdown | MEDIUM | 4.4 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-97496 | drm/amdkfd: Fix OOB memory exposure in get_wave_state() | MEDIUM | 4.4 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-97511 | wifi: mac80211: avoid out-of-bounds access in monitor | MEDIUM | 4.4 | 4%ile | Microsoft | 2026-09-08 |
| CVE-2026-98125 | smb/client: fix stale page cache in insert/collapse range | MEDIUM | 4.4 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-98127 | smb/client: validate new EOF for insert range | MEDIUM | 4.4 | 3%ile | Microsoft | 2026-09-08 |
| CVE-2026-69713 | Windows Secure Boot Security Feature Bypass Vulnerability | MEDIUM | 4.4 | 29%ile | Microsoft | 2026-09-08 |
| CVE-2026-72980 | Windows Hello Security Feature Bypass Vulnerability | MEDIUM | 4.4 | 47%ile | Microsoft | 2026-09-08 |
| CVE-2026-95358 | Chromium CVE-2026-95358: Incorrect authorization in Mobile | MEDIUM | 4.4 | 1%ile | Microsoft | 2026-09-08 |
| CVE-2026-93811 | ksmbd: Fix acl.sd_buf memory leak and invalid sd_size error handling | MEDIUM | 4.4 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-93828 | exfat: fix handling of damaged volume in exfat_create_upcase_table() | MEDIUM | 4.4 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-97411 | net: ibm: emac: mal: fix potential system hang in mal_remove() | MEDIUM | 4.4 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-97485 | omfs: handle set_blocksize failures | MEDIUM | 4.4 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-97486 | hpfs: handle set_blocksize failures | MEDIUM | 4.4 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-97487 | jfs: handle set_blocksize failures | MEDIUM | 4.4 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-97488 | qnx4: handle set_blocksize failures | MEDIUM | 4.4 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-97489 | bfs: handle set_blocksize failures | MEDIUM | 4.4 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-97490 | affs: handle set_blocksize failures | MEDIUM | 4.4 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-97504 | watchdog: lenovo_se10_wdt: Fix use-after-free and resource leak risk | MEDIUM | 4.4 | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-97519 | drm/xe: Fix null pointer dereference in devcoredump cleanup | MEDIUM | 4.4 | 4%ile | Microsoft | 2026-09-08 |
| CVE-2026-18313 | rpcapd memory leak in libpcap before 1.10.7 | MEDIUM | 4.3 | 13%ile | Microsoft | 2026-09-08 |
| CVE-2026-80763 | Bluetooth: hci_event: validate LE Set CIG Parameters response | MEDIUM | 4.3 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-80828 | ALSA: usb-audio: Complete cleanup after system-resume errors | MEDIUM | 4.3 | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-87564 | Type confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory inside the sandbox | MEDIUM | 4.3 | 21%ile | Microsoft | 2026-09-08 |
| CVE-2026-87875 | Cups: openprinting cups: heap out-of-bounds read in cupsutf32toutf8() via missing source-length bound | MEDIUM | 4.3 | 33%ile | Microsoft | 2026-09-08 |
| CVE-2026-90024 | usb: gadget: midi2: Fix null-pointer dereference in f_midi2_free_ep_reqs | MEDIUM | 4.3 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-91769 | TLS Hostname Verification Falls Back to CN After SAN Mismatch | MEDIUM | 4.3 | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-93797 | wifi: iwlwifi: mvm: fix an off-by-1 boundary check | MEDIUM | 4.3 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-97408 | Bluetooth: L2CAP: validate connectionless PSM length | MEDIUM | 4.3 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-97472 | ipv6: addrconf: fix temp address generation after prefix deprecation | MEDIUM | 4.3 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-97559 | smb: client: fail DACL rewrite when the new DACL exceeds 64K | MEDIUM | 4.3 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-97560 | smb: client: fix one-byte OOB read in smb2_parse_native_symlink() | MEDIUM | 4.3 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-98097 | tipc: Dont send random pad bytes in RESET/ACTIVATE messages | MEDIUM | 4.3 | 24%ile | Microsoft | 2026-09-08 |
| CVE-2026-98162 | smb/server: fix tree connection leak in smb2_tree_connect() | MEDIUM | 4.3 | 1%ile | Microsoft | 2026-09-08 |
| CVE-2026-73019 | Windows URL Moniker Security Feature Bypass Vulnerability | MEDIUM | 4.3 | 56%ile | Microsoft | 2026-09-08 |
| CVE-2026-78455 | Xbox Information Disclosure Vulnerability | MEDIUM | 4.3 | 44%ile | Microsoft | 2026-09-08 |
| CVE-2026-78516 | Windows Storage Information Disclosure Vulnerability | MEDIUM | 4.3 | 44%ile | Microsoft | 2026-09-08 |
| CVE-2026-91719 | Chromium CVE-2026-91719: Code injection | MEDIUM | 4.3 | 14%ile | Microsoft | 2026-09-08 |
| CVE-2026-91740 | Chromium CVE-2026-91740: Uninitialized resource | MEDIUM | 4.3 | 16%ile | Microsoft | 2026-09-08 |
| CVE-2026-91746 | Chromium CVE-2026-91746: Integer overflow | MEDIUM | 4.3 | 14%ile | Microsoft | 2026-09-08 |
| CVE-2026-95289 | Chromium CVE-2026-95289: Incorrect authorization in Scroll | MEDIUM | 4.3 | 14%ile | Microsoft | 2026-09-08 |
| CVE-2026-95296 | Chromium CVE-2026-95296: Missing authorization in Core | MEDIUM | 4.3 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-95340 | Chromium CVE-2026-95340: Incorrect authorization in PictureInPicture | MEDIUM | 4.3 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-95342 | Chromium CVE-2026-95342: Missing authorization in V8 | MEDIUM | 4.3 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-95361 | Chromium CVE-2026-95361: Confused deputy in DevTools | MEDIUM | 4.3 | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-95368 | Chromium CVE-2026-95368: Incorrect authorization in DevTools | MEDIUM | 4.3 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-93271 | wifi: ath11k: cap out-of-range rx MCS instead of leaving bogus rate | MEDIUM | 4.3 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-80772 | HID: nintendo: fix out-of-bounds read in joycon_ctlr_read_handler() | MEDIUM | 4.3 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-80794 | nfc: nci: fix uninit-value in the RF discover/activated NTF handlers | MEDIUM | 4.3 | 16%ile | Microsoft | 2026-09-08 |
| CVE-2026-80796 | nfc: nci: add data_len bound checks to activation parameter extractors | MEDIUM | 4.3 | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-80801 | nfc: microread: validate target discovery payload lengths | MEDIUM | 4.3 | 16%ile | Microsoft | 2026-09-08 |
| CVE-2026-80861 | usb: xhci: bail out of setup if the controller is inaccessible | MEDIUM | 4.2 | 8%ile | Microsoft | 2026-09-08 |
| CVE-2026-80914 | Bluetooth: ISO: fix use-after-free of listener socket in iso_conn_ready | MEDIUM | 4.2 | 14%ile | Microsoft | 2026-09-08 |
| CVE-2026-81005 | ipmi: si: Fix NULL pointer dereference after failed registration | MEDIUM | 4.2 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-89092 | Stack overflow in nscd due to unbounded alloca use | MEDIUM | 4.2 | 15%ile | Microsoft | 2026-09-08 |
| CVE-2026-93226 | ipv6: use RCU iterator to dump route exceptions | MEDIUM | 4.2 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-93793 | wifi: iwlwifi: mvm: validate TX_CMD response layout | MEDIUM | 4.2 | 17%ile | Microsoft | 2026-09-08 |
| CVE-2026-97481 | serial: 8250: fix possible ISR soft lockup | MEDIUM | 4.2 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-97483 | usb: core: hcd: fix possible deadlock in rh control transfers | MEDIUM | 4.2 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-98107 | Bluetooth: L2CAP: fix out-of-bounds write in l2cap_ecred_connect | MEDIUM | 4.2 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-98155 | accel/qaic: Address potential out-of-bounds read in resp_worker() | MEDIUM | 4.2 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-91713 | Chromium CVE-2026-91713: Missing authorization | MEDIUM | 4.2 | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-91723 | Chromium CVE-2026-91723: Race condition | MEDIUM | 4.2 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-91739 | Chromium CVE-2026-91739: Missing authorization | MEDIUM | 4.2 | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-97510 | thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() | MEDIUM | 4.2 | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-97515 | i3c: master: svc: Prevent IRQ storm from false SLVSTART on NPCM845 | MEDIUM | 4.2 | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-80921 | KVM: s390: vsie: zero stale crypto bits | MEDIUM | 4.2 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-80762 | Bluetooth: hci_sync: Fix accept list UAF during suspend | MEDIUM | 4.1 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-80764 | Bluetooth: hci_event: fix LE list UAF on reset | MEDIUM | 4.1 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-80806 | ext4: don't enable DAX on new encrypted files | MEDIUM | 4.1 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-80808 | ext4: stop retrying saturated xattr cache entries | MEDIUM | 4.1 | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-80824 | usb: usbfs: fix use-after-free of usb_device in usbdev_release() | MEDIUM | 4.1 | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-80826 | USB: c67x00: fix use-after-free in c67x00_add_iso_urb() | MEDIUM | 4.1 | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-80836 | crypto: virtio - bound the akcipher result length | MEDIUM | 4.1 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-80866 | tipc: avoid busy looping in tipc_exit_net() | MEDIUM | 4.1 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-80917 | PCI: host-generic: Fix NULL pointer dereference on 32-bit CAM systems | MEDIUM | 4.1 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-80925 | vlan: fix skb_under_panic and races when toggling HW VLAN offload | MEDIUM | 4.1 | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-80994 | net: openvswitch: fix flow mask use-after-free on flow deletion | MEDIUM | 4.1 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-89540 | sunrpc: init gssp_lock before publishing proc entry | MEDIUM | 4.1 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-89709 | lockd, nfsd: RCU-protect nlmsvc_ops dispatch | MEDIUM | 4.1 | 48%ile | Microsoft | 2026-09-08 |
| CVE-2026-92382 | Usbredir: usbredir: unbounded iso_packet_desc[] index in usbredirhost_iso_packet() leads to heap out-of-bounds write | MEDIUM | 4.1 | 3%ile | Microsoft | 2026-09-08 |
| CVE-2026-93205 | iommu/arm-smmu-v3: Manage teardown with devm | MEDIUM | 4.1 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-93219 | clocksource/drivers/timer-sun4i: Advertise a real minimum delta | MEDIUM | 4.1 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-93245 | apparmor: policy_int make sure list heads are initialized before fail path | MEDIUM | 4.1 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-93256 | arm64: hibernate: mask DAIF before restoring hibernated kernel | MEDIUM | 4.1 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-93274 | pinctrl: bcm2835: Don't remove an unregistered GPIO chip | MEDIUM | 4.1 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-93283 | i3c: master: Fix device_register() error path | MEDIUM | 4.1 | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-93791 | wifi: iwlwifi: mvm: add a check on the tid coming from the firmware | MEDIUM | 4.1 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-93799 | wifi: iwlwifi: mvm: validate sta_id in BA window status notif | MEDIUM | 4.1 | 15%ile | Microsoft | 2026-09-08 |
| CVE-2026-93800 | btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol() | MEDIUM | 4.1 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-93822 | PCI: iproc: Protect root bus removal with rescan lock | MEDIUM | 4.1 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-93829 | smb: client: fix races in cifsd thread creation | MEDIUM | 4.1 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-97416 | btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk() | MEDIUM | 4.1 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-97473 | powercap: intel_rapl: Fix memory leak in rapl_add_package_cpuslocked() | MEDIUM | 4.1 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-97916 | accel/ivpu: Validate firmware log buffer metadata | MEDIUM | 4.1 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-98026 | net: bridge: mcast: properly convert mglist to rcu | MEDIUM | 4.1 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-98090 | btrfs: restore active device pointers after failed sprout | MEDIUM | 4.1 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-98091 | btrfs: detach failed sprout device from transaction update list | MEDIUM | 4.1 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-93214 | usb: gadget: f_tcm: fix deadlock in usbg_make_tpg() | MEDIUM | 4.1 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-93216 | mm/page_owner: use memcg_data snapshot to avoid TOCTOU in print_page_owner_memcg() | MEDIUM | 4.1 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-93223 | staging: media: tegra-video: fix of_node_put() on VIP parse errors | MEDIUM | 4.1 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-93259 | powerpc/irq: Fix missing r2 clobber in PCREL inline assembly | MEDIUM | 4.1 | 8%ile | Microsoft | 2026-09-08 |
| CVE-2026-93273 | regulator: tps6594: Fix device node reference leaks in multiphase loop | MEDIUM | 4.1 | 8%ile | Microsoft | 2026-09-08 |
| CVE-2026-93278 | staging: octeon: add missing napi_disable in cvm_oct_rx_shutdown | MEDIUM | 4.1 | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-93279 | staging: octeon: add missing tasklet_kill in cvm_oct_tx_shutdown | MEDIUM | 4.1 | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-93810 | cachefiles: Fix double fput | MEDIUM | 4.1 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-93815 | net: au1000: move free_irq out of the close-time spinlocked section | MEDIUM | 4.1 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-93818 | PCI: plda: Protect root bus removal with rescan lock | MEDIUM | 4.1 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-97434 | dpaa2-switch: fix handling of NAPI on the remove path | MEDIUM | 4.1 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-97475 | thermal/drivers/tegra/soctherma: Switch to devm cooling device registration | MEDIUM | 4.1 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-97478 | virt: acrn: Fix irqfd use-after-free during eventfd shutdown | MEDIUM | 4.1 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-97507 | media: dm1105: fix missing error check for dma_alloc_coherent | MEDIUM | 4.1 | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-97521 | gfs2: fix quota init duplicate scan | MEDIUM | 4.1 | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-80820 | xfs: don't livelock in scrub on a circular unlinked list | MEDIUM | 4.1 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-80872 | ALSA: hda/tas2781: Cancel async firmware request at unbind | MEDIUM | 4.1 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-6103 | Phar TAR phar_tar_number() Integer Overflow - Archive Entry Injection | MEDIUM | 4.0 | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-80766 | HID: uclogic: fix use-after-free of inrange_timer on remove | MEDIUM | 4.0 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-80782 | HID: magicmouse: do not keep a stale msc->input if no input is claimed | MEDIUM | 4.0 | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-80830 | usb: core: Add lock to usb_wakeup_notification() | MEDIUM | 4.0 | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-97449 | ACPICA: Add package limit checks in parser functions | MEDIUM | 4.0 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-80770 | HID: nintendo: stop device IO before hid_hw_stop on probe failure | MEDIUM | 4.0 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-89628 | HID: picolcd: clamp eeprom debugfs read to bytes actually received | LOW | 3.9 | 13%ile | Microsoft | 2026-09-08 |
| CVE-2026-93238 | s390/vfio-ap: fix potential use of uninitialized apm_filtered bitmap | LOW | 3.9 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-89582 | bnx2x: fix double free in bnx2x_init_firmware() error path | LOW | 3.8 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-13608 | OpenLDAP SASL authentication bypass | LOW | 3.7 | 43%ile | Microsoft | 2026-09-08 |
| CVE-2026-18540 | undici vulnerable to downstream response splitting via retry interceptor | LOW | 3.7 | 24%ile | Microsoft | 2026-09-08 |
| CVE-2026-54872 | Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves | LOW | 3.7 | 39%ile | Microsoft | 2026-09-08 |
| CVE-2026-54875 | Non-Constant-Time SM2 Scalar Multiplication on ARM64 and RISC-V | LOW | 3.7 | 41%ile | Microsoft | 2026-09-08 |
| CVE-2026-77696 | Timing Side-Channel in SM2 Signature Generation | LOW | 3.7 | 34%ile | Microsoft | 2026-09-08 |
| CVE-2026-77860 | 'serve-expired' can bypass Unbound 'wait-limit' | LOW | 3.7 | 23%ile | Microsoft | 2026-09-08 |
| CVE-2026-78124 | strongSwan 5.0.2 through 6.0.7 allows PKCS#7 certificate enumeration in the openssl plugin that leads to a lack of relea | LOW | 3.7 | 17%ile | Microsoft | 2026-09-08 |
| CVE-2026-78127 | libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective lifetime in the IKE mess | LOW | 3.7 | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-78131 | strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in the x509 plugin's attribu | LOW | 3.7 | 20%ile | Microsoft | 2026-09-08 |
| CVE-2026-80230 | OpenSSL pinning bypass | LOW | 3.7 | 31%ile | Microsoft | 2026-09-08 |
| CVE-2026-80255 | secure cookie attribute bypass with tab | LOW | 3.7 | 41%ile | Microsoft | 2026-09-08 |
| CVE-2026-89160 | PCRE2 before 10.48 has a pcre2_match out-of-bounds read during the PCRE2_MATCH_INVALID_UTF matching of an invalid UTF su | LOW | 3.7 | 19%ile | Microsoft | 2026-09-08 |
| CVE-2026-89565 | ipip: fix skb leak in collect_md mode when metadata_dst allocation fails | LOW | 3.7 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-35191 | QUIC Unvalidated Amplification Credit may be Over Accounted | LOW | 3.7 | 54%ile | Microsoft | 2026-09-08 |
| CVE-2026-97399 | One-byte overread in strncasecmp on Power8 | LOW | 3.7 | 21%ile | Microsoft | 2026-09-08 |
| CVE-2026-80231 | native CA store conn reuse | LOW | 3.7 | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-89461 | power: supply: max17040: synchronize work cancellation on suspend | LOW | 3.6 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-89757 | mm/mglru: fix and remove redundant unevictable folio handling | LOW | 3.6 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-93801 | smb/client: zero-initialize stack-allocated cifs_open_info_data | LOW | 3.6 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-95818 | AT_SECURE program buffer overflow via $ORIGIN processing | LOW | 3.6 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-97477 | RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() | LOW | 3.6 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-69615 | Microsoft Office SharePoint Spoofing Vulnerability | LOW | 3.5 | 34%ile | Microsoft | 2026-09-08 |
| CVE-2026-69904 | Microsoft Office SharePoint Information Disclosure Vulnerability | LOW | 3.5 | 48%ile | Microsoft | 2026-09-08 |
| CVE-2025-1218 | Various packet overreads in mysqlnd_writeprotocol.c | LOW | 3.4 | 21%ile | Microsoft | 2026-09-08 |
| CVE-2026-89562 | ip6_gre: fix hardware header length for NBMA tunnels | LOW | 3.4 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-93231 | lockd: fix swapped arguments in nlmsvc_match_ip() | LOW | 3.4 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-93807 | wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers | LOW | 3.4 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-95308 | Chromium CVE-2026-95308: Integer overflow in Metrics | LOW | 3.4 | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-95324 | Chromium CVE-2026-95324: Uninitialized resource in GPU | LOW | 3.4 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-95359 | Chromium CVE-2026-95359: Uninitialized resource in GPU | LOW | 3.4 | 14%ile | Microsoft | 2026-09-08 |
| CVE-2026-80744 | netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path | LOW | 3.3 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-80761 | Bluetooth: ISO: zero the sockaddr before returning it in getname | LOW | 3.3 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-80920 | io_uring: defer eventfd signaling when queued from a wakeup handler | LOW | 3.3 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-91779 | GNU Binutils Eh Frame elf-eh-frame.c _bfd_elf_eh_frame_section_offset null pointer dereference | LOW | 3.3 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-91780 | GNU Binutils elflink.c elf_link_add_object_symbols null pointer dereference | LOW | 3.3 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-91781 | GNU Binutils ELF Section elf64-x86-64.c elf_x86_64_common_section_index null pointer dereference | LOW | 3.3 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-93191 | smack: fix incorrect task context in smack_msg_queue_msgrcv | LOW | 3.3 | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-93794 | smb/client: flush dirty data before punching a hole | LOW | 3.3 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-96675 | alsa-lib through 1.2.16.1 Denial of Service via pcm_multi | LOW | 3.3 | 1%ile | Microsoft | 2026-09-08 |
| CVE-2026-97422 | drm/amdkfd: fix SMI event cross-process information leak | LOW | 3.3 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-97566 | mptcp: pm: kernel: drop pending ADD_ADDR when removing ID0 | LOW | 3.3 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-97899 | drm/i915: Fix memory leak in query_perf_config_list() | LOW | 3.3 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-97978 | eth: ice: don't dereference pointers from TP_printk() | LOW | 3.3 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-98092 | ASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close() | LOW | 3.3 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-98126 | smb/client: validate new EOF for zero range | LOW | 3.3 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-98128 | scsi: mpi3mr: Fix target device refcount leak in mpi3mr_sas_port_add() | LOW | 3.3 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-80892 | erofs: cap LZMA stream pool size | LOW | 3.3 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-80910 | ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses | LOW | 3.3 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-93234 | drm/gud: validate TV mode names before creating enum property | LOW | 3.2 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-91708 | Chromium CVE-2026-91708: Race condition | LOW | 3.1 | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-91730 | Chromium CVE-2026-91730: Incomplete cleanup | LOW | 3.1 | 14%ile | Microsoft | 2026-09-08 |
| CVE-2026-91747 | Chromium CVE-2026-91747: Use after free | LOW | 3.1 | 16%ile | Microsoft | 2026-09-08 |
| CVE-2026-95312 | Chromium CVE-2026-95312: Information leak in Passwords | LOW | 3.1 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-95317 | Chromium CVE-2026-95317: Incorrect authorization in MediaCapture | LOW | 3.1 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-87876 | Cups: openprinting cups: remaining case-insensitive username matching in scheduler side paths (cve-2026-27447 follow-up) | LOW | 3.0 | 26%ile | Microsoft | 2026-09-08 |
| CVE-2026-89768 | fs: fix user path of nested backing files | LOW | 3.0 | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-93213 | of: fix out-of-bounds read in of_alias_scan() stem parser | LOW | 3.0 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-93242 | scsi: qla2xxx: Fix response queue over-consumption in __qla_consume_iocb() | LOW | 3.0 | 14%ile | Microsoft | 2026-09-08 |
| CVE-2026-93798 | btrfs: fix reloc root cleanup in merge_reloc_roots() | LOW | 3.0 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-97542 | xfs: bail out on bitmap errors in xrep_agfl_fill | LOW | 3.0 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-97966 | octeontx2-pf: reset HTB scheduler topology before freeing queues | LOW | 3.0 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-98124 | smb/client: invalidate fscache for fallocate range operations | LOW | 3.0 | 8%ile | Microsoft | 2026-09-08 |
| CVE-2026-97436 | dpaa2-switch: rework FDB management on the bridge leave path | LOW | 3.0 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-97520 | gfs2: move quota_init qc iterator increment | LOW | 3.0 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-73064 | In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy source to fail can remove o | LOW | 2.9 | 1%ile | Microsoft | 2026-09-08 |
| CVE-2026-86137 | In libxml2 before 2.15.4, xmlFAParsePosCharGroup has an out-of-bounds read, aka an out-of-bounds read in the NXT macro i | LOW | 2.9 | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-89156 | PCRE2 before 10.48 has a pcre2_match out-of-bounds read after a JIT fallback when an attacker can provide invalid UTF da | LOW | 2.9 | 22%ile | Microsoft | 2026-09-08 |
| CVE-2026-89462 | power: supply: max17040: propagate register read errors | LOW | 2.9 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-95302 | Chromium CVE-2026-95302: Incorrect authorization in WebAPKs | LOW | 2.9 | 3%ile | Microsoft | 2026-09-08 |
| CVE-2026-95316 | Chromium CVE-2026-95316: Unchecked return value in Performance | LOW | 2.9 | 3%ile | Microsoft | 2026-09-08 |
| CVE-2026-86141 | xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a strdup failure, i.e., i | LOW | 2.9 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-93222 | signal: avoid shared siginfo namespace rewrites | LOW | 2.8 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-18743 | Popt-devel: popt-static: short realloc in poptconfigfiletostring | LOW | 2.5 | 3%ile | Microsoft | 2026-09-08 |
| CVE-2026-80784 | mptcp: pm: fix memory leak from alloc-during-teardown race | LOW | 2.5 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-80822 | mailbox: mchp-ipc-sbi: Add null check for devm_kasprintf() | LOW | 2.5 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-80883 | drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registered | LOW | 2.5 | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-80893 | mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork() | LOW | 2.5 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-80983 | net/smc: fix socket refcount leak in smc_switch_conns() | LOW | 2.5 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-93209 | Bluetooth: hci_core: use skb_get() instead of skb_clone() for req_skb | LOW | 2.5 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-93264 | RDMA/efa: Fix PBL chunk length computation | LOW | 2.5 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-93824 | tls: reject the combination of TLS and sockmap | LOW | 2.5 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-98082 | btrfs: fix the possible bioc_list memory leak during error | LOW | 2.5 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-98101 | ipv6: mcast: use copy-on-write RCU updates in ip6_mc_source() | LOW | 2.5 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-93275 | perf/x86/intel/pt: Fix stop/start with no update | LOW | 2.5 | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-97407 | ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt | LOW | 2.5 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-80889 | can: isotp: fix timer drain order, wakeup handling and tx_gen ordering | LOW | 2.5 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-80918 | HID: core: fix number/pointer type confusion on long items | LOW | 2.4 | 8%ile | Microsoft | 2026-09-08 |
| CVE-2026-97929 | ALSA: usbusx2y: validate URB actual_length in interrupt callback | LOW | 2.4 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-80843 | xfrm: fix xfrm_state_construct() auth-trunc leak | LOW | 2.3 | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-93785 | cifs: validate idmap key payload length | LOW | 2.3 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-93600 | rustls webpki Name Constraints URI Validation Bypass | LOW | 2.2 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-93601 | rustls webpki 0.101.0 before 0.103.12 Name Constraint Bypass | LOW | 2.2 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-89627 | HID: roccat: free buffered reports when destroying device | LOW | 2.1 | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-80949 | wifi: brcmfmac: Fix memory leak in brcmf_sdio_read_control() | LOW | 1.9 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-80996 | net: l2tp: do not propagate multicast notification errors | LOW | 1.9 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-89473 | power: supply: bq25890: Fix power_supply reference leak | LOW | 1.9 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-89597 | fbdev: uvesafb: unregister connector callback on init failure | LOW | 1.9 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-89645 | btrfs: drop recovered reloc root refs on recovery failure | LOW | 1.9 | 14%ile | Microsoft | 2026-09-08 |
| CVE-2026-93240 | memcg: make the v1 soft limit knob inert | LOW | 1.9 | 13%ile | Microsoft | 2026-09-08 |
| CVE-2026-93792 | wifi: iwlwifi: mvm: fix a possible underflow | LOW | 1.9 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-97479 | driver core: Avoid warning when removing a device while its supplier is unbinding | LOW | 1.9 | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-97973 | net: macb: destroy the phylink instance on the probe error path | LOW | 1.9 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-93208 | kasan: fix cache shrink race with CPU hotplug | LOW | 1.9 | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-93272 | remoteproc: qcom_wcnss: Fix handling the lack of PD regulators in v3 | LOW | 1.9 | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-80797 | nfc: pn533: purge fragmented skbs during cleanup | LOW | 1.9 | 16%ile | Microsoft | 2026-09-08 |
| CVE-2026-80827 | USB: serial: option: fix slab OOB read in interrupt URB callback | LOW | 1.8 | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-80948 | wifi: iwlwifi: dvm: fix memory leak in iwl_op_mode_dvm_start() | LOW | 1.6 | 13%ile | Microsoft | 2026-09-08 |
| CVE-2026-97930 | ALSA: usbusx2y: fix in04_last array size mismatch with in04_buf | LOW | 1.6 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-102930 | virtualenv: Downloaded seed wheels (pip/setuptools) are not integrity-checked before use | UNKNOWN | — | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-102938 | virtualenv writes prompt values into pyvenv.cfg without sanitizing line boundaries, allowing configuration injection | UNKNOWN | — | 4%ile | Microsoft | 2026-09-08 |
| CVE-2026-11573 | Uncontrolled recursion in QDomDocument/QDomNode serialization causes stack exhaustion (QtXml) | UNKNOWN | — | 33%ile | Microsoft | 2026-09-08 |
| CVE-2026-12345 | Race condition in tempfile.TemporaryDirectory cleanup allows deleting files outside the temporary directory | UNKNOWN | — | 28%ile | Microsoft | 2026-09-08 |
| CVE-2026-19445 | Use-after-free of a server-side SSLContext when sni_callback switches contexts | UNKNOWN | — | 44%ile | Microsoft | 2026-09-08 |
| CVE-2026-19553 | SSLContext.wrap_bio() missing validation of server_hostname parameter | UNKNOWN | — | 46%ile | Microsoft | 2026-09-08 |
| CVE-2026-53493 | Containerd has image-pull DoS via crafted OCI index graph amplification | UNKNOWN | — | 29%ile | Microsoft | 2026-09-08 |
| CVE-2026-53495 | containerd CRI ExecSync Goroutine Leak Leading to Node-Level Denial of Service | UNKNOWN | — | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-55951 | httpc memory exhaustion via unbounded response header accumulation | UNKNOWN | — | 53%ile | Microsoft | 2026-09-08 |
| CVE-2026-59696 | uri_string does not bound the port component of a URI before integer conversion | UNKNOWN | — | 54%ile | Microsoft | 2026-09-08 |
| CVE-2026-61674 | Fluent Bit: Remote stack buffer overflow in Fluent Bit `out_forward` Secure-Forward `PONG` handler | UNKNOWN | — | 54%ile | Microsoft | 2026-09-08 |
| CVE-2026-65634 | Superlinear CPU denial of service in Erlang/OTP ASN.1 OBJECT IDENTIFIER decoder | UNKNOWN | — | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-66067 | RabbitMQ: Stream protocol skips per vhost per user connection limits | UNKNOWN | — | 38%ile | Microsoft | 2026-09-08 |
| CVE-2026-66068 | RabbitMQ: Shovel DEBUG log of full state exposes decrypted URIs | UNKNOWN | — | 3%ile | Microsoft | 2026-09-08 |
| CVE-2026-66069 | RabbitMQ: Monitoring-tag DELETE of auth-attempt metrics | UNKNOWN | — | 23%ile | Microsoft | 2026-09-08 |
| CVE-2026-66070 | RabbitMQ: CORS * reflects Origin with Allow-Credentials | UNKNOWN | — | 31%ile | Microsoft | 2026-09-08 |
| CVE-2026-66071 | RabbitMQ: Atom exhaustion: OAuth2 JWT tag: scope values | UNKNOWN | — | 46%ile | Microsoft | 2026-09-08 |
| CVE-2026-66072 | RabbitMQ: Atom table exhaustion via stream `chunk_selector` | UNKNOWN | — | 41%ile | Microsoft | 2026-09-08 |
| CVE-2026-66073 | RabbitMQ: Atom table exhaustion via management API node field | UNKNOWN | — | 41%ile | Microsoft | 2026-09-08 |
| CVE-2026-66074 | RabbitMQ: ReDoS via management API ?name= filter | UNKNOWN | — | 32%ile | Microsoft | 2026-09-08 |
| CVE-2026-66075 | RabbitMQ: Monitoring-tag user can restart federation links | UNKNOWN | — | 13%ile | Microsoft | 2026-09-08 |
| CVE-2026-66077 | RabbitMQ: Stored XSS via TLS peer-certificate DN in management UI | UNKNOWN | — | 4%ile | Microsoft | 2026-09-08 |
| CVE-2026-66079 | RabbitMQ: Pre-auth AMQP 1.0 array32 zero-width element DoS | UNKNOWN | — | 25%ile | Microsoft | 2026-09-08 |
| CVE-2026-66357 | inets,httpd:HTTP Request Smuggling via obs-fold Header Continuation | UNKNOWN | — | 48%ile | Microsoft | 2026-09-08 |
| CVE-2026-66835 | httpd mod_auth directory protection bypassed by a doubled slash in the request path | UNKNOWN | — | 62%ile | Microsoft | 2026-09-08 |
| CVE-2026-67219 | RabbitMQ: Consistent-hash exchange unbounded weight | UNKNOWN | — | 23%ile | Microsoft | 2026-09-08 |
| CVE-2026-67221 | RabbitMQ: AMQP 1.0 shovel status exposes plaintext URI passwords | UNKNOWN | — | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-67222 | RabbitMQ: list_to_atom on auth_mechanism URI tokens in amqp_client | UNKNOWN | — | 25%ile | Microsoft | 2026-09-08 |
| CVE-2026-67223 | RabbitMQ: LDAP DN injection via unescaped substitution | UNKNOWN | — | 29%ile | Microsoft | 2026-09-08 |
| CVE-2026-67224 | RabbitMQ: Admin path-traversal write via trace name | UNKNOWN | — | 29%ile | Microsoft | 2026-09-08 |
| CVE-2026-67225 | RabbitMQ: Stream-protocol frame length never validated against frame_max | UNKNOWN | — | 28%ile | Microsoft | 2026-09-08 |
| CVE-2026-67226 | RabbitMQ: Admin-only atom exhaustion: PUT /api/users tags list | UNKNOWN | — | 33%ile | Microsoft | 2026-09-08 |
| CVE-2026-67227 | RabbitMQ: Atom exhaustion: to_atom on global-parameter :name | UNKNOWN | — | 32%ile | Microsoft | 2026-09-08 |
| CVE-2026-67228 | RabbitMQ: Atom exhaustion: to_atom on runtime-parameter component | UNKNOWN | — | 25%ile | Microsoft | 2026-09-08 |
| CVE-2026-67229 | RabbitMQ: Admin-only atom exhaustion: atomize_keys on vhost metadata | UNKNOWN | — | 33%ile | Microsoft | 2026-09-08 |
| CVE-2026-67230 | RabbitMQ: Web-STOMP unbounded pre-auth accumulation | UNKNOWN | — | 48%ile | Microsoft | 2026-09-08 |
| CVE-2026-67231 | RabbitMQ: Trust-store whitelist by Issuer+Serial only | UNKNOWN | — | 14%ile | Microsoft | 2026-09-08 |
| CVE-2026-67232 | RabbitMQ: Web-MQTT decompression bomb | UNKNOWN | — | 34%ile | Microsoft | 2026-09-08 |
| CVE-2026-67233 | RabbitMQ: Monitoring-tag user can DELETE shovels | UNKNOWN | — | 23%ile | Microsoft | 2026-09-08 |
| CVE-2026-67235 | RabbitMQ: AMQP 0-9-1 body assembly never validates accumulated size | UNKNOWN | — | 23%ile | Microsoft | 2026-09-08 |
| CVE-2026-67239 | RabbitMQ: Stored XSS via TLS peer-certificate DN in stream-management UI | UNKNOWN | — | 4%ile | Microsoft | 2026-09-08 |
| CVE-2026-67411 | RabbitMQ: Web MQTT with PROXY Protocol enabled: a loopback-only user permission bypass | UNKNOWN | — | 25%ile | Microsoft | 2026-09-08 |
| CVE-2026-67412 | RabbitMQ: Federation upstream skips vhost authorization allowing cross-vhost message access | UNKNOWN | — | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-67413 | RabbitMQ: Authenticated RabbitMQ JMS Topic Selector Users Can Consume Broker CPU with an Unbounded LIKE Regular Expressi | UNKNOWN | — | 42%ile | Microsoft | 2026-09-08 |
| CVE-2026-67419 | RabbitMQ: Consecutive topic wildcards cause combinatorial routing work | UNKNOWN | — | 31%ile | Microsoft | 2026-09-08 |
| CVE-2026-67420 | RabbitMQ OAuth credential refresh retains revoked runtime tags | UNKNOWN | — | 19%ile | Microsoft | 2026-09-08 |
| CVE-2026-68956 | SSH daemon allocates unbounded idle session channels, bypassing max_channels | UNKNOWN | — | 32%ile | Microsoft | 2026-09-08 |
| CVE-2026-69664 | httpd parks a request worker indefinitely on a malformed chunk size sent after the headers | UNKNOWN | — | 61%ile | Microsoft | 2026-09-08 |
| CVE-2026-70409 | eldap does not bound the port component of a referral URL before integer conversion | UNKNOWN | — | 48%ile | Microsoft | 2026-09-08 |
| CVE-2026-71380 | httpd applies no timeout while receiving a request body, parking a worker on a stalled client | UNKNOWN | — | 52%ile | Microsoft | 2026-09-08 |
| CVE-2026-71562 | httpc does not bound server-supplied numeric header values before integer conversion | UNKNOWN | — | 48%ile | Microsoft | 2026-09-08 |
| CVE-2026-73270 | httpd mod_auth directory protection bypassed by request path casing on case-insensitive filesystems | UNKNOWN | — | 60%ile | Microsoft | 2026-09-08 |
| CVE-2026-73276 | inets, httpd: HTTP Request Smuggling via Whitespace-Before-Colon Header Dropping i | UNKNOWN | — | 48%ile | Microsoft | 2026-09-08 |
| CVE-2026-73812 | inets, httpd: HTTP Request Smuggling via Transfer-Encoding and Content-Length | UNKNOWN | — | 44%ile | Microsoft | 2026-09-08 |
| CVE-2026-74835 | inets,httpd: Memory Exhaustion via Unenforced max_body_size During Chunked Body Reception | UNKNOWN | — | 48%ile | Microsoft | 2026-09-08 |
| CVE-2026-74994 | inets, httpd: Authentication Bypass via Directory Namespace Collapse in httpd mod_auth | UNKNOWN | — | 50%ile | Microsoft | 2026-09-08 |
| CVE-2026-75538 | A Signed Length Overflow in Erlang/OTP's inet TCP Driver Overflows the Receive Buffer Into BEAM VM Memory From an Unauth | UNKNOWN | — | 58%ile | Microsoft | 2026-09-08 |
| CVE-2026-77405 | RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser | UNKNOWN | — | 21%ile | Microsoft | 2026-09-08 |
| CVE-2026-77406 | RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration | UNKNOWN | — | 44%ile | Microsoft | 2026-09-08 |
| CVE-2026-77408 | RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow | UNKNOWN | — | 44%ile | Microsoft | 2026-09-08 |
| CVE-2026-77409 | RabbitMQ amqp091-go: Denial of Service via Synchronous Event Channel Blocking | UNKNOWN | — | 44%ile | Microsoft | 2026-09-08 |
| CVE-2026-78253 | Denial-of-service (stack-exhaustion) vulnerability in QXmlStreamReader::readElementText() impacts Qt | UNKNOWN | — | 37%ile | Microsoft | 2026-09-08 |
| CVE-2026-79616 | Out-of-bounds read vulnerability in Context2D.path and PathSvg.path properties impacts Qt Quick | UNKNOWN | — | 4%ile | Microsoft | 2026-09-08 |
| CVE-2026-80781 | HID: core: fix OOB read of field->usage in hid_set_field() | UNKNOWN | — | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-80795 | nfc: nci: fix out-of-bounds write in nci_target_auto_activated() | UNKNOWN | — | 16%ile | Microsoft | 2026-09-08 |
| CVE-2026-80812 | ALSA: dummy: Check card index validity at probe | UNKNOWN | — | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-80814 | rndis_host: add overflow check in rndis_rx_fixup() | UNKNOWN | — | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-80887 | drm/vmwgfx: use check_add_overflow for shader size+offset bound | UNKNOWN | — | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-80901 | ipvs: fix the checksum validations | UNKNOWN | — | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-80906 | net: packet: fix wrong transport_header when sending VLAN-tagged frame | UNKNOWN | — | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-80907 | drm/amdgpu: Fix UVD dpb min size calculation for H264 | UNKNOWN | — | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-80908 | drm/amdgpu: Reject UVD message with dimensions above 4096 | UNKNOWN | — | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-80911 | ASoC: SOF: sof-audio: Fix error path in sof_widget_setup_unlocked() | UNKNOWN | — | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-81642 | Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY | UNKNOWN | — | 62%ile | Microsoft | 2026-09-08 |
| CVE-2026-81870 | OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs | UNKNOWN | — | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-81871 | OpenTelemetry-Go: Log gRPC exporter ignores env TLS certs, bypassing mTLS/pinning | UNKNOWN | — | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-81872 | OpenTelemetry-Go: BatchProcessor can busy-spin when export buffer is full | UNKNOWN | — | 32%ile | Microsoft | 2026-09-08 |
| CVE-2026-82049 | tarfile extraction filters allow file modification and content disclosure via hard link to symlink | UNKNOWN | — | 8%ile | Microsoft | 2026-09-08 |
| CVE-2026-82717 | CNAME synthesis could lead to heap corruption | UNKNOWN | — | 56%ile | Microsoft | 2026-09-08 |
| CVE-2026-84445 | gRPC-Go: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers in the xDS servers | UNKNOWN | — | 51%ile | Microsoft | 2026-09-08 |
| CVE-2026-87910 | tarfile hardlink fallback ignores custom extraction filter rejection via None | UNKNOWN | — | 49%ile | Microsoft | 2026-09-08 |
| CVE-2026-88807 | libXrender RenderQueryPictFormats Reply Heap-based Buffer Overflow | UNKNOWN | — | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-89422 | TLS 1.3 client skips server authentication when ServerHello carries an unsolicited pre_shared_key extension | UNKNOWN | — | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-96269 | GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an untrusted value of read-symb | UNKNOWN | — | 4%ile | Microsoft | 2026-09-08 |
| CVE-2026-97689 | urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory | UNKNOWN | — | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-66302 | Skype for Business Remote Code Execution Vulnerability | UNKNOWN | — | 62%ile | Microsoft | 2026-09-08 |
| CVE-2026-68833 | Windows NTFS Remote Code Execution Vulnerability | UNKNOWN | — | 38%ile | Microsoft | 2026-09-08 |
| CVE-2026-68875 | Windows NTFS Remote Code Execution Vulnerability | UNKNOWN | — | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69265 | Windows NTFS Elevation of Privilege Vulnerability | UNKNOWN | — | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69283 | Windows CD-ROM Driver Elevation of Privilege Vulnerability | UNKNOWN | — | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69284 | Windows DCOM Server Elevation of Privilege Vulnerability | UNKNOWN | — | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69360 | Microsoft Office Word Remote Code Execution Vulnerability | UNKNOWN | — | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-69415 | Windows DHCP Server Elevation of Privilege Vulnerability | UNKNOWN | — | 54%ile | Microsoft | 2026-09-08 |
| CVE-2026-69423 | Windows USB Video Driver Elevation of Privilege Vulnerability | UNKNOWN | — | 56%ile | Microsoft | 2026-09-08 |
| CVE-2026-69473 | Windows Kernel Elevation of Privilege Vulnerability | UNKNOWN | — | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-69478 | Windows Device Association Service Elevation of Privilege Vulnerability | UNKNOWN | — | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-69623 | Windows HTTP Print Provider Remote Code Execution Vulnerability | UNKNOWN | — | 56%ile | Microsoft | 2026-09-08 |
| CVE-2026-69732 | Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability | UNKNOWN | — | 53%ile | Microsoft | 2026-09-08 |
| CVE-2026-69781 | Windows DHCP Client Denial of Service Vulnerability | UNKNOWN | — | 48%ile | Microsoft | 2026-09-08 |
| CVE-2026-70583 | Windows Core Messaging Elevation of Privilege Vulnerability | UNKNOWN | — | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-71339 | Windows Installer Elevation of Privilege Vulnerability | UNKNOWN | — | 28%ile | Microsoft | 2026-09-08 |
| CVE-2026-72948 | Windows DNS Elevation of Privilege Vulnerability | UNKNOWN | — | 32%ile | Microsoft | 2026-09-08 |
| CVE-2026-73016 | DirectWrite Remote Code Execution Vulnerability | UNKNOWN | — | 57%ile | Microsoft | 2026-09-08 |
| CVE-2026-76017 | Chromium CVE-2026-76017: Use after free in Chromoting | UNKNOWN | — | 32%ile | Microsoft | 2026-09-08 |
| CVE-2026-76018 | Chromium CVE-2026-76018: Privilege elevation in Import | UNKNOWN | — | 32%ile | Microsoft | 2026-09-08 |
| CVE-2026-76019 | Chromium CVE-2026-76019: Incorrect authorization in Workers | UNKNOWN | — | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-76021 | Chromium CVE-2026-76021: Use after free in DOM | UNKNOWN | — | 36%ile | Microsoft | 2026-09-08 |
| CVE-2026-76022 | Chromium CVE-2026-76022: Buffer overflow in Network | UNKNOWN | — | 39%ile | Microsoft | 2026-09-08 |
| CVE-2026-76023 | Chromium CVE-2026-76023: Improper resource control in Linux Toolkit Theming | UNKNOWN | — | 39%ile | Microsoft | 2026-09-08 |
| CVE-2026-76036 | Chromium CVE-2026-76036: Buffer overflow in Dawn | UNKNOWN | — | 43%ile | Microsoft | 2026-09-08 |
| CVE-2026-76039 | Chromium CVE-2026-76039: Incorrect reference resolution in Core | UNKNOWN | — | 26%ile | Microsoft | 2026-09-08 |
| CVE-2026-84323 | Chromium: CVE-2026-84323 Missing authorization in FileSystem | UNKNOWN | — | 20%ile | Microsoft | 2026-09-08 |
| CVE-2026-84324 | Chromium: CVE-2026-84324 Use after free in Proxy | UNKNOWN | — | 41%ile | Microsoft | 2026-09-08 |
| CVE-2026-84325 | Chromium: CVE-2026-84325 Improper input validation in DataTransfer | UNKNOWN | — | 34%ile | Microsoft | 2026-09-08 |
| CVE-2026-84326 | Chromium: CVE-2026-84326 Uninitialized resource in V8 | UNKNOWN | — | 43%ile | Microsoft | 2026-09-08 |
| CVE-2026-84327 | Chromium: CVE-2026-84327 Incorrect authorization in Autofill | UNKNOWN | — | 23%ile | Microsoft | 2026-09-08 |
| CVE-2026-84328 | Chromium: CVE-2026-84328 Missing authorization in FileSystem | UNKNOWN | — | 16%ile | Microsoft | 2026-09-08 |
| CVE-2026-84329 | Chromium: CVE-2026-84329 Confused deputy in CredentialProvider | UNKNOWN | — | 20%ile | Microsoft | 2026-09-08 |
| CVE-2026-84330 | Chromium: CVE-2026-84330 UI misrepresentation in FullScreen | UNKNOWN | — | 17%ile | Microsoft | 2026-09-08 |
| CVE-2026-84331 | Chromium: CVE-2026-84331 Incorrect authorization in Actor | UNKNOWN | — | 16%ile | Microsoft | 2026-09-08 |
| CVE-2026-84332 | Chromium: CVE-2026-84332 Incorrect authorization in SiteSettings | UNKNOWN | — | 21%ile | Microsoft | 2026-09-08 |
| CVE-2026-84333 | Chromium: CVE-2026-84333 Use after free in Dawn | UNKNOWN | — | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-84334 | Chromium: CVE-2026-84334 Incorrect authorization in Chromoting | UNKNOWN | — | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-84335 | Chromium: CVE-2026-84335 Incorrect authorization in TabStrip | UNKNOWN | — | 33%ile | Microsoft | 2026-09-08 |
| CVE-2026-84347 | Chromium: CVE-2026-84347 Use after free in WebRTC | UNKNOWN | — | 44%ile | Microsoft | 2026-09-08 |
| CVE-2026-84348 | Chromium: CVE-2026-84348 Information leak in MediaCapture | UNKNOWN | — | 25%ile | Microsoft | 2026-09-08 |
| CVE-2026-84349 | Chromium: CVE-2026-84349 Use after free in Browser | UNKNOWN | — | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-84350 | Chromium: CVE-2026-84350 Use after free in TabStrip | UNKNOWN | — | 32%ile | Microsoft | 2026-09-08 |
| CVE-2026-84351 | Chromium: CVE-2026-84351 Buffer overflow in GPU | UNKNOWN | — | 39%ile | Microsoft | 2026-09-08 |
| CVE-2026-84352 | Chromium: CVE-2026-84352 Use after free in WebGL | UNKNOWN | — | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-84353 | Chromium: CVE-2026-84353 Use after free in Shared Tab Groups | UNKNOWN | — | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-84354 | Chromium: CVE-2026-84354 Incorrect authorization in FileSystem | UNKNOWN | — | 39%ile | Microsoft | 2026-09-08 |
| CVE-2026-84355 | Chromium: CVE-2026-84355 Incorrect authorization in Navigation | UNKNOWN | — | 16%ile | Microsoft | 2026-09-08 |
| CVE-2026-84356 | Chromium: CVE-2026-84356 UI misrepresentation in FullScreen | UNKNOWN | — | 16%ile | Microsoft | 2026-09-08 |
| CVE-2026-84357 | Chromium: CVE-2026-84357 Improper input validation in Omnibox | UNKNOWN | — | 20%ile | Microsoft | 2026-09-08 |
| CVE-2026-84358 | Chromium: CVE-2026-84358 Improper privilege management in Downloads | UNKNOWN | — | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-84359 | Chromium: CVE-2026-84359 Information leak in Skia | UNKNOWN | — | 14%ile | Microsoft | 2026-09-08 |
| CVE-2026-85042 | Chromium CVE-2026-85042: Use after free in DevTools | UNKNOWN | — | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-85043 | Chromium CVE-2026-85043: Incomplete cleanup in Network | UNKNOWN | — | 38%ile | Microsoft | 2026-09-08 |
| CVE-2026-85045 | Chromium CVE-2026-85045: Race condition in V8 | UNKNOWN | — | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-85046 | Chromium: CVE-2026-85046 Type confusion in V8 | UNKNOWN | — | 79%ile | Microsoft | 2026-09-08 |
| CVE-2026-85047 | Chromium CVE-2026-85047: Improper input validation in Transactions Platform | UNKNOWN | — | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-85048 | Chromium CVE-2026-85048: Use after free in Compositing | UNKNOWN | — | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-85049 | Chromium CVE-2026-85049: Use after free in Skia | UNKNOWN | — | 21%ile | Microsoft | 2026-09-08 |
| CVE-2026-85051 | Chromium CVE-2026-85051: Type confusion in Compositing | UNKNOWN | — | 39%ile | Microsoft | 2026-09-08 |
| CVE-2026-85052 | Chromium CVE-2026-85052: Out of bounds read in CrashReporting | UNKNOWN | — | 14%ile | Microsoft | 2026-09-08 |
| CVE-2026-85053 | Chromium CVE-2026-85053: Improper resource exposure in CacheStorage | UNKNOWN | — | 36%ile | Microsoft | 2026-09-08 |
| CVE-2026-87429 | Chromium CVE-2026-87429: Missing authorization in ServiceWorker | UNKNOWN | — | 21%ile | Microsoft | 2026-09-08 |
| CVE-2026-87430 | Chromium CVE-2026-87430: Buffer overflow in WebRTC | UNKNOWN | — | 47%ile | Microsoft | 2026-09-08 |
| CVE-2026-87431 | Chromium CVE-2026-87431: Missing authorization in Extensions | UNKNOWN | — | 25%ile | Microsoft | 2026-09-08 |
| CVE-2026-87432 | Chromium CVE-2026-87432: Incorrect authorization in Navigation | UNKNOWN | — | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-87433 | Chromium CVE-2026-87433: Race condition in FileAPI | UNKNOWN | — | 20%ile | Microsoft | 2026-09-08 |
| CVE-2026-87434 | Chromium CVE-2026-87434: Missing authorization in CORS | UNKNOWN | — | 16%ile | Microsoft | 2026-09-08 |
| CVE-2026-87435 | Chromium CVE-2026-87435: Information leak in ControlledFrame | UNKNOWN | — | 21%ile | Microsoft | 2026-09-08 |
| CVE-2026-87436 | Chromium CVE-2026-87436: Incomplete cleanup in Browser | UNKNOWN | — | 24%ile | Microsoft | 2026-09-08 |
| CVE-2026-87437 | Chromium CVE-2026-87437: Information leak in Frames | UNKNOWN | — | 25%ile | Microsoft | 2026-09-08 |
| CVE-2026-87438 | Chromium CVE-2026-87438: Out of bounds write in WebGL | UNKNOWN | — | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-87439 | Chromium CVE-2026-87439: Information leak in ServiceWorker | UNKNOWN | — | 21%ile | Microsoft | 2026-09-08 |
| CVE-2026-87440 | Chromium CVE-2026-87440: Out of bounds read in Media | UNKNOWN | — | 36%ile | Microsoft | 2026-09-08 |
| CVE-2026-87441 | Chromium CVE-2026-87441: Missing authorization in Downloads | UNKNOWN | — | 16%ile | Microsoft | 2026-09-08 |
| CVE-2026-87442 | Chromium CVE-2026-87442: Confused deputy in Prerender | UNKNOWN | — | 16%ile | Microsoft | 2026-09-08 |
| CVE-2026-87443 | Chromium CVE-2026-87443: Missing authorization in Actor | UNKNOWN | — | 23%ile | Microsoft | 2026-09-08 |
| CVE-2026-87444 | Chromium CVE-2026-87444: Memory corruption in Codecs | UNKNOWN | — | 36%ile | Microsoft | 2026-09-08 |
| CVE-2026-87445 | Chromium CVE-2026-87445: UI misrepresentation in Session | UNKNOWN | — | 15%ile | Microsoft | 2026-09-08 |
| CVE-2026-87446 | Chromium CVE-2026-87446: Incomplete cleanup in Extensions | UNKNOWN | — | 24%ile | Microsoft | 2026-09-08 |
| CVE-2026-87447 | Chromium CVE-2026-87447: Incorrect authorization in Network | UNKNOWN | — | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-87448 | Chromium CVE-2026-87448: Use after free in DevTools | UNKNOWN | — | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-87449 | Chromium CVE-2026-87449: Cross-site request forgery in DeviceBoundSessionCredentials | UNKNOWN | — | 13%ile | Microsoft | 2026-09-08 |
| CVE-2026-87450 | Chromium CVE-2026-87450: Incorrect authorization in Permissions | UNKNOWN | — | 25%ile | Microsoft | 2026-09-08 |
| CVE-2026-87451 | Chromium CVE-2026-87451: Information leak in Downloads | UNKNOWN | — | 14%ile | Microsoft | 2026-09-08 |
| CVE-2026-87452 | Chromium CVE-2026-87452: Incorrect authorization in GPU | UNKNOWN | — | 13%ile | Microsoft | 2026-09-08 |
| CVE-2026-87453 | Chromium CVE-2026-87453: Confused deputy in BackgroundFetch | UNKNOWN | — | 20%ile | Microsoft | 2026-09-08 |
| CVE-2026-87454 | Chromium CVE-2026-87454: Information leak in Enterprise | UNKNOWN | — | 25%ile | Microsoft | 2026-09-08 |
| CVE-2026-87455 | Chromium CVE-2026-87455: Use after free in Aura | UNKNOWN | — | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-87456 | Chromium CVE-2026-87456: Uninitialized resource in Media | UNKNOWN | — | 16%ile | Microsoft | 2026-09-08 |
| CVE-2026-87457 | Chromium CVE-2026-87457: Race condition in Updater | UNKNOWN | — | 1%ile | Microsoft | 2026-09-08 |
| CVE-2026-87458 | Chromium CVE-2026-87458: UI misrepresentation in Geometry | UNKNOWN | — | 17%ile | Microsoft | 2026-09-08 |
| CVE-2026-87459 | Chromium CVE-2026-87459: Observable discrepancy in Select | UNKNOWN | — | 25%ile | Microsoft | 2026-09-08 |
| CVE-2026-87460 | Chromium CVE-2026-87460: Use after free in Platform | UNKNOWN | — | 36%ile | Microsoft | 2026-09-08 |
| CVE-2026-87461 | Chromium CVE-2026-87461: Information leak in Core | UNKNOWN | — | 15%ile | Microsoft | 2026-09-08 |
| CVE-2026-87462 | Chromium CVE-2026-87462: UI misrepresentation in FedCM | UNKNOWN | — | 17%ile | Microsoft | 2026-09-08 |
| CVE-2026-87463 | Chromium CVE-2026-87463: Incorrect authorization in Certificate | UNKNOWN | — | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-87464 | Chromium CVE-2026-87464: Use after free in WebGL | UNKNOWN | — | 48%ile | Microsoft | 2026-09-08 |
| CVE-2026-87465 | Chromium CVE-2026-87465: Incorrect authorization in Downloads | UNKNOWN | — | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-87466 | Chromium CVE-2026-87466: Incorrect authorization in Workers | UNKNOWN | — | 20%ile | Microsoft | 2026-09-08 |
| CVE-2026-87467 | Chromium CVE-2026-87467: Race condition in Updater | UNKNOWN | — | 1%ile | Microsoft | 2026-09-08 |
| CVE-2026-87468 | Chromium CVE-2026-87468: Incorrect authorization in Isolated | UNKNOWN | — | 19%ile | Microsoft | 2026-09-08 |
| CVE-2026-87469 | Chromium CVE-2026-87469: Improper input validation in Extensions | UNKNOWN | — | 14%ile | Microsoft | 2026-09-08 |
| CVE-2026-87470 | Chromium CVE-2026-87470: Improper quantity validation in Tint | UNKNOWN | — | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-87471 | Chromium CVE-2026-87471: Incorrect authorization in ServiceWorker | UNKNOWN | — | 25%ile | Microsoft | 2026-09-08 |
| CVE-2026-87472 | Chromium CVE-2026-87472: Improper input validation in FedCM | UNKNOWN | — | 15%ile | Microsoft | 2026-09-08 |
| CVE-2026-87473 | Chromium CVE-2026-87473: Incorrect authorization in FileHandling | UNKNOWN | — | 21%ile | Microsoft | 2026-09-08 |
| CVE-2026-87474 | Chromium CVE-2026-87474: Use after free in Payments | UNKNOWN | — | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-87475 | Chromium CVE-2026-87475: Missing authorization in Omnibox | UNKNOWN | — | 19%ile | Microsoft | 2026-09-08 |
| CVE-2026-87476 | Chromium CVE-2026-87476: Incorrect authorization in Loader | UNKNOWN | — | 23%ile | Microsoft | 2026-09-08 |
| CVE-2026-87477 | Chromium CVE-2026-87477: Information leak in Core | UNKNOWN | — | 25%ile | Microsoft | 2026-09-08 |
| CVE-2026-87478 | Chromium CVE-2026-87478: Observable discrepancy in Autofill | UNKNOWN | — | 25%ile | Microsoft | 2026-09-08 |
| CVE-2026-87479 | Chromium CVE-2026-87479: Insufficient policy enforcement in Extensions | UNKNOWN | — | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-87480 | Chromium CVE-2026-87480: Use after free in Printing | UNKNOWN | — | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-87481 | Chromium CVE-2026-87481: Incorrect authorization in WebView | UNKNOWN | — | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-87482 | Chromium CVE-2026-87482: Cleartext transmission of sensitive data in HttpsUpgrades | UNKNOWN | — | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-87483 | Chromium CVE-2026-87483: Incorrect authorization in Browser | UNKNOWN | — | 21%ile | Microsoft | 2026-09-08 |
| CVE-2026-87484 | Chromium CVE-2026-87484: UI misrepresentation in Geometry | UNKNOWN | — | 15%ile | Microsoft | 2026-09-08 |
| CVE-2026-87485 | Chromium CVE-2026-87485: Incorrect authorization in CORS | UNKNOWN | — | 16%ile | Microsoft | 2026-09-08 |
| CVE-2026-87486 | Chromium CVE-2026-87486: Clickjacking in TrustedWebActivities | UNKNOWN | — | 1%ile | Microsoft | 2026-09-08 |
| CVE-2026-87487 | Chromium CVE-2026-87487: Missing authorization in FileSystem | UNKNOWN | — | 33%ile | Microsoft | 2026-09-08 |
| CVE-2026-87488 | Chromium CVE-2026-87488: Use after free in WebGL | UNKNOWN | — | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-87490 | Chromium CVE-2026-87490: Information leak in Transactions Platform | UNKNOWN | — | 25%ile | Microsoft | 2026-09-08 |
| CVE-2026-87491 | Chromium CVE-2026-87491: Out of bounds write in V8 | UNKNOWN | — | 89%ile | Microsoft | 2026-09-08 |
| CVE-2026-87492 | Chromium CVE-2026-87492: Incorrect authorization in DevTools | UNKNOWN | — | 39%ile | Microsoft | 2026-09-08 |
| CVE-2026-87493 | Chromium CVE-2026-87493: Missing authorization in FileSystem | UNKNOWN | — | 19%ile | Microsoft | 2026-09-08 |
| CVE-2026-87494 | Chromium CVE-2026-87494: Use after free in Browser | UNKNOWN | — | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-87495 | Chromium CVE-2026-87495: Information leak in Scroll | UNKNOWN | — | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-87496 | Chromium CVE-2026-87496: UI misrepresentation in Browser | UNKNOWN | — | 15%ile | Microsoft | 2026-09-08 |
| CVE-2026-87497 | Chromium CVE-2026-87497: Uninitialized resource in Codecs | UNKNOWN | — | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-87498 | Chromium CVE-2026-87498: Missing authorization in WebUI | UNKNOWN | — | 16%ile | Microsoft | 2026-09-08 |
| CVE-2026-87499 | Chromium CVE-2026-87499: Incorrect authorization in Network | UNKNOWN | — | 25%ile | Microsoft | 2026-09-08 |
| CVE-2026-87500 | Chromium CVE-2026-87500: Improper validation of array index in ANGLE | UNKNOWN | — | 30%ile | Microsoft | 2026-09-08 |
| CVE-2026-87501 | Chromium CVE-2026-87501: UI misrepresentation in Passwords | UNKNOWN | — | 15%ile | Microsoft | 2026-09-08 |
| CVE-2026-87502 | Chromium CVE-2026-87502: Confused deputy in Fullscreen | UNKNOWN | — | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-87503 | Chromium CVE-2026-87503: Inappropriate implementation in Downloads | UNKNOWN | — | 20%ile | Microsoft | 2026-09-08 |
| CVE-2026-87504 | Chromium CVE-2026-87504: Use after free in Core | UNKNOWN | — | 37%ile | Microsoft | 2026-09-08 |
| CVE-2026-87505 | Chromium CVE-2026-87505: Incorrect authorization in FileSystem | UNKNOWN | — | 20%ile | Microsoft | 2026-09-08 |
| CVE-2026-87506 | Chromium CVE-2026-87506: Privilege elevation in WebUI | UNKNOWN | — | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-87507 | Chromium CVE-2026-87507: UI misrepresentation in Downloads | UNKNOWN | — | 17%ile | Microsoft | 2026-09-08 |
| CVE-2026-87508 | Chromium CVE-2026-87508: Incorrect authorization in Loader | UNKNOWN | — | 20%ile | Microsoft | 2026-09-08 |
| CVE-2026-87509 | Chromium CVE-2026-87509: Incorrect authorization in Updater | UNKNOWN | — | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-87510 | Chromium CVE-2026-87510: Improper input validation in FileAPI | UNKNOWN | — | 37%ile | Microsoft | 2026-09-08 |
| CVE-2026-87511 | Chromium CVE-2026-87511: Missing authorization in DevTools | UNKNOWN | — | 14%ile | Microsoft | 2026-09-08 |
| CVE-2026-87512 | Chromium CVE-2026-87512: Use after free in ANGLE | UNKNOWN | — | 46%ile | Microsoft | 2026-09-08 |
| CVE-2026-87513 | Chromium CVE-2026-87513: Missing authorization in ControlledFrame | UNKNOWN | — | 19%ile | Microsoft | 2026-09-08 |
| CVE-2026-87514 | Chromium CVE-2026-87514: Use after free in Views | UNKNOWN | — | 3%ile | Microsoft | 2026-09-08 |
| CVE-2026-87515 | Chromium CVE-2026-87515: Incorrect authorization in FileAPI | UNKNOWN | — | 19%ile | Microsoft | 2026-09-08 |
| CVE-2026-87516 | Chromium CVE-2026-87516: Observable discrepancy in Navigation | UNKNOWN | — | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-87517 | Chromium CVE-2026-87517: Race condition in Mobile | UNKNOWN | — | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-87518 | Chromium CVE-2026-87518: Observable discrepancy in Safebrowsing | UNKNOWN | — | 21%ile | Microsoft | 2026-09-08 |
| CVE-2026-87519 | Chromium CVE-2026-87519: Incorrect authorization in Safebrowsing | UNKNOWN | — | 21%ile | Microsoft | 2026-09-08 |
| CVE-2026-87520 | Chromium CVE-2026-87520: Use after free in Dawn | UNKNOWN | — | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-87521 | Chromium CVE-2026-87521: Information leak in WebMCP | UNKNOWN | — | 14%ile | Microsoft | 2026-09-08 |
| CVE-2026-87522 | Chromium CVE-2026-87522: Missing authorization in WebView | UNKNOWN | — | 20%ile | Microsoft | 2026-09-08 |
| CVE-2026-87523 | Chromium CVE-2026-87523: Race condition in DataTransfer | UNKNOWN | — | 15%ile | Microsoft | 2026-09-08 |
| CVE-2026-87524 | Chromium CVE-2026-87524: Use after free in Core | UNKNOWN | — | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-87525 | Chromium CVE-2026-87525: Out of bounds read in Chromoting | UNKNOWN | — | 1%ile | Microsoft | 2026-09-08 |
| CVE-2026-87526 | Chromium CVE-2026-87526: Use after free in Passwords | UNKNOWN | — | 37%ile | Microsoft | 2026-09-08 |
| CVE-2026-87527 | Chromium CVE-2026-87527: Buffer overflow in WebGL | UNKNOWN | — | 43%ile | Microsoft | 2026-09-08 |
| CVE-2026-87528 | Chromium CVE-2026-87528: Type confusion in Rust | UNKNOWN | — | 41%ile | Microsoft | 2026-09-08 |
| CVE-2026-87529 | Chromium CVE-2026-87529: Numeric truncation error in Media | UNKNOWN | — | 43%ile | Microsoft | 2026-09-08 |
| CVE-2026-87530 | Chromium CVE-2026-87530: Uncontrolled search path element in CredentialProvider | UNKNOWN | — | 4%ile | Microsoft | 2026-09-08 |
| CVE-2026-87531 | Chromium CVE-2026-87531: Information leak in CORS | UNKNOWN | — | 14%ile | Microsoft | 2026-09-08 |
| CVE-2026-87532 | Chromium CVE-2026-87532: Improper state validation in Safebrowsing | UNKNOWN | — | 20%ile | Microsoft | 2026-09-08 |
| CVE-2026-87533 | Chromium CVE-2026-87533: Use after free in DevTools | UNKNOWN | — | 3%ile | Microsoft | 2026-09-08 |
| CVE-2026-87534 | Chromium CVE-2026-87534: Missing authorization in WebView | UNKNOWN | — | 22%ile | Microsoft | 2026-09-08 |
| CVE-2026-87535 | Chromium CVE-2026-87535: Information loss or omission in Safebrowsing | UNKNOWN | — | 28%ile | Microsoft | 2026-09-08 |
| CVE-2026-87537 | Chromium CVE-2026-87537: Missing authorization in Extensions | UNKNOWN | — | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-87538 | Chromium CVE-2026-87538: Clickjacking in Input | UNKNOWN | — | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-87539 | Chromium CVE-2026-87539: Observable discrepancy in Network | UNKNOWN | — | 14%ile | Microsoft | 2026-09-08 |
| CVE-2026-87540 | Chromium CVE-2026-87540: Incorrect authorization in Isolated | UNKNOWN | — | 14%ile | Microsoft | 2026-09-08 |
| CVE-2026-87541 | Chromium CVE-2026-87541: Information leak in Navigation | UNKNOWN | — | 25%ile | Microsoft | 2026-09-08 |
| CVE-2026-87542 | Chromium CVE-2026-87542: Use after free in Input | UNKNOWN | — | 36%ile | Microsoft | 2026-09-08 |
| CVE-2026-87543 | Chromium CVE-2026-87543: Missing authorization in Core | UNKNOWN | — | 16%ile | Microsoft | 2026-09-08 |
| CVE-2026-87544 | Chromium CVE-2026-87544: Incorrect authorization in Extensions | UNKNOWN | — | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-87545 | Chromium CVE-2026-87545: Information leak in Mobile | UNKNOWN | — | 25%ile | Microsoft | 2026-09-08 |
| CVE-2026-87546 | Chromium CVE-2026-87546: Incorrect type conversion or cast in Safebrowsing | UNKNOWN | — | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-87547 | Chromium CVE-2026-87547: Incorrect reference resolution in FileSystem | UNKNOWN | — | 43%ile | Microsoft | 2026-09-08 |
| CVE-2026-87548 | Chromium CVE-2026-87548: Improper state validation in Installer | UNKNOWN | — | 17%ile | Microsoft | 2026-09-08 |
| CVE-2026-87549 | Chromium CVE-2026-87549: Incomplete cleanup in Downloads | UNKNOWN | — | 30%ile | Microsoft | 2026-09-08 |
| CVE-2026-87550 | Chromium CVE-2026-87550: Improper encoding or escaping of output in CSS | UNKNOWN | — | 19%ile | Microsoft | 2026-09-08 |
| CVE-2026-87551 | Chromium CVE-2026-87551: Improper certificate validation in CORS | UNKNOWN | — | 8%ile | Microsoft | 2026-09-08 |
| CVE-2026-87552 | Chromium CVE-2026-87552: Missing authorization in TrustedWebActivities | UNKNOWN | — | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-87553 | Chromium CVE-2026-87553: Improper input validation in SiteIsolation | UNKNOWN | — | 37%ile | Microsoft | 2026-09-08 |
| CVE-2026-87554 | Chromium CVE-2026-87554: Race condition in Chromoting | UNKNOWN | — | 1%ile | Microsoft | 2026-09-08 |
| CVE-2026-87555 | Chromium CVE-2026-87555: Uninitialized resource in GPU | UNKNOWN | — | 21%ile | Microsoft | 2026-09-08 |
| CVE-2026-87556 | Chromium CVE-2026-87556: Missing authorization in Browser | UNKNOWN | — | 17%ile | Microsoft | 2026-09-08 |
| CVE-2026-87557 | Chromium CVE-2026-87557: Missing authorization in LocalNetworkAccess | UNKNOWN | — | 16%ile | Microsoft | 2026-09-08 |
| CVE-2026-87558 | Chromium CVE-2026-87558: Use after free in Payments | UNKNOWN | — | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-87559 | Chromium CVE-2026-87559: UI misrepresentation in UI | UNKNOWN | — | 13%ile | Microsoft | 2026-09-08 |
| CVE-2026-87560 | Chromium CVE-2026-87560: Missing authorization in Browser | UNKNOWN | — | 17%ile | Microsoft | 2026-09-08 |
| CVE-2026-87561 | Chromium CVE-2026-87561: Incorrect authorization in Web Authentication | UNKNOWN | — | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-87562 | Chromium CVE-2026-87562: Incorrect reference resolution in Accessibility | UNKNOWN | — | 15%ile | Microsoft | 2026-09-08 |
| CVE-2026-87563 | Chromium CVE-2026-87563: Origin validation error in Paint | UNKNOWN | — | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-87565 | Chromium CVE-2026-87565: Information leak in Passwords | UNKNOWN | — | 25%ile | Microsoft | 2026-09-08 |
| CVE-2026-87566 | Chromium CVE-2026-87566: Observable discrepancy in Layout | UNKNOWN | — | 21%ile | Microsoft | 2026-09-08 |
| CVE-2026-87567 | Chromium CVE-2026-87567: UI misrepresentation in UrlFormatting | UNKNOWN | — | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-87568 | Chromium CVE-2026-87568: Improper input validation in Chromium | UNKNOWN | — | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-87569 | Chromium CVE-2026-87569: Missing authorization in Views | UNKNOWN | — | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-87570 | Chromium CVE-2026-87570: Incorrect authorization in SiteIsolation | UNKNOWN | — | 24%ile | Microsoft | 2026-09-08 |
| CVE-2026-87571 | Chromium CVE-2026-87571: Improper certificate validation in Loader | UNKNOWN | — | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-87572 | Chromium CVE-2026-87572: Injection in DevTools | UNKNOWN | — | 36%ile | Microsoft | 2026-09-08 |
| CVE-2026-87573 | Chromium CVE-2026-87573: Improper input validation in Network | UNKNOWN | — | 19%ile | Microsoft | 2026-09-08 |
| CVE-2026-87574 | Chromium CVE-2026-87574: Information leak in ServiceWorker | UNKNOWN | — | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-87575 | Chromium CVE-2026-87575: Incorrect authorization in Loader | UNKNOWN | — | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-87576 | Chromium CVE-2026-87576: Uninitialized resource in GPU | UNKNOWN | — | 16%ile | Microsoft | 2026-09-08 |
| CVE-2026-87577 | Chromium CVE-2026-87577: Incorrect authorization in Isolated | UNKNOWN | — | 17%ile | Microsoft | 2026-09-08 |
| CVE-2026-87578 | Chromium CVE-2026-87578: Use after free in Receiver | UNKNOWN | — | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-87579 | Chromium CVE-2026-87579: Buffer overflow in WebRTC | UNKNOWN | — | 47%ile | Microsoft | 2026-09-08 |
| CVE-2026-87580 | Chromium CVE-2026-87580: Incorrect authorization in WebAppInstalls | UNKNOWN | — | 21%ile | Microsoft | 2026-09-08 |
| CVE-2026-87581 | Chromium CVE-2026-87581: Use after free in Payments | UNKNOWN | — | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-87582 | Chromium CVE-2026-87582: Confused deputy in DataTransfer | UNKNOWN | — | 33%ile | Microsoft | 2026-09-08 |
| CVE-2026-87583 | Chromium CVE-2026-87583: UI misrepresentation in Passwords | UNKNOWN | — | 17%ile | Microsoft | 2026-09-08 |
| CVE-2026-87584 | Chromium CVE-2026-87584: Incorrect authorization in WebUI | UNKNOWN | — | 21%ile | Microsoft | 2026-09-08 |
| CVE-2026-87585 | Chromium CVE-2026-87585: Double free in PDFium | UNKNOWN | — | 32%ile | Microsoft | 2026-09-08 |
| CVE-2026-87586 | Chromium CVE-2026-87586: Out of bounds read in ANGLE | UNKNOWN | — | 16%ile | Microsoft | 2026-09-08 |
| CVE-2026-87588 | Chromium CVE-2026-87588: Use after free in Chromecast | UNKNOWN | — | 36%ile | Microsoft | 2026-09-08 |
| CVE-2026-87589 | Chromium CVE-2026-87589: Incorrect authorization in SiteIsolation | UNKNOWN | — | 19%ile | Microsoft | 2026-09-08 |
| CVE-2026-87590 | Chromium CVE-2026-87590: Improper input validation in Passwords | UNKNOWN | — | 24%ile | Microsoft | 2026-09-08 |
| CVE-2026-87591 | Chromium CVE-2026-87591: Incorrect authorization in Extensions | UNKNOWN | — | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-87592 | Chromium CVE-2026-87592: Out of bounds read in Tint | UNKNOWN | — | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-87593 | Chromium CVE-2026-87593: Information leak in Editing | UNKNOWN | — | 25%ile | Microsoft | 2026-09-08 |
| CVE-2026-87594 | Chromium CVE-2026-87594: Incorrect authorization in DataTransfer | UNKNOWN | — | 20%ile | Microsoft | 2026-09-08 |
| CVE-2026-87595 | Chromium CVE-2026-87595: Server-side request forgery in Mobile | UNKNOWN | — | 36%ile | Microsoft | 2026-09-08 |
| CVE-2026-87596 | Chromium CVE-2026-87596: Out of bounds read in ANGLE | UNKNOWN | — | 16%ile | Microsoft | 2026-09-08 |
| CVE-2026-87597 | Chromium CVE-2026-87597: UI misrepresentation in CustomTabs | UNKNOWN | — | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-87598 | Chromium CVE-2026-87598: Incorrect authorization in ServiceWorker | UNKNOWN | — | 20%ile | Microsoft | 2026-09-08 |
| CVE-2026-87599 | Chromium CVE-2026-87599: Improper input validation in Interstitials | UNKNOWN | — | 15%ile | Microsoft | 2026-09-08 |
| CVE-2026-87600 | Chromium CVE-2026-87600: Improper input validation in Safebrowsing | UNKNOWN | — | 22%ile | Microsoft | 2026-09-08 |
| CVE-2026-87602 | Chromium CVE-2026-87602: Out of bounds read in ANGLE | UNKNOWN | — | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-87603 | Chromium CVE-2026-87603: Missing authorization in FileSystem | UNKNOWN | — | 21%ile | Microsoft | 2026-09-08 |
| CVE-2026-87604 | Chromium CVE-2026-87604: Out of bounds read in ANGLE | UNKNOWN | — | 25%ile | Microsoft | 2026-09-08 |
| CVE-2026-87605 | Chromium CVE-2026-87605: Missing authorization in Contacts | UNKNOWN | — | 20%ile | Microsoft | 2026-09-08 |
| CVE-2026-87606 | Chromium CVE-2026-87606: Missing authorization in SiteIsolation | UNKNOWN | — | 25%ile | Microsoft | 2026-09-08 |
| CVE-2026-87608 | Chromium CVE-2026-87608: Improper certificate validation in FedCM | UNKNOWN | — | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-87609 | Chromium CVE-2026-87609: Use after free in Sharing | UNKNOWN | — | 37%ile | Microsoft | 2026-09-08 |
| CVE-2026-87610 | Chromium CVE-2026-87610: Incorrect authorization in Omnibox | UNKNOWN | — | 21%ile | Microsoft | 2026-09-08 |
| CVE-2026-87611 | Chromium CVE-2026-87611: Missing authorization in FileSystem | UNKNOWN | — | 13%ile | Microsoft | 2026-09-08 |
| CVE-2026-87613 | Chromium CVE-2026-87613: Incorrect reference resolution in Extensions | UNKNOWN | — | 41%ile | Microsoft | 2026-09-08 |
| CVE-2026-87614 | Chromium CVE-2026-87614: Incorrect authorization in ServiceWorker | UNKNOWN | — | 16%ile | Microsoft | 2026-09-08 |
| CVE-2026-87615 | Chromium CVE-2026-87615: Race condition in Payments | UNKNOWN | — | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-87616 | Chromium CVE-2026-87616: Improper initialization in Views | UNKNOWN | — | 38%ile | Microsoft | 2026-09-08 |
| CVE-2026-87617 | Chromium CVE-2026-87617: Use after free in DevTools | UNKNOWN | — | 36%ile | Microsoft | 2026-09-08 |
| CVE-2026-87618 | Chromium CVE-2026-87618: Incorrect reference resolution in Storage | UNKNOWN | — | 38%ile | Microsoft | 2026-09-08 |
| CVE-2026-87619 | Chromium CVE-2026-87619: Observable discrepancy in Prefetch | UNKNOWN | — | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-87620 | Chromium CVE-2026-87620: Observable discrepancy in SVG | UNKNOWN | — | 25%ile | Microsoft | 2026-09-08 |
| CVE-2026-87621 | Chromium CVE-2026-87621: Out of bounds write in ANGLE | UNKNOWN | — | 30%ile | Microsoft | 2026-09-08 |
| CVE-2026-87622 | Chromium CVE-2026-87622: Missing authorization in FedCM | UNKNOWN | — | 20%ile | Microsoft | 2026-09-08 |
| CVE-2026-87623 | Chromium CVE-2026-87623: Observable discrepancy in DOM | UNKNOWN | — | 25%ile | Microsoft | 2026-09-08 |
| CVE-2026-87624 | Chromium CVE-2026-87624: UI misrepresentation in Passwords | UNKNOWN | — | 13%ile | Microsoft | 2026-09-08 |
| CVE-2026-87626 | Chromium CVE-2026-87626: Incorrect authorization in DeviceBoundSessionCredentials | UNKNOWN | — | 20%ile | Microsoft | 2026-09-08 |
| CVE-2026-87627 | Chromium CVE-2026-87627: Interpretation conflict in Safebrowsing | UNKNOWN | — | 20%ile | Microsoft | 2026-09-08 |
| CVE-2026-87628 | Chromium CVE-2026-87628: Use after free in Cast | UNKNOWN | — | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-87629 | Chromium CVE-2026-87629: Incorrect authorization in Sources | UNKNOWN | — | 21%ile | Microsoft | 2026-09-08 |
| CVE-2026-87630 | Chromium CVE-2026-87630: Integer overflow in WebRTC | UNKNOWN | — | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-87631 | Chromium CVE-2026-87631: Missing authorization in DOM | UNKNOWN | — | 23%ile | Microsoft | 2026-09-08 |
| CVE-2026-87632 | Chromium CVE-2026-87632: Cross-site scripting in SanitizerAPI | UNKNOWN | — | 19%ile | Microsoft | 2026-09-08 |
| CVE-2026-87633 | Chromium CVE-2026-87633: Use after free in Views | UNKNOWN | — | 4%ile | Microsoft | 2026-09-08 |
| CVE-2026-87634 | Chromium CVE-2026-87634: Use after free in WebPackaging | UNKNOWN | — | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-87635 | Chromium CVE-2026-87635: UI misrepresentation in Payments | UNKNOWN | — | 17%ile | Microsoft | 2026-09-08 |
| CVE-2026-87636 | Chromium CVE-2026-87636: Type confusion in XML | UNKNOWN | — | 39%ile | Microsoft | 2026-09-08 |
| CVE-2026-87637 | Chromium CVE-2026-87637: Use after free in Extensions | UNKNOWN | — | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-87638 | Chromium CVE-2026-87638: Out of bounds write in Media | UNKNOWN | — | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-87639 | Chromium CVE-2026-87639: Use after free in WebPackaging | UNKNOWN | — | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-87640 | Chromium CVE-2026-87640: Out of bounds read in WebView | UNKNOWN | — | 21%ile | Microsoft | 2026-09-08 |
| CVE-2026-87641 | Chromium CVE-2026-87641: Race condition in Browser | UNKNOWN | — | 8%ile | Microsoft | 2026-09-08 |
| CVE-2026-87642 | Chromium CVE-2026-87642: Uninitialized resource in WebGL | UNKNOWN | — | 21%ile | Microsoft | 2026-09-08 |
| CVE-2026-87643 | Chromium CVE-2026-87643: Integer overflow in GPU | UNKNOWN | — | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-87644 | Chromium CVE-2026-87644: Incorrect authorization in Views | UNKNOWN | — | 33%ile | Microsoft | 2026-09-08 |
| CVE-2026-87645 | Chromium CVE-2026-87645: Improper state validation in Safebrowsing | UNKNOWN | — | 14%ile | Microsoft | 2026-09-08 |
| CVE-2026-87646 | Chromium CVE-2026-87646: Use after free in Web Authentication | UNKNOWN | — | 44%ile | Microsoft | 2026-09-08 |
| CVE-2026-87647 | Chromium CVE-2026-87647: Uninitialized resource in GPU | UNKNOWN | — | 16%ile | Microsoft | 2026-09-08 |
| CVE-2026-87648 | Chromium CVE-2026-87648: Use after free in ANGLE | UNKNOWN | — | 24%ile | Microsoft | 2026-09-08 |
| CVE-2026-87649 | Chromium CVE-2026-87649: UI misrepresentation in Downloads | UNKNOWN | — | 14%ile | Microsoft | 2026-09-08 |
| CVE-2026-87650 | Chromium CVE-2026-87650: Out of bounds read in WebGL | UNKNOWN | — | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-87651 | Chromium CVE-2026-87651: Incorrect authorization in Paint | UNKNOWN | — | 16%ile | Microsoft | 2026-09-08 |
| CVE-2026-87652 | Chromium CVE-2026-87652: Incorrect authorization in PushAPI | UNKNOWN | — | 16%ile | Microsoft | 2026-09-08 |
| CVE-2026-87653 | Chromium CVE-2026-87653: UI misrepresentation in FullScreen | UNKNOWN | — | 17%ile | Microsoft | 2026-09-08 |
| CVE-2026-87654 | Chromium CVE-2026-87654: Buffer overflow in ANGLE | UNKNOWN | — | 34%ile | Microsoft | 2026-09-08 |
| CVE-2026-87655 | Chromium CVE-2026-87655: Clickjacking in Downloads | UNKNOWN | — | 16%ile | Microsoft | 2026-09-08 |
| CVE-2026-87656 | Chromium CVE-2026-87656: Improper state validation in Safebrowsing | UNKNOWN | — | 14%ile | Microsoft | 2026-09-08 |
| CVE-2026-87657 | Chromium CVE-2026-87657: Use after free in V8 | UNKNOWN | — | 14%ile | Microsoft | 2026-09-08 |
| CVE-2026-87658 | Chromium CVE-2026-87658: Information leak in Extensions | UNKNOWN | — | 15%ile | Microsoft | 2026-09-08 |
| CVE-2026-93372 | Chromium CVE-2026-93372: Buffer overflow in WebGL | UNKNOWN | — | 37%ile | Microsoft | 2026-09-08 |
| CVE-2026-93373 | Chromium CVE-2026-93373: Use after free in Extensions | UNKNOWN | — | 26%ile | Microsoft | 2026-09-08 |
| CVE-2026-93374 | Chromium CVE-2026-93374: Use after free in Dawn | UNKNOWN | — | 37%ile | Microsoft | 2026-09-08 |
| CVE-2026-93375 | Chromium CVE-2026-93375: Incorrect reference resolution in Tracing | UNKNOWN | — | 1%ile | Microsoft | 2026-09-08 |
| CVE-2026-93376 | Chromium CVE-2026-93376: Out of bounds read in DataTransfer | UNKNOWN | — | 1%ile | Microsoft | 2026-09-08 |
| CVE-2026-93377 | Chromium CVE-2026-93377: Type confusion in V8 | UNKNOWN | — | 38%ile | Microsoft | 2026-09-08 |
| CVE-2026-93378 | Chromium CVE-2026-93378: Missing authorization in Storage | UNKNOWN | — | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-93379 | Chromium CVE-2026-93379: Incorrect authorization in ORB | UNKNOWN | — | 17%ile | Microsoft | 2026-09-08 |
| CVE-2026-93380 | Chromium CVE-2026-93380: Race condition in FileSystem | UNKNOWN | — | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-93381 | Chromium CVE-2026-93381: Buffer overflow in PDFium | UNKNOWN | — | 33%ile | Microsoft | 2026-09-08 |
| CVE-2026-93382 | Chromium CVE-2026-93382: Use after free in PDFium | UNKNOWN | — | 31%ile | Microsoft | 2026-09-08 |
| CVE-2026-93383 | Chromium CVE-2026-93383: Information leak in Permissions | UNKNOWN | — | 17%ile | Microsoft | 2026-09-08 |
| CVE-2026-93385 | Chromium CVE-2026-93385: Information leak in Paint | UNKNOWN | — | 24%ile | Microsoft | 2026-09-08 |
| CVE-2026-93386 | Chromium CVE-2026-93386: UI misrepresentation in WebAppInstalls | UNKNOWN | — | 16%ile | Microsoft | 2026-09-08 |
| CVE-2026-93387 | Chromium CVE-2026-93387: Improper state validation in Skia | UNKNOWN | — | 17%ile | Microsoft | 2026-09-08 |
| CVE-2026-89815 | drm/ttm: Drop tt->restore after successful restore | UNKNOWN | — | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-89819 | drm/amd/display: validate plane degamma LUT size for private color prop | UNKNOWN | — | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-89820 | drm/amd/display: fix dc_lock leak on GPU reset error paths | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-89825 | drm/panthor: fix firmware control interface bounds checks | UNKNOWN | — | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-89826 | drm/panthor: harden firmware build-info bounds checks | UNKNOWN | — | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-89828 | drm/amdgpu: Fix init ordering in amdgpu_vram_mgr_init() | UNKNOWN | — | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-89829 | f2fs: fix to pass folio->index to f2fs_sanity_check_node_footer() | UNKNOWN | — | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-89830 | f2fs: fix valid block count leak on data block allocation failure | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-89841 | f2fs: only redirty pinned folios in redirty_blocks | UNKNOWN | — | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-89866 | media: chips-media: wave5: Resume device before setting EOS flag | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-89868 | media: chips-media: wave5: Add timeout while stop_streaming | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-89869 | media: qcom: iris: use disable_irq() during power-off | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-89885 | media: platform: mtk-mdp3: Fix SCP device refcounting | UNKNOWN | — | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-89886 | media: intel/ipu6: fix async notifier cleanup leak on parse error | UNKNOWN | — | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-89889 | media: i2c: imx415: Release runtime PM reference on VBLANK error | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-89895 | media: cobalt: Avoid freeing ALSA private data twice | UNKNOWN | — | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-89904 | LoongArch: Fix acpi_package_ids[] array overflow | UNKNOWN | — | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-89907 | LoongArch: KVM: Validate MSI data before routing it to EIOINTC | UNKNOWN | — | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-89908 | LoongArch: KVM: Preserve memslot arch flags on KVM_MR_FLAGS_ONLY | UNKNOWN | — | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-89909 | LoongArch: KVM: Free init resources if kvm_init() fails | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-89911 | KVM: arm64: Correctly cap TLBI Range to the architural limit | UNKNOWN | — | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-89914 | KVM: arm64: Sign-extend VA for range-based TLBI invalidation | UNKNOWN | — | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-89915 | KVM: arm64: Remove VM-wide VNCR mapping counter | UNKNOWN | — | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-89916 | KVM: arm64: Make VNCR invalidation participate in MMU invalidation retry | UNKNOWN | — | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-89917 | KVM: arm64: Handle VNCR TLB invalidation race with vcpu_put() VNCR unmapping | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-89918 | KVM: arm64: Correctly handle end of VA space TLBI invalidation | UNKNOWN | — | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-89928 | KVM: x86/mmu: Consume the locked rmap value in the lockless rmap walk | UNKNOWN | — | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-89931 | KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-89935 | iio: light: apds9306: fix PM reference leak in apds9306_read_data() | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-89940 | iio: buffer: Tie IIO dma fence lock lifetime to the fence | UNKNOWN | — | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-89941 | iio: buffer: Make IIO DMA fence release RCU-safe | UNKNOWN | — | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-89942 | iio: buffer: Fix potential use-after-free in anonymous buffer release | UNKNOWN | — | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-89943 | ASoC: loongson: Fix error handling in ACPI property parsing | UNKNOWN | — | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-89950 | batman-adv: mcast: linearize skbuff for packet generation | UNKNOWN | — | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-89963 | powerpc/kexec_file: Fix null-ptr-def in extra size calculation | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-89971 | nvme: skip the zoned limits update if the zone info query failed | UNKNOWN | — | 49%ile | Microsoft | 2026-09-08 |
| CVE-2026-89974 | nvme-fc: fix double free of fabrics options when nvme_add_ctrl() fails | UNKNOWN | — | 21%ile | Microsoft | 2026-09-08 |
| CVE-2026-89978 | accel/amdxdna: return early from a zero-length flush | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-89986 | mm/mempolicy: fix sleeping allocation in alloc_pages_bulk_weighted_interleave() | UNKNOWN | — | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-89990 | ceph: lock mutex in ceph_mds_check_access() | UNKNOWN | — | 49%ile | Microsoft | 2026-09-08 |
| CVE-2026-89991 | bpf: Fix infinite loop in pcpu_freelist push with one possible CPU | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-89994 | dmaengine: fsl-edma: tracing: no ptr dereference during log output | UNKNOWN | — | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-90001 | HID: bpf: serialize device reference release in struct_ops destroy path | UNKNOWN | — | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-90005 | samples/damon/wsse: handle damon_start() failure | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90006 | samples/damon/mtier: handle damon_stop() failure | UNKNOWN | — | 13%ile | Microsoft | 2026-09-08 |
| CVE-2026-90008 | scsi: megaraid_sas: Limit NVMe request size to the PRP chain frame | UNKNOWN | — | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-90012 | spi: Fix DMA mapping ownership on partial map failure | UNKNOWN | — | 50%ile | Microsoft | 2026-09-08 |
| CVE-2026-90039 | NFSD: Guard admin state-revocation walks with NFSD_NET_UP | UNKNOWN | — | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-90040 | KVM: SEV: Forcefully invalidate SNP VMSA if its backing gmem page is zapped | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90046 | mm/page_alloc: don't spin_trylock() in NMI on UP | UNKNOWN | — | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-90047 | drm/xe: Don't hand out the flat CCS storage as usable VRAM | UNKNOWN | — | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-90051 | tcp: reject non zerocopy devmem tx | UNKNOWN | — | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-90059 | net: stmmac: restore NET_IP_ALIGN in the RX DMA offset | UNKNOWN | — | 49%ile | Microsoft | 2026-09-08 |
| CVE-2026-90065 | net/smc: release the internal TCP sock on IPPROTO_SMC socket creation failure | UNKNOWN | — | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-90069 | crypto: acomp - allocate async request context when cloning | UNKNOWN | — | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-90077 | net: fix a resource leak in copy_net_ns() error handling path | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90079 | octeontx2-af: fix cn20k mailbox lifetime on repeated rvu_mbox_init() | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90080 | octeontx2-pf: fix NULL deref of af_xdp_zc_qidx on rep setup | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90082 | net: mana: Cap MSI-X vectors to the device MSI-X table size | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90085 | octeontx2-af: fix NULL deref in NIX TM tree debugfs read path | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90086 | xsk: honor XDP_TX_METADATA in zero-copy path | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90089 | Bluetooth: btnxpuart: Validate the FW dump header length | UNKNOWN | — | 26%ile | Microsoft | 2026-09-08 |
| CVE-2026-90094 | arm64: process: Fix context switching MTE store-only tag check | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90095 | fuse: Fix the condition to enable over-io-uring | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90100 | ptp: netc: fix period truncation and potential divide-by-zero in PEROUT | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90101 | bnxt_en: Fix call to hardware monitoring event handler | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90113 | netdevsim: update queue NAPI association on queue reset | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90121 | irqchip/gic-v5: Clear per-CPU IRS data on teardown | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90129 | virtio_balloon: quiesce balloon work before device shutdown | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90136 | platform/x86/amd/hsmp: Reject negative power cap writes in hwmon | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90142 | virtio_net: Fix resize of the RX ring | UNKNOWN | — | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-90144 | dpll: fix NULL deref in dpll_device_ops() during teardown race | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90145 | hinic3: Fix skb linearization mismatch and drop skb when skb_checksum_help() failed | UNKNOWN | — | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-90147 | clk: devres: fix cleanup in devm_clk_get_optional_enabled_with_rate() | UNKNOWN | — | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-90159 | bpf: Disallow bpf_{g,s}etsockopt() in cgroup UNIX getname hooks | UNKNOWN | — | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-90177 | bpf: Check pointer type for all atomic RMW paths | UNKNOWN | — | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-90178 | hwmon: (coretemp) Fix core_data leak on CPUs without PTS | UNKNOWN | — | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-90191 | mailbox: riscv-sbi-mpxy: validate RPMI notification lengths | UNKNOWN | — | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-90192 | mailbox: qcom-cpucp: handle NULL data in send_data callback | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90193 | mailbox: qcom-cpucp: fix PREEMPT_RT self-deadlock in IRQ handler | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90195 | riscv, bpf: Fix missing sign-ext for signed 1-byte and 2-byte kfunc args | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90197 | HID: haptic: don't write an uninitialized value to unhandled usages | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90201 | net: page_pool: fix UAF in __page_pool_release_netmem_dma on xa_cmpxchg race | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90211 | bpf, s390: Clear fetch destination on faulting arena atomic | UNKNOWN | — | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-90215 | mtd: ubi: Release device reference on busy detach | UNKNOWN | — | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-90217 | bpf: Compare iterator types during state pruning | UNKNOWN | — | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-90231 | apparmor: fix unconfined user namespace restriction forced stack | UNKNOWN | — | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-90233 | nvme-pci: release descriptor pools on probe failure | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90240 | iommu/vt-d: Flush context cache with correct SID when tearing down aliases | UNKNOWN | — | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-90241 | iommu/vt-d: Tear down scalable-mode context on probe failure | UNKNOWN | — | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-90242 | iommu/vt-d: Fix iopf_refcount leak on RID domain replacement | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90243 | iommu/vt-d: Clear Present bit before tearing down copied context entry | UNKNOWN | — | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-90244 | iommu/dma: Restore locking around msi_page_list | UNKNOWN | — | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-90252 | Bluetooth: MGMT: free the HCI command when it is cancelled | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90258 | pinctrl: airoha: add missed IRQ resource helpers | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90260 | btrfs: zoned: don't clobber the extent buffer when zeroing it out | UNKNOWN | — | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-90269 | bpf: Reject load-acquire from pointers requiring fault protection | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90272 | perf: arm_pmuv3: Zero initialize hw_id branch stack field | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90276 | md/md-llbitmap: stop daemon timer rearm on destroy | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90277 | md/md-llbitmap: prevent create failure bitmap UAF | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90278 | md: wait for behind writes before destroying bitmap | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90306 | ARM: 9481/2: breakpoint: CFI breakpoints only on demand | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90312 | bpf: Check load-acquire src ptr type before the load | UNKNOWN | — | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-90323 | ublk: validate auto buf reg before taking uring_cmd | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90338 | serial: amba-pl011: keep console clock enabled for atomic writes | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90344 | wifi: mac80211: disconnect on CSA to channel 0 | UNKNOWN | — | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-90349 | wifi: mt76: mt7996: fix out-of-bounds link array access in mt7996_tx() | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90350 | wifi: mt76: reject out-of-range link ids in mt76_vif_link() | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90355 | wifi: mt76: mt7996: clear stale link state on full reset | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90356 | wifi: mt76: mt7996: free vif links after clearing wcid entries on full reset | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90363 | drm/msm: don't tear down KMS twice when KMS init fails | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-90373 | wifi: mt76: mt7915: clear wcid mask under mutex after RCU pointer clear | UNKNOWN | — | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-90377 | wifi: mt76: fix RX data queuing of RRO 3.0 | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-93096 | cxl/features: Serialize multi-part Get/Set Feature transfers | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-93106 | crash_dump: release keyring reference at the correct time | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-93112 | bpf: Require a BPF cpumask for bpf_cpumask_populate() | UNKNOWN | — | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-93113 | clk: qcom: camcc-sc8280xp: unregister CAMCC_GDSC_CLK | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-93119 | usb: ljca: bound bank_num in ljca_enumerate_gpio() | UNKNOWN | — | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-93121 | usb: gadget: f_fs: Fix fence cleanup in ffs_dmabuf_transfer() error paths | UNKNOWN | — | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-93132 | ACPI: RISC-V: Fix riscv_acpi_add_prt_dep() loop handling | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-93133 | ACPI: RISC-V: Check acpi_get_handle() status in riscv_acpi_add_prt_dep() | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-93134 | printk: Fix possible console use-after-free | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-93135 | bpf: Reject programs with inlined helpers if JIT is not available | UNKNOWN | — | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-93143 | staging: media: ipu7: fix pm_runtime refcount leak in ipu7_resume() | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-93157 | hwrng: xilinx-trng - propagate timeout before any data is read | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-93162 | crypto: qat - cancel work on re-enable SR-IOV timeout | UNKNOWN | — | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-93164 | uprobes/x86: Move optimized uprobe from nop5 to nop10 | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-93165 | platform/chrome: sensorhub: Fix memory overread in ring handler | UNKNOWN | — | 8%ile | Microsoft | 2026-09-08 |
| CVE-2026-93169 | dmaengine: zynqmp_dma: fix race between runtime PM and device removal | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-93173 | bpf,lsm: Drop bpf_prog_free from sleepable_lsm_hooks | UNKNOWN | — | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-93181 | perf/x86/intel/uncore: Fix uncore_box ref/unref ordering | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-93190 | platform/chrome: cros_ec_typec: Reject out-of-bounds PD cap count | UNKNOWN | — | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-93193 | drm/rockchip: analogix_dp: Fix OF node reference leak via auto cleanup | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-93194 | drm/rockchip: dw_dp: Release core resources | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-93195 | drm/bridge: synopsys: dw-dp: Support unregistering the AUX channel | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-93198 | dm-pcache: validate the persisted dirty_tail chain at load | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-93201 | dm-pcache: validate seg_id fields from persistent memory | UNKNOWN | — | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-97525 | x86/mm/pat: Allocate split page tables as kernel page tables | UNKNOWN | — | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-97526 | s390/pai: Support CPU hotplug for PMU PAI | UNKNOWN | — | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-97533 | x86/mm/pat: Acquire init_mm read lock on attribute changes to avoid UAF | UNKNOWN | — | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-97538 | hwmon: (asus_rog_ryujin) Validate HID report lengths | UNKNOWN | — | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-97543 | xfs: destroy seen inode bitmap when we fail to add a dirpath | UNKNOWN | — | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-97544 | xfs: don't leak dqacct if rhashtable insertion fails | UNKNOWN | — | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-97545 | xfs: don't leak new_bp if xfs_btree_bload_drop_buf fails | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-97546 | xfs: don't spin forever on zero-length dirents when salvaging them | UNKNOWN | — | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-97547 | xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN | UNKNOWN | — | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-97548 | xfs: fix the rtrmap and rtrefcount _maxlevels_ondisk functions | UNKNOWN | — | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-97549 | xfs: fix under-reservation of blocks when repairing sf directories | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-97550 | xfs: fix unit conversions in per_binval computation | UNKNOWN | — | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-97551 | xfs: initialise args->total for parent pointer updates | UNKNOWN | — | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-97552 | xfs: initialise error in xfs_defer_finish_one() | UNKNOWN | — | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-97571 | bnxt_en: Propagate TPA buffer allocation failures in bnxt_queue_mem_alloc() | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-97574 | bnxt_en: Don't free the live ring's TPA state on queue restart failure | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-97967 | hwmon: (corsair-cpro) Remove debugfs entries when probe fails | UNKNOWN | — | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-97968 | hwmon: (corsair-cpro) Create debugfs entries after hwmon registration | UNKNOWN | — | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-97972 | net: macb: put the "mdio" child node reference on success | UNKNOWN | — | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-97974 | ipv6: null-check fib6_node before accessing in __ip6_del_rt_siblings() | UNKNOWN | — | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-97976 | Bluetooth: btintel_pcie: validate packet_len before skb_put_data | UNKNOWN | — | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-97996 | virtio: fix use-after-free in unregister_virtio_device() | UNKNOWN | — | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-98000 | hwmon: Fix potential UAF in pec_store | UNKNOWN | — | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-98001 | hwmon: (ltc4282) Make sure clk_init_data is fully initialized | UNKNOWN | — | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-98004 | iommu/riscv: Serialize command queue publishing | UNKNOWN | — | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-98018 | net: mctp: i3c: serialize probe with bus removal | UNKNOWN | — | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-98028 | eth: nfp: drop the replaced rule from the list when reprogramming fails | UNKNOWN | — | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-98029 | eth: nfp: bound the ntuple rule dump by the caller's buffer size | UNKNOWN | — | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-98032 | tracing: Fix subbuf resize races with trace_pipe_raw readers | UNKNOWN | — | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-98037 | bpf: Reject untrusted allocated-object pointers | UNKNOWN | — | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-98038 | bpf: Keep refcount_acquire nullable for borrowed RCU kptrs | UNKNOWN | — | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-98039 | bpf: Require MEM_PERCPU for percpu kptr stores | UNKNOWN | — | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-98045 | bpf: Mark faultable stack helpers as sleepable | UNKNOWN | — | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-98047 | bpf: Check ancestor frames for rbtree callbacks | UNKNOWN | — | 12%ile | Microsoft | 2026-09-08 |
| CVE-2026-98048 | bpf: don't rewrite bpf_fastcall patterns entered by a jump | UNKNOWN | — | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-98049 | bpf: zero extend the result of an arena 32-bit cmpxchg | UNKNOWN | — | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-98050 | mlxsw: spectrum_ptp: Fix napi_gro_receive() call from GC workqueue context | UNKNOWN | — | 7%ile | Microsoft | 2026-09-08 |
| CVE-2026-98053 | ASoC: Intel: avs: Refactor and fix init_config access | UNKNOWN | — | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-98054 | ASoC: Intel: avs: Fix unbalanced module reference count | UNKNOWN | — | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-98057 | ring-buffer: Add checking nr_subbufs to persistent ring buffer validation | UNKNOWN | — | 6%ile | Microsoft | 2026-09-08 |
| CVE-2026-98059 | bpf: Mark sched_process_wait argument as nullable | UNKNOWN | — | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-98060 | bpf: Reject resilient lock operations in rbtree callbacks | UNKNOWN | — | 10%ile | Microsoft | 2026-09-08 |
| CVE-2026-98062 | bpf: Mark signal tracepoint siginfo arguments as scalar | UNKNOWN | — | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-98093 | ASoC: fsl_micfil: balance mclk enable/disable | UNKNOWN | — | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-98105 | net: ethernet: oa_tc6: Improve the error recovery | UNKNOWN | — | 8%ile | Microsoft | 2026-09-08 |
| CVE-2026-98106 | drm/pagemap: Prevent double migration of device pages | UNKNOWN | — | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-98110 | Bluetooth: btintel: bound firmware ID by TLV length | UNKNOWN | — | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-98117 | cachefiles: Fix potential UAF/KASAN warning | UNKNOWN | — | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-98118 | netfs: Fix readahead synchronisation issues by loading all folios upfront | UNKNOWN | — | 0%ile | Microsoft | 2026-09-08 |
| CVE-2026-98119 | netfs: break unbuffered write when netfs_alloc_subrequest() fails | UNKNOWN | — | 3%ile | Microsoft | 2026-09-08 |
| CVE-2026-98146 | accel/amdxdna: Remove __counted_by from struct amdxdna_cmd_chain | UNKNOWN | — | 0%ile | Microsoft | 2026-09-08 |
| CVE-2026-98147 | printk: Don't WARN on kthread_run failure. | UNKNOWN | — | 1%ile | Microsoft | 2026-09-08 |
| CVE-2026-98151 | bpf: Fix REG INVARIANTS VIOLATION on speculative pointer arithmetic | UNKNOWN | — | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-98152 | nvmet-rdma: fix queue leak when connect backlog is exceeded | UNKNOWN | — | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-98153 | nvme: fix racy access to FDP placement id array | UNKNOWN | — | 0%ile | Microsoft | 2026-09-08 |
| CVE-2026-101276 | iperf3 3.21 (esnet/iperf) contains a remote, unauthenticated heap use-after-free: the server's per-test watchdog server_ | UNKNOWN | — | 34%ile | Microsoft | 2026-09-08 |
| CVE-2026-101902 | Axios: Prototype-Pollution Gadget in the Default Instance Allows Inherited Object.prototype.method to Override HTTP Meth | UNKNOWN | — | 36%ile | Microsoft | 2026-09-08 |
| CVE-2026-101904 | Axios: Header Injection via Inherited headers After Minimal Interceptor | UNKNOWN | — | 42%ile | Microsoft | 2026-09-08 |
| CVE-2026-102598 | Werkzeug safe_join() allows Windows special device names | UNKNOWN | — | 31%ile | Microsoft | 2026-09-08 |
| CVE-2026-102937 | virtualenv: Command injection via --prompt in activate.bat (batch activator) | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-102992 | piscina: Prototype-pollution gadget in ThreadPool.options allows RCE via execArgv / loadBalancer / env | UNKNOWN | — | 44%ile | Microsoft | 2026-09-08 |
| CVE-2026-15390 | Out-of-bounds write in Das U-Boot | UNKNOWN | — | 9%ile | Microsoft | 2026-09-08 |
| CVE-2026-15442 | Heap use-after-free on read during bidirectional (D)TLS shutdown | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-17545 | PHP on Windows: Reserved Device Names Are Not Rejected Before File/Stream I/O which can cause DoS | UNKNOWN | — | 31%ile | Microsoft | 2026-09-08 |
| CVE-2026-55556 | Rsyslog: Heap buffer overflow in imhttp plugin Basic Authentication handling | UNKNOWN | — | 58%ile | Microsoft | 2026-09-08 |
| CVE-2026-67405 | RabbitMQ: CSWSH on Web-STOMP / Web-MQTT (no Origin validation) | UNKNOWN | — | 1%ile | Microsoft | 2026-09-08 |
| CVE-2026-67406 | RabbitMQ: Federation and Shovel Gen-Servers Lack format_status Callback — Plaintext Credentials Exposed in Crash Dumps a | UNKNOWN | — | 28%ile | Microsoft | 2026-09-08 |
| CVE-2026-67407 | RabbitMQ: Incomplete fix for CVE-2026-44838: `escape_regex_char/1` does not escape `-`, leaving room for an MQTT topic p | UNKNOWN | — | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-67410 | RabbitMQ: OAuth2 Client Secret Exposed via Unauthenticated JavaScript Endpoint | UNKNOWN | — | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-67415 | RabbitMQ: Shovel Management Atom Exhaustion Allows Persistent Broker-Wide Denial of Service | UNKNOWN | — | 32%ile | Microsoft | 2026-09-08 |
| CVE-2026-89133 | NameConstraints not enforced across unconstrained intermediate CA | UNKNOWN | — | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-89135 | Failed X509_verify_cert leaves unverified CA in shared CertManager | UNKNOWN | — | 1%ile | Microsoft | 2026-09-08 |
| CVE-2026-89136 | Client accepts unsolicited RawPublicKey server certificate type | UNKNOWN | — | 32%ile | Microsoft | 2026-09-08 |
| CVE-2026-93304 | (D)TLS 1.2 client accepts early ChangeCipherSpec before ClientKeyExchange | UNKNOWN | — | 4%ile | Microsoft | 2026-09-08 |
| CVE-2026-94418 | Signature failure masked by date error under WOLFSSL_SMALL_CERT_VERIFY | UNKNOWN | — | 1%ile | Microsoft | 2026-09-08 |
| CVE-2026-97687 | urllib3: HTTPS proxy TLS configuration may be ignored or overridden | UNKNOWN | — | 11%ile | Microsoft | 2026-09-08 |
| CVE-2026-89418 | Uncontrolled Recursion leading to Denial of Service in protobuf-javascript (google-protobuf) | UNKNOWN | — | 20%ile | Microsoft | 2026-09-08 |
| CVE-2026-83605 | xmldom: Attribute name injection via setAttribute() bypasses requireWellFormed | UNKNOWN | — | 49%ile | Microsoft | 2026-09-08 |
| CVE-2026-83607 | xmldom: Element name injection via createElement() bypasses requireWellFormed | UNKNOWN | — | 49%ile | Microsoft | 2026-09-08 |
| CVE-2026-83608 | xmldom: DocType `name` Injection Bypasses requireWellFormed | UNKNOWN | — | 49%ile | Microsoft | 2026-09-08 |
| CVE-2026-83610 | xmldom: XML fragment injection via invalid EntityReference.nodeName during requireWellFormed serialization | UNKNOWN | — | 48%ile | Microsoft | 2026-09-08 |
| CVE-2026-83611 | xmldom: Parser silently accepts a not-well-formed end tag whose name is followed by a line break and trailing content | UNKNOWN | — | 50%ile | Microsoft | 2026-09-08 |
| CVE-2026-83613 | xmldom: Quadratic-time attribute deduplication | UNKNOWN | — | 49%ile | Microsoft | 2026-09-08 |
| CVE-2026-83614 | xmldom: Quadratic-time parsing via the malformed-input recovery path — `parseElementStartPart` re-scan and `normalize()` | UNKNOWN | — | 48%ile | Microsoft | 2026-09-08 |
| CVE-2026-83615 | xmldom: Quadratic-memory consumption | UNKNOWN | — | 48%ile | Microsoft | 2026-09-08 |
| CVE-2026-83616 | xmldom: Processing Instruction Target Injection Bypasses requireWellFormed | UNKNOWN | — | 49%ile | Microsoft | 2026-09-08 |
| CVE-2026-83619 | xmldom: End-tag Whitespace-Trim Regex ReDoS — quadratic backtracking in the 0.8.x end-tag parser | UNKNOWN | — | 44%ile | Microsoft | 2026-09-08 |
| CVE-2026-84303 | gRPC-Go: xDS RBAC HTTP Filter bypass via mixed-case Header Matching and gRFC A41 validation evasion | UNKNOWN | — | 24%ile | Microsoft | 2026-09-08 |
| CVE-2026-85062 | Colord: Slow rejection of oversized malformed color strings | UNKNOWN | — | 43%ile | Microsoft | 2026-09-08 |
| CVE-2026-56162 | Azure SQL Database Elevation of Privilege Vulnerability | CRITICAL | 10.0 | 60%ile | Microsoft | 2026-08-11 |
| CVE-2026-63508 | Microsoft Planetary Computer Pro Elevation of Privilege Vulnerability | CRITICAL | 10.0 | 56%ile | Microsoft | 2026-08-11 |
| CVE-2026-65667 | Microsoft Teams Elevation of Privilege Vulnerability | CRITICAL | 10.0 | 56%ile | Microsoft | 2026-08-11 |
| CVE-2026-65770 | Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability | CRITICAL | 10.0 | 64%ile | Microsoft | 2026-08-11 |
| CVE-2026-65801 | Microsoft Exchange Online Elevation of Privilege Vulnerability | CRITICAL | 10.0 | 60%ile | Microsoft | 2026-08-11 |
| CVE-2026-65816 | Azure Arc Elevation of Privilege Vulnerability | CRITICAL | 10.0 | 62%ile | Microsoft | 2026-08-11 |
| CVE-2026-69502 | Azure SQL Database Elevation of Privilege Vulnerability | CRITICAL | 10.0 | 56%ile | Microsoft | 2026-08-11 |
| CVE-2026-69555 | Azure Arc Elevation of Privilege Vulnerability | CRITICAL | 10.0 | 56%ile | Microsoft | 2026-08-11 |
| CVE-2026-69836 | Microsoft Entra ID Remote Code Execution Vulnerability | CRITICAL | 10.0 | 79%ile | Microsoft | 2026-08-11 |
| CVE-2026-50481 | Azure Active Directory Elevation of Privilege Vulnerability | CRITICAL | 9.9 | 57%ile | Microsoft | 2026-08-11 |
| CVE-2026-50515 | Azure Service Bus Remote Code Execution Vulnerability | CRITICAL | 9.9 | 77%ile | Microsoft | 2026-08-11 |
| CVE-2026-59115 | Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability | CRITICAL | 9.9 | 64%ile | Microsoft | 2026-08-11 |
| CVE-2026-62830 | Azure SRE Agent Elevation of Privilege Vulnerability | CRITICAL | 9.9 | 56%ile | Microsoft | 2026-08-11 |
| CVE-2026-63509 | Microsoft Fabric Elevation of Privilege Vulnerability | CRITICAL | 9.9 | 64%ile | Microsoft | 2026-08-11 |
| CVE-2026-68782 | Azure SQL Database Elevation of Privilege Vulnerability | CRITICAL | 9.9 | 62%ile | Microsoft | 2026-08-11 |
| CVE-2026-68789 | Azure SQL Database Elevation of Privilege Vulnerability | CRITICAL | 9.9 | 62%ile | Microsoft | 2026-08-11 |
| CVE-2026-69851 | Microsoft Entra ID Elevation of Privilege Vulnerability | CRITICAL | 9.9 | 56%ile | Microsoft | 2026-08-11 |
| CVE-2026-52490 | An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the proces | CRITICAL | 9.8 | 54%ile | Microsoft | 2026-08-11 |
| CVE-2026-64562 | KVM: nVMX: Hide shadow VMCS right after VMCLEAR | CRITICAL | 9.8 | 5%ile | Microsoft | 2026-08-11 |
| CVE-2026-64564 | sctp: don't free the ASCONF's own transport in DEL-IP processing | CRITICAL | 9.8 | 73%ile | Microsoft | 2026-08-11 |
| CVE-2026-64565 | Input: ims-pcu - fix heap-buffer-overflow in ims_pcu_process_data() | CRITICAL | 9.8 | 8%ile | Microsoft | 2026-08-11 |
| CVE-2026-64593 | btrfs: do not trim a device which is not writeable | CRITICAL | 9.8 | 6%ile | Microsoft | 2026-08-11 |
| CVE-2026-68121 | pppoe: reload header pointer after dev_hard_header() | CRITICAL | 9.8 | 31%ile | Microsoft | 2026-08-11 |
| CVE-2026-68127 | ila: reload IPv6 header after pskb_may_pull in checksum adjust | CRITICAL | 9.8 | 45%ile | Microsoft | 2026-08-11 |
| CVE-2026-68131 | rbd: Reset positive result codes to zero in object map update path | CRITICAL | 9.8 | 44%ile | Microsoft | 2026-08-11 |
| CVE-2026-68132 | super: fix emergency thaw deadlock on frozen block devices | CRITICAL | 9.8 | 8%ile | Microsoft | 2026-08-11 |
| CVE-2026-68140 | net/iucv: fix use-after-free of a severed iucv_path | CRITICAL | 9.8 | 20%ile | Microsoft | 2026-08-11 |
| CVE-2026-68142 | geneve: require CAP_NET_ADMIN in the device netns for changelink | CRITICAL | 9.8 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-68143 | net: slip: serialize receive against buffer reallocation | CRITICAL | 9.8 | 1%ile | Microsoft | 2026-08-11 |
| CVE-2026-68144 | phonet: pep: fix use-after-free in pep_get_sb() | CRITICAL | 9.8 | 45%ile | Microsoft | 2026-08-11 |
| CVE-2026-68146 | ftrace: Add global mutex to serialize trace_parser access | CRITICAL | 9.8 | 8%ile | Microsoft | 2026-08-11 |
| CVE-2026-68153 | libceph: remove debugfs files before client teardown | CRITICAL | 9.8 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-68166 | userfaultfd: prevent registration of special VMAs | CRITICAL | 9.8 | 11%ile | Microsoft | 2026-08-11 |
| CVE-2026-68176 | tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev | CRITICAL | 9.8 | 11%ile | Microsoft | 2026-08-11 |
| CVE-2026-68180 | intel_th: fix MSC output device reference leak | CRITICAL | 9.8 | 12%ile | Microsoft | 2026-08-11 |
| CVE-2026-68185 | LoongArch: Move jump_label_init() before parse_early_param() | CRITICAL | 9.8 | 12%ile | Microsoft | 2026-08-11 |
| CVE-2026-68198 | wifi: ath6kl: fix use-after-free in aggr_reset_state() | CRITICAL | 9.8 | 20%ile | Microsoft | 2026-08-11 |
| CVE-2026-68207 | media: ti: vpe: unwind v4l2 device registration on probe error | CRITICAL | 9.8 | 12%ile | Microsoft | 2026-08-11 |
| CVE-2026-68210 | media: stm32: dcmi: unregister notifier on probe failure | CRITICAL | 9.8 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-68212 | media: saa7134: Fix a possible memory leak in saa7134_video_init1 | CRITICAL | 9.8 | 13%ile | Microsoft | 2026-08-11 |
| CVE-2026-68214 | media: rtl2832: fix use-after-free in rtl2832_remove() | CRITICAL | 9.8 | 13%ile | Microsoft | 2026-08-11 |
| CVE-2026-68218 | media: pci: dm1105: Free allocated workqueue | CRITICAL | 9.8 | 13%ile | Microsoft | 2026-08-11 |
| CVE-2026-68236 | drm/amd/display: set new_stream to NULL after release | CRITICAL | 9.8 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-68287 | drop_monitor: fix size calculations for 64-bit attributes | CRITICAL | 9.8 | 52%ile | Microsoft | 2026-08-11 |
| CVE-2026-68310 | wifi: mt76: mt7915: guard HE capability lookups | CRITICAL | 9.8 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-68324 | iommu/intel: Fix out-of-bounds memset in dmar_latency_disable() | CRITICAL | 9.8 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-68325 | iommu/amd: Bound the early ACPI HID map | CRITICAL | 9.8 | 8%ile | Microsoft | 2026-08-11 |
| CVE-2026-68340 | hwmon: occ: validate poll response sensor blocks | CRITICAL | 9.8 | 4%ile | Microsoft | 2026-08-11 |
| CVE-2026-68349 | wifi: carl9170: fix buffer overflow in rx_stream failover path | CRITICAL | 9.8 | 10%ile | Microsoft | 2026-08-11 |
| CVE-2026-68354 | firewire: net: Fix fragmented datagram reassembly | CRITICAL | 9.8 | 21%ile | Microsoft | 2026-08-11 |
| CVE-2026-68357 | watchdog: pretimeout: Fix UAF in watchdog_unregister_governor() | CRITICAL | 9.8 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-68359 | hwmon: (nzxt-smart2) Stop device IO before calling hid_hw_stop | CRITICAL | 9.8 | 14%ile | Microsoft | 2026-08-11 |
| CVE-2026-68360 | hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop | CRITICAL | 9.8 | 15%ile | Microsoft | 2026-08-11 |
| CVE-2026-68364 | drm/amd/display: Fix ISM dc_lock deadlock during suspend | CRITICAL | 9.8 | 5%ile | Microsoft | 2026-08-11 |
| CVE-2026-68377 | net/sched: act_tunnel_key: Defer dst_release to RCU callback | CRITICAL | 9.8 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-68391 | Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds | CRITICAL | 9.8 | 3%ile | Microsoft | 2026-08-11 |
| CVE-2026-68395 | ata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registered | CRITICAL | 9.8 | 12%ile | Microsoft | 2026-08-11 |
| CVE-2026-68399 | bpf: Fix UAF in sock clone early bailouts | CRITICAL | 9.8 | 3%ile | Microsoft | 2026-08-11 |
| CVE-2026-68402 | wifi: cfg80211: bound element ID read when checking non-inheritance | CRITICAL | 9.8 | 18%ile | Microsoft | 2026-08-11 |
| CVE-2026-68406 | wifi: cfg80211: validate PMSR FTM preamble range | CRITICAL | 9.8 | 8%ile | Microsoft | 2026-08-11 |
| CVE-2026-68407 | wifi: nl80211: free RNR data on MBSSID mismatch | CRITICAL | 9.8 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-74345 | RDMA/siw: Fix endpoint/socket association handling | CRITICAL | 9.8 | 41%ile | Microsoft | 2026-08-11 |
| CVE-2026-80607 | tracing/probes: Remove WARN_ON_ONCE from parse_btf_arg | CRITICAL | 9.8 | 11%ile | Microsoft | 2026-08-11 |
| CVE-2026-80616 | ieee802154: Avoid calling WARN_ON() on -ENOMEM in cfg802154_switch_netns() | CRITICAL | 9.8 | 14%ile | Microsoft | 2026-08-11 |
| CVE-2026-80637 | netfilter: synproxy: fix unaligned memory access in timestamp adjustment | CRITICAL | 9.8 | 53%ile | Microsoft | 2026-08-11 |
| CVE-2026-80650 | media: atomisp: gc2235: fix UAF and memory leak | CRITICAL | 9.8 | 12%ile | Microsoft | 2026-08-11 |
| CVE-2026-80653 | scsi: hisi_sas: Add slave_destroy interface for v3 hw | CRITICAL | 9.8 | 9%ile | Microsoft | 2026-08-11 |
| CVE-2026-80654 | soc: xilinx: Shutdown and free rx mailbox channel | CRITICAL | 9.8 | 12%ile | Microsoft | 2026-08-11 |
| CVE-2026-80681 | vxlan: re-fetch eth header after route_shortcircuit() | CRITICAL | 9.8 | 43%ile | Microsoft | 2026-08-11 |
| CVE-2026-80686 | mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE | CRITICAL | 9.8 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-80694 | net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller | CRITICAL | 9.8 | 42%ile | Microsoft | 2026-08-11 |
| CVE-2026-80698 | dmaengine: idxd: fix double free of wq, engine, and group structs | CRITICAL | 9.8 | 12%ile | Microsoft | 2026-08-11 |
| CVE-2026-80709 | s390/zcrypt: Fix wrong domain value verification with EP11 CPRBs | CRITICAL | 9.8 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-80715 | igc: remove napi_synchronize() in igc_down() | CRITICAL | 9.8 | 5%ile | Microsoft | 2026-08-11 |
| CVE-2026-80721 | Bluetooth: ISO: ensure no dangling hcon references in iso_conn | CRITICAL | 9.8 | 32%ile | Microsoft | 2026-08-11 |
| CVE-2026-59124 | Microsoft High Performance Computing (HPC) Pack Remote Code Execution Vulnerability | CRITICAL | 9.8 | 75%ile | Microsoft | 2026-08-11 |
| CVE-2026-62815 | Microsoft QUIC Remote Code Execution Vulnerability | CRITICAL | 9.8 | 62%ile | Microsoft | 2026-08-11 |
| CVE-2026-62873 | Microsoft 365 Admin Center Elevation of Privilege Vulnerability | CRITICAL | 9.8 | 49%ile | Microsoft | 2026-08-11 |
| CVE-2026-62878 | Windows DNS Server Remote Code Execution Vulnerability | CRITICAL | 9.8 | 62%ile | Microsoft | 2026-08-11 |
| CVE-2026-62893 | Windows Deployment Services TFTP Server Remote Code Execution Vulnerability | CRITICAL | 9.8 | 62%ile | Microsoft | 2026-08-11 |
| CVE-2026-65791 | Windows iSCSI Target Service Remote Code Execution Vulnerability | CRITICAL | 9.8 | 62%ile | Microsoft | 2026-08-11 |
| CVE-2026-50540 | Kata Containers: Config Path Annotation Arbitrary File Loading | CRITICAL | 9.6 | 49%ile | Microsoft | 2026-08-11 |
| CVE-2026-56161 | Azure Logic Apps Information Disclosure Vulnerability | CRITICAL | 9.6 | 53%ile | Microsoft | 2026-08-11 |
| CVE-2026-62896 | Microsoft Teams Elevation of Privilege Vulnerability | CRITICAL | 9.6 | 53%ile | Microsoft | 2026-08-11 |
| CVE-2026-69400 | Azure Logic Apps Elevation of Privilege Vulnerability | CRITICAL | 9.6 | 61%ile | Microsoft | 2026-08-11 |
| CVE-2026-70332 | Microsoft Office SharePoint Spoofing Vulnerability | CRITICAL | 9.6 | 59%ile | Microsoft | 2026-08-11 |
| CVE-2026-50516 | Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability | CRITICAL | 9.4 | 58%ile | Microsoft | 2026-08-11 |
| CVE-2026-52491 | An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the libtif | CRITICAL | 9.4 | 9%ile | Microsoft | 2026-08-11 |
| CVE-2026-59118 | Copilot Cowork Elevation of Privilege Vulnerability | CRITICAL | 9.3 | 54%ile | Microsoft | 2026-08-11 |
| CVE-2026-62834 | Azure Data Factory Elevation of Privilege Vulnerability | CRITICAL | 9.3 | 45%ile | Microsoft | 2026-08-11 |
| CVE-2026-70306 | Microsoft Office SharePoint Spoofing Vulnerability | CRITICAL | 9.3 | 63%ile | Microsoft | 2026-08-11 |
| CVE-2026-53791 | rsync < 3.5.0 Daemon IP Spoofing via PROXY Protocol Header | CRITICAL | 9.1 | 43%ile | Microsoft | 2026-08-11 |
| CVE-2026-68160 | ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() | CRITICAL | 9.1 | 56%ile | Microsoft | 2026-08-11 |
| CVE-2026-73194 | DBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder that sets the | CRITICAL | 9.1 | 42%ile | Microsoft | 2026-08-11 |
| CVE-2026-66309 | Azure SQL Database Elevation of Privilege Vulnerability | CRITICAL | 9.1 | 59%ile | Microsoft | 2026-08-11 |
| CVE-2026-68823 | Azure Confidential Ledger Remote Code Execution Vulnerability | CRITICAL | 9.1 | 61%ile | Microsoft | 2026-08-11 |
| CVE-2025-30156 | Ceph: AES-CBC misuse in CephX and RADOSGW enables authentication bypass and credential forgery | HIGH | 8.9 | 0%ile | Microsoft | 2026-08-11 |
| CVE-2026-13622 | Kubevirt: virt-handler-rhel9: kubevirt: virt-handler migration proxy follows symlinks allowing container escape to host | HIGH | 8.8 | 10%ile | Microsoft | 2026-08-11 |
| CVE-2026-14662 | PostgreSQL tsvector and tsquery undersize allocations, via integer wraparound | HIGH | 8.8 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-14664 | PostgreSQL regexp heap buffer overflow executes arbitrary code | HIGH | 8.8 | 38%ile | Microsoft | 2026-08-11 |
| CVE-2026-14670 | PostgreSQL plperl tied object heap buffer overflow executes arbitrary code | HIGH | 8.8 | 38%ile | Microsoft | 2026-08-11 |
| CVE-2026-14671 | PostgreSQL refint plan cache type confusion executes arbitrary code | HIGH | 8.8 | 37%ile | Microsoft | 2026-08-11 |
| CVE-2026-14677 | PostgreSQL 32-bit pltcl and plperl undersize allocations, via integer wraparound | HIGH | 8.8 | 36%ile | Microsoft | 2026-08-11 |
| CVE-2026-14680 | PostgreSQL type confusion via "internal" arguments | HIGH | 8.8 | 37%ile | Microsoft | 2026-08-11 |
| CVE-2026-15741 | PostgreSQL expression deparse allows SQL injection via EXTRACT argument | HIGH | 8.8 | 38%ile | Microsoft | 2026-08-11 |
| CVE-2026-15742 | PostgreSQL fuzzystrmatch writes effectively-arbitrary addresses, via integer wraparound | HIGH | 8.8 | 48%ile | Microsoft | 2026-08-11 |
| CVE-2026-16238 | PostgreSQL type confusion in pg_restore_attribute_stats() executes arbitrary code | HIGH | 8.8 | 36%ile | Microsoft | 2026-08-11 |
| CVE-2026-16239 | PostgreSQL type confusion in cursor CLOSE + DECLARE executes arbitrary code | HIGH | 8.8 | 52%ile | Microsoft | 2026-08-11 |
| CVE-2026-18408 | PostgreSQL psql \unrestrict lets superuser of pg_dump origin server execute arbitrary code in psql client | HIGH | 8.8 | 29%ile | Microsoft | 2026-08-11 |
| CVE-2026-19385 | PostgreSQL pg_dump heap buffer overflow executes arbitrary code | HIGH | 8.8 | 37%ile | Microsoft | 2026-08-11 |
| CVE-2026-63639 | Valkey: UAF in stream deserialization may lead to remote code execution | HIGH | 8.8 | 59%ile | Microsoft | 2026-08-11 |
| CVE-2026-68480 | x86/bugs: Make Safe-RET robust against interrupt injection | HIGH | 8.8 | 14%ile | Microsoft | 2026-08-11 |
| CVE-2026-74556 | scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer | HIGH | 8.8 | 34%ile | Microsoft | 2026-08-11 |
| CVE-2026-24301 | Microsoft Copilot Information Disclosure Vulnerability | HIGH | 8.8 | 66%ile | Microsoft | 2026-08-11 |
| CVE-2026-49163 | Application Insights Profiler Elevation of Privilege Vulnerability | HIGH | 8.8 | 64%ile | Microsoft | 2026-08-11 |
| CVE-2026-49179 | Windows Active Directory Domain Services Remote Code Execution Vulnerability | HIGH | 8.8 | 59%ile | Microsoft | 2026-08-11 |
| CVE-2026-57104 | Azure Storage Explorer Elevation of Privilege Vulnerability | HIGH | 8.8 | 59%ile | Microsoft | 2026-08-11 |
| CVE-2026-59113 | Visual Studio Code Remote Code Execution Vulnerability | HIGH | 8.8 | 55%ile | Microsoft | 2026-08-11 |
| CVE-2026-59133 | Microsoft High Performance Computing (HPC) Pack Elevation of Privilege Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-08-11 |
| CVE-2026-62784 | Microsoft Local Security Authority Server (lsasrv) Remote Code Execution Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-08-11 |
| CVE-2026-62785 | Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-08-11 |
| CVE-2026-62790 | Windows SMBv3 Server Remote Code Execution Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-08-11 |
| CVE-2026-62795 | Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-08-11 |
| CVE-2026-62816 | Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability | HIGH | 8.8 | 45%ile | Microsoft | 2026-08-11 |
| CVE-2026-62817 | Windows DNS Server Remote Code Execution Vulnerability | HIGH | 8.8 | 45%ile | Microsoft | 2026-08-11 |
| CVE-2026-62818 | Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-08-11 |
| CVE-2026-62822 | Windows GDI+ Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-08-11 |
| CVE-2026-62823 | Windows DHCP Server Remote Code Execution Vulnerability | HIGH | 8.8 | 45%ile | Microsoft | 2026-08-11 |
| CVE-2026-62824 | Remote Desktop Client Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-08-11 |
| CVE-2026-62827 | Microsoft SharePoint Server Elevation of Privilege Vulnerability | HIGH | 8.8 | 61%ile | Microsoft | 2026-08-11 |
| CVE-2026-62869 | Azure Entra ID Spoofing Vulnerability | HIGH | 8.8 | 38%ile | Microsoft | 2026-08-11 |
| CVE-2026-62872 | .NET Framework Elevation of Privilege Vulnerability | HIGH | 8.8 | 56%ile | Microsoft | 2026-08-11 |
| CVE-2026-62913 | Microsoft Exchange Server Remote Code Execution Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-08-11 |
| CVE-2026-63514 | Microsoft SharePoint Server Remote Code Execution Vulnerability | HIGH | 8.8 | 81%ile | Microsoft | 2026-08-11 |
| CVE-2026-64901 | Microsoft SharePoint Server Remote Code Execution Vulnerability | HIGH | 8.8 | 81%ile | Microsoft | 2026-08-11 |
| CVE-2026-64921 | Microsoft SharePoint Server Elevation of Privilege Vulnerability | HIGH | 8.8 | 61%ile | Microsoft | 2026-08-11 |
| CVE-2026-65658 | Microsoft SharePoint Server Remote Code Execution Vulnerability | HIGH | 8.8 | 81%ile | Microsoft | 2026-08-11 |
| CVE-2026-65660 | Microsoft SharePoint Server Remote Code Execution Vulnerability | HIGH | 8.8 | 95%ile | Microsoft | 2026-08-11 |
| CVE-2026-65663 | Microsoft SharePoint Server Remote Code Execution Vulnerability | HIGH | 8.8 | 81%ile | Microsoft | 2026-08-11 |
| CVE-2026-65665 | Microsoft SharePoint Server Remote Code Execution Vulnerability | HIGH | 8.8 | 77%ile | Microsoft | 2026-08-11 |
| CVE-2026-65668 | Microsoft Purview eDiscovery Elevation of Privilege Vulnerability | HIGH | 8.8 | 56%ile | Microsoft | 2026-08-11 |
| CVE-2026-65767 | Microsoft Teams for Android Spoofing Vulnerability | HIGH | 8.8 | 49%ile | Microsoft | 2026-08-11 |
| CVE-2026-65768 | Microsoft Teams Remote Code Execution Vulnerability | HIGH | 8.8 | 61%ile | Microsoft | 2026-08-11 |
| CVE-2026-65807 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-08-11 |
| CVE-2026-65811 | Power BI Remote Code Execution Vulnerability | HIGH | 8.8 | 62%ile | Microsoft | 2026-08-11 |
| CVE-2026-65815 | Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability | HIGH | 8.8 | 77%ile | Microsoft | 2026-08-11 |
| CVE-2026-66805 | Microsoft SharePoint Server Remote Code Execution Vulnerability | HIGH | 8.8 | 81%ile | Microsoft | 2026-08-11 |
| CVE-2026-66808 | Microsoft SharePoint Server Remote Code Execution Vulnerability | HIGH | 8.8 | 81%ile | Microsoft | 2026-08-11 |
| CVE-2026-69320 | Visual Studio Code Remote Code Execution Vulnerability | HIGH | 8.8 | 59%ile | Microsoft | 2026-08-11 |
| CVE-2026-70321 | Microsoft SharePoint Remote Code Execution Vulnerability | HIGH | 8.8 | 77%ile | Microsoft | 2026-08-11 |
| CVE-2026-70324 | Microsoft SharePoint Elevation of Privilege Vulnerability | HIGH | 8.8 | 61%ile | Microsoft | 2026-08-11 |
| CVE-2026-70326 | Microsoft SharePoint Server Elevation of Privilege Vulnerability | HIGH | 8.8 | 56%ile | Microsoft | 2026-08-11 |
| CVE-2026-70329 | Microsoft Outlook Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-08-11 |
| CVE-2026-70336 | Visual Studio Code Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-08-11 |
| CVE-2026-72984 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-08-11 |
| CVE-2026-68451 | s390/zcrypt: Validate length for CCA ECC private key requests | HIGH | 8.8 | 3%ile | Microsoft | 2026-08-11 |
| CVE-2026-62836 | Azure SQL Managed Instance Elevation of Privilege Vulnerability | HIGH | 8.7 | 51%ile | Microsoft | 2026-08-11 |
| CVE-2026-64597 | smb: client: fix double-free in SMB2_close() replay | HIGH | 8.6 | 30%ile | Microsoft | 2026-08-11 |
| CVE-2026-66800 | Azure Data Factory Information Disclosure Vulnerability | HIGH | 8.6 | 62%ile | Microsoft | 2026-08-11 |
| CVE-2026-69519 | Azure Stack HCI Information Disclosure Vulnerability | HIGH | 8.6 | 64%ile | Microsoft | 2026-08-11 |
| CVE-2026-69558 | Microsoft Partner Center Information Disclosure Vulnerability | HIGH | 8.6 | 62%ile | Microsoft | 2026-08-11 |
| CVE-2026-69419 | Azure Data Manager for Energy Remote Code Execution Vulnerability | HIGH | 8.5 | 55%ile | Microsoft | 2026-08-11 |
| CVE-2026-69543 | Azure Virtual Machines Elevation of Privilege Vulnerability | HIGH | 8.5 | 47%ile | Microsoft | 2026-08-11 |
| CVE-2026-70341 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | HIGH | 8.5 | 51%ile | Microsoft | 2026-08-11 |
| CVE-2026-56865 | Fix transparency log tile verification bypass in golang.org/x/mod/sumdb/tlog | HIGH | 8.4 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-63388 | Libevent: Heap out-of-bounds write in bufferevent_socket_set_conn_address_ reachable via AF_UNIX accept | HIGH | 8.4 | 4%ile | Microsoft | 2026-08-11 |
| CVE-2026-64604 | KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode | HIGH | 8.4 | 6%ile | Microsoft | 2026-08-11 |
| CVE-2026-70130 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 8.4 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-56179 | Windows Network Address Translation (NAT) Spoofing Vulnerability | HIGH | 8.3 | 20%ile | Microsoft | 2026-08-11 |
| CVE-2026-72970 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | HIGH | 8.3 | 54%ile | Microsoft | 2026-08-11 |
| CVE-2026-74649 | staging: rtl8723bs: fix missing shared-key auth challenge length check | HIGH | 8.3 | 21%ile | Microsoft | 2026-08-11 |
| CVE-2026-49825 | lxml: javascript: URL bypass in Cleaner via xlink:href | HIGH | 8.2 | 22%ile | Microsoft | 2026-08-11 |
| CVE-2026-68082 | libceph: fix two unsafe bare decodes in decode_lockers() | HIGH | 8.2 | 43%ile | Microsoft | 2026-08-11 |
| CVE-2026-70456 | rsync 3.0.1 < 3.5.0 Heap Out-of-Bounds Write via read_args() | HIGH | 8.2 | 34%ile | Microsoft | 2026-08-11 |
| CVE-2026-70458 | rsync 3.0.0 < 3.5.0 Out-of-Bounds Write via FLAG_HLINKED Handling | HIGH | 8.2 | 34%ile | Microsoft | 2026-08-11 |
| CVE-2026-70461 | rsync 3.2.5 < 3.5.0 Heap Out-of-Bounds Write via files-from Entry | HIGH | 8.2 | 47%ile | Microsoft | 2026-08-11 |
| CVE-2026-74611 | tls: rx: restore msg_iter before TLS 1.3 optimistic retry | HIGH | 8.2 | 42%ile | Microsoft | 2026-08-11 |
| CVE-2026-69306 | Visual Studio Code Security Feature Bypass Vulnerability | HIGH | 8.2 | 46%ile | Microsoft | 2026-08-11 |
| CVE-2026-14668 | PostgreSQL ctid type confusion in selectivity estimator discloses derivative of arbitrary read | HIGH | 8.1 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-53783 | rsync < 3.5.0 TOCTOU Race Condition Directory Escape via rrsync | HIGH | 8.1 | 31%ile | Microsoft | 2026-08-11 |
| CVE-2026-53790 | rsync < 3.5.0 Command Injection via Multiple Code Paths | HIGH | 8.1 | 50%ile | Microsoft | 2026-08-11 |
| CVE-2026-53795 | rsync < 3.5.0 Arbitrary File Write via --temp-dir/--link-dest | HIGH | 8.1 | 34%ile | Microsoft | 2026-08-11 |
| CVE-2026-54330 | Ceph RGW SigV4 handler accepts unsigned x-amz-* headers on presigned requests, allowing privilege escalation | HIGH | 8.1 | 31%ile | Microsoft | 2026-08-11 |
| CVE-2026-6464 | PostgreSQL psql COPY FROM STDIN early failure processes data lines as psql commands | HIGH | 8.1 | 30%ile | Microsoft | 2026-08-11 |
| CVE-2026-68366 | usb: gadget: uvc: clamp SEND_RESPONSE length to the response buffer | HIGH | 8.1 | 8%ile | Microsoft | 2026-08-11 |
| CVE-2026-68470 | wifi: mac80211: validate extension-frame layout before RX | HIGH | 8.1 | 29%ile | Microsoft | 2026-08-11 |
| CVE-2026-68471 | wifi: ieee80211: validate MLE common info length | HIGH | 8.1 | 28%ile | Microsoft | 2026-08-11 |
| CVE-2026-70460 | rsync 2.3.3 < 3.5.0 Path Traversal via --partial-dir/--backup-dir Symlink | HIGH | 8.1 | 39%ile | Microsoft | 2026-08-11 |
| CVE-2026-72398 | sctp: add INIT verification after cookie unpacking | HIGH | 8.1 | 57%ile | Microsoft | 2026-08-11 |
| CVE-2026-74488 | wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames | HIGH | 8.1 | 17%ile | Microsoft | 2026-08-11 |
| CVE-2026-77176 | Kata-containers: insufficient validation of createcontainer mount and storage rules in genpolicy | HIGH | 8.1 | 41%ile | Microsoft | 2026-08-11 |
| CVE-2026-62778 | Windows DNS Elevation of Privilege Vulnerability | HIGH | 8.1 | 46%ile | Microsoft | 2026-08-11 |
| CVE-2026-62781 | RPC Runtime Library Remote Code Execution Vulnerability | HIGH | 8.1 | 53%ile | Microsoft | 2026-08-11 |
| CVE-2026-62792 | Windows TCP/IP Remote Code Execution Vulnerability | HIGH | 8.1 | 53%ile | Microsoft | 2026-08-11 |
| CVE-2026-62819 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | HIGH | 8.1 | 53%ile | Microsoft | 2026-08-11 |
| CVE-2026-62820 | Windows DNS Server Remote Code Execution Vulnerability | HIGH | 8.1 | 46%ile | Microsoft | 2026-08-11 |
| CVE-2026-62889 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability | HIGH | 8.1 | 53%ile | Microsoft | 2026-08-11 |
| CVE-2026-63520 | Microsoft SharePoint Server Remote Code Execution Vulnerability | HIGH | 8.1 | 61%ile | Microsoft | 2026-08-11 |
| CVE-2026-65679 | Windows iSCSI Target Service Remote Code Execution Vulnerability | HIGH | 8.1 | 53%ile | Microsoft | 2026-08-11 |
| CVE-2026-65789 | Windows DNS Server Remote Code Execution Vulnerability | HIGH | 8.1 | 53%ile | Microsoft | 2026-08-11 |
| CVE-2026-65796 | Windows iSCSI Target Service Remote Code Execution Vulnerability | HIGH | 8.1 | 53%ile | Microsoft | 2026-08-11 |
| CVE-2026-66802 | Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability | HIGH | 8.1 | 46%ile | Microsoft | 2026-08-11 |
| CVE-2026-70340 | Azure CycleCloud Elevation of Privilege Vulnerability | HIGH | 8.1 | 56%ile | Microsoft | 2026-08-11 |
| CVE-2026-71331 | Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability | HIGH | 8.1 | 53%ile | Microsoft | 2026-08-11 |
| CVE-2026-70454 | rsync < 3.5.0 TLS Certificate Validation Bypass via SSL/OpenSSL Mode | HIGH | 8.0 | 9%ile | Microsoft | 2026-08-11 |
| CVE-2026-57105 | Microsoft Office SharePoint Spoofing Vulnerability | HIGH | 8.0 | 50%ile | Microsoft | 2026-08-11 |
| CVE-2026-62911 | Microsoft Exchange Server Elevation of Privilege Vulnerability | HIGH | 8.0 | 53%ile | Microsoft | 2026-08-11 |
| CVE-2026-6726 | MITRE: CVE-2026-6726 TPM 2.0 Improper Object Slot Reuse | HIGH | 7.9 | 9%ile | Microsoft | 2026-08-11 |
| CVE-2026-13732 | Gdb: gdb: out-of-bounds write in stabs parser read_member_functions() via crafted elf | HIGH | 7.8 | 3%ile | Microsoft | 2026-08-11 |
| CVE-2026-19582 | Binutils: stack buffer overflow in gnu binutils in rsrc_print_name from an untrusted pe file | HIGH | 7.8 | — | Microsoft | 2026-08-11 |
| CVE-2026-53803 | rsync < 3.5.0 Symlink Following Arbitrary File Overwrite | HIGH | 7.8 | 14%ile | Microsoft | 2026-08-11 |
| CVE-2026-68108 | drm/amdgpu/vce: fix integer overflow in image size | HIGH | 7.8 | 3%ile | Microsoft | 2026-08-11 |
| CVE-2026-68152 | amt: fix use-after-free in AMT delayed works | HIGH | 7.8 | 3%ile | Microsoft | 2026-08-11 |
| CVE-2026-68181 | mei: bus: access mei_device under device_lock on cleanup | HIGH | 7.8 | 11%ile | Microsoft | 2026-08-11 |
| CVE-2026-68186 | binfmt_misc: set have_execfd only once the interpreter is opened | HIGH | 7.8 | 12%ile | Microsoft | 2026-08-11 |
| CVE-2026-68188 | Bluetooth: RFCOMM: Fix session UAF in set_termios | HIGH | 7.8 | 12%ile | Microsoft | 2026-08-11 |
| CVE-2026-68318 | pds_core: fix use-after-free on workqueue during remove | HIGH | 7.8 | 6%ile | Microsoft | 2026-08-11 |
| CVE-2026-68335 | rds: drop incoming messages that cross network namespace boundaries | HIGH | 7.8 | 3%ile | Microsoft | 2026-08-11 |
| CVE-2026-68416 | mtd: fix double free and WARN_ON in add_mtd_device() error paths | HIGH | 7.8 | 5%ile | Microsoft | 2026-08-11 |
| CVE-2026-72693 | Kbd: local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login | HIGH | 7.8 | 1%ile | Microsoft | 2026-08-11 |
| CVE-2026-74443 | drm/vmwgfx: bound DMA command body size against suffix pointer | HIGH | 7.8 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-74454 | drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO size | HIGH | 7.8 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-74641 | ALSA: usx2y: bound the hwdep mmap fault offset | HIGH | 7.8 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-74746 | netfilter: flowtable: publish GC-visible tuple last | HIGH | 7.8 | 45%ile | Microsoft | 2026-08-11 |
| CVE-2026-79655 | Sos: sos: path traversal in sos clean tar extraction via unvalidated symlink/hardlink targets leads to arbitrary file wr | HIGH | 7.8 | 12%ile | Microsoft | 2026-08-11 |
| CVE-2026-79992 | Emacs: local shell command injection through the user field in emacs tramp | HIGH | 7.8 | 12%ile | Microsoft | 2026-08-11 |
| CVE-2026-80552 | s390/vfio_ccw: Ensure index for read/write regions are within range | HIGH | 7.8 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-80560 | openrisc: signal: do not restore privileged SR bits on sigreturn | HIGH | 7.8 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-80568 | Input: synaptics-rmi4 - block s_input when F54 queue is busy | HIGH | 7.8 | 9%ile | Microsoft | 2026-08-11 |
| CVE-2026-80706 | can: softing: fw_parse(): validate firmware record spans | HIGH | 7.8 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-82474 | Sudo through 1.9.17p2 Intercept Policy Bypass via execveat | HIGH | 7.8 | 8%ile | Microsoft | 2026-08-11 |
| CVE-2026-42976 | Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability | HIGH | 7.8 | 22%ile | Microsoft | 2026-08-11 |
| CVE-2026-50523 | Microsoft PowerShell Remote Code Execution Vulnerability | HIGH | 7.8 | 25%ile | Microsoft | 2026-08-11 |
| CVE-2026-54981 | Visual Studio Code Python Extension Security Feature Bypass Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-54984 | Windows Imaging Component Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-56174 | Windows Narrator Braille Elevation of Privilege Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-58641 | .NET Elevation of Privilege Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-58650 | Visual Studio Code Security Feature Bypass Vulnerability | HIGH | 7.8 | 26%ile | Microsoft | 2026-08-11 |
| CVE-2026-58651 | Microsoft Word Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-61349 | Windows Work Folder Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 17%ile | Microsoft | 2026-08-11 |
| CVE-2026-61353 | Windows Telephony Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-61355 | Windows Sensor Data Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-61356 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | HIGH | 7.8 | 22%ile | Microsoft | 2026-08-11 |
| CVE-2026-61357 | Application Information Services Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-61358 | Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability | HIGH | 7.8 | 31%ile | Microsoft | 2026-08-11 |
| CVE-2026-61364 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | HIGH | 7.8 | 22%ile | Microsoft | 2026-08-11 |
| CVE-2026-61365 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | HIGH | 7.8 | 22%ile | Microsoft | 2026-08-11 |
| CVE-2026-61367 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | HIGH | 7.8 | 22%ile | Microsoft | 2026-08-11 |
| CVE-2026-61923 | Windows Display Enhancement Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-61925 | Windows Installer Elevation of Privilege Vulnerability | HIGH | 7.8 | 22%ile | Microsoft | 2026-08-11 |
| CVE-2026-61926 | Windows USB Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-61930 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-61932 | Windows DWM Core Library Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-61934 | Windows Bind Filter Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-61937 | Windows HTTP.sys Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-62692 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-62695 | Windows Storage Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-62696 | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-62698 | Microsoft Digest Authentication Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-62700 | Windows NTFS Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-62701 | Windows Telephony Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-62707 | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-62710 | Windows Device Association Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-62711 | Windows Win32k Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-62712 | Windows Win32k Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-62713 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-62717 | Windows Message Queuing Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-62719 | Windows Message Queuing Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-62721 | Windows User-Mode Power Service (UMPS) Elevation of Privilege Vulnerability | HIGH | 7.8 | 22%ile | Microsoft | 2026-08-11 |
| CVE-2026-62722 | Microsoft Brokering File System Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-62732 | Windows Telephony Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-62733 | Windows Win32k Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-62735 | Windows HTTP.sys Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-62736 | Windows DHCP Client Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-62737 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-62739 | Windows HTTP.sys Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-62741 | Windows HTTP.sys Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-62747 | Windows Device Association Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-62751 | Windows Projected File System Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-62754 | Windows Kerberos Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-62755 | Windows DHCP Client Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-62758 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-62768 | Windows Installer Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-62770 | Windows Shell Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-62771 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-62772 | Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-62776 | Windows DHCP Server Elevation of Privilege Vulnerability | HIGH | 7.8 | 31%ile | Microsoft | 2026-08-11 |
| CVE-2026-62777 | Windows License Manager Elevation of Privilege Vulnerability | HIGH | 7.8 | 22%ile | Microsoft | 2026-08-11 |
| CVE-2026-62779 | Windows Schannel Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-62783 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-62797 | Windows NTFS Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-62799 | Windows SMB Client Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-62803 | Windows DHCP Server Elevation of Privilege Vulnerability | HIGH | 7.8 | 31%ile | Microsoft | 2026-08-11 |
| CVE-2026-62807 | Windows DHCP Server Elevation of Privilege Vulnerability | HIGH | 7.8 | 31%ile | Microsoft | 2026-08-11 |
| CVE-2026-62811 | Windows HTTP.sys Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-62812 | Windows DHCP Server Elevation of Privilege Vulnerability | HIGH | 7.8 | 31%ile | Microsoft | 2026-08-11 |
| CVE-2026-62871 | .NET Elevation of Privilege Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-62876 | Windows Win32k Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-62877 | Windows Win32k Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-62880 | Windows NTFS Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-62885 | Windows Win32k Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-62886 | .NET Elevation of Privilege Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-62888 | Windows DWM Core Library Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-62890 | Windows GDI+ Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-62894 | Windows DWM Core Library Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-62909 | .NET Elevation of Privilege Vulnerability | HIGH | 7.8 | 28%ile | Microsoft | 2026-08-11 |
| CVE-2026-63513 | Microsoft Office Graphics Component Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-63515 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-63518 | Microsoft Office Word Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-63519 | Microsoft Office Graphics Component Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-63522 | Azure SQL Database Elevation of Privilege Vulnerability | HIGH | 7.8 | 22%ile | Microsoft | 2026-08-11 |
| CVE-2026-63525 | Microsoft Office Word Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-63526 | Microsoft Office Graphics Component Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-63527 | Microsoft Office Word Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-63532 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-63533 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-64898 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-64903 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-64904 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-64905 | Microsoft Office Word Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-64906 | Microsoft Access Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-64907 | Microsoft Office Word Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-64908 | Microsoft Access Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-64909 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-64910 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-64911 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-64912 | Microsoft Access Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-64914 | Microsoft Access Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-64915 | Microsoft Office Word Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-64919 | Microsoft Access Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-64920 | Microsoft Access Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-65656 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-65657 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-65661 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-65664 | Microsoft Office Graphics Component Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-65671 | Remote Access API Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-65672 | Remote Access API Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-65673 | Microsoft Entra Connect Elevation of Privilege Vulnerability | HIGH | 7.8 | 25%ile | Microsoft | 2026-08-11 |
| CVE-2026-65773 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.8 | 22%ile | Microsoft | 2026-08-11 |
| CVE-2026-65774 | Windows Installer Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-65786 | Desktop Window Manager Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-65787 | Desktop Window Manager Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-65790 | Windows Message Queuing Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-65810 | .NET Framework Elevation of Privilege Vulnerability | HIGH | 7.8 | 35%ile | Microsoft | 2026-08-11 |
| CVE-2026-65814 | Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-66799 | Windows Key Guard Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-66807 | Microsoft Office Graphics Component Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-68792 | Microsoft Office Elevation of Privilege Vulnerability | HIGH | 7.8 | 25%ile | Microsoft | 2026-08-11 |
| CVE-2026-68793 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-68794 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-68795 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-68796 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-68798 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-68800 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-68801 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-68803 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-68804 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-68805 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-68806 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-68807 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-68810 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-68811 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-68812 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-68814 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-68815 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-68816 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-68817 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-69278 | Visual Studio Code Security Feature Bypass Vulnerability | HIGH | 7.8 | 26%ile | Microsoft | 2026-08-11 |
| CVE-2026-69414 | Microsoft Defender Elevation of Privilege Vulnerability | HIGH | 7.8 | 72%ile | Microsoft | 2026-08-11 |
| CVE-2026-70311 | Microsoft Office Word Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-70313 | Microsoft PowerPoint Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-70335 | GitHub Copilot and Visual Studio Code Elevation of Privilege Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-70338 | Microsoft PowerShell Security Feature Bypass Vulnerability | HIGH | 7.8 | 30%ile | Microsoft | 2026-08-11 |
| CVE-2026-70345 | Windows Installer Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-70346 | Windows Installer Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-70347 | Windows Installer Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-70354 | .NET Core Remote Code Execution Vulnerability | HIGH | 7.8 | 30%ile | Microsoft | 2026-08-11 |
| CVE-2026-68124 | mctp: serial: handle zero-length frames to prevent rx buffer overflow | HIGH | 7.7 | 28%ile | Microsoft | 2026-08-11 |
| CVE-2026-69855 | Microsoft Copilot in Azure Information Disclosure Vulnerability | HIGH | 7.7 | 58%ile | Microsoft | 2026-08-11 |
| CVE-2025-49506 | Apache Portable Runtime Utility: apr_password_validate() vulnerable to timing attack | HIGH | 7.5 | 32%ile | Microsoft | 2026-08-11 |
| CVE-2026-14457 | RPK Server Signature Algorithm Selection Can Dereference a Missing Certificate | HIGH | 7.5 | 67%ile | Microsoft | 2026-08-11 |
| CVE-2026-19654 | Rsyslog: a configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote p | HIGH | 7.5 | 56%ile | Microsoft | 2026-08-11 |
| CVE-2026-20337 | ClamAV ZIP File Format Processing Memory Corruption Vulnerability | HIGH | 7.5 | 49%ile | Microsoft | 2026-08-11 |
| CVE-2026-20338 | ClamAV ZIP File Format Processing Memory Corruption Vulnerability | HIGH | 7.5 | 46%ile | Microsoft | 2026-08-11 |
| CVE-2026-20339 | ClamAV PESpin File Format Processing Integer Overflow Vulnerability | HIGH | 7.5 | 46%ile | Microsoft | 2026-08-11 |
| CVE-2026-20345 | ClamAV GPT File Format Processing Memory Corruption Vulnerability | HIGH | 7.5 | 46%ile | Microsoft | 2026-08-11 |
| CVE-2026-20346 | ClamAV PDF File Format Processing Memory Corruption Vulnerability | HIGH | 7.5 | 45%ile | Microsoft | 2026-08-11 |
| CVE-2026-20347 | ClamAV Mach-O File Format Processing Memory Corruption Vulnerability | HIGH | 7.5 | 46%ile | Microsoft | 2026-08-11 |
| CVE-2026-20348 | ClamAV XAR File Format Processing Memory Corruption Vulnerability | HIGH | 7.5 | 54%ile | Microsoft | 2026-08-11 |
| CVE-2026-33818 | Enforce maximum recursion depth in encoding/asn1 | HIGH | 7.5 | 47%ile | Microsoft | 2026-08-11 |
| CVE-2026-34501 | Apache Portable Runtime Utility: Heap buffer overflow in APR redis client | HIGH | 7.5 | 43%ile | Microsoft | 2026-08-11 |
| CVE-2026-34502 | Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client | HIGH | 7.5 | 43%ile | Microsoft | 2026-08-11 |
| CVE-2026-47895 | In strongSwan before 6.0.7, identity parsing/cloning is mishandled. Parsed EAP-Identities that result in an empty but no | HIGH | 7.5 | 36%ile | Microsoft | 2026-08-11 |
| CVE-2026-54874 | Excessive Memory Use Buffering DTLS Records for a Future Epoch | HIGH | 7.5 | 50%ile | Microsoft | 2026-08-11 |
| CVE-2026-55620 | eml_parser: DoS via deeply nested parens in Received headers | HIGH | 7.5 | 50%ile | Microsoft | 2026-08-11 |
| CVE-2026-56684 | Valkey: TLS pending-data processing use-after-free may allow remote code execution | HIGH | 7.5 | 44%ile | Microsoft | 2026-08-11 |
| CVE-2026-56853 | Apply ReadHeaderTimeout when doing unencrypted HTTP/2 check in net/http | HIGH | 7.5 | 47%ile | Microsoft | 2026-08-11 |
| CVE-2026-56859 | Add recursion depth guard during decode in encoding/xml | HIGH | 7.5 | 47%ile | Microsoft | 2026-08-11 |
| CVE-2026-56862 | Limit handshake messages we are willing to accept post-handshake in crypto/tls | HIGH | 7.5 | 47%ile | Microsoft | 2026-08-11 |
| CVE-2026-56864 | Ignore unrelated, unauthenticated hashes in Lookup in golang.org/x/mod/sumdb | HIGH | 7.5 | 22%ile | Microsoft | 2026-08-11 |
| CVE-2026-63072 | Heap Buffer Overflow in CMS Key Unwrapping | HIGH | 7.5 | 60%ile | Microsoft | 2026-08-11 |
| CVE-2026-63075 | QUIC ACK-only Packet Retention Can Cause Memory Exhaustion | HIGH | 7.5 | 47%ile | Microsoft | 2026-08-11 |
| CVE-2026-63076 | Invalid Pointer Dereference in CMP Server via Crafted protectionAlg | HIGH | 7.5 | 76%ile | Microsoft | 2026-08-11 |
| CVE-2026-65819 | gopacket: Multiple layer decoders panic on crafted packets (out-of-bounds/underflow) enabling unauthenticated remote DoS | HIGH | 7.5 | 30%ile | Microsoft | 2026-08-11 |
| CVE-2026-66046 | Expat Denial of Service via storeAtts() Quadratic Complexity | HIGH | 7.5 | 55%ile | Microsoft | 2026-08-11 |
| CVE-2026-68155 | libceph: Reject monmaps advertising zero monitors | HIGH | 7.5 | 53%ile | Microsoft | 2026-08-11 |
| CVE-2026-68299 | vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets | HIGH | 7.5 | 43%ile | Microsoft | 2026-08-11 |
| CVE-2026-68320 | sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid | HIGH | 7.5 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-68373 | wifi: at76c50x-usb: avoid length underflow in at76_guess_freq() | HIGH | 7.5 | 20%ile | Microsoft | 2026-08-11 |
| CVE-2026-70453 | rsync < 3.5.0 Algorithmic Complexity DoS via hash_search() | HIGH | 7.5 | 44%ile | Microsoft | 2026-08-11 |
| CVE-2026-70455 | rsync 3.4.2 < 3.5.0 DoS via --zt Zstandard Compression Thread Exhaustion | HIGH | 7.5 | 47%ile | Microsoft | 2026-08-11 |
| CVE-2026-70464 | rsync 2.0.0 < 3.5.0 Connection Slot Exhaustion DoS via Handshake Stall | HIGH | 7.5 | 47%ile | Microsoft | 2026-08-11 |
| CVE-2026-71217 | Iperf3: iperf3 server accepts unbounded peer-controlled json parameters enabling remote denial of service via resource e | HIGH | 7.5 | 50%ile | Microsoft | 2026-08-11 |
| CVE-2026-72469 | xprtrdma: Fix ep kref imbalance on ADDR_CHANGE | HIGH | 7.5 | 34%ile | Microsoft | 2026-08-11 |
| CVE-2026-73566 | node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar w | HIGH | 7.5 | 45%ile | Microsoft | 2026-08-11 |
| CVE-2026-74480 | net: bridge: stop fast-leave after deleting a port group | HIGH | 7.5 | 48%ile | Microsoft | 2026-08-11 |
| CVE-2026-74516 | KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active | HIGH | 7.5 | 3%ile | Microsoft | 2026-08-11 |
| CVE-2026-74621 | net/sched: act_ct: fix sk_buff leak when the header checks reject a packet | HIGH | 7.5 | 42%ile | Microsoft | 2026-08-11 |
| CVE-2026-74704 | net/sched: sch_cake: drop WARN_ON(1) for malformed packets in ACK filter | HIGH | 7.5 | 38%ile | Microsoft | 2026-08-11 |
| CVE-2026-76098 | Mistune has Denial of Service — RecursionError via Excessive Emphasis Markers in Markdown | HIGH | 7.5 | 42%ile | Microsoft | 2026-08-11 |
| CVE-2026-76956 | In libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of getentropy's return code leads to insufficient entropy, w | HIGH | 7.5 | 21%ile | Microsoft | 2026-08-11 |
| CVE-2026-78002 | Rsyslog: rsyslog: denial of service via heap buffer overflow in rainerscript replace() function | HIGH | 7.5 | 65%ile | Microsoft | 2026-08-11 |
| CVE-2026-80573 | Input: iforce - validate input packet lengths | HIGH | 7.5 | 12%ile | Microsoft | 2026-08-11 |
| CVE-2026-82251 | gitoxide before 0.52.1 Path Traversal via Submodule Name | HIGH | 7.5 | 44%ile | Microsoft | 2026-08-11 |
| CVE-2026-82252 | gitoxide before 0.52.1 Repository Boundary Violation via symlinked .gitmodules | HIGH | 7.5 | 44%ile | Microsoft | 2026-08-11 |
| CVE-2026-82253 | gitoxide before 0.82.0 Path Traversal via Submodule Name Validation Bypass | HIGH | 7.5 | 51%ile | Microsoft | 2026-08-11 |
| CVE-2026-82254 | gitoxide before 0.69.0 Denial of Service via gix-pack | HIGH | 7.5 | 42%ile | Microsoft | 2026-08-11 |
| CVE-2026-54113 | Remote Procedure Call Denial of Service Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-08-11 |
| CVE-2026-59132 | Windows TCP/IP Denial of Service Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-08-11 |
| CVE-2026-59134 | Remote Desktop Client Remote Code Execution Vulnerability | HIGH | 7.5 | 52%ile | Microsoft | 2026-08-11 |
| CVE-2026-61352 | Remote Desktop Client Remote Code Execution Vulnerability | HIGH | 7.5 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-61363 | Remote Desktop Client Remote Code Execution Vulnerability | HIGH | 7.5 | 52%ile | Microsoft | 2026-08-11 |
| CVE-2026-62787 | Windows DNS Server Remote Code Execution Vulnerability | HIGH | 7.5 | 52%ile | Microsoft | 2026-08-11 |
| CVE-2026-62898 | Microsoft QUIC Information Disclosure Vulnerability | HIGH | 7.5 | 64%ile | Microsoft | 2026-08-11 |
| CVE-2026-62901 | .NET Denial of Service Vulnerability | HIGH | 7.5 | 69%ile | Microsoft | 2026-08-11 |
| CVE-2026-62918 | Microsoft Teams Spoofing Vulnerability | HIGH | 7.5 | 42%ile | Microsoft | 2026-08-11 |
| CVE-2026-65681 | Windows iSCSI Target Service Denial of Service Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-08-11 |
| CVE-2026-55553 | urllib: Cross-origin redirects preserve credential-bearing request headers, leading to potential credential leakage | HIGH | 7.5 | 52%ile | Microsoft | 2026-08-11 |
| CVE-2026-14456 | Unbounded Memory Growth in QUIC Server Incoming Channel Queue | HIGH | 7.5 | 54%ile | Microsoft | 2026-08-11 |
| CVE-2026-54876 | Client-Side Memory Leak in OCSP Response Checking | HIGH | 7.5 | 44%ile | Microsoft | 2026-08-11 |
| CVE-2026-53793 | rsync < 3.5.0 Path Confinement Bypass via /./ Boundary Marker in Chroot Mode | HIGH | 7.4 | 34%ile | Microsoft | 2026-08-11 |
| CVE-2026-63073 | Untrusted Sender DN Used as Format String in CMP Response Validation | HIGH | 7.4 | 67%ile | Microsoft | 2026-08-11 |
| CVE-2026-70452 | rsync 3.1.0 < 3.5.0 Access Control Bypass via DNS Resolution Failure | HIGH | 7.4 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-72320 | netfilter: nft_lookup: fix catchall element handling with inverted lookups | HIGH | 7.4 | 47%ile | Microsoft | 2026-08-11 |
| CVE-2026-74469 | sctp: prevent peer transport count overflow | HIGH | 7.4 | 74%ile | Microsoft | 2026-08-11 |
| CVE-2026-74597 | ip6_tunnel: clear skb2->cb[] in ip6ip6_err() | HIGH | 7.4 | 46%ile | Microsoft | 2026-08-11 |
| CVE-2026-74669 | ipvs: clear IPv4 options after rebasing tunnel ICMP errors | HIGH | 7.4 | 44%ile | Microsoft | 2026-08-11 |
| CVE-2026-76844 | zlib 1.2.11 through 1.3.2 Heap Buffer Overflow via Stale gzwrite Pointer After Failed Write | HIGH | 7.4 | 48%ile | Microsoft | 2026-08-11 |
| CVE-2026-58612 | PowerShell Information Disclosure Vulnerability | HIGH | 7.4 | 59%ile | Microsoft | 2026-08-11 |
| CVE-2026-68337 | bpf: Reject redirect helpers without a bpf_net_context | HIGH | 7.3 | 6%ile | Microsoft | 2026-08-11 |
| CVE-2026-71226 | Libkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio path | HIGH | 7.3 | 3%ile | Microsoft | 2026-08-11 |
| CVE-2026-59119 | PowerShell Elevation of Privilege Vulnerability | HIGH | 7.3 | 32%ile | Microsoft | 2026-08-11 |
| CVE-2026-62914 | Microsoft Exchange Server Spoofing Vulnerability | HIGH | 7.3 | 39%ile | Microsoft | 2026-08-11 |
| CVE-2026-64900 | Microsoft SharePoint Server Spoofing Vulnerability | HIGH | 7.3 | 51%ile | Microsoft | 2026-08-11 |
| CVE-2026-68821 | Windows Package Manager Elevation of Privilege Vulnerability | HIGH | 7.3 | 25%ile | Microsoft | 2026-08-11 |
| CVE-2026-70355 | Microsoft SharePoint Server Elevation of Privilege Vulnerability | HIGH | 7.3 | 56%ile | Microsoft | 2026-08-11 |
| CVE-2026-6471 | PostgreSQL logical decoding can dlopen arbitrary file | HIGH | 7.2 | 45%ile | Microsoft | 2026-08-11 |
| CVE-2026-47299 | Azure Monitor Agent Elevation of Privilege Vulnerability | HIGH | 7.2 | 63%ile | Microsoft | 2026-08-11 |
| CVE-2026-62910 | Microsoft Exchange Server Elevation of Privilege Vulnerability | HIGH | 7.2 | 63%ile | Microsoft | 2026-08-11 |
| CVE-2026-19589 | Packer vulnerable to arbitrary file write via crafted plugin archive during installation | HIGH | 7.1 | 9%ile | Microsoft | 2026-08-11 |
| CVE-2026-49114 | ONNX symlink-following and path-traversal arbitrary file write | HIGH | 7.1 | 5%ile | Microsoft | 2026-08-11 |
| CVE-2026-53784 | rsync < 3.5.0 Path Traversal via Symlink Module Root | HIGH | 7.1 | 15%ile | Microsoft | 2026-08-11 |
| CVE-2026-53785 | rsync < 3.5.0 Path Traversal Write Escape via --relative Mode | HIGH | 7.1 | 9%ile | Microsoft | 2026-08-11 |
| CVE-2026-53802 | rsync < 3.5.0 Arbitrary File Read via Symlink Following | HIGH | 7.1 | 15%ile | Microsoft | 2026-08-11 |
| CVE-2026-56136 | In NTFS-3G through 2026.2.25, an out-of-bounds read exists in ntfs_ir_nill() in libntfs-3g/index.c that allows an attack | HIGH | 7.1 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-64590 | dma-buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST warning | HIGH | 7.1 | 6%ile | Microsoft | 2026-08-11 |
| CVE-2026-68083 | ksmbd: fix path resolution in ksmbd_vfs_kern_path_create | HIGH | 7.1 | 41%ile | Microsoft | 2026-08-11 |
| CVE-2026-68084 | staging: vme_user: fix location monitor leak in tsi148 bridge | HIGH | 7.1 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-68085 | Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled | HIGH | 7.1 | 9%ile | Microsoft | 2026-08-11 |
| CVE-2026-68088 | usb: gadget: function: rndis: add length check to response query | HIGH | 7.1 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-68104 | drm/amdgpu: invoke pm_genpd_remove() before freeing genpd | HIGH | 7.1 | 3%ile | Microsoft | 2026-08-11 |
| CVE-2026-68130 | ksmbd: defer destroy_previous_session() until after NTLM authentication | HIGH | 7.1 | 12%ile | Microsoft | 2026-08-11 |
| CVE-2026-68135 | net: hip04: fix RX buffer leak on build_skb failure | HIGH | 7.1 | 8%ile | Microsoft | 2026-08-11 |
| CVE-2026-68138 | net/sched: serialize qdisc_rtab_list against concurrent get/put | HIGH | 7.1 | 13%ile | Microsoft | 2026-08-11 |
| CVE-2026-68162 | sctp: avoid auth_enable sysctl UAF during netns teardown | HIGH | 7.1 | 10%ile | Microsoft | 2026-08-11 |
| CVE-2026-68165 | mm/damon/core: validate ranges in damon_set_regions() | HIGH | 7.1 | 11%ile | Microsoft | 2026-08-11 |
| CVE-2026-68182 | comedi: comedi_parport: deal with premature interrupt | HIGH | 7.1 | 11%ile | Microsoft | 2026-08-11 |
| CVE-2026-68199 | wifi: ath6kl: fix OOB access from firmware ADDBA window size | HIGH | 7.1 | 32%ile | Microsoft | 2026-08-11 |
| CVE-2026-68204 | media: vivid: check for vb2_is_busy() when toggling caps | HIGH | 7.1 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-68284 | bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg() | HIGH | 7.1 | 3%ile | Microsoft | 2026-08-11 |
| CVE-2026-68286 | drop_monitor: perform u64_stats updates under IRQ-disabled section | HIGH | 7.1 | 11%ile | Microsoft | 2026-08-11 |
| CVE-2026-68294 | net: qrtr: restrict socket creation to the initial network namespace | HIGH | 7.1 | 4%ile | Microsoft | 2026-08-11 |
| CVE-2026-68306 | wifi: mt76: mt7996: fix possible NULL-pointer deref in mt7996_mcu_sta_bfer_eht() | HIGH | 7.1 | 6%ile | Microsoft | 2026-08-11 |
| CVE-2026-68348 | ASoC: tas2781: bound firmware description string parsing | HIGH | 7.1 | 3%ile | Microsoft | 2026-08-11 |
| CVE-2026-68350 | wifi: carl9170: fix OOB read from off-by-two in TX status handler | HIGH | 7.1 | 8%ile | Microsoft | 2026-08-11 |
| CVE-2026-68351 | wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read | HIGH | 7.1 | 13%ile | Microsoft | 2026-08-11 |
| CVE-2026-68352 | wifi: ath6kl: fix OOB read from firmware IE lengths in connect event | HIGH | 7.1 | 36%ile | Microsoft | 2026-08-11 |
| CVE-2026-68353 | wifi: ath6kl: fix OOB read from firmware num_msg in TX complete handler | HIGH | 7.1 | 21%ile | Microsoft | 2026-08-11 |
| CVE-2026-68365 | USB: serial: io_edgeport: cap received transmit credits | HIGH | 7.1 | 8%ile | Microsoft | 2026-08-11 |
| CVE-2026-68368 | usb: gadget: f_ncm: validate datagram bounds in ncm_unwrap_ntb() | HIGH | 7.1 | 12%ile | Microsoft | 2026-08-11 |
| CVE-2026-68371 | usb: musb: omap2430: Do not put borrowed of_node in probe | HIGH | 7.1 | 8%ile | Microsoft | 2026-08-11 |
| CVE-2026-68397 | net/iucv: take a reference on the socket found in afiucv_hs_rcv() | HIGH | 7.1 | 18%ile | Microsoft | 2026-08-11 |
| CVE-2026-68414 | wifi: cfg80211: cancel sched scan results work on unregister | HIGH | 7.1 | 14%ile | Microsoft | 2026-08-11 |
| CVE-2026-71556 | go-git: Worktree operations may follow symlinks | HIGH | 7.1 | 30%ile | Microsoft | 2026-08-11 |
| CVE-2026-72329 | net/liquidio: drop cached VF pci_dev LUT | HIGH | 7.1 | 9%ile | Microsoft | 2026-08-11 |
| CVE-2026-72568 | Redis - Heap Out-of-Bounds Read in Cluster Bus PING Message Handler | HIGH | 7.1 | — | Microsoft | 2026-08-11 |
| CVE-2026-74444 | drm/vmwgfx: validate DRAW_PRIMITIVES header size before division | HIGH | 7.1 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-74739 | net/sched: cls_u32: skip hash tables in u32_bind_class() | HIGH | 7.1 | 3%ile | Microsoft | 2026-08-11 |
| CVE-2026-74743 | macvlan: inherit needed_headroom and needed_tailroom from lowerdev | HIGH | 7.1 | 45%ile | Microsoft | 2026-08-11 |
| CVE-2026-77219 | GNU Emacs < 31.0.91 Heap Over-Read via PBM/PPM/PGM Image Loader | HIGH | 7.1 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-80536 | xfs: bounds-check buffer log item's dirty bitmap | HIGH | 7.1 | 4%ile | Microsoft | 2026-08-11 |
| CVE-2026-80551 | s390/vfio_ccw: Ensure first IDAW remains constant | HIGH | 7.1 | 9%ile | Microsoft | 2026-08-11 |
| CVE-2026-80561 | libceph: fix multiple unsafe decodes in decode_locker() | HIGH | 7.1 | 44%ile | Microsoft | 2026-08-11 |
| CVE-2026-80562 | gpio: ml-ioh: use raw_spinlock_t for the register lock | HIGH | 7.1 | 12%ile | Microsoft | 2026-08-11 |
| CVE-2026-80579 | fbdev: clear fb_info->mode before deleting a videomode | HIGH | 7.1 | 1%ile | Microsoft | 2026-08-11 |
| CVE-2026-80668 | netfilter: nf_conntrack_expect: use conntrack GC to reap expectations | HIGH | 7.1 | 52%ile | Microsoft | 2026-08-11 |
| CVE-2026-80680 | i2c: amd-mp2: Unregister callback on adapter add failure | HIGH | 7.1 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-80708 | s390/zcrypt: Fix missing mem scrub at clear key import in cca_clr2cipherkey() | HIGH | 7.1 | 12%ile | Microsoft | 2026-08-11 |
| CVE-2026-82455 | RubyGems before 4.0.13 Path Traversal via Symlink Resolution | HIGH | 7.1 | — | Microsoft | 2026-08-11 |
| CVE-2026-55013 | Windows Remote Help Defense Spoofing Vulnerability | HIGH | 7.1 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-65675 | CoPilot Chat Security Feature Bypass Vulnerability | HIGH | 7.1 | 51%ile | Microsoft | 2026-08-11 |
| CVE-2026-68453 | s390/zcrypt: Fix buffer over-read in cca_cipher2protkey | HIGH | 7.1 | 6%ile | Microsoft | 2026-08-11 |
| CVE-2026-63387 | Libevent: Off-by-one stack buffer overflow in dnsname_to_labels via crafted DNS server response | HIGH | 7.0 | 36%ile | Microsoft | 2026-08-11 |
| CVE-2026-64582 | RDMA/rxe: Fix a use-after-free problem in rxe_mmap | HIGH | 7.0 | 6%ile | Microsoft | 2026-08-11 |
| CVE-2026-68329 | iommu/amd: Wait for completion instead of returning early in iommu_completion_wait() | HIGH | 7.0 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-72383 | sctp: fix addr_wq_timer race in sctp_free_addr_wq() | HIGH | 7.0 | 6%ile | Microsoft | 2026-08-11 |
| CVE-2026-74257 | sockmap: Fix use-after-free in udp_bpf_recvmsg() | HIGH | 7.0 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-74334 | RDMA/nldev: Fix locking when accessing mr->pd | HIGH | 7.0 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-74446 | drm/amdkfd: hold event_mutex while checkpointing CRIU events | HIGH | 7.0 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-74518 | mm/hugetlb: fix list corruption in allocate_file_region_entries() | HIGH | 7.0 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-74563 | rds: tcp: hold the RCU lock across ipv6_chk_addr() in rds_tcp_laddr_check() | HIGH | 7.0 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-74586 | sctp: clear new_transport when removing a peer | HIGH | 7.0 | 43%ile | Microsoft | 2026-08-11 |
| CVE-2026-74630 | ipv6: prevent in6_dev_get() from resurrecting inet6_dev | HIGH | 7.0 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-74752 | sctp: validate cookie AUTH state before use | HIGH | 7.0 | 44%ile | Microsoft | 2026-08-11 |
| CVE-2026-50472 | Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-08-11 |
| CVE-2026-59122 | Windows Telephony Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-08-11 |
| CVE-2026-59125 | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability | HIGH | 7.0 | 18%ile | Microsoft | 2026-08-11 |
| CVE-2026-59126 | Windows Event Logging Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-08-11 |
| CVE-2026-61348 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-08-11 |
| CVE-2026-61361 | Windows DHCP Client Remote Code Execution Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-08-11 |
| CVE-2026-61366 | Windows Network Connection Broker Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-08-11 |
| CVE-2026-61927 | Windows Bind Filter Driver Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-08-11 |
| CVE-2026-61929 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-08-11 |
| CVE-2026-61938 | Windows Installer Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-08-11 |
| CVE-2026-61939 | Winlogon Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-08-11 |
| CVE-2026-62690 | Windows Push Notifications Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-08-11 |
| CVE-2026-62693 | Windows MIDI Service Module Elevation of Privileges Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-08-11 |
| CVE-2026-62705 | Microsoft Brokering File System Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-08-11 |
| CVE-2026-62723 | Windows Telephony Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-08-11 |
| CVE-2026-62724 | Windows Telephony Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-08-11 |
| CVE-2026-62725 | Windows Telephony Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-08-11 |
| CVE-2026-62726 | Windows Telephony Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-08-11 |
| CVE-2026-62727 | Windows Telephony Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-08-11 |
| CVE-2026-62728 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-08-11 |
| CVE-2026-62729 | Windows Telephony Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-08-11 |
| CVE-2026-62734 | Windows Telephony Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-08-11 |
| CVE-2026-62748 | Windows Telephony Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-08-11 |
| CVE-2026-62749 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-08-11 |
| CVE-2026-62753 | Windows HTTP.sys Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-08-11 |
| CVE-2026-62766 | Windows Kerberos Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-08-11 |
| CVE-2026-62773 | Windows Kerberos Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-08-11 |
| CVE-2026-62774 | Windows Graphics Kernel Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-08-11 |
| CVE-2026-62780 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-08-11 |
| CVE-2026-62788 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-08-11 |
| CVE-2026-62892 | Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-08-11 |
| CVE-2026-62897 | .NET Framework Remote Code Execution Vulnerability | HIGH | 7.0 | 31%ile | Microsoft | 2026-08-11 |
| CVE-2026-62908 | Windows Backup Engine Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-08-11 |
| CVE-2026-65678 | Windows Win32k Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-08-11 |
| CVE-2026-65776 | Windows Win32k Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-08-11 |
| CVE-2026-65778 | Windows Autopilot Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-08-11 |
| CVE-2026-65779 | Windows Autopilot Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-08-11 |
| CVE-2026-65780 | Windows Autopilot Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-08-11 |
| CVE-2026-65781 | Windows Autopilot Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-08-11 |
| CVE-2026-65782 | Windows Autopilot Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-08-11 |
| CVE-2026-65783 | Windows Autopilot Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-08-11 |
| CVE-2026-65788 | Desktop Window Manager Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-08-11 |
| CVE-2026-68820 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | HIGH | 7.0 | 95%ile | Microsoft | 2026-08-11 |
| CVE-2026-70307 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-08-11 |
| CVE-2026-62699 | Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution Vulnerability | MEDIUM | 6.8 | 38%ile | Microsoft | 2026-08-11 |
| CVE-2026-62702 | Windows Graphics Kernel Denial of Service Vulnerability | MEDIUM | 6.8 | 62%ile | Microsoft | 2026-08-11 |
| CVE-2026-68093 | KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug | MEDIUM | 6.7 | 8%ile | Microsoft | 2026-08-11 |
| CVE-2026-72198 | ntfs: reject non-resident records for resident-only attributes | MEDIUM | 6.7 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-72200 | ntfs: detect mapping-pairs LCN accumulator overflow | MEDIUM | 6.7 | 52%ile | Microsoft | 2026-08-11 |
| CVE-2026-62769 | Windows DNS Elevation of Privilege Vulnerability | MEDIUM | 6.7 | 28%ile | Microsoft | 2026-08-11 |
| CVE-2026-62881 | Windows DNS Elevation of Privilege Vulnerability | MEDIUM | 6.7 | 28%ile | Microsoft | 2026-08-11 |
| CVE-2026-62883 | Windows DNS Elevation of Privilege Vulnerability | MEDIUM | 6.7 | 28%ile | Microsoft | 2026-08-11 |
| CVE-2026-65680 | Microsoft OneDrive for MacOS Elevation of Privilege Vulnerability | MEDIUM | 6.7 | 33%ile | Microsoft | 2026-08-11 |
| CVE-2026-65795 | Windows DNS Elevation of Privilege Vulnerability | MEDIUM | 6.7 | 28%ile | Microsoft | 2026-08-11 |
| CVE-2026-65797 | Windows DNS Elevation of Privilege Vulnerability | MEDIUM | 6.7 | 28%ile | Microsoft | 2026-08-11 |
| CVE-2026-65798 | Windows DNS Elevation of Privilege Vulnerability | MEDIUM | 6.7 | 28%ile | Microsoft | 2026-08-11 |
| CVE-2026-65799 | Windows DNS Elevation of Privilege Vulnerability | MEDIUM | 6.7 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-70304 | Windows DNS Elevation of Privilege Vulnerability | MEDIUM | 6.7 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-70330 | Windows DNS Elevation of Privilege Vulnerability | MEDIUM | 6.7 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-18917 | Libvirt: integer overflow in nodegetfreepages rpc handler leading to heap buffer overflow | MEDIUM | 6.6 | 8%ile | Microsoft | 2026-08-11 |
| CVE-2026-68086 | mm/khugepaged: write all dirty file folios when collapsing | MEDIUM | 6.6 | 4%ile | Microsoft | 2026-08-11 |
| CVE-2026-74458 | can: kvaser_usb_leaf: kvaser_usb_leaf_wait_cmd(): validate received command extents | MEDIUM | 6.6 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-74498 | ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set | MEDIUM | 6.6 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-61920 | Windows DNS Server Remote Code Execution Vulnerability | MEDIUM | 6.6 | 44%ile | Microsoft | 2026-08-11 |
| CVE-2026-14663 | PostgreSQL pgcrypto, for OpenSSL-disabled ciphers, silently encrypts to and decrypts from cleartext | MEDIUM | 6.5 | 1%ile | Microsoft | 2026-08-11 |
| CVE-2026-18726 | Open-iscsi: open-iscsi: denial of service in iscsiuio router advertisement parsing | MEDIUM | 6.5 | 24%ile | Microsoft | 2026-08-11 |
| CVE-2026-18727 | Open-iscsi: open-iscsi: integer underflow in iscsiuio dhcpv6 parsing | MEDIUM | 6.5 | 21%ile | Microsoft | 2026-08-11 |
| CVE-2026-18728 | Open-iscsi: open-iscsi: integer underflow in iscsiuio ipv4 dhcp parsing | MEDIUM | 6.5 | 24%ile | Microsoft | 2026-08-11 |
| CVE-2026-19953 | URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via missing normalization in | MEDIUM | 6.5 | 14%ile | Microsoft | 2026-08-11 |
| CVE-2026-53583 | libgit2: Inverted IP SubjectAltName Comparison in OpenSSL Backend | MEDIUM | 6.5 | 15%ile | Microsoft | 2026-08-11 |
| CVE-2026-53786 | rsync < 3.5.0 Filter Rule Bypass via --filter Merge Directive | MEDIUM | 6.5 | 34%ile | Microsoft | 2026-08-11 |
| CVE-2026-53788 | rsync < 3.5.0 Newline Injection via name-converter uid/gid mapping | MEDIUM | 6.5 | 20%ile | Microsoft | 2026-08-11 |
| CVE-2026-53789 | rsync < 3.5.0 Arbitrary File Deletion via Malicious File List | MEDIUM | 6.5 | 30%ile | Microsoft | 2026-08-11 |
| CVE-2026-53792 | rsync < 3.5.0 Out-of-Bounds Read via Zero-Length Checksum Block | MEDIUM | 6.5 | 24%ile | Microsoft | 2026-08-11 |
| CVE-2026-55618 | eml_parser: URL extraction bypass via HTML entities in URLs | MEDIUM | 6.5 | 44%ile | Microsoft | 2026-08-11 |
| CVE-2026-56135 | In NTFS-3G through 2026.2.25, a heap-based buffer overflow exists in the function build_inherited_id() in libntfs-3g/sec | MEDIUM | 6.5 | 4%ile | Microsoft | 2026-08-11 |
| CVE-2026-68098 | ksmbd: bound DACL dedup walk to copied ACEs | MEDIUM | 6.5 | 39%ile | Microsoft | 2026-08-11 |
| CVE-2026-68116 | vxlan: mdb: Fix source list corruption on a failed replace | MEDIUM | 6.5 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-68125 | mac802154: llsec: reject frames shorter than the authentication tag | MEDIUM | 6.5 | 25%ile | Microsoft | 2026-08-11 |
| CVE-2026-68129 | gve: fix Rx queue stall on alloc failure | MEDIUM | 6.5 | 44%ile | Microsoft | 2026-08-11 |
| CVE-2026-68136 | net: gro: fix double aggregation of flush-marked skbs | MEDIUM | 6.5 | 45%ile | Microsoft | 2026-08-11 |
| CVE-2026-68158 | libceph: Fix multiplication overflow in decode_new_up_state_weight() | MEDIUM | 6.5 | 54%ile | Microsoft | 2026-08-11 |
| CVE-2026-68159 | libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE | MEDIUM | 6.5 | 55%ile | Microsoft | 2026-08-11 |
| CVE-2026-68411 | wifi: mac80211_hwsim: clamp virtio RX length before skb_put | MEDIUM | 6.5 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-70368 | Stunnel: stack-based out-of-bounds read/write in stunnel s_vlog via oversized log message | MEDIUM | 6.5 | 29%ile | Microsoft | 2026-08-11 |
| CVE-2026-70457 | rsync 3.2.3 < 3.5.0 Out-of-Bounds Write via parse_size_arg() | MEDIUM | 6.5 | 32%ile | Microsoft | 2026-08-11 |
| CVE-2026-70462 | rsync 3.1.0 < 3.5.0 Signed Integer Overflow via MSG_IO_TIMEOUT | MEDIUM | 6.5 | 18%ile | Microsoft | 2026-08-11 |
| CVE-2026-70622 | tar-rs 0.4.11 - 0.4.46 Symlink Escape via append_dir_all() | MEDIUM | 6.5 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-71225 | Libkcapi: iv reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries | MEDIUM | 6.5 | 28%ile | Microsoft | 2026-08-11 |
| CVE-2026-72712 | Nmap 7.99 Denial of Service via Zero-Length TCP Option Packet | MEDIUM | 6.5 | 43%ile | Microsoft | 2026-08-11 |
| CVE-2026-72816 | go-chi chi before 5.3.0 IP Spoofing via RealIP Middleware | MEDIUM | 6.5 | 23%ile | Microsoft | 2026-08-11 |
| CVE-2026-72817 | go-chi chi 0.9.0 before 5.3.0 IP Spoofing via X-Forwarded-For | MEDIUM | 6.5 | 15%ile | Microsoft | 2026-08-11 |
| CVE-2026-74356 | vhost: fix vhost_get_avail_idx for a non empty ring | MEDIUM | 6.5 | 16%ile | Microsoft | 2026-08-11 |
| CVE-2026-74588 | sctp: keep chunk->transport in step with the list it is queued on | MEDIUM | 6.5 | 43%ile | Microsoft | 2026-08-11 |
| CVE-2026-74625 | netfilter: bridge: release template ct on non-IP path | MEDIUM | 6.5 | 43%ile | Microsoft | 2026-08-11 |
| CVE-2026-74691 | net: thunderbolt: Tear down DMA paths before stopping the rings | MEDIUM | 6.5 | 17%ile | Microsoft | 2026-08-11 |
| CVE-2026-80722 | wifi: mac80211: validate individual TWT params before driver setup | MEDIUM | 6.5 | 15%ile | Microsoft | 2026-08-11 |
| CVE-2026-40375 | Microsoft Dynamics Business Central Information Disclosure Vulnerability | MEDIUM | 6.5 | 58%ile | Microsoft | 2026-08-11 |
| CVE-2026-47285 | Visual Studio Code Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-08-11 |
| CVE-2026-58639 | Microsoft SharePoint Server Spoofing Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-08-11 |
| CVE-2026-59138 | Microsoft Remote Registry Service Denial of Service Vulnerability | MEDIUM | 6.5 | 67%ile | Microsoft | 2026-08-11 |
| CVE-2026-61345 | Microsoft Remote Registry Service Denial of Service Vulnerability | MEDIUM | 6.5 | 67%ile | Microsoft | 2026-08-11 |
| CVE-2026-61918 | Windows Remote Desktop Client Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-08-11 |
| CVE-2026-61921 | Windows Remote Desktop Client Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-08-11 |
| CVE-2026-61924 | Windows Remote Desktop Client Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-08-11 |
| CVE-2026-62714 | Windows DHCP Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 45%ile | Microsoft | 2026-08-11 |
| CVE-2026-62715 | Windows DHCP Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 45%ile | Microsoft | 2026-08-11 |
| CVE-2026-62716 | Windows DHCP Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 45%ile | Microsoft | 2026-08-11 |
| CVE-2026-62718 | Windows DHCP Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 45%ile | Microsoft | 2026-08-11 |
| CVE-2026-62720 | Windows DHCP Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 45%ile | Microsoft | 2026-08-11 |
| CVE-2026-62742 | Windows DHCP Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 45%ile | Microsoft | 2026-08-11 |
| CVE-2026-62745 | Windows DHCP Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 45%ile | Microsoft | 2026-08-11 |
| CVE-2026-62750 | Windows HTTP Protocol Stack Tampering Vulnerability | MEDIUM | 6.5 | 52%ile | Microsoft | 2026-08-11 |
| CVE-2026-62782 | Windows SMB Client Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-08-11 |
| CVE-2026-62814 | Windows DHCP Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 45%ile | Microsoft | 2026-08-11 |
| CVE-2026-62837 | Microsoft SharePoint Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 69%ile | Microsoft | 2026-08-11 |
| CVE-2026-62839 | Microsoft SharePoint Server Spoofing Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-08-11 |
| CVE-2026-62902 | .NET Information Disclosure Vulnerability | MEDIUM | 6.5 | 59%ile | Microsoft | 2026-08-11 |
| CVE-2026-62912 | Microsoft Exchange Server Denial of Service Vulnerability | MEDIUM | 6.5 | 80%ile | Microsoft | 2026-08-11 |
| CVE-2026-62915 | Microsoft Exchange Server Security Feature Bypass Vulnerability | MEDIUM | 6.5 | 51%ile | Microsoft | 2026-08-11 |
| CVE-2026-63512 | Microsoft SharePoint Server Tampering Vulnerability | MEDIUM | 6.5 | 54%ile | Microsoft | 2026-08-11 |
| CVE-2026-63516 | Microsoft SharePoint Server Spoofing Vulnerability | MEDIUM | 6.5 | 79%ile | Microsoft | 2026-08-11 |
| CVE-2026-65769 | Microsoft Teams iOS Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-08-11 |
| CVE-2026-65785 | Windows DHCP Client Denial of Service Vulnerability | MEDIUM | 6.5 | 48%ile | Microsoft | 2026-08-11 |
| CVE-2026-65794 | Windows SMB Client Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-08-11 |
| CVE-2026-65806 | Azure CycleCloud Information Disclosure Vulnerability | MEDIUM | 6.5 | 58%ile | Microsoft | 2026-08-11 |
| CVE-2026-65813 | Microsoft Exchange Server Elevation of Privilege Vulnerability | MEDIUM | 6.5 | 61%ile | Microsoft | 2026-08-11 |
| CVE-2026-66301 | Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability | MEDIUM | 6.5 | 63%ile | Microsoft | 2026-08-11 |
| CVE-2026-66324 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-08-11 |
| CVE-2026-69550 | Windows App for Mac Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-08-11 |
| CVE-2026-70105 | Microsoft Word Information Disclosure Vulnerability | MEDIUM | 6.5 | 62%ile | Microsoft | 2026-08-11 |
| CVE-2026-70327 | Microsoft Excel Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-08-11 |
| CVE-2026-70328 | Microsoft Excel Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-08-11 |
| CVE-2026-82250 | gitoxide gix-packetline before 0.21.5 Denial of Service | MEDIUM | 6.5 | 38%ile | Microsoft | 2026-08-11 |
| CVE-2026-72042 | ipmi: Fix user refcount underflow in event delivery | MEDIUM | 6.4 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-72337 | Bluetooth: 6lowpan: avoid untracked enable work | MEDIUM | 6.4 | 12%ile | Microsoft | 2026-08-11 |
| CVE-2026-72404 | tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() | MEDIUM | 6.4 | 6%ile | Microsoft | 2026-08-11 |
| CVE-2026-74289 | ipv4: fib: Don't dump dying fib_info in fib_leaf_notify(). | MEDIUM | 6.4 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-74314 | bpf: Cancel special fields on map value recycle | MEDIUM | 6.4 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-74344 | bpf: Clear rb node linkage when freeing bpf_rb_root | MEDIUM | 6.4 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-74347 | netfilter: cttimeout: detach dataplane timeout policy and repurpose refcount | MEDIUM | 6.4 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-74450 | drm/amd/pm: fix pptable use-after-free | MEDIUM | 6.4 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-74465 | net: openvswitch: fix potential UAF on meter attach failure | MEDIUM | 6.4 | 4%ile | Microsoft | 2026-08-11 |
| CVE-2026-74474 | vxlan: use pskb_network_may_pull() for transmit path header pulls | MEDIUM | 6.4 | 42%ile | Microsoft | 2026-08-11 |
| CVE-2026-74479 | net: pktgen: fix proc entry use-after-free | MEDIUM | 6.4 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-74482 | mm/huge_memory: unlock i_mmap_rwsem before releasing after-split folios | MEDIUM | 6.4 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-74496 | fou: Fix use-after-free in fou_create() | MEDIUM | 6.4 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-74510 | Bluetooth: mgmt: fix UAF in pair command cancellation | MEDIUM | 6.4 | 3%ile | Microsoft | 2026-08-11 |
| CVE-2026-74511 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | MEDIUM | 6.4 | — | Microsoft | 2026-08-11 |
| CVE-2026-74512 | audit: fix potential use-after-free in audit_del_rule() | MEDIUM | 6.4 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-74519 | pinctrl: devicetree: don't free uninitialized dev_name on error path | MEDIUM | 6.4 | 4%ile | Microsoft | 2026-08-11 |
| CVE-2026-74548 | forcedeth: fix UAF of txrx_stats in nv_remove | MEDIUM | 6.4 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-74580 | vhost: reset the vring metadata cache on vring reconfiguration | MEDIUM | 6.4 | 35%ile | Microsoft | 2026-08-11 |
| CVE-2026-74599 | mm/ptdump: always stabilise against page table freeing using init_mm | MEDIUM | 6.4 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-74668 | packet: use consistent hard_header_len in TX_RING send path | MEDIUM | 6.4 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-62708 | Windows Kernel Elevation of Privilege Vulnerability | MEDIUM | 6.4 | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-53796 | rsync < 3.5.0 TOCTOU Race Condition via Destination Directory Handling | MEDIUM | 6.3 | 3%ile | Microsoft | 2026-08-11 |
| CVE-2026-53799 | rsync < 3.5.0 Symlink Race Condition via ACL/xattr Application | MEDIUM | 6.3 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-64573 | Bluetooth: qca: fix NVM tag length underflow in TLV parser | MEDIUM | 6.3 | 5%ile | Microsoft | 2026-08-11 |
| CVE-2026-68097 | ksmbd: validate ACE size against SID sub-authorities | MEDIUM | 6.3 | 39%ile | Microsoft | 2026-08-11 |
| CVE-2026-68196 | wifi: wilc1000: validate assoc response length before subtracting header | MEDIUM | 6.3 | 36%ile | Microsoft | 2026-08-11 |
| CVE-2026-68323 | tipc: serialize udp bearer replicast list updates | MEDIUM | 6.3 | 1%ile | Microsoft | 2026-08-11 |
| CVE-2026-68361 | hwmon: (corsair-psu) Stop device IO before calling hid_hw_stop | MEDIUM | 6.3 | 9%ile | Microsoft | 2026-08-11 |
| CVE-2026-71557 | go-git: Malicious reference names may modify files outside the reference storage | MEDIUM | 6.3 | 36%ile | Microsoft | 2026-08-11 |
| CVE-2026-72073 | mmc: vub300: fix use-after-free on probe failure | MEDIUM | 6.3 | 12%ile | Microsoft | 2026-08-11 |
| CVE-2026-74302 | Bluetooth: hci_core: Fix UAF in hci_unregister_dev() | MEDIUM | 6.3 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-74490 | tipc: avoid use-after-free in poll trace queue dumps | MEDIUM | 6.3 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-74509 | Bluetooth: hci_sync: Fix advertising data UAFs | MEDIUM | 6.3 | 16%ile | Microsoft | 2026-08-11 |
| CVE-2026-74531 | Bluetooth: hci_conn: hold conn reference in abort_conn_sync() | MEDIUM | 6.3 | 17%ile | Microsoft | 2026-08-11 |
| CVE-2026-74549 | hwmon: (nct6775-core) Prevent access to unsupported weight registers | MEDIUM | 6.3 | 3%ile | Microsoft | 2026-08-11 |
| CVE-2026-74715 | bpf: Fix netns reference imbalance in conntrack kfuncs | MEDIUM | 6.3 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-74724 | ipvs: avoid out-of-bounds write in ip_vs_nat_icmp | MEDIUM | 6.3 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-75032 | Bluez: bluez: out-of-bounds read in avrcp parse_media_element and parse_media_folder | MEDIUM | 6.3 | 15%ile | Microsoft | 2026-08-11 |
| CVE-2026-80529 | xfs: don't swallow dquot recovery verification errors | MEDIUM | 6.3 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-74729 | soc: aspeed: lpc-snoop: Fix usercopy overflow in snoop_file_read | MEDIUM | 6.3 | 12%ile | Microsoft | 2026-08-11 |
| CVE-2026-72522 | libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop because low surrogates are treated the same | MEDIUM | 6.2 | 9%ile | Microsoft | 2026-08-11 |
| CVE-2026-54770 | WebOb: Open redirect in Location header normalization via leading C0 control / space characters | MEDIUM | 6.1 | 36%ile | Microsoft | 2026-08-11 |
| CVE-2026-56858 | Fix Javascript regexp context tracking in html/template | MEDIUM | 6.1 | 24%ile | Microsoft | 2026-08-11 |
| CVE-2026-68187 | exec: fix unsigned loop counter wrap in transfer_args_to_stack() | MEDIUM | 6.1 | 13%ile | Microsoft | 2026-08-11 |
| CVE-2026-68273 | drm/amdgpu: Fix context pstate override handling | MEDIUM | 6.1 | 1%ile | Microsoft | 2026-08-11 |
| CVE-2026-68326 | wifi: mwifiex: bound uAP association event IEs to the event buffer | MEDIUM | 6.1 | 18%ile | Microsoft | 2026-08-11 |
| CVE-2026-74595 | fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() | MEDIUM | 6.1 | 0%ile | Microsoft | 2026-08-11 |
| CVE-2026-74635 | fbdev: bitblit: bound-check glyph index in bit_cursor() | MEDIUM | 6.1 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-75900 | Swtpm: swtpm: out-of-bounds read in swtpm_nvram_checkheader due to sizeof(pointer) vs sizeof(struct) mismatch | MEDIUM | 6.1 | 1%ile | Microsoft | 2026-08-11 |
| CVE-2026-80576 | drm/amdgpu: reject oversized IBs with per-ring packet limits | MEDIUM | 6.1 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-80702 | drm/vmwgfx: fix guest_memory_dirty bitfield clobbered as size | MEDIUM | 6.1 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-68081 | KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state | MEDIUM | 6.0 | 5%ile | Microsoft | 2026-08-11 |
| CVE-2026-72423 | bpf: Guard conntrack opts error writes | MEDIUM | 6.0 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-74291 | ASoC: topology: Check PCM and DAI name strings before use | MEDIUM | 6.0 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-74553 | hwmon: (nct6775-core) Fix number of temperature registers for NCT6116 | MEDIUM | 6.0 | 5%ile | Microsoft | 2026-08-11 |
| CVE-2026-74616 | xdp: reject clones that overrun skb_shared_info tailroom | MEDIUM | 6.0 | 44%ile | Microsoft | 2026-08-11 |
| CVE-2026-53572 | KEDA: PostgreSQL connection string parameter injection via incomplete whitespace escaping | MEDIUM | 5.9 | 33%ile | Microsoft | 2026-08-11 |
| CVE-2026-53801 | rsync < 3.5.0 Symlink Race Condition Directory Traversal | MEDIUM | 5.9 | 21%ile | Microsoft | 2026-08-11 |
| CVE-2026-56860 | Avoid quadratic complexity in resolvePath in net/url | MEDIUM | 5.9 | 46%ile | Microsoft | 2026-08-11 |
| CVE-2026-63074 | CMP Indefinite Cache Growth of ExtraCerts | MEDIUM | 5.9 | 48%ile | Microsoft | 2026-08-11 |
| CVE-2026-68381 | ksmbd: pin conn during async oplock break notification | MEDIUM | 5.9 | 42%ile | Microsoft | 2026-08-11 |
| CVE-2026-72413 | sctp: fix err_chunk memory leaks in INIT handling | MEDIUM | 5.9 | 11%ile | Microsoft | 2026-08-11 |
| CVE-2026-74386 | nvmet-tcp: fix page fragment cache leak in error path | MEDIUM | 5.9 | 8%ile | Microsoft | 2026-08-11 |
| CVE-2026-74455 | can: peak_usb: validate uCAN receive record lengths | MEDIUM | 5.9 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-74457 | can: peak_usb: add bounds check for USB channel index | MEDIUM | 5.9 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-74473 | vxlan: use pskb_network_may_pull() in route_shortcircuit() | MEDIUM | 5.9 | 44%ile | Microsoft | 2026-08-11 |
| CVE-2026-74550 | net: do not send ICMP/NDISC Redirects when peer allocation fails | MEDIUM | 5.9 | 41%ile | Microsoft | 2026-08-11 |
| CVE-2026-74569 | netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() | MEDIUM | 5.9 | 33%ile | Microsoft | 2026-08-11 |
| CVE-2026-74587 | sctp: fix use-after-free of cached ASCONF chunk | MEDIUM | 5.9 | 43%ile | Microsoft | 2026-08-11 |
| CVE-2026-74624 | netfilter: nf_conntrack: defer invalid log until after unlock | MEDIUM | 5.9 | 41%ile | Microsoft | 2026-08-11 |
| CVE-2026-74682 | ALSA: usb-audio: fix OOB write on Type II inbound URBs | MEDIUM | 5.9 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-74688 | sctp: clear control chunk transport if it is being removed | MEDIUM | 5.9 | 43%ile | Microsoft | 2026-08-11 |
| CVE-2026-74692 | net/smc: fix TOCTOU race between smc_listen_out() and listener close | MEDIUM | 5.9 | 42%ile | Microsoft | 2026-08-11 |
| CVE-2026-74696 | tcp: fix TFO max_qlen accounting across reuseport migration | MEDIUM | 5.9 | 42%ile | Microsoft | 2026-08-11 |
| CVE-2026-74697 | bnxt_en: Disable EOP for TPA on all chips to prevent data corruption | MEDIUM | 5.9 | 39%ile | Microsoft | 2026-08-11 |
| CVE-2026-74705 | udp: fix potential use-after-free in tunnel segmentation | MEDIUM | 5.9 | 43%ile | Microsoft | 2026-08-11 |
| CVE-2026-74730 | NFS: Pin the 'struct nfs_server' during a FREE_STATEID call | MEDIUM | 5.9 | 44%ile | Microsoft | 2026-08-11 |
| CVE-2026-80558 | libceph: Avoid using invalid osd indices from primary_temp | MEDIUM | 5.9 | 44%ile | Microsoft | 2026-08-11 |
| CVE-2026-62899 | .NET Security Feature Bypass Vulnerability | MEDIUM | 5.9 | 55%ile | Microsoft | 2026-08-11 |
| CVE-2026-62900 | .NET Information Disclosure Vulnerability | MEDIUM | 5.9 | 55%ile | Microsoft | 2026-08-11 |
| CVE-2026-6727 | MITRE: CVE-2026-6727 TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability | MEDIUM | 5.9 | 4%ile | Microsoft | 2026-08-11 |
| CVE-2026-68819 | Windows Network File System Denial of Service Vulnerability | MEDIUM | 5.9 | 62%ile | Microsoft | 2026-08-11 |
| CVE-2026-74647 | misc: fastrpc: Remove buffer from list prior to unmap operation | MEDIUM | 5.8 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-15534 | Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersiz | MEDIUM | 5.7 | 6%ile | Microsoft | 2026-08-11 |
| CVE-2026-68123 | openvswitch: fix GSO userspace truncation underflow | MEDIUM | 5.7 | 46%ile | Microsoft | 2026-08-11 |
| CVE-2026-72098 | dm-verity: fix buffer overflow in FEC calculation | MEDIUM | 5.7 | 54%ile | Microsoft | 2026-08-11 |
| CVE-2026-72397 | hwmon: (pmbus/core) honor vrm_version in pmbus_data2reg_vid() | MEDIUM | 5.7 | 6%ile | Microsoft | 2026-08-11 |
| CVE-2026-74499 | ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() | MEDIUM | 5.7 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-74582 | packet: use consistent hard_header_len in non-ring send paths | MEDIUM | 5.7 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-74607 | KVM: SVM: Serialize accesses to the owner and mirror list with separate lock | MEDIUM | 5.7 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-74670 | ipvs: stop estimator after disabled calc phase | MEDIUM | 5.7 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-59130 | AMD Zen Information Disclosure Vulnerability | MEDIUM | 5.6 | 31%ile | Microsoft | 2026-08-11 |
| CVE-2026-59131 | AMD Zen Information Disclosure Vulnerability | MEDIUM | 5.6 | 24%ile | Microsoft | 2026-08-11 |
| CVE-2026-74648 | staging: rtl8723bs: validate monitor transmit frame lengths | MEDIUM | 5.6 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-15059 | systemd-oomd: unprivileged users can terminate arbitrary processes | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-08-11 |
| CVE-2026-19548 | Binutils: binutils: multiple use-after-free in add_archive_element via lto plugin processing | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-08-11 |
| CVE-2026-19617 | Libdm: lvm2: libdm: denial of service via uncontrolled recursion in config parser | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-08-11 |
| CVE-2026-44605 | Rpm: heap buffer overflow in ndb slot table parsing | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-63623 | Libvirt: information disclosure via world-readable storage volume images during clone/convert | MEDIUM | 5.5 | 1%ile | Microsoft | 2026-08-11 |
| CVE-2026-64561 | KVM: x86: Check for invalid/obsolete root *after* making MMU pages available | MEDIUM | 5.5 | 20%ile | Microsoft | 2026-08-11 |
| CVE-2026-64563 | rhashtable: clear stale iter->p on table restart | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-08-11 |
| CVE-2026-64569 | mpls: fix NULL deref in mpls_valid_fib_dump_req() on CONFIG_INET=n | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-08-11 |
| CVE-2026-64585 | can: esd_usb: kill anchored URBs before freeing netdevs | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-64586 | wifi: brcmfmac: drain bus_reset work on device removal | MEDIUM | 5.5 | 16%ile | Microsoft | 2026-08-11 |
| CVE-2026-64598 | smb/client: Fix error code in smb2_aead_req_alloc() | MEDIUM | 5.5 | 20%ile | Microsoft | 2026-08-11 |
| CVE-2026-64599 | crypto: amlogic - avoid double cleanup in meson_crypto_probe() | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-68090 | debugobjects: Plug race against a concurrent OOM disable | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-68091 | HID: wacom: stop hardware after post-start probe failures | MEDIUM | 5.5 | 18%ile | Microsoft | 2026-08-11 |
| CVE-2026-68096 | audit: fix recursive locking deadlock in audit_dupe_exe() | MEDIUM | 5.5 | 45%ile | Microsoft | 2026-08-11 |
| CVE-2026-68102 | drm/amdgpu: fix aperture mapping leak | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-68106 | drm/amdgpu: fix division by zero with invalid uvd dimensions | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-08-11 |
| CVE-2026-68109 | drm/amdgpu/sdma7.1: replace BUG_ON() with WARN_ON() | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-08-11 |
| CVE-2026-68110 | drm/amdgpu/sdma4.4.2: replace BUG_ON() with WARN_ON() | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-08-11 |
| CVE-2026-68111 | drm/amdgpu/gfx9: replace BUG_ON() with WARN_ON() | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-68112 | drm/amdgpu/gfx9.4.3: replace BUG_ON() with WARN_ON() | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-08-11 |
| CVE-2026-68113 | drm/amdgpu/gfx12: replace BUG_ON() with WARN_ON() | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-08-11 |
| CVE-2026-68114 | drm/amdgpu/gfx12.1: replace BUG_ON() with WARN_ON() | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-08-11 |
| CVE-2026-68115 | drm/amdgpu/gfx10: replace BUG_ON() with WARN_ON() | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-68137 | net/x25: fix use-after-free in x25_kill_by_neigh() | MEDIUM | 5.5 | 45%ile | Microsoft | 2026-08-11 |
| CVE-2026-68141 | net/af_iucv: fix NULL deref in afiucv_hs_callback_syn() | MEDIUM | 5.5 | 44%ile | Microsoft | 2026-08-11 |
| CVE-2026-68145 | iomap: fix out-of-bounds bitmap_set() with zero-length range | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-08-11 |
| CVE-2026-68147 | fscrypt: Avoid dynamic allocation in fscrypt_get_devices() | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-08-11 |
| CVE-2026-68149 | fs: preserve ACL_DONT_CACHE state in forget_cached_acl() | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-08-11 |
| CVE-2026-68154 | libceph: reject zero bucket types in crush_decode | MEDIUM | 5.5 | 54%ile | Microsoft | 2026-08-11 |
| CVE-2026-68157 | libceph: guard missing CRUSH type name lookup | MEDIUM | 5.5 | 53%ile | Microsoft | 2026-08-11 |
| CVE-2026-68161 | sctp: close UDP tunnel sockets during netns teardown | MEDIUM | 5.5 | 52%ile | Microsoft | 2026-08-11 |
| CVE-2026-68164 | mm/damon/core: disallow overlapping input ranges for damon_set_regions() | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-08-11 |
| CVE-2026-68175 | tracing: Fix resource leak on mmiotrace trace_pipe close | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-08-11 |
| CVE-2026-68183 | firmware: stratix10-svc: fix memory leaks and list corruption bugs | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-08-11 |
| CVE-2026-68184 | cdrom: fix stack out-of-bounds read in CDROMVOLCTRL | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-08-11 |
| CVE-2026-68194 | wifi: mt76: mt7921: drop TXRX_NOTIFY on non-mmio buses | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-08-11 |
| CVE-2026-68195 | wifi: mt76: mt7615: drop TXRX_NOTIFY on non-mmio buses | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-08-11 |
| CVE-2026-68197 | wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-08-11 |
| CVE-2026-68202 | ALSA: seq: close a re-opened queue timer in the destructor | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-68203 | media: vivid: fix cleanup bugs in vivid_init() | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-08-11 |
| CVE-2026-68205 | media: v4l2-fwnode: Fix subdev owner overwritten in v4l2_async_register_subdev_sensor() | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-08-11 |
| CVE-2026-68206 | media: v4l2-ctrls: validate HEVC active reference counts | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-68215 | media: radio-si476x: Unregister v4l2_device on probe failure | MEDIUM | 5.5 | 13%ile | Microsoft | 2026-08-11 |
| CVE-2026-68216 | media: pwc: Return queued buffers on start_streaming() failure | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-68217 | media: pwc: Drain fill_buf on start_streaming() failure | MEDIUM | 5.5 | 13%ile | Microsoft | 2026-08-11 |
| CVE-2026-68219 | media: nxp: imx8-isi: Fix potential out-of-bounds issues | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-68222 | media: msi2500: Return queued buffers on start_streaming() failure | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-08-11 |
| CVE-2026-68223 | media: meson: vdec: Fix memory leak in error path of vdec_open | MEDIUM | 5.5 | 13%ile | Microsoft | 2026-08-11 |
| CVE-2026-68231 | media: airspy: Return queued buffers on start_streaming() failure | MEDIUM | 5.5 | 13%ile | Microsoft | 2026-08-11 |
| CVE-2026-68242 | drm/i915/gt: Fix NULL deref on sched_engine alloc failure | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-08-11 |
| CVE-2026-68243 | drm/i915/gem: Fix NULL deref in I915_CONTEXT_PARAM_SSEU | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-68246 | drm/amdgpu/gfx11: replace BUG_ON() with WARN_ON() | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-68247 | drm/i915/bios: range check LFP Data Block panel_type2 | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-68249 | drm/amdgpu/sdma5.0: replace BUG_ON() with WARN_ON() | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-68250 | drm/amdgpu/sdma5.2: replace BUG_ON() with WARN_ON() | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-08-11 |
| CVE-2026-68251 | drm/amdgpu/sdma6.0: replace BUG_ON() with WARN_ON() | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-08-11 |
| CVE-2026-68252 | drm/amdgpu/sdma7.0: replace BUG_ON() with WARN_ON() | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-68253 | drm/i915/hdcp: check streams[] bounds before overflow | MEDIUM | 5.5 | 4%ile | Microsoft | 2026-08-11 |
| CVE-2026-68254 | drm/i915/vrr: require valid min/max vfreq for VRR | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-68255 | drm/virtio: bound EDID block reads to the response buffer | MEDIUM | 5.5 | 8%ile | Microsoft | 2026-08-11 |
| CVE-2026-68257 | drm/amdkfd: fix 32-bit overflow in CWSR total size calculation | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-08-11 |
| CVE-2026-68258 | drm/amdkfd: Check bounds on CRIU restore queue type and mqd size | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-08-11 |
| CVE-2026-68259 | drm/amdkfd: Check bounds in allocate_event_notification_slot | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-68271 | drm/nouveau: fix reversed error cleanup order in ucopy functions | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-68272 | drm/amdgpu: validate CP_GFX_SHADOW chunk size in CS pass1 | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-68289 | tipc: fix integer overflow in tipc_recvmsg() and tipc_recvstream() | MEDIUM | 5.5 | 8%ile | Microsoft | 2026-08-11 |
| CVE-2026-68293 | net/mlx5: Fix MCIA register buffer overflow on 32 dword reads | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-08-11 |
| CVE-2026-68297 | tipc: fix u16 MTU truncation in media and bearer MTU validation | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-08-11 |
| CVE-2026-68300 | sctp: auth: verify auth requirement when auth_chunk is NULL | MEDIUM | 5.5 | 48%ile | Microsoft | 2026-08-11 |
| CVE-2026-68303 | drm/vc4: hvs/v3d: Fix null dereference in unbind | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-08-11 |
| CVE-2026-68308 | wifi: mt76: mt7996: check pointer returned by mt76_connac_get_he_phy_cap() | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-08-11 |
| CVE-2026-68313 | tipc: fix infinite loop in __tipc_nl_compat_dumpit | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-08-11 |
| CVE-2026-68322 | rds: Fix inet6_addr_lst NULL dereference when IPv6 is disabled | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-08-11 |
| CVE-2026-68327 | wan: wanxl: Only reset hardware after BAR mapping | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-68328 | nfp: Check resource mutex allocation | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-68331 | dpaa2-eth: put MAC endpoint device on disconnect | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-68333 | dpaa2-switch: put MAC endpoint device on disconnect | MEDIUM | 5.5 | 8%ile | Microsoft | 2026-08-11 |
| CVE-2026-68336 | bonding: fix devconf_all NULL dereference when IPv6 is disabled | MEDIUM | 5.5 | 8%ile | Microsoft | 2026-08-11 |
| CVE-2026-68338 | net/packet: avoid fanout hook re-registration after unregister | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-08-11 |
| CVE-2026-68339 | Bluetooth: btusb: validate Realtek vendor event length | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-08-11 |
| CVE-2026-68367 | usb: gadget: f_tcm: synchronize delayed set_alt with teardown | MEDIUM | 5.5 | 8%ile | Microsoft | 2026-08-11 |
| CVE-2026-68369 | usb: gadget: printer: fix infinite loop in printer_read() | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-08-11 |
| CVE-2026-68370 | usb: gadget: dummy_hcd: prevent fifo_req reuse during giveback | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-08-11 |
| CVE-2026-68374 | usb: core: sysfs: add lock to bos_descriptors_read() | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-68386 | bpf, sockmap: Reject unhashed UDP sockets on sockmap update | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-08-11 |
| CVE-2026-68389 | Bluetooth: hci_qca: Clear memdump state on invalid dump size | MEDIUM | 5.5 | 17%ile | Microsoft | 2026-08-11 |
| CVE-2026-68392 | Bluetooth: mgmt: fix locking in unpair_device/disconnect_sync | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-68396 | scsi: core: wake eh reliably when using scsi_schedule_eh | MEDIUM | 5.5 | 10%ile | Microsoft | 2026-08-11 |
| CVE-2026-68401 | firmware: arm_ffa: Fix out-of-bound writes in ffa_setup_and_transmit() | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-08-11 |
| CVE-2026-68408 | wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-68410 | wifi: libertas: fix memory leak in helper_firmware_cb() | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-08-11 |
| CVE-2026-68412 | wifi: cfg80211: Fix an error handling path in cfg80211_wext_siwscan() | MEDIUM | 5.5 | 10%ile | Microsoft | 2026-08-11 |
| CVE-2026-68418 | RDMA/irdma: Prevent user-triggered null deref on QP create | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-08-11 |
| CVE-2026-68427 | gpu: host1x: Fix use-after-free in host1x_bo_clear_cached_mappings | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-68445 | drm/vc4: Prevent shader BO mappings from becoming writable | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-68452 | s390/zcrypt: Validate length for CCA AES cipher key requests | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-08-11 |
| CVE-2026-72380 | xen/pvcalls: bound backend response req_id before indexing rsp[] | MEDIUM | 5.5 | 34%ile | Microsoft | 2026-08-11 |
| CVE-2026-74273 | cxl/region: Block region delete during region creation | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-08-11 |
| CVE-2026-74337 | bpf: Fix NMI/tracepoint re-entry deadlock on lru locks | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-08-11 |
| CVE-2026-74342 | kernfs: link kn to its parent before the LSM init hook | MEDIUM | 5.5 | 10%ile | Microsoft | 2026-08-11 |
| CVE-2026-74445 | drm/vmwgfx: reject DX_BIND_QUERY without a DX context | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-74453 | drm/vc4: Zero the tile state data array before each BIN job | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-74485 | binfmt_misc: reject a flag character as the field delimiter | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-74592 | ima: Instantiate file_truncate and path_truncate hooks | MEDIUM | 5.5 | 28%ile | Microsoft | 2026-08-11 |
| CVE-2026-74600 | mm/page_table_check: skip special zero mappings | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-74610 | tls: don't leave a full plaintext sk_msg ring unpushed | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-74619 | ovl: don't warn when the mount is completed from another user namespace | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-08-11 |
| CVE-2026-74631 | net: smc: fix splice entry lifetime imbalance in smc_rx_splice | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-08-11 |
| CVE-2026-74653 | serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-08-11 |
| CVE-2026-74654 | serial: 8250_dma: Clear stale RX state on shutdown | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-74667 | net/packet: reset the MAC header on the packet-socket transmit path | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-08-11 |
| CVE-2026-74722 | btrfs: fix memory leak in btrfs_do_encoded_write() | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-74732 | drm/amd/display: Check for tg ops in dce110_set_avmute | MEDIUM | 5.5 | — | Microsoft | 2026-08-11 |
| CVE-2026-74734 | firewire: ohci: fix NULL pointer dereference in ar_context_release | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-08-11 |
| CVE-2026-74736 | net/sched: cls_bpf: reject dev-bound programs bound to a different device | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-08-11 |
| CVE-2026-74747 | ipvs: revalidate ihl to prevent out-of-bounds access | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-74753 | perf: Reject exited events as group leaders | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-80527 | ceph: fix hanging __ceph_get_caps() with stale mds_wanted | MEDIUM | 5.5 | 43%ile | Microsoft | 2026-08-11 |
| CVE-2026-80534 | xfs: fix ilock leak on error in xfs_dq_get_next_id | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-80541 | drm/amdgpu: validate GEM_CREATE domain combinations | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-80549 | s390/vfio_ccw: Move cp cleanup out of not operational | MEDIUM | 5.5 | 8%ile | Microsoft | 2026-08-11 |
| CVE-2026-80550 | s390/vfio_ccw: Fix out of bounds check on CCW array | MEDIUM | 5.5 | 8%ile | Microsoft | 2026-08-11 |
| CVE-2026-80554 | s390/vfio_ccw: Limit the number of channel program segments | MEDIUM | 5.5 | 9%ile | Microsoft | 2026-08-11 |
| CVE-2026-80559 | Input: sur40 - fix input device registration ordering | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-80578 | fbdev: core: Fix pointer desynchronization in fb_io_read() | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-80584 | s390/qeth: validate user buffer length in SNMP and ARP query ioctls | MEDIUM | 5.5 | 9%ile | Microsoft | 2026-08-11 |
| CVE-2026-80590 | inet: frags: strip GSO state from fragments before reassembly | MEDIUM | 5.5 | 48%ile | Microsoft | 2026-08-11 |
| CVE-2026-80611 | ACPI: processor_idle: Mark LPI enter functions as __cpuidle | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-08-11 |
| CVE-2026-80629 | octeontx2-af: npc: Fix size of entry2cntr_map | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-08-11 |
| CVE-2026-80631 | btrfs: lzo: reject compressed segment that overflows the compressed input | MEDIUM | 5.5 | 41%ile | Microsoft | 2026-08-11 |
| CVE-2026-80643 | EDAC/igen6: Fix call trace due to missing release() | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-08-11 |
| CVE-2026-80676 | Drivers: hv: vmbus: use generic driver_override infrastructure | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-08-11 |
| CVE-2026-80678 | i2c: imx: Fix slave registration race and error handling | MEDIUM | 5.5 | 4%ile | Microsoft | 2026-08-11 |
| CVE-2026-80679 | s390/dasd: Fix potential NULL pointer dereference | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-80684 | KVM: s390: pci: Fix NULL dereference on AIBV allocation failure | MEDIUM | 5.5 | 9%ile | Microsoft | 2026-08-11 |
| CVE-2026-80689 | tracing/mmiotrace: Add NULL check for mmio_trace_array in logging functions | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-80691 | scsi: target: iblock: Fix wrong PR ops NULL check for PREEMPT/RELEASE | MEDIUM | 5.5 | 38%ile | Microsoft | 2026-08-11 |
| CVE-2026-80695 | hwmon: (sht3x) Fix unaligned accesses | MEDIUM | 5.5 | 11%ile | Microsoft | 2026-08-11 |
| CVE-2026-80697 | erofs: ensure valid f_path for page cache sharing | MEDIUM | 5.5 | 10%ile | Microsoft | 2026-08-11 |
| CVE-2026-80704 | drm/amd/display: use proper context for logging | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-08-11 |
| CVE-2026-80714 | ipvs: do not propagate one-packet flag to synced conns | MEDIUM | 5.5 | 41%ile | Microsoft | 2026-08-11 |
| CVE-2026-80718 | mm/percpu-km: fix bitmap overflow and accounting in pcpu_create_chunk() | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-54123 | Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability | MEDIUM | 5.5 | 41%ile | Microsoft | 2026-08-11 |
| CVE-2026-55015 | Microsoft Remote Help Denial of Service Vulnerability | MEDIUM | 5.5 | 62%ile | Microsoft | 2026-08-11 |
| CVE-2026-59128 | Windows Encrypting File System (EFS) Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-08-11 |
| CVE-2026-59135 | Microsoft Windows Search Component Information Disclosure Vulnerability | MEDIUM | 5.5 | 29%ile | Microsoft | 2026-08-11 |
| CVE-2026-59136 | Microsoft COM for Windows Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-08-11 |
| CVE-2026-59137 | Windows Event Logging Service Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-08-11 |
| CVE-2026-61347 | Windows Event Logging Service Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-08-11 |
| CVE-2026-61360 | Windows GDI Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-08-11 |
| CVE-2026-61928 | Windows Hello Tampering Vulnerability | MEDIUM | 5.5 | 13%ile | Microsoft | 2026-08-11 |
| CVE-2026-61933 | Windows DWM Core Library Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-08-11 |
| CVE-2026-61936 | Windows Defender Firewall Service Security Feature Bypass Vulnerability | MEDIUM | 5.5 | 23%ile | Microsoft | 2026-08-11 |
| CVE-2026-62703 | Windows DWM Core Library Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-08-11 |
| CVE-2026-62709 | Windows GDI+ Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-08-11 |
| CVE-2026-62730 | Windows Wired AutoConfig Service Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-08-11 |
| CVE-2026-62738 | Windows Management Instrumentation Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-08-11 |
| CVE-2026-62740 | Windows Imaging Component Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-08-11 |
| CVE-2026-62743 | Win32k Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-08-11 |
| CVE-2026-62746 | Win32k Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-08-11 |
| CVE-2026-62775 | Windows Container Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability | MEDIUM | 5.5 | 29%ile | Microsoft | 2026-08-11 |
| CVE-2026-62786 | Win32k Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-08-11 |
| CVE-2026-62793 | Windows NTFS Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-08-11 |
| CVE-2026-62796 | Windows NTFS Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-08-11 |
| CVE-2026-62798 | Win32k Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-08-11 |
| CVE-2026-62842 | Microsoft Office Graphics Component Information Disclosure Vulnerability | MEDIUM | 5.5 | 46%ile | Microsoft | 2026-08-11 |
| CVE-2026-62887 | Windows NTFS Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-08-11 |
| CVE-2026-63517 | Microsoft Office Graphics Component Information Disclosure Vulnerability | MEDIUM | 5.5 | 46%ile | Microsoft | 2026-08-11 |
| CVE-2026-63521 | Microsoft Office Word Information Disclosure Vulnerability | MEDIUM | 5.5 | 38%ile | Microsoft | 2026-08-11 |
| CVE-2026-63524 | Microsoft Office Information Disclosure Vulnerability | MEDIUM | 5.5 | 46%ile | Microsoft | 2026-08-11 |
| CVE-2026-63528 | Microsoft Office Word Information Disclosure Vulnerability | MEDIUM | 5.5 | 46%ile | Microsoft | 2026-08-11 |
| CVE-2026-63529 | Microsoft Office Information Disclosure Vulnerability | MEDIUM | 5.5 | 46%ile | Microsoft | 2026-08-11 |
| CVE-2026-63530 | Microsoft Office Word Information Disclosure Vulnerability | MEDIUM | 5.5 | 46%ile | Microsoft | 2026-08-11 |
| CVE-2026-63531 | Microsoft Office Word Information Disclosure Vulnerability | MEDIUM | 5.5 | 46%ile | Microsoft | 2026-08-11 |
| CVE-2026-64899 | Microsoft Office Information Disclosure Vulnerability | MEDIUM | 5.5 | 46%ile | Microsoft | 2026-08-11 |
| CVE-2026-64917 | Microsoft Office Word Information Disclosure Vulnerability | MEDIUM | 5.5 | 46%ile | Microsoft | 2026-08-11 |
| CVE-2026-65662 | Windows GDI Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-08-11 |
| CVE-2026-65784 | Windows NTFS Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-08-11 |
| CVE-2026-66806 | Microsoft Office Word Information Disclosure Vulnerability | MEDIUM | 5.5 | 38%ile | Microsoft | 2026-08-11 |
| CVE-2026-66809 | Microsoft Office Graphics Component Information Disclosure Vulnerability | MEDIUM | 5.5 | 38%ile | Microsoft | 2026-08-11 |
| CVE-2026-66810 | Microsoft Office Word Information Disclosure Vulnerability | MEDIUM | 5.5 | 38%ile | Microsoft | 2026-08-11 |
| CVE-2026-68797 | Microsoft Excel Information Disclosure Vulnerability | MEDIUM | 5.5 | 46%ile | Microsoft | 2026-08-11 |
| CVE-2026-68799 | Microsoft Excel Information Disclosure Vulnerability | MEDIUM | 5.5 | 46%ile | Microsoft | 2026-08-11 |
| CVE-2026-68802 | Microsoft Excel Information Disclosure Vulnerability | MEDIUM | 5.5 | 46%ile | Microsoft | 2026-08-11 |
| CVE-2026-68808 | Microsoft Excel Information Disclosure Vulnerability | MEDIUM | 5.5 | 46%ile | Microsoft | 2026-08-11 |
| CVE-2026-68809 | Powerpoint Information Disclosure Vulnerability | MEDIUM | 5.5 | 38%ile | Microsoft | 2026-08-11 |
| CVE-2026-68813 | Microsoft Excel Information Disclosure Vulnerability | MEDIUM | 5.5 | 46%ile | Microsoft | 2026-08-11 |
| CVE-2026-70310 | Microsoft Word Information Disclosure Vulnerability | MEDIUM | 5.5 | 38%ile | Microsoft | 2026-08-11 |
| CVE-2026-70312 | Powerpoint Information Disclosure Vulnerability | MEDIUM | 5.5 | 38%ile | Microsoft | 2026-08-11 |
| CVE-2026-70314 | Microsoft Office Information Disclosure Vulnerability | MEDIUM | 5.5 | 46%ile | Microsoft | 2026-08-11 |
| CVE-2026-70315 | Microsoft Office Information Disclosure Vulnerability | MEDIUM | 5.5 | 38%ile | Microsoft | 2026-08-11 |
| CVE-2026-70316 | Powerpoint Information Disclosure Vulnerability | MEDIUM | 5.5 | 38%ile | Microsoft | 2026-08-11 |
| CVE-2026-70317 | Microsoft Office Information Disclosure Vulnerability | MEDIUM | 5.5 | 38%ile | Microsoft | 2026-08-11 |
| CVE-2026-70318 | Microsoft Excel Information Disclosure Vulnerability | MEDIUM | 5.5 | 46%ile | Microsoft | 2026-08-11 |
| CVE-2026-70319 | Microsoft Office Word Information Disclosure Vulnerability | MEDIUM | 5.5 | 38%ile | Microsoft | 2026-08-11 |
| CVE-2026-70320 | Powerpoint Information Disclosure Vulnerability | MEDIUM | 5.5 | 38%ile | Microsoft | 2026-08-11 |
| CVE-2026-70322 | Powerpoint Information Disclosure Vulnerability | MEDIUM | 5.5 | 38%ile | Microsoft | 2026-08-11 |
| CVE-2026-70323 | Microsoft Office Information Disclosure Vulnerability | MEDIUM | 5.5 | 38%ile | Microsoft | 2026-08-11 |
| CVE-2026-70325 | Powerpoint Information Disclosure Vulnerability | MEDIUM | 5.5 | 38%ile | Microsoft | 2026-08-11 |
| CVE-2026-70348 | Windows Management Services Denial of Service Vulnerability | MEDIUM | 5.5 | 39%ile | Microsoft | 2026-08-11 |
| CVE-2026-72971 | Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering Vulnerability | MEDIUM | 5.5 | 30%ile | Microsoft | 2026-08-11 |
| CVE-2026-12570 | Denial of Service via HDF5 Shape Bomb in keras.models.load_model() in keras-team/keras | MEDIUM | 5.5 | 9%ile | Microsoft | 2026-08-11 |
| CVE-2026-68454 | KVM: s390: pci: Fix handling of AIF enable without AISB | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-08-11 |
| CVE-2026-70367 | Stunnel: ssrf bypass in stunnel socks proxy via ipv4-mapped ipv6 loopback and unspecified addresses allows access to loo | MEDIUM | 5.4 | 5%ile | Microsoft | 2026-08-11 |
| CVE-2026-74598 | ipv6: fix Route Information option length validation | MEDIUM | 5.4 | 37%ile | Microsoft | 2026-08-11 |
| CVE-2026-62904 | Microsoft Edge (Chromium-based) Information Disclosure Vulnerability | MEDIUM | 5.4 | 33%ile | Microsoft | 2026-08-11 |
| CVE-2026-66323 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | MEDIUM | 5.4 | 36%ile | Microsoft | 2026-08-11 |
| CVE-2026-70309 | Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability | MEDIUM | 5.4 | 11%ile | Microsoft | 2026-08-11 |
| CVE-2026-70331 | Microsoft Edge for iOS Spoofing Vulnerability | MEDIUM | 5.4 | 36%ile | Microsoft | 2026-08-11 |
| CVE-2026-70339 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | MEDIUM | 5.4 | 36%ile | Microsoft | 2026-08-11 |
| CVE-2026-74651 | staging: rtl8723bs: fix OOB read in rtw_get_wpa_ie() | MEDIUM | 5.4 | 20%ile | Microsoft | 2026-08-11 |
| CVE-2022-4996 | mruby bigint.c udiv floating point comparison with incorrect operator | MEDIUM | 5.3 | 50%ile | Microsoft | 2026-08-11 |
| CVE-2026-14672 | PostgreSQL observable response discrepancy with non-default scram_iterations provides user existence oracle | MEDIUM | 5.3 | 34%ile | Microsoft | 2026-08-11 |
| CVE-2026-19487 | Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends | MEDIUM | 5.3 | 36%ile | Microsoft | 2026-08-11 |
| CVE-2026-32327 | Apache Portable Runtime Utility: apr-util XML stack recursion crash | MEDIUM | 5.3 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-37236 | grpc-gateway v2.28.0 is vulnerable to Incorrect Access Control. The application processes the X-HTTP-Method-Override hea | MEDIUM | 5.3 | 38%ile | Microsoft | 2026-08-11 |
| CVE-2026-53794 | rsync < 3.5.0 Denial of Service via --max-alloc=0 Logic Error | MEDIUM | 5.3 | 43%ile | Microsoft | 2026-08-11 |
| CVE-2026-53798 | rsync < 3.5.0 Privilege Confusion via name-converter uid/gid mapping | MEDIUM | 5.3 | 37%ile | Microsoft | 2026-08-11 |
| CVE-2026-55619 | eml_parser: Parser DoS via deeply nested parentheses in e-mail headers | MEDIUM | 5.3 | 44%ile | Microsoft | 2026-08-11 |
| CVE-2026-65959 | Vitess: Missing authorization on vttablet /debug/vrlog exposes live VReplication SQL data | MEDIUM | 5.3 | 35%ile | Microsoft | 2026-08-11 |
| CVE-2026-68118 | tcp: challenge ACK for non-exact RST in SYN-RECEIVED | MEDIUM | 5.3 | 35%ile | Microsoft | 2026-08-11 |
| CVE-2026-68156 | libceph: refresh auth->authorizer_buf{,_len} after authorizer update | MEDIUM | 5.3 | 53%ile | Microsoft | 2026-08-11 |
| CVE-2026-68315 | sctp: validate stream count in sctp_process_strreset_inreq() | MEDIUM | 5.3 | 44%ile | Microsoft | 2026-08-11 |
| CVE-2026-68343 | smb: client: validate DFS referral PathConsumed | MEDIUM | 5.3 | 44%ile | Microsoft | 2026-08-11 |
| CVE-2026-68432 | vxlan: require CAP_NET_ADMIN in the device netns for changelink | MEDIUM | 5.3 | 4%ile | Microsoft | 2026-08-11 |
| CVE-2026-70459 | rsync 3.0.0 < 3.5.0 Daemon Crash via Malformed File List Entry | MEDIUM | 5.3 | 54%ile | Microsoft | 2026-08-11 |
| CVE-2026-71218 | Iperf3: unbounded peer-controlled allocation in iperf3 json_read() allows unauthenticated remote memory exhaustion | MEDIUM | 5.3 | 32%ile | Microsoft | 2026-08-11 |
| CVE-2026-72854 | msgpack-c Integer Overflow in msgpack_unpacker_expand_buffer Causes a False-Success Undersized Reservation | MEDIUM | 5.3 | 5%ile | Microsoft | 2026-08-11 |
| CVE-2026-74540 | Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp | MEDIUM | 5.3 | 17%ile | Microsoft | 2026-08-11 |
| CVE-2026-74608 | smb: client: Fix use-after-free in cifs_try_adding_channels() | MEDIUM | 5.3 | 41%ile | Microsoft | 2026-08-11 |
| CVE-2026-74626 | NTB: ntb_netdev: Preserve RX queue depth on allocation failure | MEDIUM | 5.3 | 43%ile | Microsoft | 2026-08-11 |
| CVE-2026-74646 | misc: fastrpc: take fl->lock when moving mmaps on interrupted invoke | MEDIUM | 5.3 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-74695 | netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref() | MEDIUM | 5.3 | 41%ile | Microsoft | 2026-08-11 |
| CVE-2026-74720 | bpf: Preserve pointer state for commuted arithmetic | MEDIUM | 5.3 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-74737 | net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG | MEDIUM | 5.3 | 46%ile | Microsoft | 2026-08-11 |
| CVE-2026-77014 | Libsoup: libsoup: integer truncation in sort_ranges() comparator causes silent omission of http range responses | MEDIUM | 5.3 | 14%ile | Microsoft | 2026-08-11 |
| CVE-2026-80586 | mptcp: options: reset DSS fields in case of unexpected size | MEDIUM | 5.3 | 34%ile | Microsoft | 2026-08-11 |
| CVE-2026-80587 | mptcp: avoid combining some incoming suboptions | MEDIUM | 5.3 | 36%ile | Microsoft | 2026-08-11 |
| CVE-2026-80717 | sctp: validate Adaptation Indication parameter length | MEDIUM | 5.3 | 26%ile | Microsoft | 2026-08-11 |
| CVE-2026-62757 | Windows Schannel Security Feature Bypass Vulnerability | MEDIUM | 5.3 | 28%ile | Microsoft | 2026-08-11 |
| CVE-2026-65777 | Active Directory Security Feature Bypass Vulnerability | MEDIUM | 5.3 | 30%ile | Microsoft | 2026-08-11 |
| CVE-2026-72131 | nvme-apple: Prevent shared tags across queues on Apple A11 | MEDIUM | 5.3 | 12%ile | Microsoft | 2026-08-11 |
| CVE-2026-52492 | An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster() function when computing strip buffer sizes can result | MEDIUM | 5.3 | 8%ile | Microsoft | 2026-08-11 |
| CVE-2026-82417 | qs.stringify throws TypeError on objects with a non-callable constructor.isBuffer property | MEDIUM | 5.3 | 34%ile | Microsoft | 2026-08-11 |
| CVE-2026-74609 | tipc: read le->link under the node lock in tipc_node_link_down() | MEDIUM | 5.2 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-74662 | inet: frags: publish queues before arming timer | MEDIUM | 5.2 | 44%ile | Microsoft | 2026-08-11 |
| CVE-2026-74672 | mm/vmalloc: acquire init_mm lock on huge vmap to avoid ptdump UAF | MEDIUM | 5.2 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-74690 | s390/ism: Fix UAF of sba and ieq during ism_dev_exit() | MEDIUM | 5.2 | 9%ile | Microsoft | 2026-08-11 |
| CVE-2026-74700 | net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers | MEDIUM | 5.2 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-64581 | xfrm: fix sk_dst_cache double-free in xfrm_user_policy() | MEDIUM | 5.1 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-71227 | Libkcapi: infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout retu | MEDIUM | 5.1 | 9%ile | Microsoft | 2026-08-11 |
| CVE-2026-74612 | veth: fix skb length accounting after XDP frag adjustment | MEDIUM | 5.1 | 42%ile | Microsoft | 2026-08-11 |
| CVE-2026-74723 | btrfs: lzo: reject inline extents without valid headers | MEDIUM | 5.1 | 42%ile | Microsoft | 2026-08-11 |
| CVE-2026-68151 | binfmt_elf_fdpic: only honour the first PT_INTERP | MEDIUM | 5.0 | 8%ile | Microsoft | 2026-08-11 |
| CVE-2026-61368 | Windows Hyper-V Information Disclosure Vulnerability | MEDIUM | 5.0 | 37%ile | Microsoft | 2026-08-11 |
| CVE-2026-74501 | ALSA: usb-audio: fix use-after-free in ump_to_endpoint() | MEDIUM | 4.9 | 6%ile | Microsoft | 2026-08-11 |
| CVE-2026-76957 | libexpat before 2.8.4 lacks handler call depth tracking with custom encoding callbacks. Thus, a use-after-free can occur | MEDIUM | 4.9 | 1%ile | Microsoft | 2026-08-11 |
| CVE-2026-68409 | wifi: mac80211: defer link RX stats percpu free to RCU | MEDIUM | 4.8 | 17%ile | Microsoft | 2026-08-11 |
| CVE-2026-73282 | In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operat | MEDIUM | 4.8 | 6%ile | Microsoft | 2026-08-11 |
| CVE-2026-53797 | rsync < 3.5.0 Symlink Race Condition Information Disclosure | MEDIUM | 4.7 | 4%ile | Microsoft | 2026-08-11 |
| CVE-2026-53800 | rsync < 3.5.0 Symlink Race Condition via --remove-source-files | MEDIUM | 4.7 | 3%ile | Microsoft | 2026-08-11 |
| CVE-2026-64572 | ipv4: fib: free fib_alias with kfree_rcu() on insert error path | MEDIUM | 4.7 | 10%ile | Microsoft | 2026-08-11 |
| CVE-2026-68148 | fscrypt: Add missing superblock check in find_or_insert_direct_key() | MEDIUM | 4.7 | 0%ile | Microsoft | 2026-08-11 |
| CVE-2026-68169 | mptcp: pm: userspace: fix use-after-free in get_local_id | MEDIUM | 4.7 | 11%ile | Microsoft | 2026-08-11 |
| CVE-2026-68189 | Bluetooth: hci_sync: Protect UUID list traversal | MEDIUM | 4.7 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-68233 | drm/vc4: Shut down BO cache timer before teardown | MEDIUM | 4.7 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-68245 | drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() | MEDIUM | 4.7 | 3%ile | Microsoft | 2026-08-11 |
| CVE-2026-68362 | wifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_begin | MEDIUM | 4.7 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-68398 | ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF | MEDIUM | 4.7 | 14%ile | Microsoft | 2026-08-11 |
| CVE-2026-68404 | wifi: cfg80211: use wiphy work for socket owner autodisconnect | MEDIUM | 4.7 | 6%ile | Microsoft | 2026-08-11 |
| CVE-2026-68405 | wifi: mac80211: free AP_VLAN bc_buf SKBs outside IRQ lock | MEDIUM | 4.7 | 13%ile | Microsoft | 2026-08-11 |
| CVE-2026-68426 | xfrm: fix stale skb->prev after async crypto steals a GSO segment | MEDIUM | 4.7 | 34%ile | Microsoft | 2026-08-11 |
| CVE-2026-68447 | drm/amdkfd: clamp v9 CRIU control stack checkpoint copy to BO size | MEDIUM | 4.7 | 5%ile | Microsoft | 2026-08-11 |
| CVE-2026-68448 | ovl: check access to copy_file_range source with src mounter creds | MEDIUM | 4.7 | 5%ile | Microsoft | 2026-08-11 |
| CVE-2026-71497 | jsoup: Cleaner may expose markup with custom raw-text elements | MEDIUM | 4.7 | 22%ile | Microsoft | 2026-08-11 |
| CVE-2026-72203 | ntfs: skip extent mft records in writeback to prevent deadlock | MEDIUM | 4.7 | 50%ile | Microsoft | 2026-08-11 |
| CVE-2026-72341 | net/mlx5e: Fix publication race for priv->channel_stats[] | MEDIUM | 4.7 | 12%ile | Microsoft | 2026-08-11 |
| CVE-2026-72472 | nfs: use nfsi->rwsem to protect traversal of the file lock list | MEDIUM | 4.7 | 51%ile | Microsoft | 2026-08-11 |
| CVE-2026-74318 | btrfs: fix deadlock cloning inline extent when using flushoncommit | MEDIUM | 4.7 | 12%ile | Microsoft | 2026-08-11 |
| CVE-2026-74493 | net/smc: fix socket use-after-free during link group termination | MEDIUM | 4.7 | 43%ile | Microsoft | 2026-08-11 |
| CVE-2026-74546 | hwmon: (adt7470) Fix divide-by-zero TOCTOU crash in fan speed read | MEDIUM | 4.7 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-74552 | hwmon: (lm90) Only report alarms if driver is ready | MEDIUM | 4.7 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-74565 | netfilter: nf_tables: make nft_object rhltable per table | MEDIUM | 4.7 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-74572 | btrfs: zoned: fix deadlock between metadata writeback and transaction commit | MEDIUM | 4.7 | 28%ile | Microsoft | 2026-08-11 |
| CVE-2026-74594 | sched/psi: Shut down rtpoll_timer in psi_cgroup_free() | MEDIUM | 4.7 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-74613 | vsock/virtio: avoid refilling the RX queue after teardown | MEDIUM | 4.7 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-74614 | vsock/virtio: read virtqueues under worker locks | MEDIUM | 4.7 | 4%ile | Microsoft | 2026-08-11 |
| CVE-2026-74628 | net/x25: fix use-after-free of the socket by its timers | MEDIUM | 4.7 | 43%ile | Microsoft | 2026-08-11 |
| CVE-2026-74632 | mm/huge_memory: fix huge_zero_pfn race | MEDIUM | 4.7 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-74638 | drm/v3d: Serialize the scheduler timeout handlers | MEDIUM | 4.7 | 6%ile | Microsoft | 2026-08-11 |
| CVE-2026-74675 | vt: stabilize tty reference in kbd_keycode with tty_port_tty_get | MEDIUM | 4.7 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-74683 | Input: evdev - sanitize event type index when fetching event masks | MEDIUM | 4.7 | 9%ile | Microsoft | 2026-08-11 |
| CVE-2026-74714 | bpf: tcp: Fix use-after-free in bpf_iter_tcp_established_batch() | MEDIUM | 4.7 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-74726 | bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor | MEDIUM | 4.7 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-74744 | ipvlan: inherit needed_headroom and needed_tailroom from phy_dev | MEDIUM | 4.7 | 44%ile | Microsoft | 2026-08-11 |
| CVE-2026-80521 | af_unix: Unlink scc_entry in unix_del_edge(). | MEDIUM | 4.7 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-80528 | ceph: avoid fs reclaim while using current->journal_info | MEDIUM | 4.7 | 44%ile | Microsoft | 2026-08-11 |
| CVE-2026-80556 | mmc: atmel-mci: Fix use-after-free in atmci_remove due to race condition | MEDIUM | 4.7 | 6%ile | Microsoft | 2026-08-11 |
| CVE-2026-80570 | Input: synaptics-rmi4 - zero report size on F54 work error | MEDIUM | 4.7 | 3%ile | Microsoft | 2026-08-11 |
| CVE-2026-80572 | Input: byd - synchronize timer deletion before freeing private data | MEDIUM | 4.7 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-80589 | block: stop the timeout timer when releasing a never added disk | MEDIUM | 4.7 | 31%ile | Microsoft | 2026-08-11 |
| CVE-2026-80692 | Bluetooth: hci_sync: hold conn in hci_connect_acl/le_sync() callbacks | MEDIUM | 4.7 | 34%ile | Microsoft | 2026-08-11 |
| CVE-2026-81893 | Gdk-pixbuf: gdk-pixbuf: invalid write in jpeg icc profile parser on error recovery | MEDIUM | 4.7 | 4%ile | Microsoft | 2026-08-11 |
| CVE-2026-68241 | drm/i915/mst: limit DP MST ESI service loop | MEDIUM | 4.6 | 11%ile | Microsoft | 2026-08-11 |
| CVE-2026-68278 | drm/dp/mst: fix buffer overflows in sideband chunk accumulation | MEDIUM | 4.6 | 15%ile | Microsoft | 2026-08-11 |
| CVE-2026-80569 | Input: synaptics-rmi4 - bound the F54 report size to the allocated buffer | MEDIUM | 4.6 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-61350 | Windows NTFS Information Disclosure Vulnerability | MEDIUM | 4.6 | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-62829 | Microsoft SharePoint Server Spoofing Vulnerability | MEDIUM | 4.6 | 41%ile | Microsoft | 2026-08-11 |
| CVE-2026-62917 | Microsoft SharePoint Server Spoofing Vulnerability | MEDIUM | 4.6 | 48%ile | Microsoft | 2026-08-11 |
| CVE-2026-64897 | Microsoft SharePoint Server Spoofing Vulnerability | MEDIUM | 4.6 | 48%ile | Microsoft | 2026-08-11 |
| CVE-2026-64902 | Microsoft SharePoint Server Spoofing Vulnerability | MEDIUM | 4.6 | 48%ile | Microsoft | 2026-08-11 |
| CVE-2026-64916 | Microsoft SharePoint Server Spoofing Vulnerability | MEDIUM | 4.6 | 48%ile | Microsoft | 2026-08-11 |
| CVE-2026-64922 | Microsoft SharePoint Server Spoofing Vulnerability | MEDIUM | 4.6 | 48%ile | Microsoft | 2026-08-11 |
| CVE-2026-74585 | thunderbolt: Bound the DROM dual link port number before indexing sw->ports | MEDIUM | 4.6 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-13002 | Dnsmasq: infinite loop dos in dnssec nsec/nsec3 type bitmap parsing | MEDIUM | 4.4 | — | Microsoft | 2026-08-11 |
| CVE-2026-18477 | Tar: tar: toctou in incremental dumpdir 'x' rename handling allows restore path escape | MEDIUM | 4.4 | 0%ile | Microsoft | 2026-08-11 |
| CVE-2026-18508 | Tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite | MEDIUM | 4.4 | 3%ile | Microsoft | 2026-08-11 |
| CVE-2026-64567 | btrfs: reject free space cache with more entries than pages | MEDIUM | 4.4 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-68103 | drm/amdgpu: reject mapping a reserved doorbell to a new queue | MEDIUM | 4.4 | 4%ile | Microsoft | 2026-08-11 |
| CVE-2026-68388 | smb/client: handle overlapping allocated ranges in fallocate | MEDIUM | 4.4 | 44%ile | Microsoft | 2026-08-11 |
| CVE-2026-68419 | RDMA/irdma: Prevent rereg_mr for non-mem regions | MEDIUM | 4.4 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-68441 | net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains | MEDIUM | 4.4 | 6%ile | Microsoft | 2026-08-11 |
| CVE-2026-72402 | bpf: Mask pseudo pointer values in verifier logs | MEDIUM | 4.4 | 11%ile | Microsoft | 2026-08-11 |
| CVE-2026-74258 | bpf: Guard __get_user acesss with access_ok for uprobe_multi data | MEDIUM | 4.4 | 6%ile | Microsoft | 2026-08-11 |
| CVE-2026-74269 | bnxt: fix head underflow on XDP head-grow | MEDIUM | 4.4 | 54%ile | Microsoft | 2026-08-11 |
| CVE-2026-74481 | mm/page_reporting: use system_freezable_wq to fix UAF during suspend | MEDIUM | 4.4 | 3%ile | Microsoft | 2026-08-11 |
| CVE-2026-74547 | hwmon: (adt7470) Fix busy-loop and I2C flooding in update thread | MEDIUM | 4.4 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-74566 | keys: make keyring key-chunk byte order agree with keyring_diff_objects() | MEDIUM | 4.4 | 6%ile | Microsoft | 2026-08-11 |
| CVE-2026-74581 | net: ipv6: clear suppressed fib6 rule result | MEDIUM | 4.4 | 36%ile | Microsoft | 2026-08-11 |
| CVE-2026-74615 | vxlan: do not arm the ageing timer on a device that is down | MEDIUM | 4.4 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-74620 | net/sched: act_gact, act_police: range check the fallback control action | MEDIUM | 4.4 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-74622 | net: atlantic: free RX pages of consumed but not refilled buffers | MEDIUM | 4.4 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-74623 | net: atlantic: free stranded TX buffers on ring deinit | MEDIUM | 4.4 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-74657 | ipv4: Fix fib_nlmsg_size() for RTA_VIA nexthops | MEDIUM | 4.4 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-74663 | net/sched: reject overly deep qdisc hierarchies | MEDIUM | 4.4 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-74664 | net: openvswitch: reallocate update replies for mismatched IDs | MEDIUM | 4.4 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-74684 | net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp() | MEDIUM | 4.4 | 4%ile | Microsoft | 2026-08-11 |
| CVE-2026-74689 | net/atm: fix slab-out-of-bounds read in vcc_setsockopt() | MEDIUM | 4.4 | 3%ile | Microsoft | 2026-08-11 |
| CVE-2026-74693 | net: prestera: validate firmware header length | MEDIUM | 4.4 | 12%ile | Microsoft | 2026-08-11 |
| CVE-2026-74694 | net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length | MEDIUM | 4.4 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-74701 | net/openvswitch: check Ethernet header length in key_extract() | MEDIUM | 4.4 | 3%ile | Microsoft | 2026-08-11 |
| CVE-2026-74713 | vhost_iotlb: bound map allocation in add_range | MEDIUM | 4.4 | 3%ile | Microsoft | 2026-08-11 |
| CVE-2026-74718 | devlink: fix net namespace reference leak in reload | MEDIUM | 4.4 | 6%ile | Microsoft | 2026-08-11 |
| CVE-2026-80526 | ASoC: tas2562: Validate values for volume writes | MEDIUM | 4.4 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-80567 | Input: synaptics-rmi4 - propagate F54 worker errors to V4L2 queue | MEDIUM | 4.4 | 6%ile | Microsoft | 2026-08-11 |
| CVE-2026-80703 | drm/amdkfd: Fix missing authorization check in KFD_IOC_DBG_TRAP_DISABLE | MEDIUM | 4.4 | 5%ile | Microsoft | 2026-08-11 |
| CVE-2026-58616 | Copilot Chat (Microsoft Edge) Information Disclosure Vulnerability | MEDIUM | 4.4 | 22%ile | Microsoft | 2026-08-11 |
| CVE-2026-14678 | PostgreSQL pg_trgm picksplit reads past end of buffer | MEDIUM | 4.3 | 23%ile | Microsoft | 2026-08-11 |
| CVE-2026-18024 | PostgreSQL ascii() function reads past end of buffer | MEDIUM | 4.3 | 23%ile | Microsoft | 2026-08-11 |
| CVE-2026-53584 | libgit2: Submodule path traversal | MEDIUM | 4.3 | 26%ile | Microsoft | 2026-08-11 |
| CVE-2026-6470 | PostgreSQL fails to check type USAGE privilege | MEDIUM | 4.3 | 26%ile | Microsoft | 2026-08-11 |
| CVE-2026-68099 | ksmbd: restore DACL size on check_add_overflow() to avoid malformed ACL | MEDIUM | 4.3 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-68100 | ksmbd: validate num_subauth when copying ACE in set_ntacl_dacl | MEDIUM | 4.3 | 38%ile | Microsoft | 2026-08-11 |
| CVE-2026-68190 | staging: rtl8723bs: fix OOB reads in rtw_get_wps_ie() | MEDIUM | 4.3 | 11%ile | Microsoft | 2026-08-11 |
| CVE-2026-68235 | drm/amd/display: dce100: skip non-DP stream encoders for DP MST | MEDIUM | 4.3 | 10%ile | Microsoft | 2026-08-11 |
| CVE-2026-68425 | IB/mad: Drop unmatched RMPP responses before reassembly | MEDIUM | 4.3 | 18%ile | Microsoft | 2026-08-11 |
| CVE-2026-74460 | can: ems_usb: validate CPC message lengths | MEDIUM | 4.3 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-74497 | ALSA: usb-audio: Clamp frame size in implicit-feedback mode | MEDIUM | 4.3 | 4%ile | Microsoft | 2026-08-11 |
| CVE-2026-74508 | Bluetooth: HIDP: reject frames without a transaction header | MEDIUM | 4.3 | 18%ile | Microsoft | 2026-08-11 |
| CVE-2026-74557 | scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer | MEDIUM | 4.3 | 26%ile | Microsoft | 2026-08-11 |
| CVE-2026-74650 | staging: rtl8723bs: fix OOB read in WMM_param_handler() | MEDIUM | 4.3 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-80574 | Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet | MEDIUM | 4.3 | 3%ile | Microsoft | 2026-08-11 |
| CVE-2026-62882 | Microsoft Outlook Spoofing Vulnerability | MEDIUM | 4.3 | 52%ile | Microsoft | 2026-08-11 |
| CVE-2026-66798 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | MEDIUM | 4.3 | 56%ile | Microsoft | 2026-08-11 |
| CVE-2026-14666 | PostgreSQL row security caching disregards role modifications | MEDIUM | 4.2 | 11%ile | Microsoft | 2026-08-11 |
| CVE-2026-74677 | net: usb: ipheth: fix carrier_work UAF on disconnect | MEDIUM | 4.2 | 6%ile | Microsoft | 2026-08-11 |
| CVE-2026-64574 | wifi: mac80211: tear down new links on vif update error path | MEDIUM | 4.1 | 5%ile | Microsoft | 2026-08-11 |
| CVE-2026-64576 | nexthop: initialize extack in nh_res_bucket_migrate() | MEDIUM | 4.1 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-64579 | xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert | MEDIUM | 4.1 | 6%ile | Microsoft | 2026-08-11 |
| CVE-2026-64580 | xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() | MEDIUM | 4.1 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-68105 | drm/amdgpu: Fix kernel panic during driver load failure | MEDIUM | 4.1 | 6%ile | Microsoft | 2026-08-11 |
| CVE-2026-68126 | mac802154: hold an interface reference across the scan worker | MEDIUM | 4.1 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-68192 | wifi: brcmfmac: make release_scratchbuffers idempotent | MEDIUM | 4.1 | 35%ile | Microsoft | 2026-08-11 |
| CVE-2026-68317 | pds_core: fix auxiliary device add/del races | MEDIUM | 4.1 | 6%ile | Microsoft | 2026-08-11 |
| CVE-2026-68428 | KVM: x86/mmu: Fix use-after-free on vendor module reload | MEDIUM | 4.1 | 6%ile | Microsoft | 2026-08-11 |
| CVE-2026-68430 | drm/amdgpu/gfx8: drop unecessary BUG_ON() | MEDIUM | 4.1 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-68436 | drm/amd/display: use kvzalloc to allocate struct dc | MEDIUM | 4.1 | 5%ile | Microsoft | 2026-08-11 |
| CVE-2026-68444 | firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get() | MEDIUM | 4.1 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-72325 | perf/x86/amd/core: Avoid enabling BRS from the SVM reload path | MEDIUM | 4.1 | 12%ile | Microsoft | 2026-08-11 |
| CVE-2026-72392 | ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump | MEDIUM | 4.1 | 12%ile | Microsoft | 2026-08-11 |
| CVE-2026-72405 | net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync | MEDIUM | 4.1 | 3%ile | Microsoft | 2026-08-11 |
| CVE-2026-72420 | md/raid5: avoid R5_Overlap races while breaking stripe batches | MEDIUM | 4.1 | 51%ile | Microsoft | 2026-08-11 |
| CVE-2026-72434 | netfilter: ipset: make sure gc is properly stopped | MEDIUM | 4.1 | 6%ile | Microsoft | 2026-08-11 |
| CVE-2026-72440 | md/raid1: fix writes_pending and barrier reference leaks on write failures | MEDIUM | 4.1 | 43%ile | Microsoft | 2026-08-11 |
| CVE-2026-72493 | net: serialize netif_running() check in enqueue_to_backlog() | MEDIUM | 4.1 | 35%ile | Microsoft | 2026-08-11 |
| CVE-2026-72496 | RDMA/bnxt_re: Proper rollback if the ioremap fails | MEDIUM | 4.1 | 3%ile | Microsoft | 2026-08-11 |
| CVE-2026-74264 | net: watchdog: fix refcount tracking races | MEDIUM | 4.1 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-74307 | ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT | MEDIUM | 4.1 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-74374 | md/raid1,raid10: fix error-path detection with md_cloned_bio() | MEDIUM | 4.1 | 50%ile | Microsoft | 2026-08-11 |
| CVE-2026-74375 | md/raid1,raid10: fix deadlock in read error recovery path | MEDIUM | 4.1 | 6%ile | Microsoft | 2026-08-11 |
| CVE-2026-74405 | OPP: Fix race between OPP addition and lookup | MEDIUM | 4.1 | 3%ile | Microsoft | 2026-08-11 |
| CVE-2026-74461 | i2c: imx: Cancel hrtimer before clearing slave pointer | MEDIUM | 4.1 | 3%ile | Microsoft | 2026-08-11 |
| CVE-2026-74470 | scsi: scsi_debug: Fix REPORT ZONES alloc_len underflow OOB write | MEDIUM | 4.1 | 3%ile | Microsoft | 2026-08-11 |
| CVE-2026-74471 | tracing: Check return value of __register_event() in trace_module_add_events() | MEDIUM | 4.1 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-74476 | veth: convert frag_list skbs before running XDP | MEDIUM | 4.1 | 42%ile | Microsoft | 2026-08-11 |
| CVE-2026-74492 | netfilter: ipset: do not update comments from kernel-side hash adds | MEDIUM | 4.1 | 4%ile | Microsoft | 2026-08-11 |
| CVE-2026-74507 | Bluetooth: HIDP: validate numbered report payloads | MEDIUM | 4.1 | 15%ile | Microsoft | 2026-08-11 |
| CVE-2026-74523 | qede: sync udp_tunnel ports outside qede_lock in the recovery path | MEDIUM | 4.1 | 43%ile | Microsoft | 2026-08-11 |
| CVE-2026-74571 | btrfs: skip global block reserve accounting for rescue mounts | MEDIUM | 4.1 | 12%ile | Microsoft | 2026-08-11 |
| CVE-2026-74583 | net/sched: cls_route: fix fastmap use-after-free on filter | MEDIUM | 4.1 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-74589 | bpf, sockmap: Fix sk_redir use-after-free in send verdict | MEDIUM | 4.1 | 3%ile | Microsoft | 2026-08-11 |
| CVE-2026-74601 | ring-buffer: Use current_context for safe per-CPU buffer swap | MEDIUM | 4.1 | 3%ile | Microsoft | 2026-08-11 |
| CVE-2026-74604 | Revert "thermal/drivers/hwmon: Cleanup coding style a bit" | MEDIUM | 4.1 | 3%ile | Microsoft | 2026-08-11 |
| CVE-2026-74605 | eventfs: Use children field for rcu head and add memory barriers | MEDIUM | 4.1 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-74606 | eventfs: Fix use-after-free in eventfs_remove_rec() | MEDIUM | 4.1 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-74636 | tracing: Fix race between update_event_fields and, event_define_fields | MEDIUM | 4.1 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-74637 | perf/core: Fix group leader use-after-free after sibling detach | MEDIUM | 4.1 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-74656 | ipv4: fix use-after-free in fib_nhc_update_mtu() | MEDIUM | 4.1 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-74661 | mac802154: fix netdev use-after-free in beacon worker | MEDIUM | 4.1 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-74666 | packet: synchronize pressure clearing with ring reconfiguration | MEDIUM | 4.1 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-74687 | watchdog: at91sam9_wdt: prevent timer rearm during teardown | MEDIUM | 4.1 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-74717 | net/mlx5: fw_tracer, return NULL on create error | MEDIUM | 4.1 | 43%ile | Microsoft | 2026-08-11 |
| CVE-2026-74725 | enic: fix tx_hang_reset use-after-free on device removal | MEDIUM | 4.1 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-74740 | net/sched: act_api: fix TOCTOU NULL deref on a->goto_chain | MEDIUM | 4.1 | 8%ile | Microsoft | 2026-08-11 |
| CVE-2026-74748 | netfilter: ipset: fix refcount race between list:set GC and swap | MEDIUM | 4.1 | 3%ile | Microsoft | 2026-08-11 |
| CVE-2026-80553 | s390/vfio_ccw: Cancel existing workqueues | MEDIUM | 4.1 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-19411 | Shim/dp.c library: null-pointer dereference in is_removable_media_path() when devicepathtostr() returns null | LOW | 3.9 | 3%ile | Microsoft | 2026-08-11 |
| CVE-2026-14673 | PostgreSQL amcheck does not clear untrusted search path | LOW | 3.8 | 19%ile | Microsoft | 2026-08-11 |
| CVE-2026-6469 | PostgreSQL ALTER TABLE ALTER TYPE resets extended statistics ownership | LOW | 3.8 | 25%ile | Microsoft | 2026-08-11 |
| CVE-2026-74456 | can: peak_usb: peak_usb_start(): fix double free of transfer buffer on URB submit error | LOW | 3.8 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-60589 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE | LOW | 3.7 | 18%ile | Microsoft | 2026-08-11 |
| CVE-2026-68376 | sctp: fix auth_hmacs array size in struct sctp_cookie | LOW | 3.7 | 49%ile | Microsoft | 2026-08-11 |
| CVE-2026-68433 | libceph: bound get_version reply decode to front len | LOW | 3.7 | 30%ile | Microsoft | 2026-08-11 |
| CVE-2026-74268 | tcp: clear sock_ops cb flags before force-closing a child socket | LOW | 3.7 | 54%ile | Microsoft | 2026-08-11 |
| CVE-2026-74475 | vxlan: use neigh_ha_snapshot() in route_shortcircuit() | LOW | 3.7 | 39%ile | Microsoft | 2026-08-11 |
| CVE-2026-74719 | net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler() | LOW | 3.7 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-80585 | mptcp: fastopen: only mark MPTFO subflows with SYN data | LOW | 3.7 | 24%ile | Microsoft | 2026-08-11 |
| CVE-2026-68117 | tipc: clear sock->sk on the failed-insert path in tipc_sk_create() | LOW | 3.6 | 44%ile | Microsoft | 2026-08-11 |
| CVE-2026-80628 | ALSA: seq: oss: Serialize readq reset state with q->lock | LOW | 3.6 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-73281 | In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, includi | LOW | 3.5 | 5%ile | Microsoft | 2026-08-11 |
| CVE-2026-74711 | hwmon: (pmbus) Fix type confusion in notification logic | LOW | 3.5 | 9%ile | Microsoft | 2026-08-11 |
| CVE-2026-80566 | Input: hynitron_cstxxx - validate touch count and finger IDs | LOW | 3.5 | 5%ile | Microsoft | 2026-08-11 |
| CVE-2026-74579 | netfilter: nft_payload: fix mask build for partial field offload | LOW | 3.4 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-74671 | ima: fix out-of-bounds read in xattr_verify() | LOW | 3.4 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-64652 | GitHub CLI: Partial token disclosure in `gh auth status` output | LOW | 3.3 | 5%ile | Microsoft | 2026-08-11 |
| CVE-2026-68209 | media: sun4i-csi: Return queued buffers on start_streaming() failure | LOW | 3.3 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-68220 | media: nxp: imx8-isi: Add missing v4l2_subdev_cleanup() in crossbar and pipe | LOW | 3.3 | 11%ile | Microsoft | 2026-08-11 |
| CVE-2026-68229 | media: cedrus: skip invalid H.264 reference list entries | LOW | 3.3 | 5%ile | Microsoft | 2026-08-11 |
| CVE-2026-68234 | drm/amdgpu: fix bo->pin leaking in amdgpu_bo_create_reserved | LOW | 3.3 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-68238 | drm/amdgpu: Release VFCT ACPI table reference | LOW | 3.3 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-68244 | drm/i915/gem: Do not leak siblings[] on proto context error | LOW | 3.3 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-68256 | drm/amd/display: detect_link_and_local_sink: DP alt mode timeout path leaks prev_sink reference | LOW | 3.3 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-68277 | drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply parsers | LOW | 3.3 | 13%ile | Microsoft | 2026-08-11 |
| CVE-2026-68280 | drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS() | LOW | 3.3 | 8%ile | Microsoft | 2026-08-11 |
| CVE-2026-68288 | net: drop_monitor: fix info leak in NET_DM_ATTR_PAYLOAD | LOW | 3.3 | 8%ile | Microsoft | 2026-08-11 |
| CVE-2026-68301 | net: hsr: fix memory leak on slave unregistration by removing synced VLANs | LOW | 3.3 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-68302 | amt: re-read skb header pointers after every pull | LOW | 3.3 | 41%ile | Microsoft | 2026-08-11 |
| CVE-2026-68304 | wifi: brcmfmac: fix 802.1X-SHA256 call trace warning | LOW | 3.3 | 12%ile | Microsoft | 2026-08-11 |
| CVE-2026-68312 | cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths | LOW | 3.3 | 11%ile | Microsoft | 2026-08-11 |
| CVE-2026-68422 | btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots() | LOW | 3.3 | 12%ile | Microsoft | 2026-08-11 |
| CVE-2026-68446 | drm/vmwgfx: Validate vmw_surface_metadata::array_size | LOW | 3.3 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-72495 | RDMA/bnxt_re: Avoid repeated requests to allocate WC pages | LOW | 3.3 | 9%ile | Microsoft | 2026-08-11 |
| CVE-2026-72501 | RDMA/bnxt_re: Initialize dpi variable to zero | LOW | 3.3 | 11%ile | Microsoft | 2026-08-11 |
| CVE-2026-73071 | Vim: Use-after-free in JSON Decoding | LOW | 3.3 | 1%ile | Microsoft | 2026-08-11 |
| CVE-2026-74544 | net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds | LOW | 3.3 | 3%ile | Microsoft | 2026-08-11 |
| CVE-2026-74558 | xsk: reclaim invalid Tx descriptors in ZC batch path | LOW | 3.3 | 11%ile | Microsoft | 2026-08-11 |
| CVE-2026-74559 | xsk: drain continuation descs after overflow in xsk_build_skb() | LOW | 3.3 | 11%ile | Microsoft | 2026-08-11 |
| CVE-2026-74560 | xsk: fix buffer leak in xsk_drop_skb() for AF_XDP multi-buffer Tx | LOW | 3.3 | 11%ile | Microsoft | 2026-08-11 |
| CVE-2026-74577 | net: mpls: initialize rtm_tos in mpls_getroute() | LOW | 3.3 | 6%ile | Microsoft | 2026-08-11 |
| CVE-2026-74603 | ptp: ocp: Fix board ID over-read | LOW | 3.3 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-74655 | serial: qcom-geni: fix TX DMA buffer flush | LOW | 3.3 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-74673 | Input: evdev - fix information leak in evdev_pass_values() | LOW | 3.3 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-74676 | vt: add permission check for KDSKBMETA ioctl | LOW | 3.3 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-80539 | drm/amdgpu: disallow multiple FENCE chunks in one submit | LOW | 3.3 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-80540 | drm/amdgpu: Fix UVD decode image min size calculation | LOW | 3.3 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-80580 | fbdev: bound mode sysfs output to the sysfs buffer | LOW | 3.3 | 1%ile | Microsoft | 2026-08-11 |
| CVE-2026-80581 | ASoC: SOF: ipc4-pcm: Continue the pipeline trigger in case of IPC timeout | LOW | 3.3 | 11%ile | Microsoft | 2026-08-11 |
| CVE-2026-80583 | ASoC: codecs: lpass-tx-macro: Fix enum kcontrol accesses | LOW | 3.3 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-80598 | ntfs3: fix out-of-bounds read in decompress_lznt | LOW | 3.3 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-80670 | perf tools: Use perf_env__get_cpu_topology() in machine__resolve() | LOW | 3.3 | 52%ile | Microsoft | 2026-08-11 |
| CVE-2026-80707 | can: j1939: transport: j1939_session_fresh_new(): initialize receive buffer | LOW | 3.3 | 26%ile | Microsoft | 2026-08-11 |
| CVE-2026-82327 | Libsolv: libsolv: out-of-bounds write in repo_write() via unvalidated directory id from vertical/paged .solv filelist da | LOW | 3.3 | 5%ile | Microsoft | 2026-08-11 |
| CVE-2026-64571 | wifi: p54: validate RX frame length in p54_rx_eeprom_readback() | LOW | 3.2 | 6%ile | Microsoft | 2026-08-11 |
| CVE-2026-72321 | ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() | LOW | 3.1 | 12%ile | Microsoft | 2026-08-11 |
| CVE-2026-74733 | gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock | LOW | 3.0 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-18739 | Popt-devel: popt-static: off-by-one in poptstuffargs | LOW | 2.5 | 3%ile | Microsoft | 2026-08-11 |
| CVE-2026-68107 | drm/amdgpu/vcn4: avoid rereading IB param length | LOW | 2.5 | 1%ile | Microsoft | 2026-08-11 |
| CVE-2026-68226 | media: cx23885: add ioremap return check and cleanup | LOW | 2.5 | 13%ile | Microsoft | 2026-08-11 |
| CVE-2026-68248 | drm/i915: Return NULL on error in active_instance | LOW | 2.5 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-68269 | drm/i915/gem: Add missing nospec on parallel submit slot | LOW | 2.5 | 11%ile | Microsoft | 2026-08-11 |
| CVE-2026-68309 | wifi: mt76: connac: fix possible NULL-pointer deref in mt76_connac_mcu_uni_bss_he_tlv() | LOW | 2.5 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-68355 | wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get() | LOW | 2.5 | 8%ile | Microsoft | 2026-08-11 |
| CVE-2026-68403 | wifi: brcmfmac: initialize SDIO data work before cleanup | LOW | 2.5 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-68417 | RDMA/siw: publish QP after initialization | LOW | 2.5 | 1%ile | Microsoft | 2026-08-11 |
| CVE-2026-73283 | In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwar | LOW | 2.5 | 4%ile | Microsoft | 2026-08-11 |
| CVE-2026-74448 | drm/amdkfd: fix QID bit leak in pqm_create_queue() | LOW | 2.5 | 6%ile | Microsoft | 2026-08-11 |
| CVE-2026-74495 | igbvf: Fix leak in TX DMA error cleanup | LOW | 2.5 | 44%ile | Microsoft | 2026-08-11 |
| CVE-2026-74567 | keys: fix out-of-bounds read in keyring_get_key_chunk() | LOW | 2.5 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-74658 | futex: Prevent robust futex exit race some more | LOW | 2.5 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-74678 | net: usb: ax88179_178a: fix skb leak in ax88179_tx_fixup() | LOW | 2.5 | 41%ile | Microsoft | 2026-08-11 |
| CVE-2026-74754 | scsi: core: pair EH runtime PM get and put | LOW | 2.5 | 12%ile | Microsoft | 2026-08-11 |
| CVE-2026-80547 | s390/vfio_ccw: Implement a crw lock | LOW | 2.5 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-80623 | coresight: ete: Always save state on power down | LOW | 2.5 | 12%ile | Microsoft | 2026-08-11 |
| CVE-2026-80634 | netfilter: flowtable: avoid num_encaps underflow on bridge VLAN untag | LOW | 2.5 | 54%ile | Microsoft | 2026-08-11 |
| CVE-2026-68279 | drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply parsers | LOW | 2.4 | 8%ile | Microsoft | 2026-08-11 |
| CVE-2026-74680 | usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm() | LOW | 2.4 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-74679 | usb: gadget: f_ncm: Use unsigned int for ndp_index | LOW | 2.4 | 8%ile | Microsoft | 2026-08-11 |
| CVE-2026-61477 | Libvirt: libvirt: newline injection in network xml dns txt/srv fields allows dnsmasq config directive injection | LOW | 2.3 | 5%ile | Microsoft | 2026-08-11 |
| CVE-2026-72324 | gpio: mvebu: free generic chips on unbind | LOW | 2.3 | 11%ile | Microsoft | 2026-08-11 |
| CVE-2026-74338 | bpf: Reject sleepable BPF_LSM_CGROUP programs at load time | LOW | 2.3 | 8%ile | Microsoft | 2026-08-11 |
| CVE-2026-74487 | binfmt_misc: restore write access when removing an entry | LOW | 2.3 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-74564 | netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH | LOW | 2.3 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-74659 | net: bridge: mrp: fix uninitialised bytes on the wire | LOW | 2.3 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-18839 | Popt-devel: popt-static: size_t underflow in singleoptionhelp | LOW | 2.2 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-82631 | valkey-io valkey Blocked-on-keys blocked.c handleClientsBlockedOnKey use after free | LOW | 2.2 | 30%ile | Microsoft | 2026-08-11 |
| CVE-2026-74532 | Bluetooth: btintel: Validate length before parsing diagnostics TLV | LOW | 2.1 | 6%ile | Microsoft | 2026-08-11 |
| CVE-2026-68363 | wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request | LOW | 2.0 | 8%ile | Microsoft | 2026-08-11 |
| CVE-2026-68171 | arm64: syscall: Ensure saved x0 is kept in-sync with tracer updates | LOW | 1.9 | — | Microsoft | 2026-08-11 |
| CVE-2026-68413 | wifi: ipw2100: fix potential memory leak in ipw2100_pci_init_one() | LOW | 1.9 | 10%ile | Microsoft | 2026-08-11 |
| CVE-2026-68450 | btrfs: free mapping node on duplicate reloc root insert | LOW | 1.9 | 5%ile | Microsoft | 2026-08-11 |
| CVE-2026-72315 | smb: client: fix busy dentry warning on unmount after DIO | LOW | 1.9 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-72438 | md/raid10: fix writes_pending and barrier reference leaks on discard failures | LOW | 1.9 | 43%ile | Microsoft | 2026-08-11 |
| CVE-2026-72439 | md/raid10: fix writes_pending leak on write request failures | LOW | 1.9 | 8%ile | Microsoft | 2026-08-11 |
| CVE-2026-74317 | ixgbe: do not configure xps for XDP queues | LOW | 1.9 | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-74373 | md/raid1,raid10: fix bio accounting for split md cloned bios | LOW | 1.9 | 11%ile | Microsoft | 2026-08-11 |
| CVE-2026-74464 | net: openvswitch: fix skb leak on flow key update failure during ct | LOW | 1.9 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-74525 | net: sxgbe: free TX rings on RX allocation failure | LOW | 1.9 | 12%ile | Microsoft | 2026-08-11 |
| CVE-2026-74543 | net: udp_tunnel: fix memory leak in udp_tunnel_nic_unregister() | LOW | 1.9 | 8%ile | Microsoft | 2026-08-11 |
| CVE-2026-80565 | crypto: qce - fix error path in devm_qce_register_algs | LOW | 1.9 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-68429 | drm/dp_mst: Handle torn-down topology gracefully in drm_dp_mst_topology_queue_probe() | LOW | 1.8 | 6%ile | Microsoft | 2026-08-11 |
| CVE-2026-15310 | zipfile: bzip2/LZMA/Zstandard members decompress without a max_length bound, defeating chunked-read memory limits | UNKNOWN | — | 45%ile | Microsoft | 2026-08-11 |
| CVE-2026-15806 | `HTTPPasswordMgr` can send saved HTTPS credentials via HTTP because of incorrect scheme matching | UNKNOWN | — | 45%ile | Microsoft | 2026-08-11 |
| CVE-2026-17084 | stringprep.map_table_b2() deviates from RFC 3454 Table B.2 | UNKNOWN | — | 54%ile | Microsoft | 2026-08-11 |
| CVE-2026-17106 | Tar extraction in moby/go-archive can write outside the destination directory via link following | UNKNOWN | — | 38%ile | Microsoft | 2026-08-11 |
| CVE-2026-18503 | Super-linear CPU usage for unbounded input to csv.Sniffer.sniff() | UNKNOWN | — | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-19023 | HDF5 h5dump Untrusted Pointer Dereference in Binary Output of Variable-Length String Datasets | UNKNOWN | — | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-19024 | HDF5 H5Pget_fill_value NULL Pointer Dereference via Malformed Fill Value Message | UNKNOWN | — | 8%ile | Microsoft | 2026-08-11 |
| CVE-2026-19025 | HDF5 divide-by-zero (SIGFPE) via mismatched chunk-layout dimensionality and dataspace rank on dataset open | UNKNOWN | — | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-19026 | Nbit filter NULL/short parameter-array dereference | UNKNOWN | — | 9%ile | Microsoft | 2026-08-11 |
| CVE-2026-19027 | HDF5 out-of-bounds heap read in N-Bit filter decompression | UNKNOWN | — | 9%ile | Microsoft | 2026-08-11 |
| CVE-2026-19028 | HDF5 integer underflow in Fletcher32 filter leads to massive out-of-bounds read | UNKNOWN | — | 9%ile | Microsoft | 2026-08-11 |
| CVE-2026-19672 | tarfile extraction filter bypass allows creation of directories outside the destination | UNKNOWN | — | 41%ile | Microsoft | 2026-08-11 |
| CVE-2026-43971 | Link Header Directive Smuggling via Unescaped target/rel/Attribute Keys in cow_link:link/1 | UNKNOWN | — | 44%ile | Microsoft | 2026-08-11 |
| CVE-2026-47243 | Kata guest escape: runtime-rs guest-root to host-root escape via virtiofs | UNKNOWN | — | 9%ile | Microsoft | 2026-08-11 |
| CVE-2026-55893 | Capstone SH disassembler `set_reg_n` heap buffer overflow via crafted SH2A FPU bytecode | UNKNOWN | — | 8%ile | Microsoft | 2026-08-11 |
| CVE-2026-55894 | Capstone SH disassembler `sh_disassemble` out-of-bounds read via crafted SH2A bytecode | UNKNOWN | — | 9%ile | Microsoft | 2026-08-11 |
| CVE-2026-61711 | BuildKit: Custom frontend could bypass Seccomp/AppArmor | UNKNOWN | — | 29%ile | Microsoft | 2026-08-11 |
| CVE-2026-61712 | BuildKit: Possible runtime DoS via unbounded group parsing | UNKNOWN | — | 34%ile | Microsoft | 2026-08-11 |
| CVE-2026-63379 | Libevent: HTTP Header smuggling | UNKNOWN | — | 53%ile | Microsoft | 2026-08-11 |
| CVE-2026-63381 | Libevent: Dangling Pointer in `evbuffer_add_buffer_reference` | UNKNOWN | — | 5%ile | Microsoft | 2026-08-11 |
| CVE-2026-63383 | Libevent: decode_tag_internal() can lead to out-of-bounds read | UNKNOWN | — | 42%ile | Microsoft | 2026-08-11 |
| CVE-2026-63384 | Libevent: `evtag_unmarshal_header()` decodes a wire `uint32` length into a signed `int` return value. | UNKNOWN | — | 44%ile | Microsoft | 2026-08-11 |
| CVE-2026-63385 | Libevent: HTTP header handling bugs create risk of access control bypass. | UNKNOWN | — | 70%ile | Microsoft | 2026-08-11 |
| CVE-2026-6368 | wordexp with WRDE_APPEND can return or use invalid memory | UNKNOWN | — | 1%ile | Microsoft | 2026-08-11 |
| CVE-2026-64653 | GitHub CLI: Unescaped variable components in request URLs could allow path traversal | UNKNOWN | — | 44%ile | Microsoft | 2026-08-11 |
| CVE-2026-64654 | GitHub CLI: Terminal escape sequence injection in multiple `gh` commands | UNKNOWN | — | 56%ile | Microsoft | 2026-08-11 |
| CVE-2026-64655 | GitHub CLI: Attestation Verification Bypass via Unescaped Regex Metacharacters in SAN Matching | UNKNOWN | — | 28%ile | Microsoft | 2026-08-11 |
| CVE-2026-66484 | Path Traversal in GNU cpio | UNKNOWN | — | 9%ile | Microsoft | 2026-08-11 |
| CVE-2026-66485 | Uncontrolled Memory Allocation in GNU cpio | UNKNOWN | — | 8%ile | Microsoft | 2026-08-11 |
| CVE-2026-66486 | Improper Output Encoding in GNU cpio | UNKNOWN | — | 8%ile | Microsoft | 2026-08-11 |
| CVE-2026-6791 | Potential stack-based buffer clash during tilde expansion in wordexp | UNKNOWN | — | 12%ile | Microsoft | 2026-08-11 |
| CVE-2026-69249 | python-cryptography: Duplicate self-signed intermediates can cause exponential path-building | UNKNOWN | — | 18%ile | Microsoft | 2026-08-11 |
| CVE-2026-72924 | GitHub CLI: `gh codespace ports forward` exposes forwarded services on all network interfaces by default | UNKNOWN | — | 17%ile | Microsoft | 2026-08-11 |
| CVE-2026-73070 | Vim: Stack Buffer Overflow in the Vim Socket Server | UNKNOWN | — | 8%ile | Microsoft | 2026-08-11 |
| CVE-2026-73072 | Vim: Heap Buffer Overflow when Loading a Spell File | UNKNOWN | — | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-73073 | Vim: Arbitrary Ex Command Execution in C Omni-Completion | UNKNOWN | — | 4%ile | Microsoft | 2026-08-11 |
| CVE-2026-73074 | Vim: Heap Buffer Overflow in Text Property Handling | UNKNOWN | — | 1%ile | Microsoft | 2026-08-11 |
| CVE-2026-73075 | Vim: Out-of-bounds Access in Popup Opacity Handling | UNKNOWN | — | 1%ile | Microsoft | 2026-08-11 |
| CVE-2026-73076 | Vim: Arbitrary Command Execution via Malicious `.VimballRecord` Entry Replay in `vimball.vim` | UNKNOWN | — | 3%ile | Microsoft | 2026-08-11 |
| CVE-2026-73077 | Vim: Arbitrary Code Execution via Shell Keyword Lookup | UNKNOWN | — | 4%ile | Microsoft | 2026-08-11 |
| CVE-2026-73078 | Vim: Arbitrary Code Execution via Netrw Menu Construction | UNKNOWN | — | 24%ile | Microsoft | 2026-08-11 |
| CVE-2026-73499 | etcd: Watch API authorization bypass via open-ended range requests | UNKNOWN | — | 52%ile | Microsoft | 2026-08-11 |
| CVE-2026-73500 | etcd: `tlsListener.acceptLoop` spawns unbounded handshake goroutines with no deadline | UNKNOWN | — | 34%ile | Microsoft | 2026-08-11 |
| CVE-2026-75593 | BuildKit: Malicious client can bypass destination directory validation on local sources upload | UNKNOWN | — | 46%ile | Microsoft | 2026-08-11 |
| CVE-2026-19137 | CVE-2026-19137 Use after free in WebGL | UNKNOWN | — | 23%ile | Microsoft | 2026-08-11 |
| CVE-2026-19138 | CVE-2026-19138 Heap buffer overflow in CrashReporting | UNKNOWN | — | 26%ile | Microsoft | 2026-08-11 |
| CVE-2026-19139 | CVE-2026-19139 Race in CredentialProvider | UNKNOWN | — | 0%ile | Microsoft | 2026-08-11 |
| CVE-2026-19140 | CVE-2026-19140 Use after free in GPU | UNKNOWN | — | 23%ile | Microsoft | 2026-08-11 |
| CVE-2026-19142 | CVE-2026-19142 Use after free in Views | UNKNOWN | — | 23%ile | Microsoft | 2026-08-11 |
| CVE-2026-19144 | CVE-2026-19144 Use after free in HTML | UNKNOWN | — | 28%ile | Microsoft | 2026-08-11 |
| CVE-2026-19145 | CVE-2026-19145 Use after free in Translate | UNKNOWN | — | 36%ile | Microsoft | 2026-08-11 |
| CVE-2026-19146 | CVE-2026-19146 Uninitialized Use in GPU | UNKNOWN | — | 24%ile | Microsoft | 2026-08-11 |
| CVE-2026-19147 | CVE-2026-19147 Use after free in Aura | UNKNOWN | — | 23%ile | Microsoft | 2026-08-11 |
| CVE-2026-19148 | CVE-2026-19148 Out of bounds write in GPU | UNKNOWN | — | 23%ile | Microsoft | 2026-08-11 |
| CVE-2026-19149 | CVE-2026-19149 Use after free in Aura | UNKNOWN | — | 28%ile | Microsoft | 2026-08-11 |
| CVE-2026-19150 | CVE-2026-19150 Inappropriate implementation in V8 | UNKNOWN | — | 36%ile | Microsoft | 2026-08-11 |
| CVE-2026-19151 | CVE-2026-19151 Use after free in V8 | UNKNOWN | — | 36%ile | Microsoft | 2026-08-11 |
| CVE-2026-19152 | CVE-2026-19152 Inappropriate implementation in Navigation | UNKNOWN | — | 23%ile | Microsoft | 2026-08-11 |
| CVE-2026-19153 | CVE-2026-19153 Insufficient validation of untrusted input in Workers | UNKNOWN | — | 26%ile | Microsoft | 2026-08-11 |
| CVE-2026-19155 | CVE-2026-19155 Use after free in Payments | UNKNOWN | — | 23%ile | Microsoft | 2026-08-11 |
| CVE-2026-19156 | CVE-2026-19156 Heap buffer overflow in Base | UNKNOWN | — | 16%ile | Microsoft | 2026-08-11 |
| CVE-2026-19157 | CVE-2026-19157 Out of bounds write in ANGLE | UNKNOWN | — | 32%ile | Microsoft | 2026-08-11 |
| CVE-2026-19158 | CVE-2026-19158 Use after free in Views | UNKNOWN | — | 23%ile | Microsoft | 2026-08-11 |
| CVE-2026-19159 | CVE-2026-19159 Use after free in Views | UNKNOWN | — | 23%ile | Microsoft | 2026-08-11 |
| CVE-2026-19160 | CVE-2026-19160 Uninitialized Use in Skia | UNKNOWN | — | 34%ile | Microsoft | 2026-08-11 |
| CVE-2026-19161 | CVE-2026-19161 Uninitialized Use in Skia | UNKNOWN | — | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-19162 | CVE-2026-19162 Out of bounds write in V8 | UNKNOWN | — | 36%ile | Microsoft | 2026-08-11 |
| CVE-2026-19163 | CVE-2026-19163 Use after free in Media | UNKNOWN | — | 23%ile | Microsoft | 2026-08-11 |
| CVE-2026-19164 | CVE-2026-19164 Insufficient validation of untrusted input in Codecs | UNKNOWN | — | 28%ile | Microsoft | 2026-08-11 |
| CVE-2026-19165 | CVE-2026-19165 Use after free in Extensions | UNKNOWN | — | 18%ile | Microsoft | 2026-08-11 |
| CVE-2026-19166 | CVE-2026-19166 Use after free in Web Authentication | UNKNOWN | — | 34%ile | Microsoft | 2026-08-11 |
| CVE-2026-19167 | CVE-2026-19167 Integer overflow in GPU | UNKNOWN | — | 14%ile | Microsoft | 2026-08-11 |
| CVE-2026-19168 | CVE-2026-19168 Inappropriate implementation in V8 | UNKNOWN | — | 36%ile | Microsoft | 2026-08-11 |
| CVE-2026-19169 | CVE-2026-19169 Insufficient validation of untrusted input in Contextual Tasks | UNKNOWN | — | 28%ile | Microsoft | 2026-08-11 |
| CVE-2026-19170 | CVE-2026-19170 Use after free in WebGL | UNKNOWN | — | 28%ile | Microsoft | 2026-08-11 |
| CVE-2026-19171 | CVE-2026-19171 Use after free in Media | UNKNOWN | — | 28%ile | Microsoft | 2026-08-11 |
| CVE-2026-19172 | CVE-2026-19172 Use after free in Views | UNKNOWN | — | 23%ile | Microsoft | 2026-08-11 |
| CVE-2026-19173 | CVE-2026-19173 Out of bounds write in Skia | UNKNOWN | — | 28%ile | Microsoft | 2026-08-11 |
| CVE-2026-19174 | CVE-2026-19174 Integer overflow in V8 | UNKNOWN | — | 36%ile | Microsoft | 2026-08-11 |
| CVE-2026-19175 | CVE-2026-19175 Use after free in Payments | UNKNOWN | — | 28%ile | Microsoft | 2026-08-11 |
| CVE-2026-19176 | CVE-2026-19176 Use after free in Skia | UNKNOWN | — | 45%ile | Microsoft | 2026-08-11 |
| CVE-2026-19177 | CVE-2026-19177 Insufficient validation of untrusted input in UI | UNKNOWN | — | 26%ile | Microsoft | 2026-08-11 |
| CVE-2026-19556 | Chromium: CVE-2026-19556 Use after free in V8 | UNKNOWN | — | 36%ile | Microsoft | 2026-08-11 |
| CVE-2026-19557 | Chromium: CVE-2026-19557 Use after free in TabStrip | UNKNOWN | — | 23%ile | Microsoft | 2026-08-11 |
| CVE-2026-19558 | Chromium: CVE-2026-19558 Use after free in Extensions | UNKNOWN | — | 18%ile | Microsoft | 2026-08-11 |
| CVE-2026-19559 | Chromium: CVE-2026-19559 Use after free in HTML | UNKNOWN | — | 36%ile | Microsoft | 2026-08-11 |
| CVE-2026-19560 | Chromium: CVE-2026-19560 Use after free in Blink | UNKNOWN | — | 36%ile | Microsoft | 2026-08-11 |
| CVE-2026-59127 | Windows Installer Elevation of Privilege Vulnerability | UNKNOWN | — | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-61346 | Windows Graphics Kernel Elevation of Privilege Vulnerability | UNKNOWN | — | 18%ile | Microsoft | 2026-08-11 |
| CVE-2026-61359 | Windows Storage Elevation of Privilege Vulnerability | UNKNOWN | — | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-62688 | Windows MIDI Service Module Elevation of Privileges Vulnerability | UNKNOWN | — | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-62752 | Windows Kerberos Elevation of Privilege Vulnerability | UNKNOWN | — | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-62761 | Windows DHCP Server Elevation of Privilege Vulnerability | UNKNOWN | — | 31%ile | Microsoft | 2026-08-11 |
| CVE-2026-62800 | Windows SMBv3 Server Remote Code Execution Vulnerability | UNKNOWN | — | 60%ile | Microsoft | 2026-08-11 |
| CVE-2026-62832 | Windows User Profile Service Elevation of Privilege Vulnerability | UNKNOWN | — | 31%ile | Microsoft | 2026-08-11 |
| CVE-2026-65775 | Windows Win32k Elevation of Privilege Vulnerability | UNKNOWN | — | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-66804 | Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability | UNKNOWN | — | 22%ile | Microsoft | 2026-08-11 |
| CVE-2026-70337 | Microsoft PowerShell Remote Code Execution Vulnerability | UNKNOWN | — | 61%ile | Microsoft | 2026-08-11 |
| CVE-2026-70344 | Windows Installer Elevation of Privilege Vulnerability | UNKNOWN | — | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-76033 | Chromium: CVE-2026-76033 Inappropriate implementation in CORS | UNKNOWN | — | 12%ile | Microsoft | 2026-08-11 |
| CVE-2026-76034 | Chromium: CVE-2026-76034 Buffer overflow in WebGL | UNKNOWN | — | 47%ile | Microsoft | 2026-08-11 |
| CVE-2026-76035 | Chromium: CVE-2026-76035 Inappropriate implementation in Media | UNKNOWN | — | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-76037 | Chromium: CVE-2026-76037 Link following in CredentialProvider | UNKNOWN | — | 4%ile | Microsoft | 2026-08-11 |
| CVE-2026-76038 | Chromium: CVE-2026-76038 Type confusion in V8 | UNKNOWN | — | 39%ile | Microsoft | 2026-08-11 |
| CVE-2026-76040 | Chromium: CVE-2026-76040 Use after free in Browser | UNKNOWN | — | 45%ile | Microsoft | 2026-08-11 |
| CVE-2026-76041 | Chromium: CVE-2026-76041 Information leak in Skia | UNKNOWN | — | 28%ile | Microsoft | 2026-08-11 |
| CVE-2026-76042 | Chromium: CVE-2026-76042 Use of uninitialized resource in GPU | UNKNOWN | — | 16%ile | Microsoft | 2026-08-11 |
| CVE-2026-76043 | Chromium: CVE-2026-76043 Incorrect calculation in V8 | UNKNOWN | — | 36%ile | Microsoft | 2026-08-11 |
| CVE-2026-76044 | Chromium: CVE-2026-76044 Race condition in USB | UNKNOWN | — | 25%ile | Microsoft | 2026-08-11 |
| CVE-2026-76045 | Chromium: CVE-2026-76045 Use after free in WebGL | UNKNOWN | — | 44%ile | Microsoft | 2026-08-11 |
| CVE-2026-76047 | Chromium: CVE-2026-76047 Type confusion in V8 | UNKNOWN | — | 39%ile | Microsoft | 2026-08-11 |
| CVE-2026-78891 | Chromium: CVE-2026-78891 Buffer overflow in WebRTC | UNKNOWN | — | 47%ile | Microsoft | 2026-08-11 |
| CVE-2026-78892 | Chromium: CVE-2026-78892 Incorrect authorization in Chromoting | UNKNOWN | — | 1%ile | Microsoft | 2026-08-11 |
| CVE-2026-78893 | Chromium: CVE-2026-78893 Information leak in QUIC | UNKNOWN | — | 25%ile | Microsoft | 2026-08-11 |
| CVE-2026-78894 | Chromium: CVE-2026-78894 Race condition in Payments | UNKNOWN | — | 8%ile | Microsoft | 2026-08-11 |
| CVE-2026-78895 | Chromium: CVE-2026-78895 Information leak in Paint | UNKNOWN | — | 19%ile | Microsoft | 2026-08-11 |
| CVE-2026-78896 | Chromium: CVE-2026-78896 Information leak in StorageAccessAPI | UNKNOWN | — | 18%ile | Microsoft | 2026-08-11 |
| CVE-2026-78897 | Chromium: CVE-2026-78897 Missing authorization in BrowserTag | UNKNOWN | — | 23%ile | Microsoft | 2026-08-11 |
| CVE-2026-78898 | Chromium: CVE-2026-78898 Incorrect authorization in Downloads | UNKNOWN | — | 12%ile | Microsoft | 2026-08-11 |
| CVE-2026-78899 | Chromium: CVE-2026-78899 Use after free in V8 | UNKNOWN | — | 36%ile | Microsoft | 2026-08-11 |
| CVE-2026-78900 | Chromium: CVE-2026-78900 Improper input validation in Media | UNKNOWN | — | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-78901 | Chromium: CVE-2026-78901 Race condition in V8 | UNKNOWN | — | 22%ile | Microsoft | 2026-08-11 |
| CVE-2026-78903 | Chromium: CVE-2026-78903 Incomplete cleanup in SiteIsolation | UNKNOWN | — | 22%ile | Microsoft | 2026-08-11 |
| CVE-2026-78904 | Chromium: CVE-2026-78904 Type confusion in ANGLE | UNKNOWN | — | 50%ile | Microsoft | 2026-08-11 |
| CVE-2026-78905 | Chromium: CVE-2026-78905 Type confusion in ANGLE | UNKNOWN | — | 50%ile | Microsoft | 2026-08-11 |
| CVE-2026-78906 | Chromium: CVE-2026-78906 Race condition in ANGLE | UNKNOWN | — | 36%ile | Microsoft | 2026-08-11 |
| CVE-2026-78907 | Chromium: CVE-2026-78907 Incorrect authorization in WebProtect | UNKNOWN | — | 25%ile | Microsoft | 2026-08-11 |
| CVE-2026-78908 | Chromium: CVE-2026-78908 Information leak in Canvas | UNKNOWN | — | 19%ile | Microsoft | 2026-08-11 |
| CVE-2026-78909 | Chromium: CVE-2026-78909 Use after free in Views | UNKNOWN | — | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-78910 | Chromium: CVE-2026-78910 Buffer overflow in V8 | UNKNOWN | — | 39%ile | Microsoft | 2026-08-11 |
| CVE-2026-78911 | Chromium: CVE-2026-78911 Incorrect authorization in USB | UNKNOWN | — | 33%ile | Microsoft | 2026-08-11 |
| CVE-2026-78912 | Chromium: CVE-2026-78912 UI misrepresentation in Browser | UNKNOWN | — | 17%ile | Microsoft | 2026-08-11 |
| CVE-2026-78913 | Chromium: CVE-2026-78913 Use after free in Chromoting | UNKNOWN | — | 36%ile | Microsoft | 2026-08-11 |
| CVE-2026-78914 | Chromium: CVE-2026-78914 Uninitialized resource in Skia | UNKNOWN | — | 20%ile | Microsoft | 2026-08-11 |
| CVE-2026-78915 | Chromium: CVE-2026-78915 Race condition in Enterprise | UNKNOWN | — | 4%ile | Microsoft | 2026-08-11 |
| CVE-2026-78934 | Chromium: CVE-2026-78934 Race condition in ReadAloud | UNKNOWN | — | 25%ile | Microsoft | 2026-08-11 |
| CVE-2026-78938 | Chromium: CVE-2026-78938 Type confusion in V8 | UNKNOWN | — | 39%ile | Microsoft | 2026-08-11 |
| CVE-2026-78939 | Chromium: CVE-2026-78939 Use after free in Chromecast | UNKNOWN | — | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-78940 | Chromium: CVE-2026-78940 Improper initialization in Network | UNKNOWN | — | 26%ile | Microsoft | 2026-08-11 |
| CVE-2026-78941 | Chromium: CVE-2026-78941 Information leak in Core | UNKNOWN | — | 15%ile | Microsoft | 2026-08-11 |
| CVE-2026-78942 | Chromium: CVE-2026-78942 Incorrect reference resolution in Loader | UNKNOWN | — | 20%ile | Microsoft | 2026-08-11 |
| CVE-2026-78943 | Chromium: CVE-2026-78943 Improper input validation in Editing | UNKNOWN | — | 17%ile | Microsoft | 2026-08-11 |
| CVE-2026-78944 | Chromium: CVE-2026-78944 Use after free in DevTools | UNKNOWN | — | 32%ile | Microsoft | 2026-08-11 |
| CVE-2026-78945 | Chromium: CVE-2026-78945 Use after free in Views | UNKNOWN | — | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-78946 | Chromium: CVE-2026-78946 Incorrect authorization in Select | UNKNOWN | — | 17%ile | Microsoft | 2026-08-11 |
| CVE-2026-78947 | Chromium: CVE-2026-78947 Incomplete cleanup in Chromium | UNKNOWN | — | 24%ile | Microsoft | 2026-08-11 |
| CVE-2026-78948 | Chromium: CVE-2026-78948 Buffer overflow in WebGL | UNKNOWN | — | 43%ile | Microsoft | 2026-08-11 |
| CVE-2026-78950 | Chromium: CVE-2026-78950 Integer overflow in WebRTC | UNKNOWN | — | 44%ile | Microsoft | 2026-08-11 |
| CVE-2026-78951 | Chromium: CVE-2026-78951 Use after free in ServiceWorker | UNKNOWN | — | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-78952 | Chromium: CVE-2026-78952 Out of bounds write in Crashpad | UNKNOWN | — | 35%ile | Microsoft | 2026-08-11 |
| CVE-2026-78953 | Chromium: CVE-2026-78953 Missing authorization in SiteIsolation | UNKNOWN | — | 12%ile | Microsoft | 2026-08-11 |
| CVE-2026-78954 | Chromium: CVE-2026-78954 Incorrect authorization in Extensions | UNKNOWN | — | 20%ile | Microsoft | 2026-08-11 |
| CVE-2026-78955 | Chromium: CVE-2026-78955 Observable discrepancy in PerformanceAPIs | UNKNOWN | — | 25%ile | Microsoft | 2026-08-11 |
| CVE-2026-78956 | Chromium: CVE-2026-78956 Type confusion in V8 | UNKNOWN | — | 39%ile | Microsoft | 2026-08-11 |
| CVE-2026-78958 | Chromium: CVE-2026-78958 Uninitialized resource in Skia | UNKNOWN | — | 27%ile | Microsoft | 2026-08-11 |
| CVE-2026-78959 | Chromium: CVE-2026-78959 Improper handling of case sensitivity in FileSystem | UNKNOWN | — | 30%ile | Microsoft | 2026-08-11 |
| CVE-2026-78960 | Chromium: CVE-2026-78960 Information leak in Extensions | UNKNOWN | — | 22%ile | Microsoft | 2026-08-11 |
| CVE-2026-78961 | Chromium: CVE-2026-78961 Incorrect authorization in Core | UNKNOWN | — | 20%ile | Microsoft | 2026-08-11 |
| CVE-2026-78962 | Chromium: CVE-2026-78962 Uninitialized resource in WebXR | UNKNOWN | — | 21%ile | Microsoft | 2026-08-11 |
| CVE-2026-78963 | Chromium: CVE-2026-78963 Improper input validation in Media | UNKNOWN | — | 36%ile | Microsoft | 2026-08-11 |
| CVE-2026-78964 | Chromium: CVE-2026-78964 Use after free in Sync | UNKNOWN | — | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-78965 | Chromium: CVE-2026-78965 Uninitialized resource in ANGLE | UNKNOWN | — | 39%ile | Microsoft | 2026-08-11 |
| CVE-2026-78966 | Chromium: CVE-2026-78966 Externally controlled reference in QUIC | UNKNOWN | — | 26%ile | Microsoft | 2026-08-11 |
| CVE-2026-78967 | Chromium: CVE-2026-78967 Missing authorization in BFCache | UNKNOWN | — | 21%ile | Microsoft | 2026-08-11 |
| CVE-2026-78968 | Chromium: CVE-2026-78968 Missing authorization in Core | UNKNOWN | — | 20%ile | Microsoft | 2026-08-11 |
| CVE-2026-78969 | Chromium: CVE-2026-78969 Uninitialized resource in Video | UNKNOWN | — | 28%ile | Microsoft | 2026-08-11 |
| CVE-2026-78974 | Chromium: CVE-2026-78974 UI misrepresentation in Linux Toolkit Theming | UNKNOWN | — | 14%ile | Microsoft | 2026-08-11 |
| CVE-2026-78975 | Chromium: CVE-2026-78975 Incorrect authorization in DOM | UNKNOWN | — | 23%ile | Microsoft | 2026-08-11 |
| CVE-2026-78976 | Chromium: CVE-2026-78976 Improper input validation in StorageAccessAPI | UNKNOWN | — | 19%ile | Microsoft | 2026-08-11 |
| CVE-2026-78977 | Chromium: CVE-2026-78977 Uninitialized resource in GPU | UNKNOWN | — | 28%ile | Microsoft | 2026-08-11 |
| CVE-2026-78978 | Chromium: CVE-2026-78978 Out of bounds read in ANGLE | UNKNOWN | — | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-78979 | Chromium: CVE-2026-78979 Race condition in Core | UNKNOWN | — | 12%ile | Microsoft | 2026-08-11 |
| CVE-2026-78980 | Chromium: CVE-2026-78980 Improper input validation in ReaderMode | UNKNOWN | — | 17%ile | Microsoft | 2026-08-11 |
| CVE-2026-78983 | Chromium: CVE-2026-78983 Use after free in Views | UNKNOWN | — | 35%ile | Microsoft | 2026-08-11 |
| CVE-2026-78984 | Chromium: CVE-2026-78984 Uninitialized resource in GPU | UNKNOWN | — | 16%ile | Microsoft | 2026-08-11 |
| CVE-2026-78985 | Chromium: CVE-2026-78985 Incorrect reference resolution in FileSystem | UNKNOWN | — | 43%ile | Microsoft | 2026-08-11 |
| CVE-2026-78986 | Chromium: CVE-2026-78986 Uninitialized resource in GPU | UNKNOWN | — | 16%ile | Microsoft | 2026-08-11 |
| CVE-2026-78987 | Chromium: CVE-2026-78987 Information leak in Canvas | UNKNOWN | — | 19%ile | Microsoft | 2026-08-11 |
| CVE-2026-78989 | Chromium: CVE-2026-78989 Out of bounds read in ANGLE | UNKNOWN | — | 47%ile | Microsoft | 2026-08-11 |
| CVE-2026-78990 | Chromium: CVE-2026-78990 Use after free in Compositing | UNKNOWN | — | 36%ile | Microsoft | 2026-08-11 |
| CVE-2026-78991 | Chromium: CVE-2026-78991 Race condition in WebProtect | UNKNOWN | — | 13%ile | Microsoft | 2026-08-11 |
| CVE-2026-78999 | Chromium: CVE-2026-78999 Improper privilege management in Navigation | UNKNOWN | — | 33%ile | Microsoft | 2026-08-11 |
| CVE-2026-79000 | Chromium: CVE-2026-79000 Improper input validation in DeviceBoundSessionCredentials | UNKNOWN | — | 16%ile | Microsoft | 2026-08-11 |
| CVE-2026-79001 | Chromium: CVE-2026-79001 Information leak in Bluetooth | UNKNOWN | — | 21%ile | Microsoft | 2026-08-11 |
| CVE-2026-79002 | Chromium: CVE-2026-79002 Incorrect authorization in SiteIsolation | UNKNOWN | — | 14%ile | Microsoft | 2026-08-11 |
| CVE-2026-79003 | Chromium: CVE-2026-79003 Incorrect authorization in Device | UNKNOWN | — | 16%ile | Microsoft | 2026-08-11 |
| CVE-2026-79004 | Chromium: CVE-2026-79004 Out of bounds read in Media | UNKNOWN | — | 14%ile | Microsoft | 2026-08-11 |
| CVE-2026-79005 | Chromium: CVE-2026-79005 Incorrect authorization in StorageAccessAPI | UNKNOWN | — | 23%ile | Microsoft | 2026-08-11 |
| CVE-2026-79006 | Chromium: CVE-2026-79006 Protection mechanism failure in HttpsUpgrades | UNKNOWN | — | 16%ile | Microsoft | 2026-08-11 |
| CVE-2026-79007 | Chromium: CVE-2026-79007 Uninitialized resource in GPU | UNKNOWN | — | 16%ile | Microsoft | 2026-08-11 |
| CVE-2026-79009 | Chromium: CVE-2026-79009 UI misrepresentation in UI | UNKNOWN | — | 16%ile | Microsoft | 2026-08-11 |
| CVE-2026-79010 | Chromium: CVE-2026-79010 Operation on a resource after expiration or release in Network | UNKNOWN | — | 20%ile | Microsoft | 2026-08-11 |
| CVE-2026-79011 | Chromium: CVE-2026-79011 UI misrepresentation in Browser | UNKNOWN | — | 26%ile | Microsoft | 2026-08-11 |
| CVE-2026-79012 | Chromium: CVE-2026-79012 Use after free in Safebrowsing | UNKNOWN | — | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-79013 | Chromium: CVE-2026-79013 Improper input validation in Sync | UNKNOWN | — | 24%ile | Microsoft | 2026-08-11 |
| CVE-2026-79014 | Chromium: CVE-2026-79014 Race condition in Autofill | UNKNOWN | — | 12%ile | Microsoft | 2026-08-11 |
| CVE-2026-79015 | Chromium: CVE-2026-79015 Improper input validation in ServiceWorker | UNKNOWN | — | 17%ile | Microsoft | 2026-08-11 |
| CVE-2026-79016 | Chromium: CVE-2026-79016 Observable discrepancy in SVG | UNKNOWN | — | 18%ile | Microsoft | 2026-08-11 |
| CVE-2026-79017 | Chromium: CVE-2026-79017 Race condition in Extensions | UNKNOWN | — | 12%ile | Microsoft | 2026-08-11 |
| CVE-2026-79018 | Chromium: CVE-2026-79018 Information leak in FoldableAPIs | UNKNOWN | — | 25%ile | Microsoft | 2026-08-11 |
| CVE-2026-79019 | Chromium: CVE-2026-79019 Out of bounds write in ANGLE | UNKNOWN | — | 41%ile | Microsoft | 2026-08-11 |
| CVE-2026-79020 | Chromium: CVE-2026-79020 Out of bounds read in Skia | UNKNOWN | — | 32%ile | Microsoft | 2026-08-11 |
| CVE-2026-79021 | Chromium: CVE-2026-79021 Missing authorization in InterestGroups | UNKNOWN | — | 18%ile | Microsoft | 2026-08-11 |
| CVE-2026-79022 | Chromium: CVE-2026-79022 UI misrepresentation in Transactions Platform | UNKNOWN | — | 16%ile | Microsoft | 2026-08-11 |
| CVE-2026-79023 | Chromium: CVE-2026-79023 Incorrect authorization in Editing | UNKNOWN | — | 23%ile | Microsoft | 2026-08-11 |
| CVE-2026-79024 | Chromium: CVE-2026-79024 Information leak in ServiceWorker | UNKNOWN | — | 25%ile | Microsoft | 2026-08-11 |
| CVE-2026-79025 | Chromium: CVE-2026-79025 Improper input validation in Workers | UNKNOWN | — | 12%ile | Microsoft | 2026-08-11 |
| CVE-2026-79026 | Chromium: CVE-2026-79026 Use after free in Extensions | UNKNOWN | — | 37%ile | Microsoft | 2026-08-11 |
| CVE-2026-79027 | Chromium: CVE-2026-79027 Use after free in WebRTC | UNKNOWN | — | 45%ile | Microsoft | 2026-08-11 |
| CVE-2026-79028 | Chromium: CVE-2026-79028 Observable discrepancy in Network | UNKNOWN | — | 21%ile | Microsoft | 2026-08-11 |
| CVE-2026-79030 | Chromium: CVE-2026-79030 Observable discrepancy in Autofill | UNKNOWN | — | 21%ile | Microsoft | 2026-08-11 |
| CVE-2026-79031 | Chromium: CVE-2026-79031 Improper resource exposure in Preload | UNKNOWN | — | 15%ile | Microsoft | 2026-08-11 |
| CVE-2026-79032 | Chromium: CVE-2026-79032 Improper input validation in Network | UNKNOWN | — | 24%ile | Microsoft | 2026-08-11 |
| CVE-2026-79033 | Chromium: CVE-2026-79033 Insufficient control flow management in DevTools | UNKNOWN | — | 36%ile | Microsoft | 2026-08-11 |
| CVE-2026-79034 | Chromium: CVE-2026-79034 Information leak in CORS | UNKNOWN | — | 14%ile | Microsoft | 2026-08-11 |
| CVE-2026-79038 | Chromium: CVE-2026-79038 Incorrect authorization in WebProtect | UNKNOWN | — | 25%ile | Microsoft | 2026-08-11 |
| CVE-2026-79040 | Chromium: CVE-2026-79040 Uninitialized resource in GPU | UNKNOWN | — | 21%ile | Microsoft | 2026-08-11 |
| CVE-2026-79041 | Chromium: CVE-2026-79041 Missing authorization in Browser | UNKNOWN | — | 17%ile | Microsoft | 2026-08-11 |
| CVE-2026-79042 | Chromium: CVE-2026-79042 Missing authorization in Payments | UNKNOWN | — | 16%ile | Microsoft | 2026-08-11 |
| CVE-2026-79043 | Chromium: CVE-2026-79043 Out of bounds write in ANGLE | UNKNOWN | — | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-79045 | Chromium: CVE-2026-79045 Type confusion in V8 | UNKNOWN | — | 32%ile | Microsoft | 2026-08-11 |
| CVE-2026-79047 | Chromium: CVE-2026-79047 Use after free in Views | UNKNOWN | — | 38%ile | Microsoft | 2026-08-11 |
| CVE-2026-79048 | Chromium: CVE-2026-79048 Out of bounds write in ANGLE | UNKNOWN | — | 47%ile | Microsoft | 2026-08-11 |
| CVE-2026-79049 | Chromium: CVE-2026-79049 Incorrect reference resolution in Passwords | UNKNOWN | — | 31%ile | Microsoft | 2026-08-11 |
| CVE-2026-79050 | Chromium: CVE-2026-79050 Incorrect authorization in Network | UNKNOWN | — | 28%ile | Microsoft | 2026-08-11 |
| CVE-2026-79051 | Chromium: CVE-2026-79051 Incorrect authorization in Loader | UNKNOWN | — | 20%ile | Microsoft | 2026-08-11 |
| CVE-2026-79052 | Chromium: CVE-2026-79052 Use after free in Aura | UNKNOWN | — | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-79053 | Chromium: CVE-2026-79053 Missing authorization in Lighthouse | UNKNOWN | — | 14%ile | Microsoft | 2026-08-11 |
| CVE-2026-79054 | Chromium: CVE-2026-79054 Use after free in Chromecast | UNKNOWN | — | 35%ile | Microsoft | 2026-08-11 |
| CVE-2026-79055 | Chromium: CVE-2026-79055 Information leak in Sharing | UNKNOWN | — | 1%ile | Microsoft | 2026-08-11 |
| CVE-2026-79056 | Chromium: CVE-2026-79056 Use after free in ServiceWorker | UNKNOWN | — | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-79058 | Chromium: CVE-2026-79058 Missing authorization in Passwords | UNKNOWN | — | 29%ile | Microsoft | 2026-08-11 |
| CVE-2026-79059 | Chromium: CVE-2026-79059 Information leak in BFCache | UNKNOWN | — | 14%ile | Microsoft | 2026-08-11 |
| CVE-2026-79060 | Chromium: CVE-2026-79060 Incorrect authorization in StorageAccessAPI | UNKNOWN | — | 23%ile | Microsoft | 2026-08-11 |
| CVE-2026-79064 | Chromium: CVE-2026-79064 Use after free in Network | UNKNOWN | — | 37%ile | Microsoft | 2026-08-11 |
| CVE-2026-79065 | Chromium: CVE-2026-79065 Improper input validation in Network | UNKNOWN | — | 19%ile | Microsoft | 2026-08-11 |
| CVE-2026-79066 | Chromium: CVE-2026-79066 Improper input validation in Navigation | UNKNOWN | — | 17%ile | Microsoft | 2026-08-11 |
| CVE-2026-79067 | Chromium: CVE-2026-79067 Missing authorization in Network | UNKNOWN | — | 16%ile | Microsoft | 2026-08-11 |
| CVE-2026-79068 | Chromium: CVE-2026-79068 Improper resource exposure in StreamsAPI | UNKNOWN | — | 19%ile | Microsoft | 2026-08-11 |
| CVE-2026-79069 | Chromium: CVE-2026-79069 Memory corruption in Tint | UNKNOWN | — | 36%ile | Microsoft | 2026-08-11 |
| CVE-2026-79070 | Chromium: CVE-2026-79070 Incorrect reference resolution in Cache | UNKNOWN | — | 26%ile | Microsoft | 2026-08-11 |
| CVE-2026-79071 | Chromium: CVE-2026-79071 Race condition in GPU | UNKNOWN | — | 25%ile | Microsoft | 2026-08-11 |
| CVE-2026-79072 | Chromium: CVE-2026-79072 Improper state validation in Performance | UNKNOWN | — | 26%ile | Microsoft | 2026-08-11 |
| CVE-2026-79073 | Chromium: CVE-2026-79073 Improper state validation in Parser | UNKNOWN | — | 36%ile | Microsoft | 2026-08-11 |
| CVE-2026-79074 | Chromium: CVE-2026-79074 Information leak in Network | UNKNOWN | — | 21%ile | Microsoft | 2026-08-11 |
| CVE-2026-79075 | Chromium: CVE-2026-79075 Information leak in Geolocation | UNKNOWN | — | 25%ile | Microsoft | 2026-08-11 |
| CVE-2026-79076 | Chromium: CVE-2026-79076 Improper input validation in Sync | UNKNOWN | — | 22%ile | Microsoft | 2026-08-11 |
| CVE-2026-79077 | Chromium: CVE-2026-79077 Incorrect authorization in WebProtect | UNKNOWN | — | 17%ile | Microsoft | 2026-08-11 |
| CVE-2026-79078 | Chromium: CVE-2026-79078 Use after free in FedCM | UNKNOWN | — | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-79082 | Chromium: CVE-2026-79082 Incorrect authorization in Transactions Platform | UNKNOWN | — | 20%ile | Microsoft | 2026-08-11 |
| CVE-2026-79083 | Chromium: CVE-2026-79083 Improper enforcement of behavioral workflow in Media | UNKNOWN | — | 30%ile | Microsoft | 2026-08-11 |
| CVE-2026-79084 | Chromium: CVE-2026-79084 Inadequate encryption strength in Notifications | UNKNOWN | — | 3%ile | Microsoft | 2026-08-11 |
| CVE-2026-79085 | Chromium: CVE-2026-79085 Missing authorization in Network | UNKNOWN | — | 20%ile | Microsoft | 2026-08-11 |
| CVE-2026-79087 | Chromium: CVE-2026-79087 Injection in Chrome Tabs | UNKNOWN | — | 17%ile | Microsoft | 2026-08-11 |
| CVE-2026-79088 | Chromium: CVE-2026-79088 Incorrect authorization in FileSystem | UNKNOWN | — | 13%ile | Microsoft | 2026-08-11 |
| CVE-2026-79089 | Chromium: CVE-2026-79089 Race condition in Transactions Platform | UNKNOWN | — | 12%ile | Microsoft | 2026-08-11 |
| CVE-2026-79090 | Chromium: CVE-2026-79090 Improper privilege management in Actor | UNKNOWN | — | 36%ile | Microsoft | 2026-08-11 |
| CVE-2026-79091 | Chromium: CVE-2026-79091 Use after free in Bluetooth | UNKNOWN | — | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-79093 | Chromium: CVE-2026-79093 Incorrect authorization in Paint | UNKNOWN | — | 20%ile | Microsoft | 2026-08-11 |
| CVE-2026-79094 | Chromium: CVE-2026-79094 Race condition in Workers | UNKNOWN | — | 15%ile | Microsoft | 2026-08-11 |
| CVE-2026-79095 | Chromium: CVE-2026-79095 Information leak in Payments | UNKNOWN | — | 18%ile | Microsoft | 2026-08-11 |
| CVE-2026-79097 | Chromium: CVE-2026-79097 Use after free in V8 | UNKNOWN | — | 36%ile | Microsoft | 2026-08-11 |
| CVE-2026-79098 | Chromium: CVE-2026-79098 UI misrepresentation in PermissionElement | UNKNOWN | — | 16%ile | Microsoft | 2026-08-11 |
| CVE-2026-79099 | Chromium: CVE-2026-79099 Missing authorization in Network | UNKNOWN | — | 21%ile | Microsoft | 2026-08-11 |
| CVE-2026-79103 | Chromium: CVE-2026-79103 Incorrect reference resolution in Speech | UNKNOWN | — | 22%ile | Microsoft | 2026-08-11 |
| CVE-2026-79104 | Chromium: CVE-2026-79104 Missing authorization in Sensor | UNKNOWN | — | 20%ile | Microsoft | 2026-08-11 |
| CVE-2026-79106 | Chromium: CVE-2026-79106 Improper input validation in Input | UNKNOWN | — | 19%ile | Microsoft | 2026-08-11 |
| CVE-2026-79107 | Chromium: CVE-2026-79107 Incorrect authorization in TabGroups | UNKNOWN | — | 21%ile | Microsoft | 2026-08-11 |
| CVE-2026-79108 | Chromium: CVE-2026-79108 UI misrepresentation in Web Authentication (Passkeys & Security Keys) | UNKNOWN | — | 26%ile | Microsoft | 2026-08-11 |
| CVE-2026-79109 | Chromium: CVE-2026-79109 Improper input validation in Printing | UNKNOWN | — | 37%ile | Microsoft | 2026-08-11 |
| CVE-2026-79110 | Chromium: CVE-2026-79110 Missing authorization in Preload | UNKNOWN | — | 20%ile | Microsoft | 2026-08-11 |
| CVE-2026-79111 | Chromium: CVE-2026-79111 Improper input validation in Dawn | UNKNOWN | — | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-79112 | Chromium: CVE-2026-79112 Out of bounds read in Skia | UNKNOWN | — | 17%ile | Microsoft | 2026-08-11 |
| CVE-2026-79116 | Chromium: CVE-2026-79116 Missing authorization in Viz | UNKNOWN | — | 20%ile | Microsoft | 2026-08-11 |
| CVE-2026-79118 | Chromium: CVE-2026-79118 Uninitialized resource in ANGLE | UNKNOWN | — | 20%ile | Microsoft | 2026-08-11 |
| CVE-2026-79119 | Chromium: CVE-2026-79119 Use after free in PDF | UNKNOWN | — | 32%ile | Microsoft | 2026-08-11 |
| CVE-2026-79120 | Chromium: CVE-2026-79120 Uninitialized resource in ANGLE | UNKNOWN | — | 25%ile | Microsoft | 2026-08-11 |
| CVE-2026-79121 | Chromium: CVE-2026-79121 Improper input validation in Chromecast | UNKNOWN | — | 37%ile | Microsoft | 2026-08-11 |
| CVE-2026-79122 | Chromium: CVE-2026-79122 Information leak in SignIn | UNKNOWN | — | 22%ile | Microsoft | 2026-08-11 |
| CVE-2026-79123 | Chromium: CVE-2026-79123 Improper input validation in NTP Footer | UNKNOWN | — | 22%ile | Microsoft | 2026-08-11 |
| CVE-2026-79124 | Chromium: CVE-2026-79124 Information leak in Intents | UNKNOWN | — | 25%ile | Microsoft | 2026-08-11 |
| CVE-2026-79125 | Chromium: CVE-2026-79125 Information leak in XR | UNKNOWN | — | 25%ile | Microsoft | 2026-08-11 |
| CVE-2026-79126 | Chromium: CVE-2026-79126 Incorrect provision of specified functionality in Proxy | UNKNOWN | — | 15%ile | Microsoft | 2026-08-11 |
| CVE-2026-79127 | Chromium: CVE-2026-79127 Out of bounds write in ANGLE | UNKNOWN | — | 42%ile | Microsoft | 2026-08-11 |
| CVE-2026-79128 | Chromium: CVE-2026-79128 Use after free in Views | UNKNOWN | — | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-79130 | Chromium: CVE-2026-79130 Buffer overflow in ANGLE | UNKNOWN | — | 37%ile | Microsoft | 2026-08-11 |
| CVE-2026-79131 | Chromium: CVE-2026-79131 Out of bounds write in ANGLE | UNKNOWN | — | 42%ile | Microsoft | 2026-08-11 |
| CVE-2026-79133 | Chromium: CVE-2026-79133 Incorrect authorization in Forms | UNKNOWN | — | 23%ile | Microsoft | 2026-08-11 |
| CVE-2026-79134 | Chromium: CVE-2026-79134 Incorrect authorization in GetUserMedia | UNKNOWN | — | 14%ile | Microsoft | 2026-08-11 |
| CVE-2026-79136 | Chromium: CVE-2026-79136 Incorrect authorization in ServiceWorker | UNKNOWN | — | 28%ile | Microsoft | 2026-08-11 |
| CVE-2026-79137 | Chromium: CVE-2026-79137 Incorrect authorization in Extensions | UNKNOWN | — | 13%ile | Microsoft | 2026-08-11 |
| CVE-2026-79138 | Chromium: CVE-2026-79138 Out of bounds write in ANGLE | UNKNOWN | — | 30%ile | Microsoft | 2026-08-11 |
| CVE-2026-79139 | Chromium: CVE-2026-79139 Improper input validation in Media | UNKNOWN | — | 33%ile | Microsoft | 2026-08-11 |
| CVE-2026-79140 | Chromium: CVE-2026-79140 Use after free in Views | UNKNOWN | — | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-79141 | Chromium: CVE-2026-79141 Incorrect authorization in Browser | UNKNOWN | — | 20%ile | Microsoft | 2026-08-11 |
| CVE-2026-79142 | Chromium: CVE-2026-79142 Buffer overflow in ANGLE | UNKNOWN | — | 34%ile | Microsoft | 2026-08-11 |
| CVE-2026-79143 | Chromium: CVE-2026-79143 Incorrect authorization in FileSystem | UNKNOWN | — | 16%ile | Microsoft | 2026-08-11 |
| CVE-2026-79144 | Chromium: CVE-2026-79144 Information leak in Skia | UNKNOWN | — | 18%ile | Microsoft | 2026-08-11 |
| CVE-2026-79147 | Chromium: CVE-2026-79147 Information leak in Skia | UNKNOWN | — | 13%ile | Microsoft | 2026-08-11 |
| CVE-2026-79148 | Chromium: CVE-2026-79148 Off-by-one error in DevTools | UNKNOWN | — | 28%ile | Microsoft | 2026-08-11 |
| CVE-2026-79149 | Chromium: CVE-2026-79149 Use after free in ANGLE | UNKNOWN | — | 42%ile | Microsoft | 2026-08-11 |
| CVE-2026-79150 | Chromium: CVE-2026-79150 Use after free in Views | UNKNOWN | — | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-79151 | Chromium: CVE-2026-79151 Improper input validation in Safebrowsing | UNKNOWN | — | 14%ile | Microsoft | 2026-08-11 |
| CVE-2026-79154 | Chromium: CVE-2026-79154 Missing authorization in DevTools | UNKNOWN | — | 21%ile | Microsoft | 2026-08-11 |
| CVE-2026-79155 | Chromium: CVE-2026-79155 Race condition in FileSystem | UNKNOWN | — | 25%ile | Microsoft | 2026-08-11 |
| CVE-2026-79173 | Chromium: CVE-2026-79173 UI misrepresentation in WebAppInstalls | UNKNOWN | — | 17%ile | Microsoft | 2026-08-11 |
| CVE-2026-79174 | Chromium: CVE-2026-79174 Incorrect authorization in Extensions | UNKNOWN | — | 20%ile | Microsoft | 2026-08-11 |
| CVE-2026-79175 | Chromium: CVE-2026-79175 Type confusion in Accessibility | UNKNOWN | — | 38%ile | Microsoft | 2026-08-11 |
| CVE-2026-79176 | Chromium: CVE-2026-79176 UI misrepresentation in Extensions | UNKNOWN | — | 22%ile | Microsoft | 2026-08-11 |
| CVE-2026-79177 | Chromium: CVE-2026-79177 Incorrect authorization in Media | UNKNOWN | — | 21%ile | Microsoft | 2026-08-11 |
| CVE-2026-79178 | Chromium: CVE-2026-79178 Incorrect authorization in Web Authentication (Passkeys & Security Keys) | UNKNOWN | — | 23%ile | Microsoft | 2026-08-11 |
| CVE-2026-79179 | Chromium: CVE-2026-79179 Incorrect authorization in DOM | UNKNOWN | — | 23%ile | Microsoft | 2026-08-11 |
| CVE-2026-79181 | Chromium: CVE-2026-79181 Observable discrepancy in Glic | UNKNOWN | — | 21%ile | Microsoft | 2026-08-11 |
| CVE-2026-79182 | Chromium: CVE-2026-79182 Improper input validation in Media | UNKNOWN | — | 36%ile | Microsoft | 2026-08-11 |
| CVE-2026-79183 | Chromium: CVE-2026-79183 Use after free in Accessibility | UNKNOWN | — | 32%ile | Microsoft | 2026-08-11 |
| CVE-2026-79184 | Chromium: CVE-2026-79184 Missing authorization in Preload | UNKNOWN | — | 20%ile | Microsoft | 2026-08-11 |
| CVE-2026-79185 | Chromium: CVE-2026-79185 Information leak in DOM | UNKNOWN | — | 19%ile | Microsoft | 2026-08-11 |
| CVE-2026-79186 | Chromium: CVE-2026-79186 Incorrect authorization in Network | UNKNOWN | — | 14%ile | Microsoft | 2026-08-11 |
| CVE-2026-79187 | Chromium: CVE-2026-79187 Use after free in WebRTC | UNKNOWN | — | 44%ile | Microsoft | 2026-08-11 |
| CVE-2026-79188 | Chromium: CVE-2026-79188 Out of bounds write in ANGLE | UNKNOWN | — | 42%ile | Microsoft | 2026-08-11 |
| CVE-2026-79189 | Chromium: CVE-2026-79189 Out of bounds write in ANGLE | UNKNOWN | — | 32%ile | Microsoft | 2026-08-11 |
| CVE-2026-79190 | Chromium: CVE-2026-79190 Incorrect authorization in Extensions | UNKNOWN | — | 20%ile | Microsoft | 2026-08-11 |
| CVE-2026-79191 | Chromium: CVE-2026-79191 Incorrect authorization in SiteIsolation | UNKNOWN | — | 13%ile | Microsoft | 2026-08-11 |
| CVE-2026-79192 | Chromium: CVE-2026-79192 Improper input validation in Variations | UNKNOWN | — | 15%ile | Microsoft | 2026-08-11 |
| CVE-2026-79193 | Chromium: CVE-2026-79193 Information leak in Canvas | UNKNOWN | — | 23%ile | Microsoft | 2026-08-11 |
| CVE-2026-79194 | Chromium: CVE-2026-79194 Use after free in Chromoting | UNKNOWN | — | 47%ile | Microsoft | 2026-08-11 |
| CVE-2026-79195 | Chromium: CVE-2026-79195 Use after free in Script | UNKNOWN | — | 36%ile | Microsoft | 2026-08-11 |
| CVE-2026-79196 | Chromium: CVE-2026-79196 Race condition in Editing | UNKNOWN | — | 13%ile | Microsoft | 2026-08-11 |
| CVE-2026-79197 | Chromium: CVE-2026-79197 Use after free in V8 | UNKNOWN | — | 36%ile | Microsoft | 2026-08-11 |
| CVE-2026-79198 | Chromium: CVE-2026-79198 Use after free in Platform | UNKNOWN | — | 36%ile | Microsoft | 2026-08-11 |
| CVE-2026-79199 | Chromium: CVE-2026-79199 Incorrect authorization in Network | UNKNOWN | — | 16%ile | Microsoft | 2026-08-11 |
| CVE-2026-79200 | Chromium: CVE-2026-79200 Use after free in Aura | UNKNOWN | — | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-79201 | Chromium: CVE-2026-79201 Improper access control in Workers | UNKNOWN | — | 20%ile | Microsoft | 2026-08-11 |
| CVE-2026-79202 | Chromium: CVE-2026-79202 Use after free in Chromecast | UNKNOWN | — | 36%ile | Microsoft | 2026-08-11 |
| CVE-2026-79203 | Chromium: CVE-2026-79203 Improper input validation in DevTools | UNKNOWN | — | 17%ile | Microsoft | 2026-08-11 |
| CVE-2026-79204 | Chromium: CVE-2026-79204 UI misrepresentation in Input | UNKNOWN | — | 17%ile | Microsoft | 2026-08-11 |
| CVE-2026-79205 | Chromium: CVE-2026-79205 Incorrect authorization in Network | UNKNOWN | — | 20%ile | Microsoft | 2026-08-11 |
| CVE-2026-79206 | Chromium: CVE-2026-79206 Out of bounds read in FileSystem | UNKNOWN | — | 25%ile | Microsoft | 2026-08-11 |
| CVE-2026-79208 | Chromium: CVE-2026-79208 Missing authorization in HTTP2 | UNKNOWN | — | 21%ile | Microsoft | 2026-08-11 |
| CVE-2026-79209 | Chromium: CVE-2026-79209 Type confusion in Animation | UNKNOWN | — | 39%ile | Microsoft | 2026-08-11 |
| CVE-2026-79211 | Chromium: CVE-2026-79211 Incorrect authorization in USB | UNKNOWN | — | 16%ile | Microsoft | 2026-08-11 |
| CVE-2026-79212 | Chromium: CVE-2026-79212 Missing authorization in Passwords | UNKNOWN | — | 20%ile | Microsoft | 2026-08-11 |
| CVE-2026-79214 | Chromium: CVE-2026-79214 Improper input validation in Preload | UNKNOWN | — | 19%ile | Microsoft | 2026-08-11 |
| CVE-2026-79215 | Chromium: CVE-2026-79215 Integer overflow in WebGL | UNKNOWN | — | 44%ile | Microsoft | 2026-08-11 |
| CVE-2026-79216 | Chromium: CVE-2026-79216 Buffer overflow in Blink | UNKNOWN | — | 34%ile | Microsoft | 2026-08-11 |
| CVE-2026-79218 | Chromium: CVE-2026-79218 Incorrect authorization in Sandbox | UNKNOWN | — | 24%ile | Microsoft | 2026-08-11 |
| CVE-2026-79219 | Chromium: CVE-2026-79219 Use after free in Bluetooth | UNKNOWN | — | 32%ile | Microsoft | 2026-08-11 |
| CVE-2026-79220 | Chromium: CVE-2026-79220 Information leak in Network | UNKNOWN | — | 21%ile | Microsoft | 2026-08-11 |
| CVE-2026-79221 | Chromium: CVE-2026-79221 Uninitialized resource in Dawn | UNKNOWN | — | 15%ile | Microsoft | 2026-08-11 |
| CVE-2026-79223 | Chromium: CVE-2026-79223 Integer overflow in Chromium | UNKNOWN | — | 25%ile | Microsoft | 2026-08-11 |
| CVE-2026-79224 | Chromium: CVE-2026-79224 Use after free in Chromecast | UNKNOWN | — | 35%ile | Microsoft | 2026-08-11 |
| CVE-2026-79225 | Chromium: CVE-2026-79225 Incorrect authorization in Browser | UNKNOWN | — | 15%ile | Microsoft | 2026-08-11 |
| CVE-2026-79226 | Chromium: CVE-2026-79226 Improper privilege management in Regional Capabilities | UNKNOWN | — | 26%ile | Microsoft | 2026-08-11 |
| CVE-2026-79227 | Chromium: CVE-2026-79227 Type confusion in DevTools | UNKNOWN | — | 39%ile | Microsoft | 2026-08-11 |
| CVE-2026-79228 | Chromium: CVE-2026-79228 Incorrect authorization in SiteIsolation | UNKNOWN | — | 16%ile | Microsoft | 2026-08-11 |
| CVE-2026-79229 | Chromium: CVE-2026-79229 Uninitialized resource in ANGLE | UNKNOWN | — | 33%ile | Microsoft | 2026-08-11 |
| CVE-2026-79230 | Chromium: CVE-2026-79230 Improper input validation in ANGLE | UNKNOWN | — | 22%ile | Microsoft | 2026-08-11 |
| CVE-2026-79231 | Chromium: CVE-2026-79231 Buffer overflow in Media | UNKNOWN | — | 39%ile | Microsoft | 2026-08-11 |
| CVE-2026-79232 | Chromium: CVE-2026-79232 Use after free in Aura | UNKNOWN | — | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-79234 | Chromium: CVE-2026-79234 Injection in CSS | UNKNOWN | — | 25%ile | Microsoft | 2026-08-11 |
| CVE-2026-79235 | Chromium: CVE-2026-79235 Use after free in WebGL | UNKNOWN | — | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-79236 | Chromium: CVE-2026-79236 Type confusion in V8 | UNKNOWN | — | 39%ile | Microsoft | 2026-08-11 |
| CVE-2026-79237 | Chromium: CVE-2026-79237 Incorrect authorization in Navigation | UNKNOWN | — | 21%ile | Microsoft | 2026-08-11 |
| CVE-2026-79238 | Chromium: CVE-2026-79238 Incorrect authorization in ServiceWorker | UNKNOWN | — | 18%ile | Microsoft | 2026-08-11 |
| CVE-2026-79239 | Chromium: CVE-2026-79239 Out of bounds read in Tint | UNKNOWN | — | 25%ile | Microsoft | 2026-08-11 |
| CVE-2026-79240 | Chromium: CVE-2026-79240 Out of bounds write in ANGLE | UNKNOWN | — | 30%ile | Microsoft | 2026-08-11 |
| CVE-2026-79242 | Chromium: CVE-2026-79242 Observable discrepancy in HTML | UNKNOWN | — | 21%ile | Microsoft | 2026-08-11 |
| CVE-2026-79243 | Chromium: CVE-2026-79243 Improper input validation in ReadingList | UNKNOWN | — | 22%ile | Microsoft | 2026-08-11 |
| CVE-2026-79244 | Chromium: CVE-2026-79244 Use after free in Animation | UNKNOWN | — | 36%ile | Microsoft | 2026-08-11 |
| CVE-2026-79245 | Chromium: CVE-2026-79245 Use after free in UI | UNKNOWN | — | 3%ile | Microsoft | 2026-08-11 |
| CVE-2026-79246 | Chromium: CVE-2026-79246 Information leak in DataTransfer | UNKNOWN | — | 22%ile | Microsoft | 2026-08-11 |
| CVE-2026-79247 | Chromium: CVE-2026-79247 Use after free in Chromoting | UNKNOWN | — | 34%ile | Microsoft | 2026-08-11 |
| CVE-2026-79248 | Chromium: CVE-2026-79248 Incorrect authorization in Input | UNKNOWN | — | 19%ile | Microsoft | 2026-08-11 |
| CVE-2026-79249 | Chromium: CVE-2026-79249 Code injection in Bisection | UNKNOWN | — | 14%ile | Microsoft | 2026-08-11 |
| CVE-2026-79250 | Chromium: CVE-2026-79250 UI misrepresentation in Navigation | UNKNOWN | — | 15%ile | Microsoft | 2026-08-11 |
| CVE-2026-79251 | Chromium: CVE-2026-79251 Improper input validation in Network | UNKNOWN | — | 18%ile | Microsoft | 2026-08-11 |
| CVE-2026-79252 | Chromium: CVE-2026-79252 Information leak in ServiceWorker | UNKNOWN | — | 9%ile | Microsoft | 2026-08-11 |
| CVE-2026-79253 | Chromium: CVE-2026-79253 Improper input validation in Network | UNKNOWN | — | 15%ile | Microsoft | 2026-08-11 |
| CVE-2026-79255 | Chromium: CVE-2026-79255 Improper input validation in WebRTC | UNKNOWN | — | 26%ile | Microsoft | 2026-08-11 |
| CVE-2026-79257 | Chromium: CVE-2026-79257 Use after free in Views | UNKNOWN | — | 30%ile | Microsoft | 2026-08-11 |
| CVE-2026-79258 | Chromium: CVE-2026-79258 Incorrect authorization in WebXR | UNKNOWN | — | 23%ile | Microsoft | 2026-08-11 |
| CVE-2026-79259 | Chromium: CVE-2026-79259 Improper input validation in Safebrowsing | UNKNOWN | — | 13%ile | Microsoft | 2026-08-11 |
| CVE-2026-79260 | Chromium: CVE-2026-79260 Improper input validation in Cookies | UNKNOWN | — | 15%ile | Microsoft | 2026-08-11 |
| CVE-2026-79261 | Chromium: CVE-2026-79261 Incorrect authorization in Controls | UNKNOWN | — | 17%ile | Microsoft | 2026-08-11 |
| CVE-2026-79262 | Chromium: CVE-2026-79262 Incorrect authorization in Network | UNKNOWN | — | 20%ile | Microsoft | 2026-08-11 |
| CVE-2026-79263 | Chromium: CVE-2026-79263 Race condition in Extensions | UNKNOWN | — | 26%ile | Microsoft | 2026-08-11 |
| CVE-2026-79264 | Chromium: CVE-2026-79264 Incorrect reference resolution in Preload | UNKNOWN | — | 26%ile | Microsoft | 2026-08-11 |
| CVE-2026-79265 | Chromium: CVE-2026-79265 Incomplete cleanup in GetUserMedia | UNKNOWN | — | 24%ile | Microsoft | 2026-08-11 |
| CVE-2026-79266 | Chromium: CVE-2026-79266 Use after free in DevTools | UNKNOWN | — | 32%ile | Microsoft | 2026-08-11 |
| CVE-2026-79267 | Chromium: CVE-2026-79267 Race condition in Workers | UNKNOWN | — | 12%ile | Microsoft | 2026-08-11 |
| CVE-2026-79269 | Chromium: CVE-2026-79269 Uninitialized resource in ANGLE | UNKNOWN | — | 22%ile | Microsoft | 2026-08-11 |
| CVE-2026-79270 | Chromium: CVE-2026-79270 Uninitialized resource in ANGLE | UNKNOWN | — | 33%ile | Microsoft | 2026-08-11 |
| CVE-2026-79271 | Chromium: CVE-2026-79271 Information leak in DOM | UNKNOWN | — | 25%ile | Microsoft | 2026-08-11 |
| CVE-2026-79272 | Chromium: CVE-2026-79272 Improper input validation in FindInPage | UNKNOWN | — | 16%ile | Microsoft | 2026-08-11 |
| CVE-2026-79274 | Chromium: CVE-2026-79274 Information leak in GPU | UNKNOWN | — | 18%ile | Microsoft | 2026-08-11 |
| CVE-2026-79275 | Chromium: CVE-2026-79275 Use after free in ANGLE | UNKNOWN | — | 42%ile | Microsoft | 2026-08-11 |
| CVE-2026-79276 | Chromium: CVE-2026-79276 Improper privilege management in FileSystem | UNKNOWN | — | 21%ile | Microsoft | 2026-08-11 |
| CVE-2026-79283 | Chromium: CVE-2026-79283 UI misrepresentation in Geometry | UNKNOWN | — | 17%ile | Microsoft | 2026-08-11 |
| CVE-2026-79284 | Chromium: CVE-2026-79284 UI misrepresentation in Core | UNKNOWN | — | 16%ile | Microsoft | 2026-08-11 |
| CVE-2026-79285 | Chromium: CVE-2026-79285 Uninitialized resource in ANGLE | UNKNOWN | — | 31%ile | Microsoft | 2026-08-11 |
| CVE-2026-79287 | Chromium: CVE-2026-79287 Observable discrepancy in Forms | UNKNOWN | — | 21%ile | Microsoft | 2026-08-11 |
| CVE-2026-79289 | Chromium: CVE-2026-79289 Improper control of a resource through its lifetime in Workers | UNKNOWN | — | 20%ile | Microsoft | 2026-08-11 |
| CVE-2026-79290 | Chromium: CVE-2026-79290 Use after free in Aura | UNKNOWN | — | 40%ile | Microsoft | 2026-08-11 |
| CVE-2026-79291 | Chromium: CVE-2026-79291 Information leak in CSS | UNKNOWN | — | 25%ile | Microsoft | 2026-08-11 |
| CVE-2026-79292 | Chromium: CVE-2026-79292 Integer overflow in Chromecast | UNKNOWN | — | 35%ile | Microsoft | 2026-08-11 |
| CVE-2026-79293 | Chromium: CVE-2026-79293 Information leak in Animation | UNKNOWN | — | 25%ile | Microsoft | 2026-08-11 |
| CVE-2026-56191 | Microsoft Exchange Online Tampering Vulnerability | CRITICAL | 10.0 | 60%ile | Microsoft | 2026-07-14 |
| CVE-2026-57106 | Data Quality Elevation of Privilege Vulnerability | CRITICAL | 10.0 | 60%ile | Microsoft | 2026-07-14 |
| CVE-2026-58275 | Azure DNS Elevation of Privilege Vulnerability | CRITICAL | 10.0 | 60%ile | Microsoft | 2026-07-14 |
| CVE-2026-58630 | Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability | CRITICAL | 10.0 | 59%ile | Microsoft | 2026-07-14 |
| CVE-2026-62825 | Azure Key Vault Elevation of Privilege Vulnerability | CRITICAL | 10.0 | 60%ile | Microsoft | 2026-07-14 |
| CVE-2026-66803 | Azure Cosmos DB Remote Code Execution Vulnerability | CRITICAL | 10.0 | 60%ile | Microsoft | 2026-07-14 |
| CVE-2026-44210 | Kata Containers have VM Escape via virtiofsd Argument Injection through Default-Enabled Pod Annotations | CRITICAL | 9.9 | 48%ile | Microsoft | 2026-07-14 |
| CVE-2026-45499 | Azure OpenAI Elevation of Privilege Vulnerability | CRITICAL | 9.9 | 56%ile | Microsoft | 2026-07-14 |
| CVE-2026-50517 | Microsoft M365 Copilot Remote Code Execution Vulnerability | CRITICAL | 9.9 | 77%ile | Microsoft | 2026-07-14 |
| CVE-2026-54120 | Microsoft Surface Remote Code Execution Vulnerability | CRITICAL | 9.9 | 62%ile | Microsoft | 2026-07-14 |
| CVE-2026-57092 | Microsoft Windows VMSwitch Elevation of Privilege Vulnerability | CRITICAL | 9.9 | 60%ile | Microsoft | 2026-07-14 |
| CVE-2026-57100 | Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability | CRITICAL | 9.9 | 56%ile | Microsoft | 2026-07-14 |
| CVE-2026-15043 | DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted <= and >= SQL operators on text | CRITICAL | 9.8 | 52%ile | Microsoft | 2026-07-14 |
| CVE-2026-17543 | SQL injection in ext-pgsql via E'...' backslash breakout | CRITICAL | 9.8 | 26%ile | Microsoft | 2026-07-14 |
| CVE-2026-38968 | ntopng through 6.6 is vulnerable to Predictable Session Identifier which can lead to Session Hijacking. HTTP session ide | CRITICAL | 9.8 | 46%ile | Microsoft | 2026-07-14 |
| CVE-2026-53374 | drm/amdgpu: zero-initialize GART table on allocation | CRITICAL | 9.8 | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-53376 | drm/amdkfd: Add upper bound check for num_of_nodes | CRITICAL | 9.8 | 5%ile | Microsoft | 2026-07-14 |
| CVE-2026-53384 | serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails | CRITICAL | 9.8 | 44%ile | Microsoft | 2026-07-14 |
| CVE-2026-53403 | fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var | CRITICAL | 9.8 | 3%ile | Microsoft | 2026-07-14 |
| CVE-2026-55971 | Apache Thrift: C++ ZLIB heap buffer overflow (write) in THeaderTransport::untransform() | CRITICAL | 9.8 | 62%ile | Microsoft | 2026-07-14 |
| CVE-2026-57433 | Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK record | CRITICAL | 9.8 | 41%ile | Microsoft | 2026-07-14 |
| CVE-2026-63800 | pNFS: Fix use-after-free in pnfs_update_layout() | CRITICAL | 9.8 | 51%ile | Microsoft | 2026-07-14 |
| CVE-2026-63824 | KEYS: fix overflow in keyctl_pkey_params_get_2() | CRITICAL | 9.8 | 6%ile | Microsoft | 2026-07-14 |
| CVE-2026-63827 | apparmor: fix use-after-free in rawdata dedup loop | CRITICAL | 9.8 | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-63828 | apparmor: mediate the implicit connect of TCP fast open sendmsg | CRITICAL | 9.8 | 6%ile | Microsoft | 2026-07-14 |
| CVE-2026-63833 | ntfs3: reject direct userspace writes to reserved $LX* xattrs | CRITICAL | 9.8 | 4%ile | Microsoft | 2026-07-14 |
| CVE-2026-63881 | drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger | CRITICAL | 9.8 | 9%ile | Microsoft | 2026-07-14 |
| CVE-2026-63882 | drm/amdkfd: fix NULL pointer bug in svm_range_set_attr | CRITICAL | 9.8 | 13%ile | Microsoft | 2026-07-14 |
| CVE-2026-63959 | usb: typec: tcpm/tcpci_maxim: validate header NDO against RX_BYTE_CNT | CRITICAL | 9.8 | 5%ile | Microsoft | 2026-07-14 |
| CVE-2026-63974 | Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close | CRITICAL | 9.8 | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-63979 | net/handshake: hand off the pinned file reference to accept_doit | CRITICAL | 9.8 | 50%ile | Microsoft | 2026-07-14 |
| CVE-2026-63983 | net/sched: fix packet loop on netem when duplicate is on | CRITICAL | 9.8 | 6%ile | Microsoft | 2026-07-14 |
| CVE-2026-63999 | ethtool: rss: fix indir_table and hkey leak on get_rxfh failure | CRITICAL | 9.8 | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-64017 | blk-mq: pop cached request if it is usable | CRITICAL | 9.8 | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-64070 | powerpc/hv-gpci: fix preempt count leak in sysfs show paths | CRITICAL | 9.8 | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-64076 | netfilter: bridge: eb_tables: close module init race | CRITICAL | 9.8 | 3%ile | Microsoft | 2026-07-14 |
| CVE-2026-64078 | netfilter: x_tables: add and use xtables_unregister_table_exit | CRITICAL | 9.8 | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-64079 | netfilter: x_tables: allocate hook ops while under mutex | CRITICAL | 9.8 | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-64138 | ksmbd: validate SID in parent security descriptor during ACL inheritance | CRITICAL | 9.8 | 39%ile | Microsoft | 2026-07-14 |
| CVE-2026-42990 | SQL Server ODBC driver Elevation of Privilege Vulnerability | CRITICAL | 9.8 | 62%ile | Microsoft | 2026-07-14 |
| CVE-2026-49172 | Windows FTP Service Remote Code Execution Vulnerability | CRITICAL | 9.8 | 62%ile | Microsoft | 2026-07-14 |
| CVE-2026-50447 | Windows Message Queuing Service (MSMQ) Remote Code Execution Vulnerability | CRITICAL | 9.8 | 62%ile | Microsoft | 2026-07-14 |
| CVE-2026-50518 | Windows DHCP Server Remote Code Execution Vulnerability | CRITICAL | 9.8 | 62%ile | Microsoft | 2026-07-14 |
| CVE-2026-50522 | Microsoft SharePoint Remote Code Execution Vulnerability | CRITICAL | 9.8 | 88%ile | Microsoft | 2026-07-14 |
| CVE-2026-54117 | Microsoft SQL Server Remote Code Execution Vulnerability | CRITICAL | 9.8 | 75%ile | Microsoft | 2026-07-14 |
| CVE-2026-54118 | Microsoft SQL Server Remote Code Execution Vulnerability | CRITICAL | 9.8 | 75%ile | Microsoft | 2026-07-14 |
| CVE-2026-54990 | Remote Desktop Client Remote Code Execution Vulnerability | CRITICAL | 9.8 | 57%ile | Microsoft | 2026-07-14 |
| CVE-2026-55010 | Minecraft Bedrock Dedicated Server Remote Code Execution Vulnerability | CRITICAL | 9.8 | 62%ile | Microsoft | 2026-07-14 |
| CVE-2026-55944 | Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability | CRITICAL | 9.8 | 75%ile | Microsoft | 2026-07-14 |
| CVE-2026-56159 | DHCP Server Service Remote Code Execution Vulnerability | CRITICAL | 9.8 | 62%ile | Microsoft | 2026-07-14 |
| CVE-2026-56165 | Microsoft Account Remote Code Execution Vulnerability | CRITICAL | 9.8 | 62%ile | Microsoft | 2026-07-14 |
| CVE-2026-56188 | Windows Server Network driver Remote Code Execution Vulnerability | CRITICAL | 9.8 | 49%ile | Microsoft | 2026-07-14 |
| CVE-2026-56190 | Remote Desktop Protocol Remote Code Execution Vulnerability | CRITICAL | 9.8 | 62%ile | Microsoft | 2026-07-14 |
| CVE-2026-58644 | Microsoft SharePoint Remote Code Execution Vulnerability | CRITICAL | 9.8 | 97%ile | Microsoft | 2026-07-14 |
| CVE-2026-50380 | Windows GDI+ Remote Code Execution Vulnerability | CRITICAL | 9.6 | 57%ile | Microsoft | 2026-07-14 |
| CVE-2026-55008 | Microsoft Exchange Server Spoofing Vulnerability | CRITICAL | 9.6 | 59%ile | Microsoft | 2026-07-14 |
| CVE-2026-41106 | Microsoft 365 Copilot Elevation of Privilege Vulnerability | CRITICAL | 9.3 | 54%ile | Microsoft | 2026-07-14 |
| CVE-2026-49798 | Windows Kernel Elevation of Privilege Vulnerability | CRITICAL | 9.3 | 30%ile | Microsoft | 2026-07-14 |
| CVE-2026-62835 | Azure Portal Information Disclosure Vulnerability | CRITICAL | 9.3 | 62%ile | Microsoft | 2026-07-14 |
| CVE-2026-11564 | Native CA trust persist | CRITICAL | 9.1 | 49%ile | Microsoft | 2026-07-14 |
| CVE-2026-14740 | DBI versions before 1.650 for Perl read one byte out-of-bounds in preparse when deleting an initial SQL comment | CRITICAL | 9.1 | 52%ile | Microsoft | 2026-07-14 |
| CVE-2026-48144 | Apache Thrift: c_glib TLS Client Missing Hostname Verification | CRITICAL | 9.1 | 34%ile | Microsoft | 2026-07-14 |
| CVE-2026-58023 | Apache Thrift: c_glib heap out-of-bounds read in transport leftover-bytes path | CRITICAL | 9.1 | 63%ile | Microsoft | 2026-07-14 |
| CVE-2026-58662 | Apache Thrift: C++ THeaderTransport::readString() info-header length bounds bypass | CRITICAL | 9.1 | 65%ile | Microsoft | 2026-07-14 |
| CVE-2026-60082 | DBI versions before 1.651 for Perl do not enforce statement handle consistency with the row | CRITICAL | 9.1 | 51%ile | Microsoft | 2026-07-14 |
| CVE-2026-8924 | trailing dot domain super cookie | CRITICAL | 9.1 | 52%ile | Microsoft | 2026-07-14 |
| CVE-2026-55040 | Microsoft SharePoint Server Security Feature Bypass Vulnerability | CRITICAL | 9.1 | 99%ile | Microsoft | 2026-07-14 |
| CVE-2026-57075 | YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via a signed-char lookup-table index in syck_base64 | CRITICAL | 9.1 | 50%ile | Microsoft | 2026-07-14 |
| CVE-2026-58289 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | CRITICAL | 9.0 | 81%ile | Microsoft | 2026-07-14 |
| CVE-2026-14380 | DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile | HIGH | 8.8 | 43%ile | Microsoft | 2026-07-14 |
| CVE-2026-57215 | RabbitMQ: Direct-reply-to binding persistence can lead to unauthorized reply-channel injection and persistent phantom | HIGH | 8.8 | 32%ile | Microsoft | 2026-07-14 |
| CVE-2026-58253 | NATS Server: Route API Auth Bypass | HIGH | 8.8 | 31%ile | Microsoft | 2026-07-14 |
| CVE-2026-63807 | KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level | HIGH | 8.8 | 7%ile | Microsoft | 2026-07-14 |
| CVE-2026-64475 | vfio/pci: Release the VGA arbiter client on register_device() failure | HIGH | 8.8 | 3%ile | Microsoft | 2026-07-14 |
| CVE-2026-66032 | libssh2 Double-Free Heap Corruption via sftp_open() | HIGH | 8.8 | 39%ile | Microsoft | 2026-07-14 |
| CVE-2026-47295 | Microsoft SQL Server Elevation of Privilege Vulnerability | HIGH | 8.8 | 62%ile | Microsoft | 2026-07-14 |
| CVE-2026-47300 | ASP.NET Core Elevation of Privilege Vulnerability | HIGH | 8.8 | 56%ile | Microsoft | 2026-07-14 |
| CVE-2026-47301 | Configuration Manager Elevation of Privilege Vulnerability | HIGH | 8.8 | 56%ile | Microsoft | 2026-07-14 |
| CVE-2026-47303 | ASP.NET Core Elevation of Privilege Vulnerability | HIGH | 8.8 | 58%ile | Microsoft | 2026-07-14 |
| CVE-2026-47632 | Azure Connected Machine Agent Elevation of Privilege Vulnerability | HIGH | 8.8 | 42%ile | Microsoft | 2026-07-14 |
| CVE-2026-48564 | DHCP Server Service Remote Code Execution Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-07-14 |
| CVE-2026-49178 | Windows Active Directory Domain Services Remote Code Execution Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-07-14 |
| CVE-2026-49795 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 8.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-50342 | Windows MIDI Service Module Elevation of Privileges Vulnerability | HIGH | 8.8 | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-50360 | Windows SMB Server Elevation of Privilege Vulnerability | HIGH | 8.8 | 56%ile | Microsoft | 2026-07-14 |
| CVE-2026-50369 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | HIGH | 8.8 | 53%ile | Microsoft | 2026-07-14 |
| CVE-2026-50370 | DHCP Server Service Remote Code Execution Vulnerability | HIGH | 8.8 | 43%ile | Microsoft | 2026-07-14 |
| CVE-2026-50382 | DirectX Graphics Kernel Remote Code Execution Vulnerability | HIGH | 8.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-50385 | Windows Runtime Elevation of Privilege Vulnerability | HIGH | 8.8 | 17%ile | Microsoft | 2026-07-14 |
| CVE-2026-50398 | Windows Media Elevation of Privilege Vulnerability | HIGH | 8.8 | 47%ile | Microsoft | 2026-07-14 |
| CVE-2026-50413 | Windows Runtime Elevation of Privilege Vulnerability | HIGH | 8.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-50438 | Microsoft PC Manager Elevation of Privilege Vulnerability | HIGH | 8.8 | 31%ile | Microsoft | 2026-07-14 |
| CVE-2026-50444 | Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability | HIGH | 8.8 | 56%ile | Microsoft | 2026-07-14 |
| CVE-2026-50474 | Remote Desktop Client Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-07-14 |
| CVE-2026-50477 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 8.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-50489 | Win32k Elevation of Privilege Vulnerability | HIGH | 8.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-50663 | Game: Age of Empires II: Definitive Edition Remote Code Execution Vulnerability | HIGH | 8.8 | 61%ile | Microsoft | 2026-07-14 |
| CVE-2026-50666 | Windows Remote Access Elevation of Privilege Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-07-14 |
| CVE-2026-50670 | Windows Win32k Elevation of Privilege Vulnerability | HIGH | 8.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-50687 | Windows Win32k Elevation of Privilege Vulnerability | HIGH | 8.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-50692 | Desktop Window Manager Elevation of Privilege Vulnerability | HIGH | 8.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-54107 | Windows Win32k Elevation of Privilege Vulnerability | HIGH | 8.8 | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-54121 | Active Directory Certificate Services Elevation of Privilege Vulnerability | HIGH | 8.8 | 56%ile | Microsoft | 2026-07-14 |
| CVE-2026-54982 | Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability | HIGH | 8.8 | 45%ile | Microsoft | 2026-07-14 |
| CVE-2026-54999 | Windows TCP/IP Remote Code Execution Vulnerability | HIGH | 8.8 | 35%ile | Microsoft | 2026-07-14 |
| CVE-2026-55002 | Microsoft SQL Server Elevation of Privilege Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-07-14 |
| CVE-2026-55005 | Microsoft Exchange Server Remote Code Execution Vulnerability | HIGH | 8.8 | 63%ile | Microsoft | 2026-07-14 |
| CVE-2026-55052 | Microsoft SharePoint Elevation of Privilege Vulnerability | HIGH | 8.8 | 61%ile | Microsoft | 2026-07-14 |
| CVE-2026-56194 | Windows NFS Server Elevation of Privilege Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-07-14 |
| CVE-2026-56196 | Windows Admin Center (WAC) Remote Code Execution Vulnerability | HIGH | 8.8 | 64%ile | Microsoft | 2026-07-14 |
| CVE-2026-56197 | Windows Admin Center (WAC) Remote Code Execution Vulnerability | HIGH | 8.8 | 62%ile | Microsoft | 2026-07-14 |
| CVE-2026-56642 | Microsoft Fabric Data Warehouse Remote Code Execution Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-07-14 |
| CVE-2026-56645 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-07-14 |
| CVE-2026-56647 | Windows Remote Access Service Infrastructure Elevation of Privilege Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-07-14 |
| CVE-2026-57087 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | HIGH | 8.8 | 56%ile | Microsoft | 2026-07-14 |
| CVE-2026-57090 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-07-14 |
| CVE-2026-57094 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-07-14 |
| CVE-2026-57102 | Visual Studio Code Security Feature Bypass Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-07-14 |
| CVE-2026-57969 | Azure CycleCloud Elevation of Privilege Vulnerability | HIGH | 8.8 | 56%ile | Microsoft | 2026-07-14 |
| CVE-2026-57974 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-07-14 |
| CVE-2026-57981 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-07-14 |
| CVE-2026-58277 | Microsoft SharePoint Elevation of Privilege Vulnerability | HIGH | 8.8 | 61%ile | Microsoft | 2026-07-14 |
| CVE-2026-58534 | Windows Input Method Editor (IME) Elevation of Privilege Vulnerability | HIGH | 8.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-58594 | Remote Desktop Client Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-07-14 |
| CVE-2026-58608 | Windows Print Spooler Remote Code Execution Vulnerability | HIGH | 8.8 | 47%ile | Microsoft | 2026-07-14 |
| CVE-2026-58626 | Windows Remote Desktop Services Remote Code Execution Vulnerability | HIGH | 8.8 | 60%ile | Microsoft | 2026-07-14 |
| CVE-2026-62870 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2026-07-14 |
| CVE-2026-57983 | Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability | HIGH | 8.7 | 51%ile | Microsoft | 2026-07-14 |
| CVE-2026-13321 | DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field | HIGH | 8.6 | 11%ile | Microsoft | 2026-07-14 |
| CVE-2026-14739 | DBI versions before 1.650 for Perl have a heap overflow when preparsing SQL statements with an extreme number of placeho | HIGH | 8.6 | 36%ile | Microsoft | 2026-07-14 |
| CVE-2026-53366 | ipv4: account for fraggap on the paged allocation path | HIGH | 8.5 | 6%ile | Microsoft | 2026-07-14 |
| CVE-2026-56001 | libXfont2 BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow | HIGH | 8.5 | 33%ile | Microsoft | 2026-07-14 |
| CVE-2026-56002 | libXfont2 PCF Font Parsing Heap Buffer Overflow | HIGH | 8.5 | 37%ile | Microsoft | 2026-07-14 |
| CVE-2026-56003 | libXfont2 computeProps Property Buffer Heap Buffer Overflow | HIGH | 8.5 | 34%ile | Microsoft | 2026-07-14 |
| CVE-2026-50340 | Windows Runtime Elevation of Privilege Vulnerability | HIGH | 8.5 | 55%ile | Microsoft | 2026-07-14 |
| CVE-2026-56167 | Azure AI Search Elevation of Privilege Vulnerability | HIGH | 8.5 | 46%ile | Microsoft | 2026-07-14 |
| CVE-2026-63803 | hdlc_ppp: sync per-proto timers before freeing hdlc state | HIGH | 8.4 | 3%ile | Microsoft | 2026-07-14 |
| CVE-2026-63823 | keys: Pin request_key_auth payload in instantiate paths | HIGH | 8.4 | 5%ile | Microsoft | 2026-07-14 |
| CVE-2026-64320 | nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page | HIGH | 8.4 | 57%ile | Microsoft | 2026-07-14 |
| CVE-2026-64456 | hwrng: virtio: clamp device-reported used.len at copy_data() | HIGH | 8.4 | 4%ile | Microsoft | 2026-07-14 |
| CVE-2026-64513 | KVM: x86: Unconditionally recompute CR8 intercept on PPR update | HIGH | 8.4 | 13%ile | Microsoft | 2026-07-14 |
| CVE-2026-49184 | Windows NTFS Remote Code Execution Vulnerability | HIGH | 8.4 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-50520 | Visual Studio Code Remote Code Execution Vulnerability | HIGH | 8.4 | 29%ile | Microsoft | 2026-07-14 |
| CVE-2026-54122 | Windows GDI+ Remote Code Execution Vulnerability | HIGH | 8.4 | 30%ile | Microsoft | 2026-07-14 |
| CVE-2026-54128 | Windows DHCP Client Remote Code Execution Vulnerability | HIGH | 8.4 | 30%ile | Microsoft | 2026-07-14 |
| CVE-2026-54992 | Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability | HIGH | 8.4 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-55045 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 8.4 | 39%ile | Microsoft | 2026-07-14 |
| CVE-2026-56181 | Windows Network Address Translation (NAT) Spoofing Vulnerability | HIGH | 8.3 | 20%ile | Microsoft | 2026-07-14 |
| CVE-2026-58281 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | HIGH | 8.3 | 62%ile | Microsoft | 2026-07-14 |
| CVE-2026-58284 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | HIGH | 8.3 | 47%ile | Microsoft | 2026-07-14 |
| CVE-2026-58285 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | HIGH | 8.3 | 49%ile | Microsoft | 2026-07-14 |
| CVE-2026-58287 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | HIGH | 8.3 | 49%ile | Microsoft | 2026-07-14 |
| CVE-2026-58288 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | HIGH | 8.3 | 49%ile | Microsoft | 2026-07-14 |
| CVE-2026-58295 | Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability | HIGH | 8.3 | 43%ile | Microsoft | 2026-07-14 |
| CVE-2026-58596 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | HIGH | 8.3 | 49%ile | Microsoft | 2026-07-14 |
| CVE-2026-60005 | NGINX ngx_http_slice_module vulnerability | HIGH | 8.2 | 55%ile | Microsoft | 2026-07-14 |
| CVE-2026-63829 | net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink | HIGH | 8.2 | 4%ile | Microsoft | 2026-07-14 |
| CVE-2026-64380 | smb: client: harden POSIX SID length parsing | HIGH | 8.2 | 38%ile | Microsoft | 2026-07-14 |
| CVE-2026-50338 | Azure Spring Apps Elevation of Privilege Vulnerability | HIGH | 8.2 | 44%ile | Microsoft | 2026-07-14 |
| CVE-2026-50429 | Windows Kernel Information Disclosure Vulnerability | HIGH | 8.2 | 65%ile | Microsoft | 2026-07-14 |
| CVE-2026-50528 | .NET Security Feature Bypass Vulnerability | HIGH | 8.2 | 49%ile | Microsoft | 2026-07-14 |
| CVE-2026-50680 | Windows Hyper-V Elevation of Privilege Vulnerability | HIGH | 8.2 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-58525 | Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability | HIGH | 8.2 | 44%ile | Microsoft | 2026-07-14 |
| CVE-2026-42533 | NGINX Map directive and Regex matching vulnerability | HIGH | 8.1 | 94%ile | Microsoft | 2026-07-14 |
| CVE-2026-50721 | IKEv1 Denial of Service via RSA-SHA1 (PKCS#1 Version 1.5 Encrypted) authentication payload | HIGH | 8.1 | 33%ile | Microsoft | 2026-07-14 |
| CVE-2026-50722 | IKEv2 Denial of Service via RSA-SHA1 (PKCS#1 RSASSA-PKCS1-v1_5) authentication payload | HIGH | 8.1 | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-53381 | virtiofs: fix UAF on submount umount | HIGH | 8.1 | 3%ile | Microsoft | 2026-07-14 |
| CVE-2026-64448 | smb: client: restrict implied bcc[0] exemption to responses without data area | HIGH | 8.1 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-8286 | wrong STARTTLS connection reuse | HIGH | 8.1 | 24%ile | Microsoft | 2026-07-14 |
| CVE-2026-42900 | Microsoft Windows App Store Elevation of Privilege Vulnerability | HIGH | 8.1 | 46%ile | Microsoft | 2026-07-14 |
| CVE-2026-47304 | .NET Security Feature Bypass Vulnerability | HIGH | 8.1 | 21%ile | Microsoft | 2026-07-14 |
| CVE-2026-49164 | Windows Active Directory Domain Services Remote Code Execution Vulnerability | HIGH | 8.1 | 56%ile | Microsoft | 2026-07-14 |
| CVE-2026-50439 | Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability | HIGH | 8.1 | 56%ile | Microsoft | 2026-07-14 |
| CVE-2026-50460 | Windows Runtime Elevation of Privilege Vulnerability | HIGH | 8.1 | 46%ile | Microsoft | 2026-07-14 |
| CVE-2026-50487 | Windows DNS Client Elevation of Privilege Vulnerability | HIGH | 8.1 | 56%ile | Microsoft | 2026-07-14 |
| CVE-2026-50686 | Windows OLE Remote Code Execution Vulnerability | HIGH | 8.1 | 53%ile | Microsoft | 2026-07-14 |
| CVE-2026-50694 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability | HIGH | 8.1 | 56%ile | Microsoft | 2026-07-14 |
| CVE-2026-54995 | Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability | HIGH | 8.1 | 56%ile | Microsoft | 2026-07-14 |
| CVE-2026-56169 | Windows Admin Center Elevation of Privilege Vulnerability | HIGH | 8.1 | 55%ile | Microsoft | 2026-07-14 |
| CVE-2026-56186 | Windows Secure Channel Information Disclosure Vulnerability | HIGH | 8.1 | 66%ile | Microsoft | 2026-07-14 |
| CVE-2026-58282 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | HIGH | 8.1 | 36%ile | Microsoft | 2026-07-14 |
| CVE-2026-58283 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | HIGH | 8.1 | 38%ile | Microsoft | 2026-07-14 |
| CVE-2026-58286 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | HIGH | 8.1 | 36%ile | Microsoft | 2026-07-14 |
| CVE-2026-58293 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | HIGH | 8.1 | 49%ile | Microsoft | 2026-07-14 |
| CVE-2026-58595 | Microsoft Bing App for IOS Spoofing Vulnerability | HIGH | 8.1 | 53%ile | Microsoft | 2026-07-14 |
| CVE-2026-58617 | M365 Copilot for iOS Elevation of Privilege Vulnerability | HIGH | 8.1 | 56%ile | Microsoft | 2026-07-14 |
| CVE-2026-66318 | Microsoft Edge (Chromium-based) Information Disclosure Vulnerability | HIGH | 8.1 | 30%ile | Microsoft | 2026-07-14 |
| CVE-2026-35425 | Azure API Management (APIM) Remote Code Execution Vulnerability | HIGH | 8.0 | 53%ile | Microsoft | 2026-07-14 |
| CVE-2026-42975 | Windows Bluetooth Port Driver Remote Code Execution | HIGH | 8.0 | 45%ile | Microsoft | 2026-07-14 |
| CVE-2026-49169 | Windows DNS Server Remote Code Execution Vulnerability | HIGH | 8.0 | 55%ile | Microsoft | 2026-07-14 |
| CVE-2026-50365 | Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability | HIGH | 8.0 | 46%ile | Microsoft | 2026-07-14 |
| CVE-2026-50502 | Windows Event Logging Service Remote Code Execution Vulnerability | HIGH | 8.0 | 51%ile | Microsoft | 2026-07-14 |
| CVE-2026-50683 | Windows DHCP Client Elevation of Privilege Vulnerability | HIGH | 8.0 | 48%ile | Microsoft | 2026-07-14 |
| CVE-2026-58647 | Microsoft PowerBI Report Server Spoofing Vulnerability | HIGH | 8.0 | 44%ile | Microsoft | 2026-07-14 |
| CVE-2026-14191 | WinRAR / UnRAR RAR5 recovery-volume (.rev) out-of-bounds heap write in RecVolumes5::ReadHeader | HIGH | 7.8 | 38%ile | Microsoft | 2026-07-14 |
| CVE-2026-16493 | Ansible-core: argument injection in ansible-galaxy collection install via git clone (incomplete fix for cve-2026-11332) | HIGH | 7.8 | 19%ile | Microsoft | 2026-07-14 |
| CVE-2026-3842 | Qemu-kvm: hyperv/syndbg: missing mapped-length guard after cpu_physical_memory_map causes host oob write | HIGH | 7.8 | 6%ile | Microsoft | 2026-07-14 |
| CVE-2026-39822 | Root escape via symlink plus trailing slash in os | HIGH | 7.8 | 14%ile | Microsoft | 2026-07-14 |
| CVE-2026-53388 | fuse: re-lock request before replacing page cache folio | HIGH | 7.8 | 3%ile | Microsoft | 2026-07-14 |
| CVE-2026-59856 | Vim: Arbitrary Code Execution via PHP Omni-Completion | HIGH | 7.8 | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-63794 | KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path | HIGH | 7.8 | 4%ile | Microsoft | 2026-07-14 |
| CVE-2026-63802 | blk-cgroup: fix UAF in __blkcg_rstat_flush() | HIGH | 7.8 | 1%ile | Microsoft | 2026-07-14 |
| CVE-2026-63831 | mac802154: llsec: add skb_cow_data() before in-place crypto | HIGH | 7.8 | 24%ile | Microsoft | 2026-07-14 |
| CVE-2026-63832 | wifi: mt76: add wcid publish check in mt76_sta_add | HIGH | 7.8 | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-63853 | drm/amdgpu/vcn: set no_user_fence for VCN v4.0 enc ring | HIGH | 7.8 | 7%ile | Microsoft | 2026-07-14 |
| CVE-2026-63858 | netfilter: nf_tables: add hook transactions for device deletions | HIGH | 7.8 | 1%ile | Microsoft | 2026-07-14 |
| CVE-2026-64191 | i2c: stub: Reject I2C block transfers with invalid length | HIGH | 7.8 | 6%ile | Microsoft | 2026-07-14 |
| CVE-2026-64192 | bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized | HIGH | 7.8 | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-64266 | fuse: re-lock request before returning from fuse_ref_folio() | HIGH | 7.8 | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-64298 | NFSv4: include MAY_WRITE in open permission mask for O_TRUNC | HIGH | 7.8 | 4%ile | Microsoft | 2026-07-14 |
| CVE-2026-64305 | crypto: qat - protect service table iterations with service_lock | HIGH | 7.8 | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-64313 | crypto: ecc - Fix carry overflow in vli multiplication | HIGH | 7.8 | 29%ile | Microsoft | 2026-07-14 |
| CVE-2026-64322 | udf: validate sparing table length as an entry count, not a byte count | HIGH | 7.8 | 6%ile | Microsoft | 2026-07-14 |
| CVE-2026-64341 | USB: iowarrior: fix use-after-free on disconnect race | HIGH | 7.8 | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-64382 | smb: client: fix double-free in SMB2_open() replay | HIGH | 7.8 | 29%ile | Microsoft | 2026-07-14 |
| CVE-2026-64389 | ksmbd: validate NTLMv2 response before updating session key | HIGH | 7.8 | 42%ile | Microsoft | 2026-07-14 |
| CVE-2026-64391 | ksmbd: use opener credentials for ADS I/O | HIGH | 7.8 | 42%ile | Microsoft | 2026-07-14 |
| CVE-2026-64423 | ipv4: igmp: remove multicast group from hash table on device destruction | HIGH | 7.8 | 3%ile | Microsoft | 2026-07-14 |
| CVE-2026-64481 | ALSA: hda/cs35l41: Fix firmware load work teardown | HIGH | 7.8 | 7%ile | Microsoft | 2026-07-14 |
| CVE-2026-64508 | bpf: Support for hardening against JIT spraying | HIGH | 7.8 | 9%ile | Microsoft | 2026-07-14 |
| CVE-2026-64556 | perf/core: Detach event groups during remove_on_exec | HIGH | 7.8 | 5%ile | Microsoft | 2026-07-14 |
| CVE-2026-64600 | xfs: resample the data fork mapping after cycling ILOCK | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-42982 | Windows Secure Kernel Mode Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-44800 | Windows Push Notifications Elevation of Privilege Vulnerability | HIGH | 7.8 | 10%ile | Microsoft | 2026-07-14 |
| CVE-2026-47290 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-47305 | Visual Studio Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-47642 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-48581 | Surface Broker SDMA Elevation of Privilege Vulnerability | HIGH | 7.8 | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-49166 | Windows Print Configuration Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-49170 | Windows StateRepository API Server file Elevation of Privilege Vulnerability | HIGH | 7.8 | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-49173 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-49175 | Windows DNS Client Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-49176 | Windows WalletService Elevation of Privilege Vulnerability | HIGH | 7.8 | 26%ile | Microsoft | 2026-07-14 |
| CVE-2026-49783 | Secure Boot Security Feature Bypass Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-49792 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-49793 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-49796 | Windows GDI+ Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-49797 | Windows NTFS Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-49800 | Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-49808 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.8 | 10%ile | Microsoft | 2026-07-14 |
| CVE-2026-50293 | Windows Internal Task Bar Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-50301 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-50305 | Microsoft Brokering File System Elevation of Privilege Vulnerability | HIGH | 7.8 | 17%ile | Microsoft | 2026-07-14 |
| CVE-2026-50306 | Windows TCP/IP Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-50308 | Windows NTFS Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-50309 | Windows NTFS Remote Code Execution Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-50311 | Windows Server Elevation of Privilege Vulnerability | HIGH | 7.8 | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-50313 | Windows NTFS Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-50314 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-50315 | Windows Image Acquisition Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-50317 | Windows Operating Systems Elevation of Privilege Vulnerability | HIGH | 7.8 | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-50318 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-50321 | Windows USB Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-50326 | Windows Unified Consent System Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-50327 | Windows Media Remote Code Execution Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-50329 | Microsoft DWM Core Library Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-50331 | Windows Application Model Core API Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-50332 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-50333 | Windows Spaceport.sys Elevation of Privilege Vulnerability | HIGH | 7.8 | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-50335 | Windows Operating Systems Elevation of Privilege Vulnerability | HIGH | 7.8 | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-50336 | Windows Media Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-50337 | Windows Notification Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-50343 | Microsoft Install Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-50344 | Windows OLE Elevation of Privilege Vulnerability | HIGH | 7.8 | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-50346 | Netlogon RPC Elevation of Privilege Vulnerability | HIGH | 7.8 | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-50347 | Windows Data.dll Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-50351 | Windows Audio Compression Manager (ACM) Elevation of Privilege Vulnerability | HIGH | 7.8 | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-50353 | DirectX Graphics Kernel Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-50357 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-50361 | Microsoft Brokering File System Elevation of Privilege Vulnerability | HIGH | 7.8 | 17%ile | Microsoft | 2026-07-14 |
| CVE-2026-50362 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-50363 | Windows Push Notifications Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-50367 | Windows Sensor Data Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-50373 | Windows Search Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-50378 | Windows Key Guard Elevation of Privilege Vulnerability | HIGH | 7.8 | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-50386 | Windows NTFS Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-50387 | Windows GDI Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-50388 | Windows NTFS Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-50391 | Windows Group Policy Elevation of Privilege Vulnerability | HIGH | 7.8 | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-50399 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-50400 | Windows App Package Installer Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-50402 | NTFS Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-50405 | Windows Filtering Platform Elevation of Privilege Vulnerability | HIGH | 7.8 | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-50407 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-50412 | Windows NTFS Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-50417 | Windows NTFS Remote Code Execution Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-50421 | Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-50422 | Windows NTFS Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-50423 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.8 | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-50425 | Windows Internal System User Profile Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-50427 | Content Delivery Manager Elevation of Privilege Vulnerability | HIGH | 7.8 | 17%ile | Microsoft | 2026-07-14 |
| CVE-2026-50433 | Windows Media Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-50435 | Windows Overlay Filter Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-50440 | Windows Audio Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-50441 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-50448 | Windows NTFS Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-50450 | Windows Network Connections Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 10%ile | Microsoft | 2026-07-14 |
| CVE-2026-50457 | Windows Runtime Elevation of Privilege Vulnerability | HIGH | 7.8 | 17%ile | Microsoft | 2026-07-14 |
| CVE-2026-50458 | Microsoft Brokering File System Elevation of Privilege Vulnerability | HIGH | 7.8 | 17%ile | Microsoft | 2026-07-14 |
| CVE-2026-50461 | Windows NTFS Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-50462 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-50466 | Microsoft Brokering File System Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-50467 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-50469 | Windows Projected File System Elevation of Privilege Vulnerability | HIGH | 7.8 | 31%ile | Microsoft | 2026-07-14 |
| CVE-2026-50471 | Windows NTFS Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-50476 | Windows Network Connections Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 20%ile | Microsoft | 2026-07-14 |
| CVE-2026-50478 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-50479 | Windows USB Hub Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-50480 | Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-50484 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-50486 | Windows Runtime Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-50488 | Clipboard User Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 25%ile | Microsoft | 2026-07-14 |
| CVE-2026-50493 | DirectX Graphics Kernel Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-50494 | Windows NTFS Remote Code Execution Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-50498 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | HIGH | 7.8 | 30%ile | Microsoft | 2026-07-14 |
| CVE-2026-50499 | Windows Print Spooler Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-50501 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | HIGH | 7.8 | 30%ile | Microsoft | 2026-07-14 |
| CVE-2026-50509 | Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability | HIGH | 7.8 | 89%ile | Microsoft | 2026-07-14 |
| CVE-2026-50510 | GitHub Copilot Remote Code Execution Vulnerability | HIGH | 7.8 | 30%ile | Microsoft | 2026-07-14 |
| CVE-2026-50646 | .NET Framework Remote Code Execution Vulnerability | HIGH | 7.8 | 91%ile | Microsoft | 2026-07-14 |
| CVE-2026-50649 | .NET Remote Code Execution Vulnerability | HIGH | 7.8 | 91%ile | Microsoft | 2026-07-14 |
| CVE-2026-50650 | .NET Framework Elevation of Privilege Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-50655 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-50665 | Microsoft Office Information Disclosure Vulnerability | HIGH | 7.8 | 44%ile | Microsoft | 2026-07-14 |
| CVE-2026-50667 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-50673 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.8 | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-50675 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-50676 | Windows Media Elevation of Privilege Vulnerability | HIGH | 7.8 | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-50677 | Windows Media Elevation of Privilege Vulnerability | HIGH | 7.8 | 17%ile | Microsoft | 2026-07-14 |
| CVE-2026-50679 | Windows Search Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-50688 | Windows Win32k Elevation of Privilege Vulnerability | HIGH | 7.8 | 20%ile | Microsoft | 2026-07-14 |
| CVE-2026-50689 | Windows Clipboard Server Elevation of Privilege Vulnerability | HIGH | 7.8 | 17%ile | Microsoft | 2026-07-14 |
| CVE-2026-50697 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 34%ile | Microsoft | 2026-07-14 |
| CVE-2026-54109 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-54112 | Windows Win32k Elevation of Privilege Vulnerability | HIGH | 7.8 | 10%ile | Microsoft | 2026-07-14 |
| CVE-2026-54114 | Windows Win32k Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-54115 | Windows Message Queuing (MSMQ) Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-54124 | Windows Terminal Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-54125 | Windows Runtime Elevation of Privilege Vulnerability | HIGH | 7.8 | 17%ile | Microsoft | 2026-07-14 |
| CVE-2026-54131 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-54986 | Windows Win32k Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-54987 | Windows Overlay Filter Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-54991 | Windows USB Print Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-54993 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-55001 | Active Directory Domain Services Elevation of Privilege Vulnerability | HIGH | 7.8 | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-55004 | Windows Print Configuration Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-55006 | Microsoft Exchange Server Elevation of Privilege Vulnerability | HIGH | 7.8 | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-55009 | Microsoft Exchange Server Elevation of Privilege Vulnerability | HIGH | 7.8 | 85%ile | Microsoft | 2026-07-14 |
| CVE-2026-55011 | Microsoft Defender Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-55012 | Microsoft Defender Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-55014 | Windows Remote Help Defense Elevation of Privilege Vulnerability | HIGH | 7.8 | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-55017 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-55018 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-55022 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-55024 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-55025 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-55029 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-55031 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-55032 | Microsoft Word Remote Code Execution Vulnerability | HIGH | 7.8 | 47%ile | Microsoft | 2026-07-14 |
| CVE-2026-55033 | Microsoft Word Remote Code Execution Vulnerability | HIGH | 7.8 | 47%ile | Microsoft | 2026-07-14 |
| CVE-2026-55036 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-55037 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-55038 | Microsoft Word Remote Code Execution Vulnerability | HIGH | 7.8 | 47%ile | Microsoft | 2026-07-14 |
| CVE-2026-55039 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-55041 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-55043 | Microsoft PowerPoint Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-55044 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-55048 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-55049 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-55053 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-55055 | Microsoft Word Remote Code Execution Vulnerability | HIGH | 7.8 | 47%ile | Microsoft | 2026-07-14 |
| CVE-2026-55056 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-55058 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-55120 | Microsoft PowerPoint Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-55123 | Microsoft PowerPoint Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-55125 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 7.8 | 47%ile | Microsoft | 2026-07-14 |
| CVE-2026-55127 | Microsoft Word Remote Code Execution Vulnerability | HIGH | 7.8 | 47%ile | Microsoft | 2026-07-14 |
| CVE-2026-55128 | Microsoft Word Remote Code Execution Vulnerability | HIGH | 7.8 | 47%ile | Microsoft | 2026-07-14 |
| CVE-2026-55129 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-55130 | Microsoft Word Remote Code Execution Vulnerability | HIGH | 7.8 | 47%ile | Microsoft | 2026-07-14 |
| CVE-2026-55131 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-55132 | Microsoft Word Remote Code Execution Vulnerability | HIGH | 7.8 | 47%ile | Microsoft | 2026-07-14 |
| CVE-2026-55133 | Microsoft OneNote Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-55134 | Microsoft Word Remote Code Execution Vulnerability | HIGH | 7.8 | 47%ile | Microsoft | 2026-07-14 |
| CVE-2026-55136 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-55137 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-55140 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-55141 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-55899 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-55947 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-55948 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-55949 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-56155 | Active Directory Federation Services Elevation of Privilege Vulnerability | HIGH | 7.8 | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-56156 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-56175 | Windows NTFS Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-56176 | Windows Win32k Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-56182 | Windows NTFS Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-56189 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | HIGH | 7.8 | 33%ile | Microsoft | 2026-07-14 |
| CVE-2026-56643 | DirectX Graphics Kernel Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-56644 | DirectX Graphics Kernel Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-56650 | Windows Network File System Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-57088 | Extensible Storage Engine (ESENT) Elevation of Privilege Vulnerability | HIGH | 7.8 | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-57091 | Windows File History Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-57096 | Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-57107 | Windows Admin Center Elevation of Privilege Vulnerability | HIGH | 7.8 | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-57968 | Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-58527 | Windows Runtime Elevation of Privilege Vulnerability | HIGH | 7.8 | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-58530 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | HIGH | 7.8 | 30%ile | Microsoft | 2026-07-14 |
| CVE-2026-58532 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-58536 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-58537 | Microsoft NAT Helper Components (ipnathlp.dll) Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-58538 | Windows Bluetooth Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-58540 | Windows Installer Elevation of Privilege Vulnerability | HIGH | 7.8 | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-58541 | Microsoft DWM Core Library Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-58542 | Windows Media Remote Code Execution Vulnerability | HIGH | 7.8 | 30%ile | Microsoft | 2026-07-14 |
| CVE-2026-58601 | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-58602 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-58609 | Windows Graphics Component Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-58610 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-58613 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-07-14 |
| CVE-2026-58618 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-58628 | Windows Wireless Network Manager Elevation of Privilege Vulnerability | HIGH | 7.8 | 10%ile | Microsoft | 2026-07-14 |
| CVE-2026-58631 | Windows Admin Center (WAC) Remote Code Execution Vulnerability | HIGH | 7.8 | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-58632 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-58633 | Desktop Window Manager Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-58634 | Desktop Window Manager Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-58635 | Windows Narrator Braille Elevation of Privilege Vulnerability | HIGH | 7.8 | 25%ile | Microsoft | 2026-07-14 |
| CVE-2026-58636 | Microsoft PC Manager Elevation of Privilege Vulnerability | HIGH | 7.8 | 31%ile | Microsoft | 2026-07-14 |
| CVE-2026-57076 | YAML::Syck versions before 1.47 for Perl allow a heap use-after-free via an anchor name reused as an anchors-table key i | HIGH | 7.8 | 6%ile | Microsoft | 2026-07-14 |
| CVE-2026-15392 | DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location | HIGH | 7.7 | 9%ile | Microsoft | 2026-07-14 |
| CVE-2026-17527 | Virt-cdi-operator: containerized-data-importer: cdi.kubevirt.io:view aggregated clusterrole grants create on datavolumes | HIGH | 7.7 | 47%ile | Microsoft | 2026-07-14 |
| CVE-2026-55953 | TLS 1.2 and DTLS client accepts unoffered anonymous cipher suite, bypassing server authentication | HIGH | 7.7 | 14%ile | Microsoft | 2026-07-14 |
| CVE-2026-58207 | NATS Server: Remote crash via integer overflow in Connz pagination | HIGH | 7.7 | 47%ile | Microsoft | 2026-07-14 |
| CVE-2026-60002 | ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This | HIGH | 7.7 | 23%ile | Microsoft | 2026-07-14 |
| CVE-2026-63940 | KVM: SEV: Ignore Port I/O requests of length '0' | HIGH | 7.7 | 8%ile | Microsoft | 2026-07-14 |
| CVE-2026-66310 | Microsoft Edge for Android Information Disclosure Vulnerability | HIGH | 7.7 | 30%ile | Microsoft | 2026-07-14 |
| CVE-2026-57077 | YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via an unbounded newline scan in newline_len | HIGH | 7.7 | 8%ile | Microsoft | 2026-07-14 |
| CVE-2026-57985 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | HIGH | 7.6 | 54%ile | Microsoft | 2026-07-14 |
| CVE-2025-63913 | An issue was discovered in OpenSBI 1.3 allowing attackers to cause a denial of service via crafted request to the SBI fu | HIGH | 7.5 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-11331 | Potential wildcard CNAME RPZ policy bypass | HIGH | 7.5 | 37%ile | Microsoft | 2026-07-14 |
| CVE-2026-11352 | QUIC zero-length UDP datagrams busy-loop | HIGH | 7.5 | 63%ile | Microsoft | 2026-07-14 |
| CVE-2026-11586 | WS Auto-PONG memory exhaustion | HIGH | 7.5 | 58%ile | Microsoft | 2026-07-14 |
| CVE-2026-11605 | Unnecessary validation of DNSSEC signed records | HIGH | 7.5 | 52%ile | Microsoft | 2026-07-14 |
| CVE-2026-11622 | Potential memory usage beyond configured limits | HIGH | 7.5 | 46%ile | Microsoft | 2026-07-14 |
| CVE-2026-11721 | Cache poisoning possible with label count discrepancy, RRSIG, and wildcards | HIGH | 7.5 | 34%ile | Microsoft | 2026-07-14 |
| CVE-2026-12413 | IKEv2 Denial of Service via malformed fragmentation | HIGH | 7.5 | 49%ile | Microsoft | 2026-07-14 |
| CVE-2026-12617 | Record ordering based unexpected exit with CNAME or DNAME | HIGH | 7.5 | 44%ile | Microsoft | 2026-07-14 |
| CVE-2026-13204 | Unexpected exit in certain situations with NSEC and NSEC3 both present | HIGH | 7.5 | 44%ile | Microsoft | 2026-07-14 |
| CVE-2026-15308 | Incremental HTMLParser feed() allows CPU-exhaustion DoS via repeated unterminated markup declarations | HIGH | 7.5 | 50%ile | Microsoft | 2026-07-14 |
| CVE-2026-15709 | Soupwebsocketextensiondeflate: libsoup: libsoup: websocket permessage-deflate unbounded decompression remote denial of s | HIGH | 7.5 | 59%ile | Microsoft | 2026-07-14 |
| CVE-2026-15711 | Libsoup: soupwebsocketconnection: libsoup: websocket remote denial of service via oversized control frame protocol viola | HIGH | 7.5 | 55%ile | Microsoft | 2026-07-14 |
| CVE-2026-16313 | Sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export | HIGH | 7.5 | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-20213 | ClamAV PE File Format Processing Out-of-Bounds Memory Corruption Vulnerability | HIGH | 7.5 | 47%ile | Microsoft | 2026-07-14 |
| CVE-2026-20214 | ClamAV FSG File Format Processing Out-of-Bounds Memory Corruption Vulnerability | HIGH | 7.5 | 47%ile | Microsoft | 2026-07-14 |
| CVE-2026-20215 | ClamAV 7Zip File Format Processing Out-of-Bounds Memory Corruption Vulnerability | HIGH | 7.5 | 47%ile | Microsoft | 2026-07-14 |
| CVE-2026-20216 | ClamAV InstallShield File Format Processing Resource Exhaustion Vulnerability | HIGH | 7.5 | 47%ile | Microsoft | 2026-07-14 |
| CVE-2026-20217 | ClamAV PESpin File Format Processing Out-of-Bounds Memory Corruption Vulnerability | HIGH | 7.5 | 47%ile | Microsoft | 2026-07-14 |
| CVE-2026-20243 | ClamAV ALZ Archive Processing Denial of Service Vulnerability | HIGH | 7.5 | 47%ile | Microsoft | 2026-07-14 |
| CVE-2026-32665 | Remote DNS-over-QUIC denial of service due to `quic-size` budget bypass | HIGH | 7.5 | 21%ile | Microsoft | 2026-07-14 |
| CVE-2026-38754 | A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Serv | HIGH | 7.5 | 14%ile | Microsoft | 2026-07-14 |
| CVE-2026-38755 | A heap overflow in the evalcommand() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Ser | HIGH | 7.5 | 11%ile | Microsoft | 2026-07-14 |
| CVE-2026-38969 | ruby webrick through v1.9.2 WEBrick reparses trailer Content-Length into canonical request state, enabling request smugg | HIGH | 7.5 | — | Microsoft | 2026-07-14 |
| CVE-2026-40691 | Packet of death for DNSCrypt over TCP | HIGH | 7.5 | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-41608 | Apache Thrift: Unbounded Zlib Decompression in Python THeaderTransport | HIGH | 7.5 | 64%ile | Microsoft | 2026-07-14 |
| CVE-2026-43871 | Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TCompactProtocol varint byte-count limit | HIGH | 7.5 | 64%ile | Microsoft | 2026-07-14 |
| CVE-2026-44690 | Cross-zone wildcard cache poisoning via RRSIG.labels manipulation | HIGH | 7.5 | 4%ile | Microsoft | 2026-07-14 |
| CVE-2026-46600 | Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage | HIGH | 7.5 | 46%ile | Microsoft | 2026-07-14 |
| CVE-2026-48145 | Apache Thrift: C++ TSSLSocket matchName() RFC 6125 Wildcard Bypass | HIGH | 7.5 | 36%ile | Microsoft | 2026-07-14 |
| CVE-2026-48586 | Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TZlibTransport Decompression S | HIGH | 7.5 | 64%ile | Microsoft | 2026-07-14 |
| CVE-2026-48863 | Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service | HIGH | 7.5 | 57%ile | Microsoft | 2026-07-14 |
| CVE-2026-53375 | drm/amdgpu/vce: Prevent partial address patches | HIGH | 7.5 | 7%ile | Microsoft | 2026-07-14 |
| CVE-2026-53400 | i2c: core: fix adapter registration race | HIGH | 7.5 | 3%ile | Microsoft | 2026-07-14 |
| CVE-2026-54332 | GoPacket's sFlow ExtendedGatewayFlow decoder: unbounded attacker-controlled allocation (104-byte UDP datagram -> up to 1 | HIGH | 7.5 | 56%ile | Microsoft | 2026-07-14 |
| CVE-2026-55969 | Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: integer overflow in TProtocol: | HIGH | 7.5 | 64%ile | Microsoft | 2026-07-14 |
| CVE-2026-55973 | 'dns-error-reporting: yes' leads to stack buffer overflow | HIGH | 7.5 | 21%ile | Microsoft | 2026-07-14 |
| CVE-2026-56852 | Infinite loop on invalid input in golang.org/x/text | HIGH | 7.5 | 41%ile | Microsoft | 2026-07-14 |
| CVE-2026-57219 | RabbitMQ: Unauthenticated disclosure of OAuth client credentials via an HTTP API endpoint with certain less common OAuth | HIGH | 7.5 | 87%ile | Microsoft | 2026-07-14 |
| CVE-2026-57220 | RabbitMQ: Stream listener does not enforce configured frame-size limit during authentication, permitting unauth'd mem-ex | HIGH | 7.5 | 46%ile | Microsoft | 2026-07-14 |
| CVE-2026-57432 | Perl versions through 5.43.10 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack | HIGH | 7.5 | 11%ile | Microsoft | 2026-07-14 |
| CVE-2026-58043 | A flaw in Node.js Permission Model enforcement can over-grant filesystem access across radix-tree prefix boundaries. Un | HIGH | 7.5 | 3%ile | Microsoft | 2026-07-14 |
| CVE-2026-58227 | TLS/DTLS denial of service via unbounded recursion on cross-signed peer certificate chain | HIGH | 7.5 | 33%ile | Microsoft | 2026-07-14 |
| CVE-2026-58250 | NATS Server: Pre-auth server crash via double INFO in leafnode handshake | HIGH | 7.5 | 55%ile | Microsoft | 2026-07-14 |
| CVE-2026-59884 | pyasn1 BER/CER/DER decoder denial of service via unbounded long-form tag IDs | HIGH | 7.5 | 50%ile | Microsoft | 2026-07-14 |
| CVE-2026-59885 | pyasn1: Quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of service | HIGH | 7.5 | 50%ile | Microsoft | 2026-07-14 |
| CVE-2026-59886 | pyasn1: Uncontrolled resource consumption when converting decoded REAL values | HIGH | 7.5 | 50%ile | Microsoft | 2026-07-14 |
| CVE-2026-59922 | Mistune plugins/formatting: quadratic-time parsing on long runs of `~~x~~`, `==x==`, and `^^x^^` markers (strikethrough | HIGH | 7.5 | 51%ile | Microsoft | 2026-07-14 |
| CVE-2026-59925 | inline_parser: quadratic-time parsing on long runs of `**x**` and `***x***` emphasis pairs | HIGH | 7.5 | 51%ile | Microsoft | 2026-07-14 |
| CVE-2026-59928 | Mistune block_parser: quadratic-time parsing on long lists of repeated reference-link definitions | HIGH | 7.5 | 51%ile | Microsoft | 2026-07-14 |
| CVE-2026-60081 | DBI::ProfileData versions before 1.651 for Perl do not limit the path index | HIGH | 7.5 | 50%ile | Microsoft | 2026-07-14 |
| CVE-2026-62309 | CoreDNS: proxyproto plugin panics on PPv2 datagram with non-UDP transport — single 28-byte packet remote DoS | HIGH | 7.5 | 52%ile | Microsoft | 2026-07-14 |
| CVE-2026-63793 | ntfs: serialize volume label accesses | HIGH | 7.5 | 6%ile | Microsoft | 2026-07-14 |
| CVE-2026-63836 | batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd | HIGH | 7.5 | 7%ile | Microsoft | 2026-07-14 |
| CVE-2026-63872 | esp: fix page frag reference leak on skb_to_sgvec failure | HIGH | 7.5 | — | Microsoft | 2026-07-14 |
| CVE-2026-64383 | smb: client: fix double-free in SMB2_flush() replay | HIGH | 7.5 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-66033 | libssh2 Integer Underflow DoS via AES-GCM Cipher Negotiation | HIGH | 7.5 | 48%ile | Microsoft | 2026-07-14 |
| CVE-2026-66034 | libssh2 Heap Out-of-Bounds Read via publickey subsystem | HIGH | 7.5 | 34%ile | Microsoft | 2026-07-14 |
| CVE-2026-66035 | libssh2 Heap Buffer Overflow via ETM Cipher Negotiation | HIGH | 7.5 | 41%ile | Microsoft | 2026-07-14 |
| CVE-2026-66373 | Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code executio | HIGH | 7.5 | 59%ile | Microsoft | 2026-07-14 |
| CVE-2026-8932 | incomplete mTLS config matching in conn reuse | HIGH | 7.5 | 34%ile | Microsoft | 2026-07-14 |
| CVE-2026-9545 | exposing HTTP/3 early data | HIGH | 7.5 | 35%ile | Microsoft | 2026-07-14 |
| CVE-2026-9546 | sending old referer | HIGH | 7.5 | 51%ile | Microsoft | 2026-07-14 |
| CVE-2026-40378 | Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-07-14 |
| CVE-2026-45646 | OData for ASP.NET and ASP.NET Core Denial of Service Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-07-14 |
| CVE-2026-47296 | Microsoft SQL Server Elevation of Privilege Vulnerability | HIGH | 7.5 | 53%ile | Microsoft | 2026-07-14 |
| CVE-2026-47302 | .NET Denial of Service Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-07-14 |
| CVE-2026-49171 | Windows Speech Runtime Elevation of Privilege Vulnerability | HIGH | 7.5 | 23%ile | Microsoft | 2026-07-14 |
| CVE-2026-49181 | Windows DHCP Client Elevation of Privilege Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-07-14 |
| CVE-2026-49787 | HTTP.sys Denial of Service Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-07-14 |
| CVE-2026-49788 | HTTP/2 Denial of Service Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-07-14 |
| CVE-2026-50304 | Windows Active Directory Federation Services Denial of Service Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-07-14 |
| CVE-2026-50328 | Windows Server Update Service (WSUS) Tampering Vulnerability | HIGH | 7.5 | 69%ile | Microsoft | 2026-07-14 |
| CVE-2026-50330 | Windows Remote Desktop Client Elevation of Privilege Vulnerability | HIGH | 7.5 | 69%ile | Microsoft | 2026-07-14 |
| CVE-2026-50355 | Windows Active Directory Federation Services Denial of Service Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-07-14 |
| CVE-2026-50368 | Windows Active Directory Federation Services Denial of Service Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-07-14 |
| CVE-2026-50379 | Windows Media Elevation of Privilege Vulnerability | HIGH | 7.5 | 43%ile | Microsoft | 2026-07-14 |
| CVE-2026-50411 | Windows Active Directory Federation Services Denial of Service Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-07-14 |
| CVE-2026-50414 | Windows Media Elevation of Privilege Vulnerability | HIGH | 7.5 | 47%ile | Microsoft | 2026-07-14 |
| CVE-2026-50424 | Windows Domain Controller Denial of Service Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-07-14 |
| CVE-2026-50463 | Windows Kernel Information Disclosure Vulnerability | HIGH | 7.5 | 64%ile | Microsoft | 2026-07-14 |
| CVE-2026-50470 | Windows Network Policy Server SNMP Information Disclosure Vulnerability | HIGH | 7.5 | 64%ile | Microsoft | 2026-07-14 |
| CVE-2026-50496 | Windows Network Policy Server SNMP Information Disclosure Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-07-14 |
| CVE-2026-50500 | Windows Netlogon Elevation of Privilege Vulnerability | HIGH | 7.5 | 55%ile | Microsoft | 2026-07-14 |
| CVE-2026-50505 | Windows Message Queuing Service (MSMQ) Remote Code Execution Vulnerability | HIGH | 7.5 | 55%ile | Microsoft | 2026-07-14 |
| CVE-2026-50506 | OData for ASP.NET and ASP.NET Core Denial of Service Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-07-14 |
| CVE-2026-50524 | .NET Framework Denial of Service Vulnerability | HIGH | 7.5 | 69%ile | Microsoft | 2026-07-14 |
| CVE-2026-50525 | .NET Denial of Service Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-07-14 |
| CVE-2026-50527 | .NET Framework Denial of Service Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-07-14 |
| CVE-2026-50647 | Active Directory Federation Server Denial of Service Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-07-14 |
| CVE-2026-50648 | .NET Framework Denial of Service Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-07-14 |
| CVE-2026-50651 | .NET Denial of Service Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-07-14 |
| CVE-2026-50652 | Azure Active Directory Denial of Service Vulnerability | HIGH | 7.5 | 78%ile | Microsoft | 2026-07-14 |
| CVE-2026-50653 | Azure Active Directory Denial of Service Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-07-14 |
| CVE-2026-50685 | Windows DHCP Server Remote Code Execution Vulnerability | HIGH | 7.5 | 52%ile | Microsoft | 2026-07-14 |
| CVE-2026-50695 | Windows Active Directory Federation Services Denial of Service Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-07-14 |
| CVE-2026-50696 | Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-07-14 |
| CVE-2026-54119 | Windows Active Directory Denial of Service Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-07-14 |
| CVE-2026-54983 | Windows Active Directory Federation Services Denial of Service Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-07-14 |
| CVE-2026-56170 | ASP.NET Core Denial of Service Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-07-14 |
| CVE-2026-56648 | Windows NFS Server Elevation of Privilege Vulnerability | HIGH | 7.5 | 43%ile | Microsoft | 2026-07-14 |
| CVE-2026-57108 | .NET Denial of Service Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-07-14 |
| CVE-2026-57975 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | HIGH | 7.5 | 49%ile | Microsoft | 2026-07-14 |
| CVE-2026-57984 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | HIGH | 7.5 | 49%ile | Microsoft | 2026-07-14 |
| CVE-2026-57986 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | HIGH | 7.5 | 49%ile | Microsoft | 2026-07-14 |
| CVE-2026-57992 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | HIGH | 7.5 | 49%ile | Microsoft | 2026-07-14 |
| CVE-2026-58276 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | HIGH | 7.5 | 49%ile | Microsoft | 2026-07-14 |
| CVE-2026-58290 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | HIGH | 7.5 | 37%ile | Microsoft | 2026-07-14 |
| CVE-2026-58292 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | HIGH | 7.5 | 42%ile | Microsoft | 2026-07-14 |
| CVE-2026-58294 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | HIGH | 7.5 | 49%ile | Microsoft | 2026-07-14 |
| CVE-2026-58299 | Microsoft Edge for Android Remote Code Execution Vulnerability | HIGH | 7.5 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-58531 | Windows SMB Elevation of Privilege Vulnerability | HIGH | 7.5 | 43%ile | Microsoft | 2026-07-14 |
| CVE-2026-58627 | Windows DHCP Server Denial of Service Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-07-14 |
| CVE-2026-59117 | Windows Terminal Remote Code Execution Vulnerability | HIGH | 7.5 | 49%ile | Microsoft | 2026-07-14 |
| CVE-2026-66315 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | HIGH | 7.5 | 49%ile | Microsoft | 2026-07-14 |
| CVE-2026-67215 | cJSON JSON Patch copy/add Uncontrolled Recursion Stack Exhaustion | HIGH | 7.5 | 53%ile | Microsoft | 2026-07-14 |
| CVE-2026-12064 | proto-default skips SSH verification | HIGH | 7.4 | 36%ile | Microsoft | 2026-07-14 |
| CVE-2026-64112 | rbd: eliminate a race in lock_dwork draining on unmap | HIGH | 7.4 | 1%ile | Microsoft | 2026-07-14 |
| CVE-2026-54127 | Windows Hyper-V Elevation of Privilege Vulnerability | HIGH | 7.4 | 23%ile | Microsoft | 2026-07-14 |
| CVE-2026-57989 | Microsoft Edge (Chromium-based) Information Disclosure Vulnerability | HIGH | 7.4 | 37%ile | Microsoft | 2026-07-14 |
| CVE-2026-57990 | Microsoft Edge (Chromium-based) Information Disclosure Vulnerability | HIGH | 7.4 | 60%ile | Microsoft | 2026-07-14 |
| CVE-2026-57991 | Microsoft Edge (Chromium-based) Information Disclosure Vulnerability | HIGH | 7.4 | 64%ile | Microsoft | 2026-07-14 |
| CVE-2026-57993 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | HIGH | 7.4 | 59%ile | Microsoft | 2026-07-14 |
| CVE-2026-65802 | Microsoft Edge for Android Information Disclosure Vulnerability | HIGH | 7.4 | 60%ile | Microsoft | 2026-07-14 |
| CVE-2026-66321 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | HIGH | 7.4 | 65%ile | Microsoft | 2026-07-14 |
| CVE-2026-12080 | Qemu-kvm: qemu-guest-agent: local privilege escalation via symlink attack in guest-ssh-add-authorized-keys | HIGH | 7.3 | 3%ile | Microsoft | 2026-07-14 |
| CVE-2026-53362 | ipv6: account for fraggap on the paged allocation path | HIGH | 7.3 | 54%ile | Microsoft | 2026-07-14 |
| CVE-2026-63806 | KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned() | HIGH | 7.3 | 5%ile | Microsoft | 2026-07-14 |
| CVE-2026-49789 | Windows NTFS Elevation of Privilege Vulnerability | HIGH | 7.3 | 30%ile | Microsoft | 2026-07-14 |
| CVE-2026-49790 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | HIGH | 7.3 | 30%ile | Microsoft | 2026-07-14 |
| CVE-2026-50364 | Windows Backup Service Elevation of Privilege Vulnerability | HIGH | 7.3 | 41%ile | Microsoft | 2026-07-14 |
| CVE-2026-50482 | Windows NTFS Remote Code Execution Vulnerability | HIGH | 7.3 | 30%ile | Microsoft | 2026-07-14 |
| CVE-2026-55021 | Microsoft SharePoint Server Spoofing Vulnerability | HIGH | 7.3 | 61%ile | Microsoft | 2026-07-14 |
| CVE-2026-55034 | Microsoft SharePoint Server Spoofing Vulnerability | HIGH | 7.3 | 61%ile | Microsoft | 2026-07-14 |
| CVE-2026-55126 | Microsoft SharePoint Server Spoofing Vulnerability | HIGH | 7.3 | 51%ile | Microsoft | 2026-07-14 |
| CVE-2026-58640 | Windows NTFS Remote Code Execution Vulnerability | HIGH | 7.3 | 30%ile | Microsoft | 2026-07-14 |
| CVE-2026-58298 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | HIGH | 7.2 | 36%ile | Microsoft | 2026-07-14 |
| CVE-2026-53329 | drm/amd/display: Use krealloc_array() in dal_vector_reserve() | HIGH | 7.1 | 4%ile | Microsoft | 2026-07-14 |
| CVE-2026-53343 | ARM: 9475/1: entry: use byte load for KASAN VMAP stack shadow | HIGH | 7.1 | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-53354 | arm64: errata: Mitigate TLBI errata on various Arm CPUs | HIGH | 7.1 | 1%ile | Microsoft | 2026-07-14 |
| CVE-2026-53356 | drm/i915/gem: Fix phys BO pread/pwrite with offset | HIGH | 7.1 | 3%ile | Microsoft | 2026-07-14 |
| CVE-2026-53368 | f2fs: fix fsck inconsistency caused by incorrect nat_entry flag usage | HIGH | 7.1 | 6%ile | Microsoft | 2026-07-14 |
| CVE-2026-53402 | fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font() | HIGH | 7.1 | 6%ile | Microsoft | 2026-07-14 |
| CVE-2026-63796 | ocfs2: reject oversized group bitmap descriptors | HIGH | 7.1 | 48%ile | Microsoft | 2026-07-14 |
| CVE-2026-63801 | tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done | HIGH | 7.1 | 44%ile | Microsoft | 2026-07-14 |
| CVE-2026-63805 | crypto: nx - fix nx_crypto_ctx_exit argument | HIGH | 7.1 | 3%ile | Microsoft | 2026-07-14 |
| CVE-2026-63810 | block: Avoid mounting the bdev pseudo-filesystem in userspace | HIGH | 7.1 | 11%ile | Microsoft | 2026-07-14 |
| CVE-2026-63826 | fbdev: fix use-after-free in store_modes() | HIGH | 7.1 | 6%ile | Microsoft | 2026-07-14 |
| CVE-2026-63879 | drm/amdgpu: fix amdgpu_hmm_range_get_pages | HIGH | 7.1 | 4%ile | Microsoft | 2026-07-14 |
| CVE-2026-63961 | usb: typec: altmodes/displayport: validate count before reading Status Update VDO | HIGH | 7.1 | 5%ile | Microsoft | 2026-07-14 |
| CVE-2026-63963 | usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers | HIGH | 7.1 | 5%ile | Microsoft | 2026-07-14 |
| CVE-2026-63978 | net/handshake: Drain pending requests at net namespace exit | HIGH | 7.1 | 42%ile | Microsoft | 2026-07-14 |
| CVE-2026-64117 | wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb | HIGH | 7.1 | 18%ile | Microsoft | 2026-07-14 |
| CVE-2026-64133 | ALSA: asihpi: Fix potential OOB array access at reading cache | HIGH | 7.1 | 3%ile | Microsoft | 2026-07-14 |
| CVE-2026-64146 | erofs: fix metabuf leak in inode xattr initialization | HIGH | 7.1 | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-64154 | drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() | HIGH | 7.1 | 3%ile | Microsoft | 2026-07-14 |
| CVE-2026-64189 | netfilter: ipset: fix race between dump and ip_set_list resize | HIGH | 7.1 | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-64210 | net/mlx5e: xsk: Fix unlocked writing to ICOSQ | HIGH | 7.1 | 31%ile | Microsoft | 2026-07-14 |
| CVE-2026-64212 | wifi: iwlwifi: mld: don't dereference a pointer before NULL checking it | HIGH | 7.1 | 5%ile | Microsoft | 2026-07-14 |
| CVE-2026-64213 | hwmon: (lm90) Add lock protection to lm90_alert | HIGH | 7.1 | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-64219 | drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async | HIGH | 7.1 | 6%ile | Microsoft | 2026-07-14 |
| CVE-2026-64227 | ACPI: driver: Check ACPI_COMPANION() against NULL during probe | HIGH | 7.1 | 5%ile | Microsoft | 2026-07-14 |
| CVE-2026-64245 | fbdev: modedb: fix a possible UAF in fb_find_mode() | HIGH | 7.1 | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-64255 | wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers | HIGH | 7.1 | 20%ile | Microsoft | 2026-07-14 |
| CVE-2026-64268 | RDMA/siw: bound Read Response placement to the RREAD length | HIGH | 7.1 | 54%ile | Microsoft | 2026-07-14 |
| CVE-2026-64280 | fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() | HIGH | 7.1 | 6%ile | Microsoft | 2026-07-14 |
| CVE-2026-64286 | KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU | HIGH | 7.1 | 7%ile | Microsoft | 2026-07-14 |
| CVE-2026-64294 | mm: do file ownership checks with the proper mount idmap | HIGH | 7.1 | 5%ile | Microsoft | 2026-07-14 |
| CVE-2026-64303 | spi: fsl-lpspi: terminate the RX channel on TX prepare failure path | HIGH | 7.1 | 53%ile | Microsoft | 2026-07-14 |
| CVE-2026-64316 | crypto: caam - use print_hex_dump_devel to guard key hex dumps | HIGH | 7.1 | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-64355 | bpf: Reject fragmented frames in devmap | HIGH | 7.1 | 44%ile | Microsoft | 2026-07-14 |
| CVE-2026-64362 | HID: lg-g15: cancel pending work on remove to fix a use-after-free | HIGH | 7.1 | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-64372 | cpufreq: pcc: fix use-after-free and double free in _OSC evaluation | HIGH | 7.1 | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-64375 | proc: protect ptrace_may_access() with exec_update_lock (FD links) | HIGH | 7.1 | 1%ile | Microsoft | 2026-07-14 |
| CVE-2026-64379 | smb: client: mask server-provided mode to 07777 in modefromsid | HIGH | 7.1 | 24%ile | Microsoft | 2026-07-14 |
| CVE-2026-64384 | smb: client: fix change notify replay double-free | HIGH | 7.1 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-64385 | smb: client: fix double-free in SMB2_ioctl() replay | HIGH | 7.1 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-64386 | smb: client: fix query_info() replay double-free | HIGH | 7.1 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-64403 | Bluetooth: L2CAP: validate option length before reading conf opt value | HIGH | 7.1 | 18%ile | Microsoft | 2026-07-14 |
| CVE-2026-64405 | Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn() | HIGH | 7.1 | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-64411 | netfilter: ebtables: terminate table name before find_table_lock() | HIGH | 7.1 | 3%ile | Microsoft | 2026-07-14 |
| CVE-2026-64428 | gpio: sch: use raw_spinlock_t in the irq startup path | HIGH | 7.1 | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-64435 | audit: Fix data races of skb_queue_len() readers on audit_queue | HIGH | 7.1 | 26%ile | Microsoft | 2026-07-14 |
| CVE-2026-64470 | Bluetooth: btusb: fix use-after-free on marvell probe failure | HIGH | 7.1 | 8%ile | Microsoft | 2026-07-14 |
| CVE-2026-64471 | Bluetooth: btusb: fix use-after-free on registration failure | HIGH | 7.1 | 8%ile | Microsoft | 2026-07-14 |
| CVE-2026-64496 | iio: event: Fix event FIFO reset race | HIGH | 7.1 | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-64510 | ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup | HIGH | 7.1 | 4%ile | Microsoft | 2026-07-14 |
| CVE-2026-64514 | userfaultfd: gate must_wait writability check on pte_present() | HIGH | 7.1 | 7%ile | Microsoft | 2026-07-14 |
| CVE-2026-64536 | staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop | HIGH | 7.1 | 18%ile | Microsoft | 2026-07-14 |
| CVE-2026-64557 | Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() | HIGH | 7.1 | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-49165 | Microsoft Windows App Store Information Disclosure Vulnerability | HIGH | 7.1 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-49791 | Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability | HIGH | 7.1 | 32%ile | Microsoft | 2026-07-14 |
| CVE-2026-50354 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.1 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-50428 | Windows Container Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability | HIGH | 7.1 | 35%ile | Microsoft | 2026-07-14 |
| CVE-2026-50451 | Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability | HIGH | 7.1 | 24%ile | Microsoft | 2026-07-14 |
| CVE-2026-50465 | Windows DNS Client Tampering Vulnerability | HIGH | 7.1 | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-50682 | Active Directory Denial of Service Vulnerability | HIGH | 7.1 | 61%ile | Microsoft | 2026-07-14 |
| CVE-2026-55122 | Microsoft Excel Information Disclosure Vulnerability | HIGH | 7.1 | 44%ile | Microsoft | 2026-07-14 |
| CVE-2026-55144 | Windows Cryptography API: Next Generation (CNG) Tampering Vulnerability | HIGH | 7.1 | 13%ile | Microsoft | 2026-07-14 |
| CVE-2026-56171 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability | HIGH | 7.1 | 52%ile | Microsoft | 2026-07-14 |
| CVE-2026-56193 | Microsoft Office Information Disclosure Vulnerability | HIGH | 7.1 | 43%ile | Microsoft | 2026-07-14 |
| CVE-2026-57101 | Visual Studio Code Security Feature Bypass Vulnerability | HIGH | 7.1 | 42%ile | Microsoft | 2026-07-14 |
| CVE-2026-57977 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | HIGH | 7.1 | 48%ile | Microsoft | 2026-07-14 |
| CVE-2026-57988 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | HIGH | 7.1 | 55%ile | Microsoft | 2026-07-14 |
| CVE-2026-58296 | Microsoft Edge for Android Information Disclosure Vulnerability | HIGH | 7.1 | 46%ile | Microsoft | 2026-07-14 |
| CVE-2026-58297 | Microsoft Edge for Android Information Disclosure Vulnerability | HIGH | 7.1 | 46%ile | Microsoft | 2026-07-14 |
| CVE-2026-58529 | Windows Active Directory Federation Services (ADFS) Information Disclosure Vulnerability | HIGH | 7.1 | 64%ile | Microsoft | 2026-07-14 |
| CVE-2026-66322 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | HIGH | 7.1 | 13%ile | Microsoft | 2026-07-14 |
| CVE-2026-53401 | fbdev: omap2: fix use-after-free in omapfb_mmap | HIGH | 7.0 | 3%ile | Microsoft | 2026-07-14 |
| CVE-2026-64377 | cpufreq: qcom-cpufreq-hw: Fix possible double free | HIGH | 7.0 | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-64530 | net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle | HIGH | 7.0 | 51%ile | Microsoft | 2026-07-14 |
| CVE-2026-64560 | posix-cpu-timers: Prevent UAF caused by non-leader exec() race | HIGH | 7.0 | 43%ile | Microsoft | 2026-07-14 |
| CVE-2026-48571 | Windows App Package Installer Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-07-14 |
| CVE-2026-48572 | Windows App Package Installer Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-07-14 |
| CVE-2026-49162 | Microsoft Brokering File System Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-07-14 |
| CVE-2026-49183 | Windows Clipboard Server Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-07-14 |
| CVE-2026-49784 | Microsoft Windows App Store Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-07-14 |
| CVE-2026-49802 | Windows USB Print Driver Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-07-14 |
| CVE-2026-49803 | Windows AppX Deployment Extensions Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-07-14 |
| CVE-2026-49805 | Win32k Elevation of Privilege Vulnerability | HIGH | 7.0 | 15%ile | Microsoft | 2026-07-14 |
| CVE-2026-49806 | Windows USB Print Driver Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-07-14 |
| CVE-2026-50296 | DirectX Graphics Kernel Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-07-14 |
| CVE-2026-50297 | Win32k Elevation of Privilege Vulnerability | HIGH | 7.0 | 15%ile | Microsoft | 2026-07-14 |
| CVE-2026-50307 | Windows TCP/IP Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-07-14 |
| CVE-2026-50322 | Windows Runtime Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-07-14 |
| CVE-2026-50323 | Windows Runtime Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-07-14 |
| CVE-2026-50325 | Win32k Elevation of Privilege Vulnerability | HIGH | 7.0 | 15%ile | Microsoft | 2026-07-14 |
| CVE-2026-50345 | Windows Runtime Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-07-14 |
| CVE-2026-50348 | Windows Runtime Elevation of Privilege Vulnerability | HIGH | 7.0 | 30%ile | Microsoft | 2026-07-14 |
| CVE-2026-50356 | Microsoft Windows App Store Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-07-14 |
| CVE-2026-50358 | Windows Media Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-07-14 |
| CVE-2026-50359 | Microsoft XML Core Services Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-07-14 |
| CVE-2026-50371 | Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-07-14 |
| CVE-2026-50372 | Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-07-14 |
| CVE-2026-50384 | Windows Clip Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-07-14 |
| CVE-2026-50390 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-07-14 |
| CVE-2026-50392 | Windows Secure Kernel Mode Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-07-14 |
| CVE-2026-50393 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-07-14 |
| CVE-2026-50396 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-07-14 |
| CVE-2026-50397 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-07-14 |
| CVE-2026-50403 | Windows Runtime Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-07-14 |
| CVE-2026-50404 | Windows Media Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-07-14 |
| CVE-2026-50406 | Windows Backup Engine Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-07-14 |
| CVE-2026-50410 | Windows Runtime Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-07-14 |
| CVE-2026-50449 | Windows Runtime Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-07-14 |
| CVE-2026-50452 | Windows Runtime Elevation of Privilege Vulnerability | HIGH | 7.0 | 30%ile | Microsoft | 2026-07-14 |
| CVE-2026-50459 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.0 | 23%ile | Microsoft | 2026-07-14 |
| CVE-2026-50490 | Windows Installer Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-07-14 |
| CVE-2026-50491 | Code Integrity DLL (ci.dll) Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-07-14 |
| CVE-2026-50503 | Windows Runtime Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-07-14 |
| CVE-2026-50526 | .NET Tampering Vulnerability | HIGH | 7.0 | 13%ile | Microsoft | 2026-07-14 |
| CVE-2026-50658 | Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-07-14 |
| CVE-2026-50669 | Windows Telephony Server Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-07-14 |
| CVE-2026-50672 | Windows NTFS Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-07-14 |
| CVE-2026-50674 | Windows USB Print Driver Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-07-14 |
| CVE-2026-54111 | Universal Print Management Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-07-14 |
| CVE-2026-54129 | Windows Hyper-V Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-07-14 |
| CVE-2026-54989 | Quality Windows Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-07-14 |
| CVE-2026-54996 | Windows USB Print Driver Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-07-14 |
| CVE-2026-56173 | Windows WebView Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-07-14 |
| CVE-2026-56183 | Windows MIDI Service Module Elevation of Privileges Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-07-14 |
| CVE-2026-56187 | Windows MIDI Service Module Elevation of Privileges Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-07-14 |
| CVE-2026-57093 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-07-14 |
| CVE-2026-58526 | Windows Storage Elevation of Privilege Vulnerability | HIGH | 7.0 | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-58544 | Windows Management Services Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-07-14 |
| CVE-2026-58598 | Windows Backup Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-07-14 |
| CVE-2026-58619 | Windows Sensor Data Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-07-14 |
| CVE-2026-58629 | DirectX Graphics Kernel Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-07-14 |
| CVE-2026-58637 | Windows Client-Side Caching Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-07-14 |
| CVE-2026-10723 | Incorrect acceptance of NSEC3 records | MEDIUM | 6.8 | 20%ile | Microsoft | 2026-07-14 |
| CVE-2026-16615 | Librest: weak random number generation in pkce implementation | MEDIUM | 6.8 | 38%ile | Microsoft | 2026-07-14 |
| CVE-2026-57216 | RabbitMQ: AMQP 1.0, AMQP 0-9-1, Stream Protocol loopback enforcement can lead to remote guest sessions due to listener-a | MEDIUM | 6.8 | 43%ile | Microsoft | 2026-07-14 |
| CVE-2026-58208 | NATS Server: MQTT-over-WebSocket Path Can Crash WebSocket-Only JetStream Servers Before MQTT Is Enabled | MEDIUM | 6.8 | 49%ile | Microsoft | 2026-07-14 |
| CVE-2026-6390 | Nano: gnu nano: arbitrary memory writes, information disclosure, or denial of service via format string vulnerability in | MEDIUM | 6.8 | 4%ile | Microsoft | 2026-07-14 |
| CVE-2026-49168 | Storage Spaces Direct Elevation of Privilege Vulnerability | MEDIUM | 6.8 | 38%ile | Microsoft | 2026-07-14 |
| CVE-2026-50298 | Windows Spaceport.sys Elevation of Privilege Vulnerability | MEDIUM | 6.8 | 38%ile | Microsoft | 2026-07-14 |
| CVE-2026-50299 | Windows Storage Spaces Direct Remote Code Execution Vulnerability | MEDIUM | 6.8 | 38%ile | Microsoft | 2026-07-14 |
| CVE-2026-50426 | Windows DNS Server Remote Code Execution Vulnerability | MEDIUM | 6.8 | 46%ile | Microsoft | 2026-07-14 |
| CVE-2026-50492 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | MEDIUM | 6.8 | 38%ile | Microsoft | 2026-07-14 |
| CVE-2026-50668 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability | MEDIUM | 6.8 | 38%ile | Microsoft | 2026-07-14 |
| CVE-2026-54132 | Windows Kernel Elevation of Privilege Vulnerability | MEDIUM | 6.8 | 38%ile | Microsoft | 2026-07-14 |
| CVE-2026-58522 | Microsoft Edge for Android Information Disclosure Vulnerability | MEDIUM | 6.8 | 38%ile | Microsoft | 2026-07-14 |
| CVE-2026-58528 | Windows USB Audio Class Driver Information Disclosure Vulnerability | MEDIUM | 6.8 | 44%ile | Microsoft | 2026-07-14 |
| CVE-2026-66313 | Microsoft Edge (Chromium-based) Tampering Vulnerability | MEDIUM | 6.8 | 14%ile | Microsoft | 2026-07-14 |
| CVE-2026-53397 | nfsd: fix posix_acl leak on SETACL decode failure | MEDIUM | 6.7 | 45%ile | Microsoft | 2026-07-14 |
| CVE-2026-49804 | Windows USB Video Driver Elevation of Privilege Vulnerability | MEDIUM | 6.6 | 42%ile | Microsoft | 2026-07-14 |
| CVE-2026-50678 | Microsoft Excel Information Disclosure Vulnerability | MEDIUM | 6.6 | 41%ile | Microsoft | 2026-07-14 |
| CVE-2026-10822 | Key Record using PRIVATEDNS algorithm may lead to unexpected exit | MEDIUM | 6.5 | 32%ile | Microsoft | 2026-07-14 |
| CVE-2026-14258 | Dhcpcd: dhcpcd infinite loop and out-of-bounds read via zero-length ipv6 nd option in router advertisement handling | MEDIUM | 6.5 | 34%ile | Microsoft | 2026-07-14 |
| CVE-2026-15714 | Libsoup: soupmultipartinputstream: libsoup: out-of-bounds read in soup_multipart_input_stream_read_headers via an oversi | MEDIUM | 6.5 | 33%ile | Microsoft | 2026-07-14 |
| CVE-2026-16277 | Rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbaddrlist() | MEDIUM | 6.5 | 43%ile | Microsoft | 2026-07-14 |
| CVE-2026-16461 | Rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbdump() short-mode version-list formatting | MEDIUM | 6.5 | 18%ile | Microsoft | 2026-07-14 |
| CVE-2026-47729 | Squid: Memory disclosure in FTP gateway | MEDIUM | 6.5 | 74%ile | Microsoft | 2026-07-14 |
| CVE-2026-50248 | BOGUS configured primary hostname accepted for XFR in auth/rpz zones | MEDIUM | 6.5 | 3%ile | Microsoft | 2026-07-14 |
| CVE-2026-53345 | KVM: Don't WARN if memory is dirtied without a vCPU when the VM is dying | MEDIUM | 6.5 | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-54171 | Excon: redact additional sensitive/risky headers when following redirects | MEDIUM | 6.5 | 37%ile | Microsoft | 2026-07-14 |
| CVE-2026-55970 | Apache Thrift: C++ heap out-of-bounds read in THeaderTransport::readHeaderFormat() | MEDIUM | 6.5 | 56%ile | Microsoft | 2026-07-14 |
| CVE-2026-56434 | NGINX ngx_http_ssi_module vulnerability | MEDIUM | 6.5 | 42%ile | Microsoft | 2026-07-14 |
| CVE-2026-57211 | RabbitMQ: UNC SSRF affecting the management UI on Windows | MEDIUM | 6.5 | 50%ile | Microsoft | 2026-07-14 |
| CVE-2026-57217 | RabbitMQ: Topic authorization can lead to cross-tenant routing-key bypass | MEDIUM | 6.5 | 29%ile | Microsoft | 2026-07-14 |
| CVE-2026-58251 | NATS Server: Queue Subscribe Authz Bypass | MEDIUM | 6.5 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-58252 | NATS Server: Subscribe Authz Bypass via Wildcard-Overlap | MEDIUM | 6.5 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-59818 | etcd: gRPC client listener does not enforce `--client-crl-file` certificate revocation | MEDIUM | 6.5 | 37%ile | Microsoft | 2026-07-14 |
| CVE-2026-59843 | Libssh: libssh: denial of service via zero advertised channel packet size | MEDIUM | 6.5 | 47%ile | Microsoft | 2026-07-14 |
| CVE-2026-59844 | Libssh: libssh: denial of service via oversized sftp read length | MEDIUM | 6.5 | 47%ile | Microsoft | 2026-07-14 |
| CVE-2026-60001 | sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay. | MEDIUM | 6.5 | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-64381 | smb: client: Fix next buffer leak in receive_encrypted_standard() | MEDIUM | 6.5 | 3%ile | Microsoft | 2026-07-14 |
| CVE-2026-64534 | nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path | MEDIUM | 6.5 | 25%ile | Microsoft | 2026-07-14 |
| CVE-2026-66337 | Libsoup: libsoup: heap buffer over-read via integer underflow in soup_filter_input_stream_read_until() | MEDIUM | 6.5 | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-66339 | Libsoup: libsoup: proxy credentials leak to destination server via proxy-authorization header in connect tunnels | MEDIUM | 6.5 | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-8458 | wrong reuse for different services | MEDIUM | 6.5 | 31%ile | Microsoft | 2026-07-14 |
| CVE-2026-34348 | Windows Event Logging Service Information Disclosure Vulnerability | MEDIUM | 6.5 | 63%ile | Microsoft | 2026-07-14 |
| CVE-2026-45489 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | MEDIUM | 6.5 | 59%ile | Microsoft | 2026-07-14 |
| CVE-2026-47282 | GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability | MEDIUM | 6.5 | 59%ile | Microsoft | 2026-07-14 |
| CVE-2026-49159 | Microsoft Graph Information Disclosure Vulnerability | MEDIUM | 6.5 | 63%ile | Microsoft | 2026-07-14 |
| CVE-2026-49799 | Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability | MEDIUM | 6.5 | 67%ile | Microsoft | 2026-07-14 |
| CVE-2026-50366 | Windows Active Directory Domain Services Denial of Service Vulnerability | MEDIUM | 6.5 | 67%ile | Microsoft | 2026-07-14 |
| CVE-2026-50376 | Windows Remote Desktop Client Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-07-14 |
| CVE-2026-50445 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-07-14 |
| CVE-2026-50468 | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 63%ile | Microsoft | 2026-07-14 |
| CVE-2026-50497 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-07-14 |
| CVE-2026-50504 | Windows Remote Desktop Client Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-07-14 |
| CVE-2026-50659 | .NET Spoofing Vulnerability | MEDIUM | 6.5 | 54%ile | Microsoft | 2026-07-14 |
| CVE-2026-54108 | Microsoft SharePoint Server Spoofing Vulnerability | MEDIUM | 6.5 | 65%ile | Microsoft | 2026-07-14 |
| CVE-2026-54116 | Microsoft SQL Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 63%ile | Microsoft | 2026-07-14 |
| CVE-2026-54126 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-07-14 |
| CVE-2026-55003 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-07-14 |
| CVE-2026-55051 | Microsoft SharePoint Server Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-07-14 |
| CVE-2026-55054 | Microsoft Excel Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-07-14 |
| CVE-2026-56168 | Windows SMB Server Denial of Service Vulnerability | MEDIUM | 6.5 | 67%ile | Microsoft | 2026-07-14 |
| CVE-2026-56185 | Windows Admin Center Information Disclosure Vulnerability | MEDIUM | 6.5 | 58%ile | Microsoft | 2026-07-14 |
| CVE-2026-56646 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-07-14 |
| CVE-2026-57976 | Windows Active Directory Domain Services Denial of Service Vulnerability | MEDIUM | 6.5 | 67%ile | Microsoft | 2026-07-14 |
| CVE-2026-57979 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-07-14 |
| CVE-2026-57982 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability | MEDIUM | 6.5 | 63%ile | Microsoft | 2026-07-14 |
| CVE-2026-57987 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | MEDIUM | 6.5 | 59%ile | Microsoft | 2026-07-14 |
| CVE-2026-58279 | Azure CycleCloud Elevation of Privilege Vulnerability | MEDIUM | 6.5 | 51%ile | Microsoft | 2026-07-14 |
| CVE-2026-58523 | Microsoft Edge for Android Security Feature Bypass Vulnerability | MEDIUM | 6.5 | 59%ile | Microsoft | 2026-07-14 |
| CVE-2026-58533 | Windows Remote Desktop Client Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-07-14 |
| CVE-2026-58535 | Windows Remote Desktop Client Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-07-14 |
| CVE-2026-58539 | Windows Remote Desktop Client Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-07-14 |
| CVE-2026-58546 | Windows Remote Desktop Client Information Disclosure Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-07-14 |
| CVE-2026-66312 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | MEDIUM | 6.5 | 66%ile | Microsoft | 2026-07-14 |
| CVE-2026-66314 | Microsoft Edge (Chromium-based) Information Disclosure Vulnerability | MEDIUM | 6.5 | 47%ile | Microsoft | 2026-07-14 |
| CVE-2026-66326 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | MEDIUM | 6.5 | 56%ile | Microsoft | 2026-07-14 |
| CVE-2026-55000 | Windows USB Print Driver Elevation of Privilege Vulnerability | MEDIUM | 6.4 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-57097 | Microsoft XML Security Feature Bypass Vulnerability | MEDIUM | 6.4 | 43%ile | Microsoft | 2026-07-14 |
| CVE-2026-58040 | An incomplete fix has been identified in Node.js: HTTPS Agent TLS session reuse skips hostname verification across ident | MEDIUM | 6.3 | 20%ile | Microsoft | 2026-07-14 |
| CVE-2026-63871 | Bluetooth: ISO: Fix data-race on iso_pi fields in hci_get_route calls | MEDIUM | 6.3 | 6%ile | Microsoft | 2026-07-14 |
| CVE-2026-64434 | Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref | MEDIUM | 6.3 | 17%ile | Microsoft | 2026-07-14 |
| CVE-2026-50374 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | MEDIUM | 6.3 | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-55145 | Outlook Copilot Tampering Vulnerability | MEDIUM | 6.3 | 44%ile | Microsoft | 2026-07-14 |
| CVE-2026-57973 | Windows Subsystem for Linux (WSL2) Kernel Tampering Vulnerability | MEDIUM | 6.3 | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-58543 | Universal Print Management Service Elevation of Privilege Vulnerability | MEDIUM | 6.3 | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-49807 | Windows DirectX Information Disclosure Vulnerability | MEDIUM | 6.2 | 43%ile | Microsoft | 2026-07-14 |
| CVE-2026-50294 | Windows Kernel Information Disclosure Vulnerability | MEDIUM | 6.2 | 43%ile | Microsoft | 2026-07-14 |
| CVE-2026-50420 | HTTP.sys Information Disclosure Vulnerability | MEDIUM | 6.2 | 35%ile | Microsoft | 2026-07-14 |
| CVE-2026-55026 | Microsoft Office Information Disclosure Vulnerability | MEDIUM | 6.2 | 39%ile | Microsoft | 2026-07-14 |
| CVE-2026-57095 | Win32k Elevation of Privilege Vulnerability | MEDIUM | 6.2 | 42%ile | Microsoft | 2026-07-14 |
| CVE-2026-58300 | Microsoft Edge for Android Information Disclosure Vulnerability | MEDIUM | 6.2 | 39%ile | Microsoft | 2026-07-14 |
| CVE-2026-66311 | Microsoft Edge (Chromium-based) Tampering Vulnerability | MEDIUM | 6.2 | 35%ile | Microsoft | 2026-07-14 |
| CVE-2026-13713 | YAML::Syck versions before 1.47 for Perl allow a use-after-free and double-free via an anchor node freed while still on | MEDIUM | 6.2 | 7%ile | Microsoft | 2026-07-14 |
| CVE-2026-56391 | Out‑of‑bounds Read in GNU coreutils | MEDIUM | 6.1 | 3%ile | Microsoft | 2026-07-14 |
| CVE-2026-59890 | setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) on macOS APFS/HFS+ | MEDIUM | 6.1 | 35%ile | Microsoft | 2026-07-14 |
| CVE-2026-59926 | Mistune: XSS via unescaped class option in Admonition directive | MEDIUM | 6.1 | 26%ile | Microsoft | 2026-07-14 |
| CVE-2026-64001 | ALSA: pcm: oss: Fix setup list UAF on proc write error | MEDIUM | 6.1 | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-64287 | KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU | MEDIUM | 6.1 | 7%ile | Microsoft | 2026-07-14 |
| CVE-2026-64450 | tipc: fix out-of-bounds read in broadcast Gap ACK blocks | MEDIUM | 6.1 | 45%ile | Microsoft | 2026-07-14 |
| CVE-2026-49174 | DNS Client Tampering Vulnerability | MEDIUM | 6.1 | 19%ile | Microsoft | 2026-07-14 |
| CVE-2026-50383 | Windows Print Spooler Information Disclosure Vulnerability | MEDIUM | 6.1 | 35%ile | Microsoft | 2026-07-14 |
| CVE-2026-50453 | Windows USB Audio Class Driver Information Disclosure Vulnerability | MEDIUM | 6.1 | 44%ile | Microsoft | 2026-07-14 |
| CVE-2026-50495 | DNS Client Tampering Vulnerability | MEDIUM | 6.1 | 23%ile | Microsoft | 2026-07-14 |
| CVE-2026-50661 | Windows BitLocker Security Feature Bypass Vulnerability | MEDIUM | 6.1 | 42%ile | Microsoft | 2026-07-14 |
| CVE-2026-54988 | Microsoft Excel Information Disclosure Vulnerability | MEDIUM | 6.1 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-55898 | Microsoft Excel Information Disclosure Vulnerability | MEDIUM | 6.1 | 41%ile | Microsoft | 2026-07-14 |
| CVE-2026-58291 | Microsoft Edge (Chromium-based) Information Disclosure Vulnerability | MEDIUM | 6.1 | 63%ile | Microsoft | 2026-07-14 |
| CVE-2026-65804 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | MEDIUM | 6.1 | 36%ile | Microsoft | 2026-07-14 |
| CVE-2026-66325 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | MEDIUM | 6.1 | 33%ile | Microsoft | 2026-07-14 |
| CVE-2026-64539 | Bluetooth: eir: Fix stack OOB write when prepending the Flags AD | MEDIUM | 6.0 | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-58638 | Windows Boot Loader Security Feature Bypass Vulnerability | MEDIUM | 6.0 | 14%ile | Microsoft | 2026-07-14 |
| CVE-2026-14586 | Assertion in libngtcp2 when under pressure in high concurrency DNS-over-QUIC environments | MEDIUM | 5.9 | 30%ile | Microsoft | 2026-07-14 |
| CVE-2026-15712 | Soupclientmessageiohttp2: libsoup3: libsoup: http/2 goaway frame parsing heap buffer over-read via invalid nul-terminati | MEDIUM | 5.9 | 50%ile | Microsoft | 2026-07-14 |
| CVE-2026-15713 | Libsoup: soupcache: libsoup: http/2 frame window exhaustion remote denial of service via memory leak | MEDIUM | 5.9 | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-44621 | Libunbound applications configured with 'unwanted-reply-threshold' could eventually be abruptly terminated | MEDIUM | 5.9 | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-50046 | Possible heap use-after-free in an error path when a DoT forwarded query is jostled out | MEDIUM | 5.9 | 15%ile | Microsoft | 2026-07-14 |
| CVE-2026-52863 | Memory corruption could lead to crash and denial of service | MEDIUM | 5.9 | 30%ile | Microsoft | 2026-07-14 |
| CVE-2026-53357 | Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() | MEDIUM | 5.9 | 26%ile | Microsoft | 2026-07-14 |
| CVE-2026-53393 | nfsd: reset write verifier on deferred writeback errors | MEDIUM | 5.9 | 3%ile | Microsoft | 2026-07-14 |
| CVE-2026-55717 | 'serve-expired-client-timeout' and 'response-ip' CNAME redirect could lead to a crash | MEDIUM | 5.9 | 15%ile | Microsoft | 2026-07-14 |
| CVE-2026-55950 | DTLS listener crash via race condition in dtls_packet_demux causes denial of service for all sessions | MEDIUM | 5.9 | 32%ile | Microsoft | 2026-07-14 |
| CVE-2026-55990 | Packet of death for a DNSCrypt misconfigured Unbound | MEDIUM | 5.9 | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-55991 | Remote DNS-over-QUIC (DoQ) flow-control assertion failure in libngtcp2 | MEDIUM | 5.9 | 30%ile | Microsoft | 2026-07-14 |
| CVE-2026-56444 | Degradation of resolution service when 'discard-timeout' and 'serve-expired-client-timeout' are combined in unusual conf | MEDIUM | 5.9 | 30%ile | Microsoft | 2026-07-14 |
| CVE-2026-59847 | Libssh: libssh: integrity downgrade via openssl aes-gcm tag verification | MEDIUM | 5.9 | 26%ile | Microsoft | 2026-07-14 |
| CVE-2026-59999 | In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not | MEDIUM | 5.9 | 5%ile | Microsoft | 2026-07-14 |
| CVE-2026-64535 | nvmet-tcp: Fix potential UAF when ddgst mismatch | MEDIUM | 5.9 | 46%ile | Microsoft | 2026-07-14 |
| CVE-2026-66053 | Apache Thrift: Python TSSLSocket Hostname Matcher Import | MEDIUM | 5.9 | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-67216 | cJSON cJSON_Compare Exponential Complexity Denial of Service | MEDIUM | 5.9 | 51%ile | Microsoft | 2026-07-14 |
| CVE-2026-8926 | password leak with netrc and user in URL | MEDIUM | 5.9 | 39%ile | Microsoft | 2026-07-14 |
| CVE-2026-50324 | Windows Active Directory Federation Services Denial of Service Vulnerability | MEDIUM | 5.9 | 58%ile | Microsoft | 2026-07-14 |
| CVE-2026-56649 | Windows Network File System Remote Code Execution Vulnerability | MEDIUM | 5.9 | 53%ile | Microsoft | 2026-07-14 |
| CVE-2026-64160 | netfs: Fix potential for tearing in ->remote_i_size and ->zero_point | MEDIUM | 5.8 | 37%ile | Microsoft | 2026-07-14 |
| CVE-2026-64269 | RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg | MEDIUM | 5.7 | 54%ile | Microsoft | 2026-07-14 |
| CVE-2026-14355 | ext/openssl: Memory corruption in openssl_encrypt with AES-WRAP-PAD | MEDIUM | 5.6 | 20%ile | Microsoft | 2026-07-14 |
| CVE-2026-15003 | Binutils: gnu binutils: heap-buffer-overflow in linker leads to information disclosure and denial of service | MEDIUM | 5.6 | 4%ile | Microsoft | 2026-07-14 |
| CVE-2024-14040 | net: nexthop: Increase weight to u16 | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-07-14 |
| CVE-2026-10536 | HTTP/2 stream-dependency tree UAF | MEDIUM | 5.5 | 49%ile | Microsoft | 2026-07-14 |
| CVE-2026-12480 | Arbitrary HDF5 File Read via Virtual Dataset Bypass in keras-team/keras | MEDIUM | 5.5 | 9%ile | Microsoft | 2026-07-14 |
| CVE-2026-50012 | Squid: Memory corruption in cache_digest reply handling | MEDIUM | 5.5 | 72%ile | Microsoft | 2026-07-14 |
| CVE-2026-53337 | net: bonding: fix NULL pointer dereference in bond_do_ioctl() | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-53347 | drm/virtio: Fix driver removal with disabled KMS | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-53349 | netfilter: nf_conntrack: destroy stale expectfn expectations on unregister | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-53352 | signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads() | MEDIUM | 5.5 | 1%ile | Microsoft | 2026-07-14 |
| CVE-2026-53353 | hsr: Remove WARN_ONCE() in hsr_addr_is_self(). | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-53355 | net: rds: clear i_sends on setup unwind | MEDIUM | 5.5 | 36%ile | Microsoft | 2026-07-14 |
| CVE-2026-53377 | drm/msm: always recover the gpu | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-53382 | media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-07-14 |
| CVE-2026-53385 | vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-07-14 |
| CVE-2026-53391 | NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr | MEDIUM | 5.5 | 44%ile | Microsoft | 2026-07-14 |
| CVE-2026-53392 | NFSv4/flexfiles: reject zero filehandle version count | MEDIUM | 5.5 | 45%ile | Microsoft | 2026-07-14 |
| CVE-2026-53398 | NFSD: Fix SECINFO_NO_NAME decode error cleanup | MEDIUM | 5.5 | 46%ile | Microsoft | 2026-07-14 |
| CVE-2026-53399 | nfsd: release layout stid on setlease failure | MEDIUM | 5.5 | 52%ile | Microsoft | 2026-07-14 |
| CVE-2026-63795 | 9p: avoid putting oldfid in p9_client_walk() error path | MEDIUM | 5.5 | 50%ile | Microsoft | 2026-07-14 |
| CVE-2026-63809 | bpf: use kvfree() for replaced sysctl write buffer | MEDIUM | 5.5 | 4%ile | Microsoft | 2026-07-14 |
| CVE-2026-63811 | f2fs: read COW data with the original inode during atomic write | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-07-14 |
| CVE-2026-63821 | wifi: rtw88: usb: fix memory leaks on USB write failures | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-07-14 |
| CVE-2026-63825 | gcov: use atomic counter updates to fix concurrent access crashes | MEDIUM | 5.5 | 58%ile | Microsoft | 2026-07-14 |
| CVE-2026-63834 | batman-adv: tp_meter: restrict number of unacked list entries | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-07-14 |
| CVE-2026-63954 | hpfs: fix a crash if hpfs_map_dnode_bitmap fails | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-07-14 |
| CVE-2026-63960 | usb: typec: wcove: don't write past struct pd_message in wcove_read_rx_buffer() | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-07-14 |
| CVE-2026-63962 | usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-07-14 |
| CVE-2026-63964 | usb: typec: ucsi: ccg: reject firmware images without a ':' record header | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-07-14 |
| CVE-2026-64036 | cgroup/rstat: validate cpu before css_rstat_cpu() access | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-07-14 |
| CVE-2026-64038 | hwmon: (lm90) Stop work before releasing hwmon device | MEDIUM | 5.5 | 0%ile | Microsoft | 2026-07-14 |
| CVE-2026-64060 | netfs: Fix leak of request in netfs_write_begin() error handling | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-64077 | netfilter: ebtables: move to two-stage removal scheme | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-07-14 |
| CVE-2026-64097 | drm/amd/display: Validate GPIO pin LUT table size before iterating | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-07-14 |
| CVE-2026-64187 | xfs: fail recovery on a committed log item with no regions | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-64188 | net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink() | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-64190 | net: team: fix NULL pointer dereference in team_xmit during mode change | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-64205 | i2c: i801: fix hardware state machine corruption in error path | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-64206 | Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock | MEDIUM | 5.5 | 17%ile | Microsoft | 2026-07-14 |
| CVE-2026-64237 | Input: elan_i2c - validate firmware size before use | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-64241 | gpio: rockchip: teardown bugs and resource leaks | MEDIUM | 5.5 | 1%ile | Microsoft | 2026-07-14 |
| CVE-2026-64244 | drivers/base/memory: set mem->altmap after successful device registration | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-64247 | KVM: x86: hyper-v: Bound the bank index when querying sparse banks | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-07-14 |
| CVE-2026-64248 | MIPS: smp: report dying CPU to RCU in stop_this_cpu() | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-07-14 |
| CVE-2026-64250 | LoongArch: Report dying CPU to RCU in stop_this_cpu() | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-07-14 |
| CVE-2026-64275 | Input: elan_i2c - prevent division by zero and arithmetic underflow | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-07-14 |
| CVE-2026-64276 | Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-07-14 |
| CVE-2026-64277 | Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-07-14 |
| CVE-2026-64299 | tracing: Prevent out-of-bounds read in glob matching | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-07-14 |
| CVE-2026-64306 | crypto: drbg - Fix returning success on failure in CTR_DRBG | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-07-14 |
| CVE-2026-64317 | isofs: bound Rock Ridge symlink components to the SL record | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-07-14 |
| CVE-2026-64318 | partitions: aix: bound the pp_count scan to the ppe array | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-07-14 |
| CVE-2026-64323 | udf: validate VAT header length against the VAT inode size | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-07-14 |
| CVE-2026-64324 | udf: validate free block extents against the partition length | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-07-14 |
| CVE-2026-64326 | block: skip sync_blockdev() on surprise removal in bdev_mark_dead() | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-07-14 |
| CVE-2026-64332 | USB: ulpi: fix memory leak on registration failure | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-64346 | usb: gadget: udc: Fix use-after-free in gadget_match_driver | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-07-14 |
| CVE-2026-64348 | usb: free iso schedules on failed submit | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-64350 | usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info() | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-64351 | net: usb: kalmia: bound RX frame length in kalmia_rx_fixup() | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-07-14 |
| CVE-2026-64352 | bpf: Allow LPM map access from sleepable BPF programs | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-64363 | HID: appleir: fix UAF on pending key_up_timer in remove() | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-07-14 |
| CVE-2026-64364 | HID: multitouch: fix out-of-bounds bit access on mt_io_flags | MEDIUM | 5.5 | 29%ile | Microsoft | 2026-07-14 |
| CVE-2026-64368 | mm/slab: do not limit zeroing to orig_size when only red zoning is enabled | MEDIUM | 5.5 | 36%ile | Microsoft | 2026-07-14 |
| CVE-2026-64370 | posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-64374 | sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT | MEDIUM | 5.5 | 33%ile | Microsoft | 2026-07-14 |
| CVE-2026-64387 | smb: client: fix query directory replay double-free | MEDIUM | 5.5 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-64400 | ksmbd: prevent path traversal bypass by restricting caseless retry | MEDIUM | 5.5 | 51%ile | Microsoft | 2026-07-14 |
| CVE-2026-64406 | Bluetooth: fix UAF in bt_accept_dequeue() | MEDIUM | 5.5 | 20%ile | Microsoft | 2026-07-14 |
| CVE-2026-64408 | Bluetooth: bnep: pin L2CAP connection during netdev registration | MEDIUM | 5.5 | 18%ile | Microsoft | 2026-07-14 |
| CVE-2026-64409 | Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work() | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-64412 | netfilter: ebtables: module names must be null-terminated | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-07-14 |
| CVE-2026-64413 | netfilter: ebtables: zero chainstack array | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-64422 | net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-07-14 |
| CVE-2026-64425 | io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-64429 | gpio: eic-sprd: use raw_spinlock_t in the irq startup path | MEDIUM | 5.5 | 1%ile | Microsoft | 2026-07-14 |
| CVE-2026-64433 | Bluetooth: MGMT: Fix UAF of hci_conn_params in add_device_complete | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-64441 | staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr() | MEDIUM | 5.5 | 17%ile | Microsoft | 2026-07-14 |
| CVE-2026-64443 | staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop | MEDIUM | 5.5 | 21%ile | Microsoft | 2026-07-14 |
| CVE-2026-64444 | staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop | MEDIUM | 5.5 | 21%ile | Microsoft | 2026-07-14 |
| CVE-2026-64452 | 6lowpan: fix NHC entry use-after-free on error path | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-64462 | PCI: altera: Fix resource leaks on probe failure | MEDIUM | 5.5 | 8%ile | Microsoft | 2026-07-14 |
| CVE-2026-64465 | usb: xhci: Fix sleep in atomic context in xhci_free_streams() | MEDIUM | 5.5 | 8%ile | Microsoft | 2026-07-14 |
| CVE-2026-64474 | vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-07-14 |
| CVE-2026-64482 | ALSA: gus: check snd_ctl_new1() return value | MEDIUM | 5.5 | 8%ile | Microsoft | 2026-07-14 |
| CVE-2026-64487 | ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser | MEDIUM | 5.5 | 8%ile | Microsoft | 2026-07-14 |
| CVE-2026-64507 | x86/bugs: Enable IBPB flush on BPF JIT allocation | MEDIUM | 5.5 | 14%ile | Microsoft | 2026-07-14 |
| CVE-2026-64511 | ACPI: NFIT: core: Fix possible NULL pointer dereference | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-07-14 |
| CVE-2026-64523 | net/handshake: Take a long-lived file reference at submit | MEDIUM | 5.5 | 39%ile | Microsoft | 2026-07-14 |
| CVE-2026-64525 | xfrm: move policy_bydst RCU sync from per-netns .exit to .pre_exit | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-07-14 |
| CVE-2026-64533 | fs/ntfs3: validate lcns_follow in log_replay conversion | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-07-14 |
| CVE-2026-7260 | Stack overflow in phar with circular symlinks | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-33842 | Windows File Explorer Information Disclosure Vulnerability | MEDIUM | 5.5 | 41%ile | Microsoft | 2026-07-14 |
| CVE-2026-34328 | Windows Audio Service Information Disclosure Vulnerability | MEDIUM | 5.5 | 41%ile | Microsoft | 2026-07-14 |
| CVE-2026-34346 | Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability | MEDIUM | 5.5 | 19%ile | Microsoft | 2026-07-14 |
| CVE-2026-34349 | Windows Media Information Disclosure Vulnerability | MEDIUM | 5.5 | 41%ile | Microsoft | 2026-07-14 |
| CVE-2026-40422 | Windows File Explorer Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-07-14 |
| CVE-2026-41087 | Windows File Explorer Information Disclosure Vulnerability | MEDIUM | 5.5 | 41%ile | Microsoft | 2026-07-14 |
| CVE-2026-45496 | Visual Studio Code Security Feature Bypass Vulnerability | MEDIUM | 5.5 | 41%ile | Microsoft | 2026-07-14 |
| CVE-2026-48580 | Microsoft Excel Information Disclosure Vulnerability | MEDIUM | 5.5 | 46%ile | Microsoft | 2026-07-14 |
| CVE-2026-49177 | Windows TCP/IP Information Disclosure Vulnerability | MEDIUM | 5.5 | 38%ile | Microsoft | 2026-07-14 |
| CVE-2026-49180 | Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability | MEDIUM | 5.5 | 39%ile | Microsoft | 2026-07-14 |
| CVE-2026-49801 | Windows SMB Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-07-14 |
| CVE-2026-50295 | Windows Zero Trust DNS Security Feature Bypass Vulnerability | MEDIUM | 5.5 | 23%ile | Microsoft | 2026-07-14 |
| CVE-2026-50300 | Windows DWM Core Library Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-07-14 |
| CVE-2026-50303 | Windows Key Guard Security Feature Bypass Vulnerability | MEDIUM | 5.5 | 19%ile | Microsoft | 2026-07-14 |
| CVE-2026-50316 | Windows Kernel Information Disclosure Vulnerability | MEDIUM | 5.5 | 41%ile | Microsoft | 2026-07-14 |
| CVE-2026-50334 | Windows Push Notification Information Disclosure Vulnerability | MEDIUM | 5.5 | 41%ile | Microsoft | 2026-07-14 |
| CVE-2026-50339 | Windows Push Notification Information Disclosure Vulnerability | MEDIUM | 5.5 | 41%ile | Microsoft | 2026-07-14 |
| CVE-2026-50341 | Windows NTFS Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-07-14 |
| CVE-2026-50350 | Windows Trusted Runtime Interface Driver Information Disclosure Vulnerability | MEDIUM | 5.5 | 41%ile | Microsoft | 2026-07-14 |
| CVE-2026-50352 | Windows Cryptographic Services Information Disclosure Vulnerability | MEDIUM | 5.5 | 41%ile | Microsoft | 2026-07-14 |
| CVE-2026-50377 | Windows Kernel Elevation of Privilege Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-07-14 |
| CVE-2026-50381 | Composite Image File System driver (cimfs.sys) Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-07-14 |
| CVE-2026-50389 | Windows File Explorer Information Disclosure Vulnerability | MEDIUM | 5.5 | 41%ile | Microsoft | 2026-07-14 |
| CVE-2026-50394 | Windows Media Information Disclosure Vulnerability | MEDIUM | 5.5 | 41%ile | Microsoft | 2026-07-14 |
| CVE-2026-50401 | Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-07-14 |
| CVE-2026-50408 | Microsoft Excel Information Disclosure Vulnerability | MEDIUM | 5.5 | 46%ile | Microsoft | 2026-07-14 |
| CVE-2026-50409 | Windows Overlay Filter Information Disclosure Vulnerability | MEDIUM | 5.5 | 41%ile | Microsoft | 2026-07-14 |
| CVE-2026-50430 | Windows Push Notification Information Disclosure Vulnerability | MEDIUM | 5.5 | 41%ile | Microsoft | 2026-07-14 |
| CVE-2026-50431 | Windows Quality of Service (QoS) Packet Scheduler Information Disclosure Vulnerability | MEDIUM | 5.5 | 41%ile | Microsoft | 2026-07-14 |
| CVE-2026-50434 | Windows Push Notification Information Disclosure Vulnerability | MEDIUM | 5.5 | 41%ile | Microsoft | 2026-07-14 |
| CVE-2026-50437 | Windows DWM Core Library Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-07-14 |
| CVE-2026-50442 | Windows File Explorer Information Disclosure Vulnerability | MEDIUM | 5.5 | 41%ile | Microsoft | 2026-07-14 |
| CVE-2026-50455 | Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-07-14 |
| CVE-2026-50456 | Windows File Explorer Information Disclosure Vulnerability | MEDIUM | 5.5 | 41%ile | Microsoft | 2026-07-14 |
| CVE-2026-50473 | Windows File Explorer Information Disclosure Vulnerability | MEDIUM | 5.5 | 41%ile | Microsoft | 2026-07-14 |
| CVE-2026-50475 | Windows Kernel Information Disclosure Vulnerability | MEDIUM | 5.5 | 32%ile | Microsoft | 2026-07-14 |
| CVE-2026-50483 | Windows Graphics Component Information Disclosure Vulnerability | MEDIUM | 5.5 | 41%ile | Microsoft | 2026-07-14 |
| CVE-2026-50681 | Windows Secure Channel Information Disclosure Vulnerability | MEDIUM | 5.5 | 41%ile | Microsoft | 2026-07-14 |
| CVE-2026-50690 | Windows SMB Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-07-14 |
| CVE-2026-54997 | Windows SMB Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-07-14 |
| CVE-2026-55023 | Microsoft Office Information Disclosure Vulnerability | MEDIUM | 5.5 | 48%ile | Microsoft | 2026-07-14 |
| CVE-2026-55027 | Microsoft Office Information Disclosure Vulnerability | MEDIUM | 5.5 | 48%ile | Microsoft | 2026-07-14 |
| CVE-2026-55028 | Microsoft Office Information Disclosure Vulnerability | MEDIUM | 5.5 | 48%ile | Microsoft | 2026-07-14 |
| CVE-2026-55035 | Microsoft Office Information Disclosure Vulnerability | MEDIUM | 5.5 | 47%ile | Microsoft | 2026-07-14 |
| CVE-2026-55042 | Microsoft Office Information Disclosure Vulnerability | MEDIUM | 5.5 | 46%ile | Microsoft | 2026-07-14 |
| CVE-2026-55046 | Microsoft Excel Information Disclosure Vulnerability | MEDIUM | 5.5 | 46%ile | Microsoft | 2026-07-14 |
| CVE-2026-55047 | Microsoft Office Information Disclosure Vulnerability | MEDIUM | 5.5 | 48%ile | Microsoft | 2026-07-14 |
| CVE-2026-55050 | Microsoft Word Information Disclosure Vulnerability | MEDIUM | 5.5 | 48%ile | Microsoft | 2026-07-14 |
| CVE-2026-55057 | Microsoft Office Information Disclosure Vulnerability | MEDIUM | 5.5 | 46%ile | Microsoft | 2026-07-14 |
| CVE-2026-55121 | Microsoft Office Information Disclosure Vulnerability | MEDIUM | 5.5 | 44%ile | Microsoft | 2026-07-14 |
| CVE-2026-55124 | Microsoft Word Information Disclosure Vulnerability | MEDIUM | 5.5 | 48%ile | Microsoft | 2026-07-14 |
| CVE-2026-55138 | Microsoft Excel Information Disclosure Vulnerability | MEDIUM | 5.5 | 46%ile | Microsoft | 2026-07-14 |
| CVE-2026-55139 | Microsoft Office Information Disclosure Vulnerability | MEDIUM | 5.5 | 42%ile | Microsoft | 2026-07-14 |
| CVE-2026-55142 | Microsoft Word Information Disclosure Vulnerability | MEDIUM | 5.5 | 48%ile | Microsoft | 2026-07-14 |
| CVE-2026-56178 | Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability | MEDIUM | 5.5 | 14%ile | Microsoft | 2026-07-14 |
| CVE-2026-56184 | Win32k Information Disclosure Vulnerability | MEDIUM | 5.5 | 41%ile | Microsoft | 2026-07-14 |
| CVE-2026-56192 | Microsoft Office Information Disclosure Vulnerability | MEDIUM | 5.5 | 48%ile | Microsoft | 2026-07-14 |
| CVE-2026-56195 | Microsoft Office Information Disclosure Vulnerability | MEDIUM | 5.5 | 46%ile | Microsoft | 2026-07-14 |
| CVE-2026-57083 | Windows Media Photo Codec Information Disclosure Vulnerability | MEDIUM | 5.5 | 46%ile | Microsoft | 2026-07-14 |
| CVE-2026-57084 | Windows File Explorer Information Disclosure Vulnerability | MEDIUM | 5.5 | 46%ile | Microsoft | 2026-07-14 |
| CVE-2026-57085 | Windows Print Spooler Information Disclosure Vulnerability | MEDIUM | 5.5 | 31%ile | Microsoft | 2026-07-14 |
| CVE-2026-58545 | Windows Kernel Security Feature Bypass Vulnerability | MEDIUM | 5.5 | 29%ile | Microsoft | 2026-07-14 |
| CVE-2026-58547 | Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-07-14 |
| CVE-2026-58614 | Windows Kernel Security Feature Bypass Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-07-14 |
| CVE-2026-54522 | MessagePack::Buffer#clear Use-After-Free that Enables Cross-Buffer Disclosure | MEDIUM | 5.4 | 13%ile | Microsoft | 2026-07-14 |
| CVE-2026-66338 | Libsoup: libsoup: http request smuggling via permissive chunk-size parsing in soup_body_input_stream_read_chunked() | MEDIUM | 5.4 | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-45488 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | MEDIUM | 5.4 | 30%ile | Microsoft | 2026-07-14 |
| CVE-2026-56157 | Microsoft SharePoint Server Spoofing Vulnerability | MEDIUM | 5.4 | 42%ile | Microsoft | 2026-07-14 |
| CVE-2026-57978 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | MEDIUM | 5.4 | 11%ile | Microsoft | 2026-07-14 |
| CVE-2026-57980 | Microsoft Edge (Chromium-based) Tampering Vulnerability | MEDIUM | 5.4 | 33%ile | Microsoft | 2026-07-14 |
| CVE-2026-58278 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | MEDIUM | 5.4 | 34%ile | Microsoft | 2026-07-14 |
| CVE-2026-58524 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | MEDIUM | 5.4 | 36%ile | Microsoft | 2026-07-14 |
| CVE-2026-62828 | Microsoft Edge for Android (Chromium-based) Tampering Vulnerability | MEDIUM | 5.4 | 36%ile | Microsoft | 2026-07-14 |
| CVE-2026-66316 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | MEDIUM | 5.4 | 11%ile | Microsoft | 2026-07-14 |
| CVE-2026-66317 | Microsoft Edge (Chromium-based) Tampering Vulnerability | MEDIUM | 5.4 | 11%ile | Microsoft | 2026-07-14 |
| CVE-2026-11856 | cross-origin Digest auth state leak | MEDIUM | 5.3 | 53%ile | Microsoft | 2026-07-14 |
| CVE-2026-15588 | Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering | MEDIUM | 5.3 | 41%ile | Microsoft | 2026-07-14 |
| CVE-2026-16768 | Gdk-pixbuf: out-of-bounds read in ico parser | MEDIUM | 5.3 | 35%ile | Microsoft | 2026-07-14 |
| CVE-2026-42505 | Invoking Encrypted Client Hello privacy leak in crypto/tls | MEDIUM | 5.3 | 32%ile | Microsoft | 2026-07-14 |
| CVE-2026-50045 | 'max-global-quota' reset by DNSSEC validation restarts | MEDIUM | 5.3 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-50251 | Attacker supplied '0.0.0.0'/'::' glue triggers defensive full-cache flush | MEDIUM | 5.3 | 17%ile | Microsoft | 2026-07-14 |
| CVE-2026-59845 | Libssh: libssh: denial of service via unchecked proxycommand fork() failure | MEDIUM | 5.3 | 1%ile | Microsoft | 2026-07-14 |
| CVE-2026-59848 | Libssh: libssh: denial of service via sftp responses with unknown request ids | MEDIUM | 5.3 | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-62299 | CoreDNS: rewrite-plugin EDNS0 response-revert nil-pointer panic (remote DoS) when a downstream plugin returns a response | MEDIUM | 5.3 | 45%ile | Microsoft | 2026-07-14 |
| CVE-2026-64082 | riscv: Fix register corruption from uninitialized cregs on error | MEDIUM | 5.3 | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-8927 | env-set cross-proxy Digest auth state leak | MEDIUM | 5.3 | 43%ile | Microsoft | 2026-07-14 |
| CVE-2026-44806 | Windows Secure Channel Denial of Service Vulnerability | MEDIUM | 5.3 | 68%ile | Microsoft | 2026-07-14 |
| CVE-2026-50415 | Windows Media Information Disclosure Vulnerability | MEDIUM | 5.3 | 58%ile | Microsoft | 2026-07-14 |
| CVE-2026-50432 | Window Virtual Filtering Platform (VFP) Denial of Service Vulnerability | MEDIUM | 5.3 | 61%ile | Microsoft | 2026-07-14 |
| CVE-2026-56164 | Microsoft SharePoint Server Elevation of Privilege Vulnerability | MEDIUM | 5.3 | 63%ile | Microsoft | 2026-07-14 |
| CVE-2026-64478 | ALSA: usb-audio: avoid kobject path lookup in DualSense match | MEDIUM | 5.2 | 8%ile | Microsoft | 2026-07-14 |
| CVE-2026-47143 | Capstone has a NULL Pointer Dereference with 3DNow! opcodes | MEDIUM | 5.1 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-50418 | Windows System Secure Feature Bypass Vulnerability | MEDIUM | 5.1 | 18%ile | Microsoft | 2026-07-14 |
| CVE-2026-63819 | f2fs: fix to do sanity check on f2fs_get_node_folio_ra() | MEDIUM | 5.0 | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-38753 | A use-after-free in the awk_sub() function (editors/awk.c) of Busybox v1.38.0 allows attackers to cause a Denial of Serv | MEDIUM | 4.9 | 4%ile | Microsoft | 2026-07-14 |
| CVE-2026-16729 | undici vulnerable to cookie attribute injection via unsanitized domain and unparsed setCookie fields | MEDIUM | 4.8 | 20%ile | Microsoft | 2026-07-14 |
| CVE-2026-26081 | HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEW_TOKEN format. HAProxy Enterprise | MEDIUM | 4.8 | 41%ile | Microsoft | 2026-07-14 |
| CVE-2026-54887 | DTLS server cookie bypass during startup window due to empty initial cookie secret | MEDIUM | 4.8 | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-56416 | Possible heap buffer overflow when validator canonicalizes RDATA that contains domain name | MEDIUM | 4.8 | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-57213 | RabbitMQ: Stored XSS federation management plugin via unsanitized consumer_tag rendering | MEDIUM | 4.8 | 17%ile | Microsoft | 2026-07-14 |
| CVE-2026-59998 | sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if th | MEDIUM | 4.8 | 8%ile | Microsoft | 2026-07-14 |
| CVE-2026-26145 | Microsoft Azure Synapse Elevation of Privilege Vulnerability | MEDIUM | 4.8 | 53%ile | Microsoft | 2026-07-14 |
| CVE-2026-50684 | Active Directory Federation Server Spoofing Vulnerability | MEDIUM | 4.8 | 34%ile | Microsoft | 2026-07-14 |
| CVE-2026-64279 | i2c: core: fix adapter deregistration race | MEDIUM | 4.7 | 3%ile | Microsoft | 2026-07-14 |
| CVE-2026-64371 | proc: protect ptrace_may_access() with exec_update_lock (part 1) | MEDIUM | 4.7 | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-64373 | cpufreq: Fix hotplug-suspend race during reboot | MEDIUM | 4.7 | 0%ile | Microsoft | 2026-07-14 |
| CVE-2026-64378 | writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs() | MEDIUM | 4.7 | 1%ile | Microsoft | 2026-07-14 |
| CVE-2026-64542 | ipv6: ndisc: fix NULL deref in accept_untracked_na() | MEDIUM | 4.7 | 7%ile | Microsoft | 2026-07-14 |
| CVE-2026-49167 | Windows Kernel Elevation of Privilege Vulnerability | MEDIUM | 4.7 | 29%ile | Microsoft | 2026-07-14 |
| CVE-2026-50310 | Windows Human Interface Device Information Disclosure Vulnerability | MEDIUM | 4.7 | 24%ile | Microsoft | 2026-07-14 |
| CVE-2026-50312 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | MEDIUM | 4.7 | 29%ile | Microsoft | 2026-07-14 |
| CVE-2026-50657 | Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability | MEDIUM | 4.7 | 34%ile | Microsoft | 2026-07-14 |
| CVE-2026-64547 | net: usb: net1080: validate packet_len before pad-byte access in rx_fixup | MEDIUM | 4.6 | 21%ile | Microsoft | 2026-07-14 |
| CVE-2026-49794 | Windows USB Audio Class Driver Information Disclosure Vulnerability | MEDIUM | 4.6 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-55016 | Microsoft SharePoint Server Spoofing Vulnerability | MEDIUM | 4.6 | 48%ile | Microsoft | 2026-07-14 |
| CVE-2026-55019 | Microsoft SharePoint Server Spoofing Vulnerability | MEDIUM | 4.6 | 48%ile | Microsoft | 2026-07-14 |
| CVE-2026-55020 | Microsoft SharePoint Server Spoofing Vulnerability | MEDIUM | 4.6 | 48%ile | Microsoft | 2026-07-14 |
| CVE-2026-55030 | Microsoft SharePoint Server Spoofing Vulnerability | MEDIUM | 4.6 | 48%ile | Microsoft | 2026-07-14 |
| CVE-2026-55135 | Microsoft SharePoint Server Spoofing Vulnerability | MEDIUM | 4.6 | 48%ile | Microsoft | 2026-07-14 |
| CVE-2026-62826 | Microsoft SharePoint Server Spoofing Vulnerability | MEDIUM | 4.6 | 48%ile | Microsoft | 2026-07-14 |
| CVE-2026-53361 | af_unix: Set gc_in_progress to true in unix_gc(). | MEDIUM | 4.5 | 7%ile | Microsoft | 2026-07-14 |
| CVE-2026-50485 | Windows Hyper-V Denial of Service Vulnerability | MEDIUM | 4.5 | 51%ile | Microsoft | 2026-07-14 |
| CVE-2026-59831 | GitHub CLI `gh codespace jupyter` could allow remote code execution when connecting to a malicious Codespace | MEDIUM | 4.4 | 26%ile | Microsoft | 2026-07-14 |
| CVE-2026-63830 | net: skmsg: preserve sg.copy across SG transforms | MEDIUM | 4.4 | 38%ile | Microsoft | 2026-07-14 |
| CVE-2026-63835 | batman-adv: v: prevent OGM aggregation on disabled hardif | MEDIUM | 4.4 | 7%ile | Microsoft | 2026-07-14 |
| CVE-2026-64388 | smb/client: fix chown/chgrp with SMB3 POSIX Extensions | MEDIUM | 4.4 | 3%ile | Microsoft | 2026-07-14 |
| CVE-2026-64531 | net: openvswitch: reject oversized nested action attrs | MEDIUM | 4.4 | 32%ile | Microsoft | 2026-07-14 |
| CVE-2026-64544 | crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents | MEDIUM | 4.4 | 7%ile | Microsoft | 2026-07-14 |
| CVE-2026-14647 | onnx onnxruntime old.cc convPoolShapeInference_opset19 out-of-bounds | MEDIUM | 4.3 | 37%ile | Microsoft | 2026-07-14 |
| CVE-2026-58209 | NATS Server: MQTT retained and QoS replay bypass subscribe deny filters | MEDIUM | 4.3 | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-59850 | Libssh: libssh: use-after-free via data callbacks on closed channels | MEDIUM | 4.3 | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-59930 | Mistune toc / TableOfContents directive: heading IDs use predictable `toc_N` numbering with no slugification, allowing c | MEDIUM | 4.3 | 9%ile | Microsoft | 2026-07-14 |
| CVE-2026-63308 | Helm Files.Lines Denial of Service via Empty Chart Files | MEDIUM | 4.3 | 42%ile | Microsoft | 2026-07-14 |
| CVE-2026-58597 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | MEDIUM | 4.3 | 53%ile | Microsoft | 2026-07-14 |
| CVE-2026-15157 | undici vulnerable to CRLF Injection via blob-like body 'type' property | MEDIUM | 4.2 | 18%ile | Microsoft | 2026-07-14 |
| CVE-2026-59995 | sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when "sftp server:/path ." is u | MEDIUM | 4.2 | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-59996 | scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when the copy occurs betwee | MEDIUM | 4.2 | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-59997 | internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important | MEDIUM | 4.2 | 7%ile | Microsoft | 2026-07-14 |
| CVE-2026-50302 | Windows Cryptographic Services Security Feature Bypass Vulnerability | MEDIUM | 4.2 | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-55945 | Microsoft Edge (Chromium-based) Information Disclosure Vulnerability | MEDIUM | 4.2 | 8%ile | Microsoft | 2026-07-14 |
| CVE-2026-56850 | A flaw in Node.js HTTPS Agent connection reuse can cause PFX object-array key collisions, allowing mutual TLS (mTLS) cli | MEDIUM | 4.1 | 0%ile | Microsoft | 2026-07-14 |
| CVE-2026-64424 | netpoll: fix a use-after-free on shutdown path | MEDIUM | 4.1 | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-13221 | Perl versions through 5.43.9 produce silently incorrect regular expression matches when an alternation of more than 6553 | MEDIUM | 4.0 | 42%ile | Microsoft | 2026-07-14 |
| CVE-2026-15028 | Libarchive: heap overflow oob read while parsing a tar archive contains a pax extended header | LOW | 3.9 | 10%ile | Microsoft | 2026-07-14 |
| CVE-2026-26080 | HAProxy Community Edition 3.2.x through 3.3.x before 3.3.3 can enter a loop or crash because varint is mishandled. HAPro | LOW | 3.7 | 46%ile | Microsoft | 2026-07-14 |
| CVE-2026-41637 | Degradation of resolution service from improperly accounted client-terminated DNS-over-QUIC queries | LOW | 3.7 | 31%ile | Microsoft | 2026-07-14 |
| CVE-2026-42955 | Extra fix for CVE-2026-40622 to also clamp the TTL of A/AAAA records disallowing a one-time 'ghost domain' delegation re | LOW | 3.7 | 9%ile | Microsoft | 2026-07-14 |
| CVE-2026-44687 | Off-by-one error in 'harden-below-nxdomain' logic can shadow a stub/forward zone by a legitimate parent's NXDOMAIN | LOW | 3.7 | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-46582 | A wildcard replay, as another piece of data, triggers poisoning in the serve expired reply path | LOW | 3.7 | 8%ile | Microsoft | 2026-07-14 |
| CVE-2026-54478 | DNS Cookie bypass when combined with proxy-protocol use | LOW | 3.7 | 15%ile | Microsoft | 2026-07-14 |
| CVE-2026-60000 | sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive au | LOW | 3.7 | 50%ile | Microsoft | 2026-07-14 |
| CVE-2026-62994 | CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin | LOW | 3.7 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-12547 | Libsoup: information disclosure in libsoup via soupauthmanager proxy credential leak on proxy switch | LOW | 3.4 | 14%ile | Microsoft | 2026-07-14 |
| CVE-2026-41579 | runc: Malicious image with /dev symlink can trigger limited host filesystem integrity violations | LOW | 3.3 | 8%ile | Microsoft | 2026-07-14 |
| CVE-2026-56847 | A flaw in Node.js Permission Model enforcement allows `trace_events.createTracing().enable()` Writes Trace Logs Outside | LOW | 3.3 | 5%ile | Microsoft | 2026-07-14 |
| CVE-2026-58039 | A flaw in Node.js Permission Model enforcement allows process.report writes (and overwrites) files outside --allow-fs-wr | LOW | 3.3 | 5%ile | Microsoft | 2026-07-14 |
| CVE-2026-64532 | fs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation} | LOW | 3.3 | 3%ile | Microsoft | 2026-07-14 |
| CVE-2026-50416 | Win32k Information Disclosure Vulnerability | LOW | 3.3 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-50419 | Windows Kernel Information Disclosure Vulnerability | LOW | 3.3 | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-54787 | sigstore-go fails to check signature timestamps against a signing key's validity period | LOW | 3.1 | 3%ile | Microsoft | 2026-07-14 |
| CVE-2026-55708 | Privacy/configuration issue when adding local data in views through 'unbound-control' | LOW | 3.1 | 5%ile | Microsoft | 2026-07-14 |
| CVE-2026-16517 | Libarchive: libarchive: signed integer overflow in archive_write_zip_header | LOW | 2.9 | 1%ile | Microsoft | 2026-07-14 |
| CVE-2026-38752 | A stack overflow in the evaluate() function (editors/awk.c) of BusyBox commit 371fe9 allows attackers to cause a Denial | LOW | 2.9 | 11%ile | Microsoft | 2026-07-14 |
| CVE-2026-64549 | Bluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup() | LOW | 2.1 | 8%ile | Microsoft | 2026-07-14 |
| CVE-2026-64512 | ACPI: CPPC: Suppress UBSAN warning caused by field misuse | LOW | 1.9 | 7%ile | Microsoft | 2026-07-14 |
| CVE-2026-64546 | drm/edid: fix OOB read in drm_parse_tiled_block() | LOW | 1.9 | 3%ile | Microsoft | 2026-07-14 |
| CVE-2026-13346 | pip absolute path traversal during download from malicious package indexes | UNKNOWN | — | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-14461 | Out-of-bound read in mtr | UNKNOWN | — | 39%ile | Microsoft | 2026-07-14 |
| CVE-2026-15037 | XML injection vulnerability in QDom comment, CDATA and processing-instruction serialization | UNKNOWN | — | 39%ile | Microsoft | 2026-07-14 |
| CVE-2026-15788 | WCOW cache mount source selector resolves NTFS junctions outside of cache root | UNKNOWN | — | 35%ile | Microsoft | 2026-07-14 |
| CVE-2026-16554 | Integer Overflow Leading to Heap Buffer Overflow in cJSON | UNKNOWN | — | 31%ile | Microsoft | 2026-07-14 |
| CVE-2026-26197 | Array full size, element count, and element size are not checked to make sure they match in H5Odtype.c | UNKNOWN | — | 30%ile | Microsoft | 2026-07-14 |
| CVE-2026-26199 | Buffer underflow in `H5Iget_name `/`H5G_get_name` if size is zero | UNKNOWN | — | 29%ile | Microsoft | 2026-07-14 |
| CVE-2026-40467 | Use after free in gawk | UNKNOWN | — | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-40468 | Heap buffer overflow in gawk | UNKNOWN | — | 10%ile | Microsoft | 2026-07-14 |
| CVE-2026-40553 | Stack-based buffer overflow in gawk | UNKNOWN | — | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-42792 | epmd permanent DoS via EMFILE on accept(2) in erts | UNKNOWN | — | 38%ile | Microsoft | 2026-07-14 |
| CVE-2026-44943 | remote limited file-write as root via discovery in open-iscsi | UNKNOWN | — | 33%ile | Microsoft | 2026-07-14 |
| CVE-2026-44944 | iscsiuio control-socket authentication bypass in open-iscsi | UNKNOWN | — | 0%ile | Microsoft | 2026-07-14 |
| CVE-2026-50243 | 'response-ip'/'rpz' can rewrite BOGUS answers instead of returning SERVFAIL | UNKNOWN | — | 1%ile | Microsoft | 2026-07-14 |
| CVE-2026-50252 | Possible cache poisoning attack by mapping source port population per thread | UNKNOWN | — | 6%ile | Microsoft | 2026-07-14 |
| CVE-2026-54886 | SSH SFTP server denial of service via extended channel data infinite loop | UNKNOWN | — | 26%ile | Microsoft | 2026-07-14 |
| CVE-2026-54908 | Pion DTLS: Denial of service via panic while parsing a crafted ECDHE_PSK ServerKeyExchange message | UNKNOWN | — | 46%ile | Microsoft | 2026-07-14 |
| CVE-2026-55737 | Heap pointer corruption via signed/unsigned mismatch in LARGE_TUPLE_EXT decoding in erts external term format decoder | UNKNOWN | — | 21%ile | Microsoft | 2026-07-14 |
| CVE-2026-55995 | Double-free in the iSNS attribute decoder in open-iscsi | UNKNOWN | — | 17%ile | Microsoft | 2026-07-14 |
| CVE-2026-56000 | xorg-x11-server / xwayland GLX contextTags Use-After-Free in CommonMakeCurrent() | UNKNOWN | — | 24%ile | Microsoft | 2026-07-14 |
| CVE-2026-56288 | NULL Pointer Dereference in GNU patch | UNKNOWN | — | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-56289 | Loop with Unreachable Exit Condition in GNU patch | UNKNOWN | — | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-56389 | Arbitrary Command Execution in GNU Bison | UNKNOWN | — | 13%ile | Microsoft | 2026-07-14 |
| CVE-2026-56390 | Arbitrary Output Location Change in GNU Bison | UNKNOWN | — | 7%ile | Microsoft | 2026-07-14 |
| CVE-2026-56392 | Heap-based Buffer Overflow in GNU coreutils | UNKNOWN | — | 8%ile | Microsoft | 2026-07-14 |
| CVE-2026-59248 | Unbounded HPACK/QPACK prefixed-integer decoding in Cowlib causes memory-exhaustion DoS | UNKNOWN | — | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-59250 | Megaco flex scanner buffer overflow via oversized property parm name | UNKNOWN | — | 56%ile | Microsoft | 2026-07-14 |
| CVE-2026-59251 | Denial of service via exponential certificate policy tree growth in path validation | UNKNOWN | — | 25%ile | Microsoft | 2026-07-14 |
| CVE-2026-65624 | Cowboy HTTP/1.1 max_headers Bypass via Duplicate Header Names Enables Memory Exhaustion | UNKNOWN | — | 32%ile | Microsoft | 2026-07-14 |
| CVE-2026-6879 | Quadratic Behavior in xml.etree.ElementPath Index Predicates | UNKNOWN | — | 29%ile | Microsoft | 2026-07-14 |
| CVE-2026-9079 | stale proxy password leak | UNKNOWN | — | 65%ile | Microsoft | 2026-07-14 |
| CVE-2026-13028 | Chromium: CVE-2026-13028 Use after free in WebGL | UNKNOWN | — | 25%ile | Microsoft | 2026-07-14 |
| CVE-2026-13030 | Chromium: CVE-2026-13030 Uninitialized Use in GPU | UNKNOWN | — | 21%ile | Microsoft | 2026-07-14 |
| CVE-2026-13032 | Chromium: CVE-2026-13032 Use after free in WebGL | UNKNOWN | — | 25%ile | Microsoft | 2026-07-14 |
| CVE-2026-13037 | Chromium: CVE-2026-13037 Use after free in WebView | UNKNOWN | — | 4%ile | Microsoft | 2026-07-14 |
| CVE-2026-13282 | Chromium: CVE-2026-13282 Use after free in AdFilter | UNKNOWN | — | 4%ile | Microsoft | 2026-07-14 |
| CVE-2026-13283 | Chromium: CVE-2026-13282: Use after free in Payments | UNKNOWN | — | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-13774 | Chromium: CVE-2026-13774 Use after free in Extensions | UNKNOWN | — | 23%ile | Microsoft | 2026-07-14 |
| CVE-2026-13775 | Chromium: CVE-2026-13775 Use after free in GPU | UNKNOWN | — | 25%ile | Microsoft | 2026-07-14 |
| CVE-2026-13776 | Chromium: CVE-2026-13776 Type Confusion in Dawn | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-13777 | Chromium: CVE-2026-13777 Insufficient validation of untrusted input in iOSWeb | UNKNOWN | — | 25%ile | Microsoft | 2026-07-14 |
| CVE-2026-13778 | Chromium: CVE-2026-13778 Use after free in WebUSB | UNKNOWN | — | 3%ile | Microsoft | 2026-07-14 |
| CVE-2026-13779 | Chromium: CVE-2026-13779 Use after free in Chromoting | UNKNOWN | — | 34%ile | Microsoft | 2026-07-14 |
| CVE-2026-13780 | Chromium: CVE-2026-13780 Insufficient validation of untrusted input in ANGLE | UNKNOWN | — | 37%ile | Microsoft | 2026-07-14 |
| CVE-2026-13781 | Chromium: CVE-2026-13781 Insufficient validation of untrusted input in Skia | UNKNOWN | — | 37%ile | Microsoft | 2026-07-14 |
| CVE-2026-13782 | Chromium: CVE-2026-13782 Use after free in Browser | UNKNOWN | — | 25%ile | Microsoft | 2026-07-14 |
| CVE-2026-13783 | Chromium: CVE-2026-13783 Use after free in Views | UNKNOWN | — | 25%ile | Microsoft | 2026-07-14 |
| CVE-2026-13784 | Chromium: CVE-2026-13784 Use after free in Views | UNKNOWN | — | 25%ile | Microsoft | 2026-07-14 |
| CVE-2026-13785 | Chromium: CVE-2026-13785 Use after free in Bluetooth | UNKNOWN | — | 25%ile | Microsoft | 2026-07-14 |
| CVE-2026-13786 | Chromium: CVE-2026-13786 Use after free in Ozone | UNKNOWN | — | 36%ile | Microsoft | 2026-07-14 |
| CVE-2026-13787 | Chromium: CVE-2026-13787 Use after free in Chromoting | UNKNOWN | — | 36%ile | Microsoft | 2026-07-14 |
| CVE-2026-13788 | Chromium: CVE-2026-13788 Use after free in Fullscreen | UNKNOWN | — | 36%ile | Microsoft | 2026-07-14 |
| CVE-2026-13790 | Chromium: CVE-2026-13790 Side-channel information leakage in Scroll | UNKNOWN | — | 25%ile | Microsoft | 2026-07-14 |
| CVE-2026-13791 | Chromium: CVE-2026-13791 Insufficient validation of untrusted input in Downloads | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-13792 | Chromium: CVE-2026-13792 Use after free in Touchbar | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-13793 | Chromium: CVE-2026-13793 Insufficient policy enforcement in SVG | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-13794 | Chromium: CVE-2026-13794 Insufficient validation of untrusted input in WebAppInstalls | UNKNOWN | — | 42%ile | Microsoft | 2026-07-14 |
| CVE-2026-13795 | Chromium: CVE-2026-13795 Insufficient policy enforcement in Chrome for iOS | UNKNOWN | — | 20%ile | Microsoft | 2026-07-14 |
| CVE-2026-13796 | Chromium: CVE-2026-13796 Integer overflow in Chromecast | UNKNOWN | — | 25%ile | Microsoft | 2026-07-14 |
| CVE-2026-13797 | Chromium: CVE-2026-13797 Insufficient validation of untrusted input in Chromecast | UNKNOWN | — | 25%ile | Microsoft | 2026-07-14 |
| CVE-2026-13798 | Chromium: CVE-2026-13798 Heap buffer overflow in Chromecast | UNKNOWN | — | 31%ile | Microsoft | 2026-07-14 |
| CVE-2026-13799 | Chromium: CVE-2026-13799 Use after free in QUIC | UNKNOWN | — | 25%ile | Microsoft | 2026-07-14 |
| CVE-2026-13800 | Chromium: CVE-2026-13800 Inappropriate implementation in Updater | UNKNOWN | — | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-13801 | Chromium: CVE-2026-13801 Integer overflow in Chromecast | UNKNOWN | — | 23%ile | Microsoft | 2026-07-14 |
| CVE-2026-13802 | Chromium: CVE-2026-13802 Use after free in Views | UNKNOWN | — | 30%ile | Microsoft | 2026-07-14 |
| CVE-2026-13803 | Chromium: CVE-2026-13803 Type Confusion in Chrome Tabs | UNKNOWN | — | 26%ile | Microsoft | 2026-07-14 |
| CVE-2026-13804 | Chromium: CVE-2026-13804 Use after free in Chromecast | UNKNOWN | — | 23%ile | Microsoft | 2026-07-14 |
| CVE-2026-13805 | Chromium: CVE-2026-13805 Use after free in GFX | UNKNOWN | — | 32%ile | Microsoft | 2026-07-14 |
| CVE-2026-13806 | Chromium: CVE-2026-13806 Insufficient validation of untrusted input in Accessibility | UNKNOWN | — | 26%ile | Microsoft | 2026-07-14 |
| CVE-2026-13807 | Chromium: CVE-2026-13807 Use after free in Import | UNKNOWN | — | 24%ile | Microsoft | 2026-07-14 |
| CVE-2026-13808 | Chromium: CVE-2026-13808 Insufficient data validation in Chrome for iOS | UNKNOWN | — | 3%ile | Microsoft | 2026-07-14 |
| CVE-2026-13809 | Chromium: CVE-2026-13809 Side-channel information leakage in Safe Browsing | UNKNOWN | — | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-13810 | Chromium: CVE-2026-13810 Inappropriate implementation in Input | UNKNOWN | — | 25%ile | Microsoft | 2026-07-14 |
| CVE-2026-13811 | Chromium: CVE-2026-13811 Use after free in IME | UNKNOWN | — | 32%ile | Microsoft | 2026-07-14 |
| CVE-2026-13812 | Chromium: CVE-2026-13812 Insufficient validation of untrusted input in Chrome for iOS | UNKNOWN | — | 9%ile | Microsoft | 2026-07-14 |
| CVE-2026-13813 | Chromium: CVE-2026-13813 Insufficient validation of untrusted input in Chrome for iOS | UNKNOWN | — | 23%ile | Microsoft | 2026-07-14 |
| CVE-2026-13814 | Chromium: CVE-2026-13814 Use after free in Views | UNKNOWN | — | 23%ile | Microsoft | 2026-07-14 |
| CVE-2026-13815 | Chromium: CVE-2026-13815 Use after free in Blink | UNKNOWN | — | 36%ile | Microsoft | 2026-07-14 |
| CVE-2026-13816 | Chromium: CVE-2026-13816 Insufficient validation of untrusted input in File Input | UNKNOWN | — | 25%ile | Microsoft | 2026-07-14 |
| CVE-2026-13817 | Chromium: CVE-2026-13817 Insufficient validation of untrusted input in Glic | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-13818 | Chromium: CVE-2026-13818 Inappropriate implementation in Passwords | UNKNOWN | — | 21%ile | Microsoft | 2026-07-14 |
| CVE-2026-13819 | Chromium: CVE-2026-13819 Out of bounds read in ANGLE | UNKNOWN | — | 34%ile | Microsoft | 2026-07-14 |
| CVE-2026-13820 | Chromium: CVE-2026-13820 Out of bounds read in Skia | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-13821 | Chromium: CVE-2026-13821 Use after free in Canvas | UNKNOWN | — | 32%ile | Microsoft | 2026-07-14 |
| CVE-2026-13822 | Chromium: CVE-2026-13822 Inappropriate implementation in Extensions | UNKNOWN | — | 8%ile | Microsoft | 2026-07-14 |
| CVE-2026-13823 | Chromium: CVE-2026-13823 Use after free in Glic | UNKNOWN | — | 23%ile | Microsoft | 2026-07-14 |
| CVE-2026-13824 | Chromium: CVE-2026-13824 Insufficient validation of untrusted input in Extensions | UNKNOWN | — | 23%ile | Microsoft | 2026-07-14 |
| CVE-2026-13825 | Chromium: CVE-2026-13825 Uninitialized Use in Dawn | UNKNOWN | — | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-13826 | Chromium: CVE-2026-13826 Inappropriate implementation in Autofill | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-13827 | Chromium: CVE-2026-13827 Use after free in Updater | UNKNOWN | — | 1%ile | Microsoft | 2026-07-14 |
| CVE-2026-13828 | Chromium: CVE-2026-13828 Inappropriate implementation in Enterprise | UNKNOWN | — | 21%ile | Microsoft | 2026-07-14 |
| CVE-2026-13829 | Chromium: CVE-2026-13829 Insufficient validation of untrusted input in Settings | UNKNOWN | — | 26%ile | Microsoft | 2026-07-14 |
| CVE-2026-13830 | Chromium: CVE-2026-13830 Use after free in Chromoting | UNKNOWN | — | 19%ile | Microsoft | 2026-07-14 |
| CVE-2026-13831 | Chromium: CVE-2026-13831 Use after free in GPU | UNKNOWN | — | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-13832 | Chromium: CVE-2026-13832 Use after free in Headless | UNKNOWN | — | 23%ile | Microsoft | 2026-07-14 |
| CVE-2026-13833 | Chromium: CVE-2026-13833 Uninitialized Use in ANGLE | UNKNOWN | — | 32%ile | Microsoft | 2026-07-14 |
| CVE-2026-13834 | Chromium: CVE-2026-13834 Insufficient validation of untrusted input in ANGLE | UNKNOWN | — | 36%ile | Microsoft | 2026-07-14 |
| CVE-2026-13835 | Chromium: CVE-2026-13835 Inappropriate implementation in XML | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-13836 | Chromium: CVE-2026-13836 Inappropriate implementation in CSS | UNKNOWN | — | 13%ile | Microsoft | 2026-07-14 |
| CVE-2026-13837 | Chromium: CVE-2026-13837 Inappropriate implementation in CSS | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-13838 | Chromium: CVE-2026-13838 Inappropriate implementation in CSS | UNKNOWN | — | 15%ile | Microsoft | 2026-07-14 |
| CVE-2026-13839 | Chromium: CVE-2026-13839 Inappropriate implementation in CSS | UNKNOWN | — | 15%ile | Microsoft | 2026-07-14 |
| CVE-2026-13840 | Chromium: CVE-2026-13840 Insufficient policy enforcement in Canvas | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-13841 | Chromium: CVE-2026-13841 Integer overflow in Skia | UNKNOWN | — | 33%ile | Microsoft | 2026-07-14 |
| CVE-2026-13842 | Chromium: CVE-2026-13842 Incorrect security UI in Chrome for iOS | UNKNOWN | — | 13%ile | Microsoft | 2026-07-14 |
| CVE-2026-13843 | Chromium: CVE-2026-13843 Insufficient validation of untrusted input in Chrome for iOS | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-13844 | Chromium: CVE-2026-13844 Use after free in Updater | UNKNOWN | — | 1%ile | Microsoft | 2026-07-14 |
| CVE-2026-13845 | Chromium: CVE-2026-13845 Use after free in DOM | UNKNOWN | — | 32%ile | Microsoft | 2026-07-14 |
| CVE-2026-13846 | Chromium: CVE-2026-13846 Use after free in USB | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-13847 | Chromium: CVE-2026-13847 Insufficient validation of untrusted input in Chrome for iOS | UNKNOWN | — | 25%ile | Microsoft | 2026-07-14 |
| CVE-2026-13848 | Chromium: CVE-2026-13848 Use after free in Forms | UNKNOWN | — | 32%ile | Microsoft | 2026-07-14 |
| CVE-2026-13849 | Chromium: CVE-2026-13849 Insufficient validation of untrusted input in Chromoting | UNKNOWN | — | 1%ile | Microsoft | 2026-07-14 |
| CVE-2026-13850 | Chromium: CVE-2026-13850 Insufficient validation of untrusted input in Chrome for iOS | UNKNOWN | — | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-13851 | Chromium: CVE-2026-13851 Insufficient validation of untrusted input in WebAppInstalls | UNKNOWN | — | 24%ile | Microsoft | 2026-07-14 |
| CVE-2026-13852 | Chromium: CVE-2026-13852 Insufficient validation of untrusted input in WebAppInstalls | UNKNOWN | — | 24%ile | Microsoft | 2026-07-14 |
| CVE-2026-13853 | Chromium: CVE-2026-13853 Use after free in Journeys | UNKNOWN | — | 23%ile | Microsoft | 2026-07-14 |
| CVE-2026-13854 | Chromium: CVE-2026-13854 Use after free in Ozone | UNKNOWN | — | 23%ile | Microsoft | 2026-07-14 |
| CVE-2026-13855 | Chromium: CVE-2026-13855 Use after free in Ozone | UNKNOWN | — | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-13856 | Chromium: CVE-2026-13856 Insufficient validation of untrusted input in Speech | UNKNOWN | — | 23%ile | Microsoft | 2026-07-14 |
| CVE-2026-13857 | Chromium: CVE-2026-13857 Inappropriate implementation in Geometry | UNKNOWN | — | 11%ile | Microsoft | 2026-07-14 |
| CVE-2026-13858 | Chromium: CVE-2026-13858 Out of bounds read in FFmpeg | UNKNOWN | — | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-13859 | Chromium: CVE-2026-13859 Inappropriate implementation in ANGLE | UNKNOWN | — | 32%ile | Microsoft | 2026-07-14 |
| CVE-2026-13860 | Chromium: CVE-2026-13860 Incorrect security UI in Autofill | UNKNOWN | — | 11%ile | Microsoft | 2026-07-14 |
| CVE-2026-13861 | Chromium: CVE-2026-13861 Use after free in Core | UNKNOWN | — | 23%ile | Microsoft | 2026-07-14 |
| CVE-2026-13862 | CVE-2026-13862 | UNKNOWN | — | 17%ile | Microsoft | 2026-07-14 |
| CVE-2026-13863 | Chromium: CVE-2026-13863 Insufficient validation of untrusted input in CustomTabs | UNKNOWN | — | 3%ile | Microsoft | 2026-07-14 |
| CVE-2026-13864 | Chromium: CVE-2026-13864 Insufficient policy enforcement in WebHID | UNKNOWN | — | 21%ile | Microsoft | 2026-07-14 |
| CVE-2026-13865 | Chromium: CVE-2026-13865 Insufficient validation of untrusted input in Enterprise | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-13866 | Chromium: CVE-2026-13866 Insufficient validation of untrusted input in Input | UNKNOWN | — | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-13867 | Chromium: CVE-2026-13867 Inappropriate implementation in Geolocation | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-13868 | Chromium: CVE-2026-13868 Inappropriate implementation in Network | UNKNOWN | — | 15%ile | Microsoft | 2026-07-14 |
| CVE-2026-13869 | Chromium: CVE-2026-13869 Use after free in Device | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-13870 | Chromium: CVE-2026-13870 Use after free in WebView | UNKNOWN | — | 44%ile | Microsoft | 2026-07-14 |
| CVE-2026-13871 | Chromium: CVE-2026-13871 Insufficient data validation in GuestView | UNKNOWN | — | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-13872 | Chromium: CVE-2026-13872 Insufficient validation of untrusted input in WebAppInstalls | UNKNOWN | — | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-13873 | Chromium: CVE-2026-13873 Out of bounds memory access in Layout | UNKNOWN | — | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-13874 | Chromium: CVE-2026-13874 Inappropriate implementation in DataTransfer | UNKNOWN | — | 11%ile | Microsoft | 2026-07-14 |
| CVE-2026-13875 | Chromium: CVE-2026-13875 Insufficient validation of untrusted input in GPU | UNKNOWN | — | 21%ile | Microsoft | 2026-07-14 |
| CVE-2026-13876 | Chromium: CVE-2026-13876 Inappropriate implementation in Network | UNKNOWN | — | 13%ile | Microsoft | 2026-07-14 |
| CVE-2026-13877 | Chromium: CVE-2026-13877 Insufficient validation of untrusted input in ANGLE | UNKNOWN | — | 31%ile | Microsoft | 2026-07-14 |
| CVE-2026-13878 | Chromium: CVE-2026-13878 Use after free in Bluetooth | UNKNOWN | — | 23%ile | Microsoft | 2026-07-14 |
| CVE-2026-13879 | Chromium: CVE-2026-13879 Use after free in Bluetooth | UNKNOWN | — | 5%ile | Microsoft | 2026-07-14 |
| CVE-2026-13880 | Chromium: CVE-2026-13880 Use after free in USB | UNKNOWN | — | 23%ile | Microsoft | 2026-07-14 |
| CVE-2026-13881 | Chromium: CVE-2026-13881 Insufficient data validation in WebAppInstalls | UNKNOWN | — | 11%ile | Microsoft | 2026-07-14 |
| CVE-2026-13882 | Chromium: CVE-2026-13882 Inappropriate implementation in USB | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-13883 | Chromium: CVE-2026-13883 Type Confusion in ANGLE | UNKNOWN | — | 36%ile | Microsoft | 2026-07-14 |
| CVE-2026-13884 | Chromium: CVE-2026-13884 Heap buffer overflow in Chromecast | UNKNOWN | — | 10%ile | Microsoft | 2026-07-14 |
| CVE-2026-13885 | Chromium: CVE-2026-13885 Use after free in Skia | UNKNOWN | — | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-13886 | Chromium: CVE-2026-13886 Policy bypass in Isolated Web Apps | UNKNOWN | — | 18%ile | Microsoft | 2026-07-14 |
| CVE-2026-13887 | Chromium: CVE-2026-13887 Insufficient policy enforcement in NFC | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-13888 | Chromium: CVE-2026-13888 Use after free in Extensions | UNKNOWN | — | 32%ile | Microsoft | 2026-07-14 |
| CVE-2026-13889 | Chromium: CVE-2026-13889 Insufficient validation of untrusted input in WebAuthentication | UNKNOWN | — | 24%ile | Microsoft | 2026-07-14 |
| CVE-2026-13890 | Chromium: CVE-2026-13890 Out of bounds read in Chromecast | UNKNOWN | — | 18%ile | Microsoft | 2026-07-14 |
| CVE-2026-13891 | Chromium: CVE-2026-13891 Insufficient validation of untrusted input in Extensions | UNKNOWN | — | 23%ile | Microsoft | 2026-07-14 |
| CVE-2026-13892 | Chromium: CVE-2026-13892 Inappropriate implementation in Chrome for iOS | UNKNOWN | — | 21%ile | Microsoft | 2026-07-14 |
| CVE-2026-13893 | Chromium: CVE-2026-13893 Insufficient validation of untrusted input in WebUI | UNKNOWN | — | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-13894 | Chromium: CVE-2026-13894 Insufficient policy enforcement in Network | UNKNOWN | — | 11%ile | Microsoft | 2026-07-14 |
| CVE-2026-13895 | Chromium: CVE-2026-13895 Inappropriate implementation in Autofill | UNKNOWN | — | 11%ile | Microsoft | 2026-07-14 |
| CVE-2026-13896 | Chromium: CVE-2026-13896 Insufficient policy enforcement in Glic | UNKNOWN | — | 18%ile | Microsoft | 2026-07-14 |
| CVE-2026-13897 | Chromium: CVE-2026-13897 Insufficient policy enforcement in Chromecast | UNKNOWN | — | 26%ile | Microsoft | 2026-07-14 |
| CVE-2026-13898 | Chromium: CVE-2026-13898 Use after free in Cast Receiver | UNKNOWN | — | 36%ile | Microsoft | 2026-07-14 |
| CVE-2026-13899 | Chromium: CVE-2026-13899 Use after free in HTML | UNKNOWN | — | 36%ile | Microsoft | 2026-07-14 |
| CVE-2026-13900 | Chromium: CVE-2026-13900 Insufficient validation of untrusted input in Chromecast | UNKNOWN | — | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-13901 | Chromium: CVE-2026-13901 Insufficient validation of untrusted input in Serial | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-13902 | Chromium: CVE-2026-13902 Inappropriate implementation in Chrome for iOS | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-13903 | Chromium: CVE-2026-13903 Insufficient policy enforcement in Bluetooth | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-13904 | Chromium: CVE-2026-13904 Incorrect security UI in Safe Browsing | UNKNOWN | — | 18%ile | Microsoft | 2026-07-14 |
| CVE-2026-13905 | Chromium: CVE-2026-13905 Incorrect security UI in Chrome for iOS | UNKNOWN | — | 1%ile | Microsoft | 2026-07-14 |
| CVE-2026-13906 | Chromium: CVE-2026-13906 Out of bounds read in Codecs | UNKNOWN | — | 25%ile | Microsoft | 2026-07-14 |
| CVE-2026-13907 | Chromium: CVE-2026-13907 Inappropriate implementation in iOSWeb | UNKNOWN | — | 11%ile | Microsoft | 2026-07-14 |
| CVE-2026-13908 | Chromium: CVE-2026-13908 Insufficient validation of untrusted input in Omnibox | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-13909 | Chromium: CVE-2026-13909 Insufficient policy enforcement in DevTools | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-13910 | Chromium: CVE-2026-13910 Insufficient policy enforcement in WebXR | UNKNOWN | — | 25%ile | Microsoft | 2026-07-14 |
| CVE-2026-13911 | Chromium: CVE-2026-13911 Insufficient data validation in Spellcheck | UNKNOWN | — | 23%ile | Microsoft | 2026-07-14 |
| CVE-2026-13912 | Chromium: CVE-2026-13912 Incorrect security UI in Safe Browsing | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-13913 | Chromium: CVE-2026-13913 Insufficient policy enforcement in Autofill | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-13914 | Chromium: CVE-2026-13914 Inappropriate implementation in Passwords | UNKNOWN | — | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-13915 | Chromium: CVE-2026-13915 Use after free in Chrome for iOS | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-13916 | Chromium: CVE-2026-13916 Inappropriate implementation in Chrome for iOS | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-13917 | Chromium: CVE-2026-13917 Insufficient validation of untrusted input in Chrome for iOS | UNKNOWN | — | 18%ile | Microsoft | 2026-07-14 |
| CVE-2026-13918 | Chromium: CVE-2026-13918 Use after free in Chrome for iOS | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-13919 | Chromium: CVE-2026-13919 Insufficient data validation in Extensions | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-13920 | Chromium: CVE-2026-13920 Insufficient validation of untrusted input in Media | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-13921 | Chromium: CVE-2026-13921 Insufficient validation of untrusted input in DeviceBoundSessionCredentials | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-13922 | Chromium: CVE-2026-13922 Side-channel information leakage in Paint | UNKNOWN | — | 25%ile | Microsoft | 2026-07-14 |
| CVE-2026-13923 | Chromium: CVE-2026-13923 Uninitialized Use in GPU | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-13924 | Chromium: CVE-2026-13924 Insufficient validation of untrusted input in WebView | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-13925 | Chromium: CVE-2026-13925 Inappropriate implementation in Downloads | UNKNOWN | — | 33%ile | Microsoft | 2026-07-14 |
| CVE-2026-13926 | Chromium: CVE-2026-13926 Insufficient validation of untrusted input in Network | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-13927 | Chromium: CVE-2026-13927 Insufficient validation of untrusted input in UI | UNKNOWN | — | 3%ile | Microsoft | 2026-07-14 |
| CVE-2026-13928 | Chromium: CVE-2026-13928 Insufficient validation of untrusted input in Enterprise | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-13929 | Chromium: CVE-2026-13929 Insufficient validation of untrusted input in DevTools | UNKNOWN | — | 3%ile | Microsoft | 2026-07-14 |
| CVE-2026-13930 | Chromium: CVE-2026-13930 Insufficient policy enforcement in Actor | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-13931 | Chromium: CVE-2026-13931 Inappropriate implementation in Media | UNKNOWN | — | 20%ile | Microsoft | 2026-07-14 |
| CVE-2026-13932 | Chromium: CVE-2026-13932 Inappropriate implementation in Sharing | UNKNOWN | — | 23%ile | Microsoft | 2026-07-14 |
| CVE-2026-13933 | Chromium: CVE-2026-13933 Insufficient policy enforcement in Passwords | UNKNOWN | — | 20%ile | Microsoft | 2026-07-14 |
| CVE-2026-13934 | Chromium: CVE-2026-13934 Insufficient validation of untrusted input in Dawn | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-13935 | Chromium: CVE-2026-13935 Side-channel information leakage in ComputePressure | UNKNOWN | — | 25%ile | Microsoft | 2026-07-14 |
| CVE-2026-13936 | Chromium: CVE-2026-13936 Inappropriate implementation in Passwords | UNKNOWN | — | 23%ile | Microsoft | 2026-07-14 |
| CVE-2026-13937 | Chromium: CVE-2026-13937 Insufficient policy enforcement in Passwords | UNKNOWN | — | 23%ile | Microsoft | 2026-07-14 |
| CVE-2026-13938 | Chromium: CVE-2026-13938 Integer overflow in Fonts | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-13939 | Chromium: CVE-2026-13939 Insufficient validation of untrusted input in WebShare | UNKNOWN | — | 14%ile | Microsoft | 2026-07-14 |
| CVE-2026-13940 | Chromium: CVE-2026-13940 Uninitialized Use in Cast | UNKNOWN | — | 6%ile | Microsoft | 2026-07-14 |
| CVE-2026-13941 | Chromium: CVE-2026-13941 Inappropriate implementation in SiteSettings | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-13942 | Chromium: CVE-2026-13942 Insufficient validation of untrusted input in Video Capture | UNKNOWN | — | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-13943 | Chromium: CVE-2026-13943 Uninitialized Use in CSS | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-13944 | Chromium: CVE-2026-13944 Inappropriate implementation in DataTransfer | UNKNOWN | — | 8%ile | Microsoft | 2026-07-14 |
| CVE-2026-13945 | Chromium: CVE-2026-13945 Insufficient policy enforcement in Extensions | UNKNOWN | — | 6%ile | Microsoft | 2026-07-14 |
| CVE-2026-13946 | Chromium: CVE-2026-13946 Inappropriate implementation in ScriptInjections | UNKNOWN | — | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-13947 | Chromium: CVE-2026-13947 Uninitialized Use in XR | UNKNOWN | — | 24%ile | Microsoft | 2026-07-14 |
| CVE-2026-13948 | Chromium: CVE-2026-13948 Insufficient policy enforcement in Extensions | UNKNOWN | — | 6%ile | Microsoft | 2026-07-14 |
| CVE-2026-13949 | Chromium: CVE-2026-13949 Insufficient policy enforcement in Payments | UNKNOWN | — | 23%ile | Microsoft | 2026-07-14 |
| CVE-2026-13950 | Chromium: CVE-2026-13950 Uninitialized Use in GPU | UNKNOWN | — | 24%ile | Microsoft | 2026-07-14 |
| CVE-2026-13951 | Chromium: CVE-2026-13951 Policy bypass in USB | UNKNOWN | — | 23%ile | Microsoft | 2026-07-14 |
| CVE-2026-13952 | Chromium: CVE-2026-13952 Inappropriate implementation in PerformanceAPIs | UNKNOWN | — | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-13953 | Chromium: CVE-2026-13953 Inappropriate implementation in SplitView | UNKNOWN | — | 21%ile | Microsoft | 2026-07-14 |
| CVE-2026-13954 | Chromium: CVE-2026-13954 Insufficient policy enforcement in XML | UNKNOWN | — | 23%ile | Microsoft | 2026-07-14 |
| CVE-2026-13955 | Chromium: CVE-2026-13955 Insufficient validation of untrusted input in CustomTabs | UNKNOWN | — | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-13956 | Chromium: CVE-2026-13956 Incorrect security UI in PageInfo | UNKNOWN | — | 11%ile | Microsoft | 2026-07-14 |
| CVE-2026-13957 | Chromium: CVE-2026-13957 Incorrect security UI in Extensions | UNKNOWN | — | 5%ile | Microsoft | 2026-07-14 |
| CVE-2026-13958 | Chromium: CVE-2026-13958 Uninitialized Use in Codecs | UNKNOWN | — | 25%ile | Microsoft | 2026-07-14 |
| CVE-2026-13959 | Chromium: CVE-2026-13959 Insufficient validation of untrusted input in Blink | UNKNOWN | — | 17%ile | Microsoft | 2026-07-14 |
| CVE-2026-13960 | Chromium: CVE-2026-13960 Inappropriate implementation in Passwords | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-13961 | Chromium: CVE-2026-13961 Insufficient validation of untrusted input in DevTools | UNKNOWN | — | 21%ile | Microsoft | 2026-07-14 |
| CVE-2026-13962 | Chromium: CVE-2026-13962 Insufficient data validation in PDF | UNKNOWN | — | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-13963 | Chromium: CVE-2026-13963 Inappropriate implementation in DevTools | UNKNOWN | — | 8%ile | Microsoft | 2026-07-14 |
| CVE-2026-13964 | Chromium: CVE-2026-13964 Insufficient policy enforcement in WebView | UNKNOWN | — | 23%ile | Microsoft | 2026-07-14 |
| CVE-2026-13965 | Chromium: CVE-2026-13965 Use after free in Oilpan | UNKNOWN | — | 36%ile | Microsoft | 2026-07-14 |
| CVE-2026-13966 | Chromium: CVE-2026-13966 Inappropriate implementation in History | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-13967 | Chromium: CVE-2026-13967 Type Confusion in V8 | UNKNOWN | — | 42%ile | Microsoft | 2026-07-14 |
| CVE-2026-13968 | Chromium: CVE-2026-13968 Insufficient validation of untrusted input in DevTools | UNKNOWN | — | 29%ile | Microsoft | 2026-07-14 |
| CVE-2026-13969 | Chromium: CVE-2026-13969 Uninitialized Use in UI | UNKNOWN | — | 21%ile | Microsoft | 2026-07-14 |
| CVE-2026-13970 | Chromium: CVE-2026-13970 Uninitialized Use in Media | UNKNOWN | — | 21%ile | Microsoft | 2026-07-14 |
| CVE-2026-13971 | Chromium: CVE-2026-13971 Uninitialized Use in Skia | UNKNOWN | — | 32%ile | Microsoft | 2026-07-14 |
| CVE-2026-13972 | Chromium: CVE-2026-13972 Inappropriate implementation in Paint | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-13973 | Chromium: CVE-2026-13973 Inappropriate implementation in UI | UNKNOWN | — | 10%ile | Microsoft | 2026-07-14 |
| CVE-2026-13974 | Chromium: CVE-2026-13974 Integer overflow in Safe Browsing | UNKNOWN | — | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-13975 | Chromium: CVE-2026-13975 Out of bounds read in ANGLE | UNKNOWN | — | 17%ile | Microsoft | 2026-07-14 |
| CVE-2026-13976 | Chromium: CVE-2026-13976 Heap buffer overflow in Storage | UNKNOWN | — | 9%ile | Microsoft | 2026-07-14 |
| CVE-2026-13977 | Chromium: CVE-2026-13977 Inappropriate implementation in HTMLParser | UNKNOWN | — | 13%ile | Microsoft | 2026-07-14 |
| CVE-2026-13978 | Chromium: CVE-2026-13978 Insufficient policy enforcement in PageInfo | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-13979 | Chromium: CVE-2026-13979 Inappropriate implementation in Paint | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-13980 | Chromium: CVE-2026-13980 Incorrect security UI in Chrome for iOS | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-13981 | Chromium: CVE-2026-13981 Inappropriate implementation in Chrome for iOS | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-13982 | Chromium: CVE-2026-13982 Incorrect security UI in Passwords | UNKNOWN | — | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-13983 | Chromium: CVE-2026-13983 Incorrect security UI in Chrome for iOS | UNKNOWN | — | 11%ile | Microsoft | 2026-07-14 |
| CVE-2026-13984 | Chromium: CVE-2026-13984 Incorrect security UI in TabStrip | UNKNOWN | — | 15%ile | Microsoft | 2026-07-14 |
| CVE-2026-13985 | Chromium: CVE-2026-13985 Inappropriate implementation in MediaCapture | UNKNOWN | — | 20%ile | Microsoft | 2026-07-14 |
| CVE-2026-13986 | Chromium: CVE-2026-13986 Inappropriate implementation in Media UI | UNKNOWN | — | 11%ile | Microsoft | 2026-07-14 |
| CVE-2026-13987 | Chromium: CVE-2026-13987 Incorrect security UI in Mobile | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-13988 | Chromium: CVE-2026-13988 Inappropriate implementation in Paint | UNKNOWN | — | 21%ile | Microsoft | 2026-07-14 |
| CVE-2026-13989 | Chromium: CVE-2026-13989 Insufficient policy enforcement in PageInfo | UNKNOWN | — | 19%ile | Microsoft | 2026-07-14 |
| CVE-2026-13990 | Chromium: CVE-2026-13990 Insufficient validation of untrusted input in DataTransfer | UNKNOWN | — | 17%ile | Microsoft | 2026-07-14 |
| CVE-2026-13991 | Chromium: CVE-2026-13991 Insufficient validation of untrusted input in Chrome for iOS | UNKNOWN | — | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-13992 | Chromium: CVE-2026-13992 Inappropriate implementation in UI | UNKNOWN | — | 10%ile | Microsoft | 2026-07-14 |
| CVE-2026-13993 | Chromium: CVE-2026-13993 Incorrect security UI in WebAppInstalls | UNKNOWN | — | 10%ile | Microsoft | 2026-07-14 |
| CVE-2026-13994 | Chromium: CVE-2026-13994 Inappropriate implementation in Credential Management | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-13995 | Chromium: CVE-2026-13995 Insufficient validation of untrusted input in Autofill | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-13996 | Chromium: CVE-2026-13996 Incorrect security UI in Permissions | UNKNOWN | — | 21%ile | Microsoft | 2026-07-14 |
| CVE-2026-13997 | Chromium: CVE-2026-13997 Incorrect security UI in Extensions | UNKNOWN | — | 10%ile | Microsoft | 2026-07-14 |
| CVE-2026-13998 | Chromium: CVE-2026-13998 Incorrect security UI in File Input | UNKNOWN | — | 10%ile | Microsoft | 2026-07-14 |
| CVE-2026-13999 | Chromium: CVE-2026-13999 Inappropriate implementation in Extensions | UNKNOWN | — | 8%ile | Microsoft | 2026-07-14 |
| CVE-2026-14000 | Chromium: CVE-2026-14000 Inappropriate implementation in XML | UNKNOWN | — | 13%ile | Microsoft | 2026-07-14 |
| CVE-2026-14001 | Chromium: CVE-2026-14001 Inappropriate implementation in Network | UNKNOWN | — | 13%ile | Microsoft | 2026-07-14 |
| CVE-2026-14002 | Chromium: CVE-2026-14002 Inappropriate implementation in Geolocation | UNKNOWN | — | 21%ile | Microsoft | 2026-07-14 |
| CVE-2026-14003 | Chromium: CVE-2026-14003 Insufficient policy enforcement in Extensions | UNKNOWN | — | 9%ile | Microsoft | 2026-07-14 |
| CVE-2026-14004 | Chromium: CVE-2026-14004 Inappropriate implementation in CSS | UNKNOWN | — | 25%ile | Microsoft | 2026-07-14 |
| CVE-2026-14005 | Chromium: CVE-2026-14005 Use after free in Omnibox | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-14006 | Chromium: CVE-2026-14006 Use after free in Navigation | UNKNOWN | — | 36%ile | Microsoft | 2026-07-14 |
| CVE-2026-14007 | Chromium: CVE-2026-14007 Insufficient policy enforcement in PermissionsPolicy | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-14008 | Chromium: CVE-2026-14008 Uninitialized Use in WebXR | UNKNOWN | — | 25%ile | Microsoft | 2026-07-14 |
| CVE-2026-14009 | Chromium: CVE-2026-14009 Insufficient data validation in Passwords | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-14010 | Chromium: CVE-2026-14010 Uninitialized Use in Codecs | UNKNOWN | — | 25%ile | Microsoft | 2026-07-14 |
| CVE-2026-14011 | Chromium: CVE-2026-14011 Out of bounds read in SurfaceCapture | UNKNOWN | — | 26%ile | Microsoft | 2026-07-14 |
| CVE-2026-14012 | Chromium: CVE-2026-14012 Side-channel information leakage in CSS | UNKNOWN | — | 18%ile | Microsoft | 2026-07-14 |
| CVE-2026-14013 | Chromium: CVE-2026-14013 Inappropriate implementation in SVG | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-14014 | Chromium: CVE-2026-14014 Inappropriate implementation in Paint | UNKNOWN | — | 21%ile | Microsoft | 2026-07-14 |
| CVE-2026-14015 | Chromium: CVE-2026-14015 Inappropriate implementation in WebRTC | UNKNOWN | — | 17%ile | Microsoft | 2026-07-14 |
| CVE-2026-14016 | Chromium: CVE-2026-14016 Insufficient policy enforcement in SVG | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-14017 | Chromium: CVE-2026-14017 Inappropriate implementation in Navigation | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-14018 | Chromium: CVE-2026-14018 Use after free in Updater | UNKNOWN | — | 3%ile | Microsoft | 2026-07-14 |
| CVE-2026-14019 | Chromium: CVE-2026-14019 Inappropriate implementation in Passwords | UNKNOWN | — | 23%ile | Microsoft | 2026-07-14 |
| CVE-2026-14020 | Chromium: CVE-2026-14020 Insufficient validation of untrusted input in WebXR | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-14021 | Chromium: CVE-2026-14021 Insufficient validation of untrusted input in StorageAccessAPI | UNKNOWN | — | 25%ile | Microsoft | 2026-07-14 |
| CVE-2026-14022 | Chromium: CVE-2026-14022 Insufficient validation of untrusted input in Network | UNKNOWN | — | 25%ile | Microsoft | 2026-07-14 |
| CVE-2026-14023 | Chromium: CVE-2026-14023 Insufficient validation of untrusted input in SanitizerAPI | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-14024 | Chromium: CVE-2026-14024 Use after free in Ozone | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-14025 | Chromium: CVE-2026-14025 Use after free in Views | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-14026 | Chromium: CVE-2026-14026 Incorrect security UI in SplitView | UNKNOWN | — | 10%ile | Microsoft | 2026-07-14 |
| CVE-2026-14027 | Chromium: CVE-2026-14027 Use after free in SignIn | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-14028 | Chromium: CVE-2026-14028 Incorrect security UI in Chrome for iOS | UNKNOWN | — | 10%ile | Microsoft | 2026-07-14 |
| CVE-2026-14030 | Chromium: CVE-2026-14030 Incorrect security UI in SplitView | UNKNOWN | — | 10%ile | Microsoft | 2026-07-14 |
| CVE-2026-14031 | Chromium: CVE-2026-14031 Incorrect security UI in File Input | UNKNOWN | — | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-14032 | Chromium: CVE-2026-14032 Use after free in Bluetooth | UNKNOWN | — | 26%ile | Microsoft | 2026-07-14 |
| CVE-2026-14033 | Chromium: CVE-2026-14033 Insufficient policy enforcement in Media | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-14034 | Chromium: CVE-2026-14034 Inappropriate implementation in WebXR | UNKNOWN | — | 23%ile | Microsoft | 2026-07-14 |
| CVE-2026-14035 | Chromium: CVE-2026-14035 Insufficient policy enforcement in Bluetooth | UNKNOWN | — | 21%ile | Microsoft | 2026-07-14 |
| CVE-2026-14036 | Chromium: CVE-2026-14036 Insufficient policy enforcement in Bluetooth | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-14037 | Chromium: CVE-2026-14037 Insufficient policy enforcement in GPU | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-14038 | Chromium: CVE-2026-14038 Insufficient validation of untrusted input in New Tab Page | UNKNOWN | — | 26%ile | Microsoft | 2026-07-14 |
| CVE-2026-14039 | Chromium: CVE-2026-14039 Insufficient policy enforcement in GetUserMedia | UNKNOWN | — | 10%ile | Microsoft | 2026-07-14 |
| CVE-2026-14040 | Chromium: CVE-2026-14040 Use after free in BrowserTag | UNKNOWN | — | 18%ile | Microsoft | 2026-07-14 |
| CVE-2026-14041 | Chromium: CVE-2026-14041 Insufficient policy enforcement in Serial | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-14042 | Chromium: CVE-2026-14042 Inappropriate implementation in Isolated Web Apps | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-14043 | Chromium: CVE-2026-14043 Use after free in GetUserMedia | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-14044 | Chromium: CVE-2026-14044 Use after free in ANGLE | UNKNOWN | — | 20%ile | Microsoft | 2026-07-14 |
| CVE-2026-14045 | Chromium: CVE-2026-14045 Insufficient validation of untrusted input in Network | UNKNOWN | — | 18%ile | Microsoft | 2026-07-14 |
| CVE-2026-14046 | Chromium: CVE-2026-14046 Inappropriate implementation in CustomTabs | UNKNOWN | — | 15%ile | Microsoft | 2026-07-14 |
| CVE-2026-14047 | Chromium: CVE-2026-14047 Insufficient policy enforcement in Extensions | UNKNOWN | — | 13%ile | Microsoft | 2026-07-14 |
| CVE-2026-14048 | Chromium: CVE-2026-14048 Use after free in Chromecast | UNKNOWN | — | 5%ile | Microsoft | 2026-07-14 |
| CVE-2026-14049 | Chromium: CVE-2026-14049 Inappropriate implementation in GPU | UNKNOWN | — | 18%ile | Microsoft | 2026-07-14 |
| CVE-2026-14050 | Chromium: CVE-2026-14050 Insufficient policy enforcement in Passwords | UNKNOWN | — | 25%ile | Microsoft | 2026-07-14 |
| CVE-2026-14051 | Chromium: CVE-2026-14051 Uninitialized Use in GamepadAPI | UNKNOWN | — | 25%ile | Microsoft | 2026-07-14 |
| CVE-2026-14052 | Chromium: CVE-2026-14052 Insufficient policy enforcement in FileSystem | UNKNOWN | — | 21%ile | Microsoft | 2026-07-14 |
| CVE-2026-14053 | Chromium: CVE-2026-14053 Insufficient policy enforcement in Extensions | UNKNOWN | — | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-14054 | Chromium: CVE-2026-14054 Insufficient policy enforcement in Network | UNKNOWN | — | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-14055 | Chromium: CVE-2026-14055 Insufficient validation of untrusted input in Device Trust | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-14056 | Chromium: CVE-2026-14056 Insufficient validation of untrusted input in Media | UNKNOWN | — | 25%ile | Microsoft | 2026-07-14 |
| CVE-2026-14057 | Chromium: CVE-2026-14057 Insufficient policy enforcement in FedCM | UNKNOWN | — | 15%ile | Microsoft | 2026-07-14 |
| CVE-2026-14058 | Chromium: CVE-2026-14058 Policy bypass in Parser | UNKNOWN | — | 17%ile | Microsoft | 2026-07-14 |
| CVE-2026-14059 | Chromium: CVE-2026-14059 Insufficient policy enforcement in Related-Website-Sets | UNKNOWN | — | 25%ile | Microsoft | 2026-07-14 |
| CVE-2026-14060 | Chromium: CVE-2026-14060 Insufficient validation of untrusted input in Chromoting | UNKNOWN | — | 3%ile | Microsoft | 2026-07-14 |
| CVE-2026-14061 | Chromium: CVE-2026-14061 Inappropriate implementation in Dawn | UNKNOWN | — | 21%ile | Microsoft | 2026-07-14 |
| CVE-2026-14062 | Chromium: CVE-2026-14062 Inappropriate implementation in Views | UNKNOWN | — | 15%ile | Microsoft | 2026-07-14 |
| CVE-2026-14063 | Chromium: CVE-2026-14063 Out of bounds memory access in Chromecast | UNKNOWN | — | 3%ile | Microsoft | 2026-07-14 |
| CVE-2026-14064 | Chromium: CVE-2026-14064 Use after free in PageInfo | UNKNOWN | — | 30%ile | Microsoft | 2026-07-14 |
| CVE-2026-14065 | Chromium: CVE-2026-14065 Insufficient validation of untrusted input in PageInfo | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-14066 | Chromium: CVE-2026-14066 Insufficient validation of untrusted input in Chrome for iOS | UNKNOWN | — | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-14067 | Chromium: CVE-2026-14067 Use after free in Chrome for iOS | UNKNOWN | — | 36%ile | Microsoft | 2026-07-14 |
| CVE-2026-14068 | Chromium: CVE-2026-14068 Inappropriate implementation in Omnibox | UNKNOWN | — | 13%ile | Microsoft | 2026-07-14 |
| CVE-2026-14069 | Chromium: CVE-2026-14069 Integer overflow in WebNN | UNKNOWN | — | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-14070 | Chromium: CVE-2026-14070 Uninitialized Use in WebNN | UNKNOWN | — | 25%ile | Microsoft | 2026-07-14 |
| CVE-2026-14071 | Chromium: CVE-2026-14071 Side-channel information leakage in WebAudio | UNKNOWN | — | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-14072 | Chromium: CVE-2026-14072 Incorrect security UI in SplitView | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-14073 | Chromium: CVE-2026-14073 Insufficient policy enforcement in WebXR | UNKNOWN | — | 14%ile | Microsoft | 2026-07-14 |
| CVE-2026-14074 | Chromium: CVE-2026-14074 Side-channel information leakage in WebAuthentication | UNKNOWN | — | 29%ile | Microsoft | 2026-07-14 |
| CVE-2026-14075 | Chromium: CVE-2026-14075 Policy bypass in Chrome for iOS | UNKNOWN | — | 17%ile | Microsoft | 2026-07-14 |
| CVE-2026-14076 | Chromium: CVE-2026-14076 Policy bypass in Network | UNKNOWN | — | 14%ile | Microsoft | 2026-07-14 |
| CVE-2026-14077 | Chromium: CVE-2026-14077 Incorrect security UI in Select | UNKNOWN | — | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-14078 | Chromium: CVE-2026-14078 Policy bypass in WebRTC | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-14079 | Chromium: CVE-2026-14079 Policy bypass in Network | UNKNOWN | — | 15%ile | Microsoft | 2026-07-14 |
| CVE-2026-14080 | Chromium: CVE-2026-14080 Insufficient validation of untrusted input in TabSwitcher | UNKNOWN | — | 14%ile | Microsoft | 2026-07-14 |
| CVE-2026-14081 | Chromium: CVE-2026-14081 Insufficient policy enforcement in DevTools | UNKNOWN | — | 13%ile | Microsoft | 2026-07-14 |
| CVE-2026-14082 | Chromium: CVE-2026-14082 Race in Storage | UNKNOWN | — | 17%ile | Microsoft | 2026-07-14 |
| CVE-2026-14083 | Chromium: CVE-2026-14083 Insufficient validation of untrusted input in HTML | UNKNOWN | — | 13%ile | Microsoft | 2026-07-14 |
| CVE-2026-14084 | Chromium: CVE-2026-14084 Insufficient validation of untrusted input in Chromoting | UNKNOWN | — | 25%ile | Microsoft | 2026-07-14 |
| CVE-2026-14085 | Chromium: CVE-2026-14085 Side-channel information leakage in CSS | UNKNOWN | — | 25%ile | Microsoft | 2026-07-14 |
| CVE-2026-14086 | Chromium: CVE-2026-14086 Insufficient policy enforcement in HID | UNKNOWN | — | 36%ile | Microsoft | 2026-07-14 |
| CVE-2026-14087 | Chromium: CVE-2026-14087 Insufficient validation of untrusted input in WebNN | UNKNOWN | — | 31%ile | Microsoft | 2026-07-14 |
| CVE-2026-14088 | Chromium: CVE-2026-14088 Uninitialized Use in Canvas | UNKNOWN | — | 25%ile | Microsoft | 2026-07-14 |
| CVE-2026-14089 | Chromium: CVE-2026-14089 Insufficient validation of untrusted input in PopupBlocker | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-14090 | Chromium: CVE-2026-14090 Out of bounds read in CameraCapture | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-14091 | Chromium: CVE-2026-14091 Use after free in DevTools | UNKNOWN | — | 32%ile | Microsoft | 2026-07-14 |
| CVE-2026-14092 | Chromium: CVE-2026-14092 Insufficient policy enforcement in Privacy | UNKNOWN | — | 8%ile | Microsoft | 2026-07-14 |
| CVE-2026-14093 | Chromium: CVE-2026-14093 Use after free in Cast | UNKNOWN | — | 25%ile | Microsoft | 2026-07-14 |
| CVE-2026-14094 | Chromium: CVE-2026-14094 Use after free in Installer | UNKNOWN | — | 1%ile | Microsoft | 2026-07-14 |
| CVE-2026-14095 | Chromium: CVE-2026-14095 Insufficient validation of untrusted input in Browser | UNKNOWN | — | 25%ile | Microsoft | 2026-07-14 |
| CVE-2026-14096 | Chromium: CVE-2026-14096 Object lifecycle issue in Input | UNKNOWN | — | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-14097 | Chromium: CVE-2026-14097 Inappropriate implementation in WebAppInstalls | UNKNOWN | — | 25%ile | Microsoft | 2026-07-14 |
| CVE-2026-14098 | Chromium: CVE-2026-14098 Inappropriate implementation in CSS | UNKNOWN | — | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-14099 | Chromium: CVE-2026-14099 Use after free in Chrome for iOS | UNKNOWN | — | 25%ile | Microsoft | 2026-07-14 |
| CVE-2026-14100 | Chromium: CVE-2026-14100 Insufficient data validation in NetworkCache | UNKNOWN | — | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-14101 | Chromium: CVE-2026-14101 Insufficient policy enforcement in Sandbox | UNKNOWN | — | 26%ile | Microsoft | 2026-07-14 |
| CVE-2026-14102 | Chromium: CVE-2026-14102 Use after free in Passwords | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-14103 | Chromium: CVE-2026-14103 Use after free in SSL | UNKNOWN | — | 25%ile | Microsoft | 2026-07-14 |
| CVE-2026-14104 | Chromium: CVE-2026-14104 Insufficient validation of untrusted input in WebAppInstalls | UNKNOWN | — | 44%ile | Microsoft | 2026-07-14 |
| CVE-2026-14105 | Chromium: CVE-2026-14105 Insufficient policy enforcement in Speech | UNKNOWN | — | 14%ile | Microsoft | 2026-07-14 |
| CVE-2026-14106 | Chromium: CVE-2026-14106 Insufficient validation of untrusted input in Text | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-14107 | Chromium: CVE-2026-14107 Use after free in Scheduling | UNKNOWN | — | 32%ile | Microsoft | 2026-07-14 |
| CVE-2026-14108 | Chromium: CVE-2026-14108 Use after free in PDFium | UNKNOWN | — | 29%ile | Microsoft | 2026-07-14 |
| CVE-2026-14109 | Chromium: CVE-2026-14109 Insufficient policy enforcement in Mojo | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-14110 | Chromium: CVE-2026-14110 Inappropriate implementation in DarkMode | UNKNOWN | — | 15%ile | Microsoft | 2026-07-14 |
| CVE-2026-14111 | Chromium: CVE-2026-14111 Use after free in WebProtect | UNKNOWN | — | 32%ile | Microsoft | 2026-07-14 |
| CVE-2026-14112 | Chromium: CVE-2026-14112 Inappropriate implementation in Enterprise | UNKNOWN | — | 18%ile | Microsoft | 2026-07-14 |
| CVE-2026-14113 | Chromium: CVE-2026-14113 Use after free in Updater | UNKNOWN | — | 23%ile | Microsoft | 2026-07-14 |
| CVE-2026-14114 | Chromium: CVE-2026-14114 Inappropriate implementation in WebAppInstalls | UNKNOWN | — | 14%ile | Microsoft | 2026-07-14 |
| CVE-2026-14115 | Chromium: CVE-2026-14115 Insufficient validation of untrusted input in Cast | UNKNOWN | — | 23%ile | Microsoft | 2026-07-14 |
| CVE-2026-14116 | Chromium: CVE-2026-14116 Insufficient validation of untrusted input in DevTools | UNKNOWN | — | 18%ile | Microsoft | 2026-07-14 |
| CVE-2026-14117 | Chromium: CVE-2026-14117 Insufficient validation of untrusted input in DevTools | UNKNOWN | — | 21%ile | Microsoft | 2026-07-14 |
| CVE-2026-14118 | Chromium: CVE-2026-14118 Insufficient data validation in DevTools | UNKNOWN | — | 23%ile | Microsoft | 2026-07-14 |
| CVE-2026-14119 | Chromium: CVE-2026-14119 Type Confusion in Bluetooth | UNKNOWN | — | 5%ile | Microsoft | 2026-07-14 |
| CVE-2026-14120 | Chromium: CVE-2026-14120 Inappropriate implementation in DevTools | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-14121 | Chromium: CVE-2026-14121 Use after free in Chromoting | UNKNOWN | — | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-14122 | Chromium: CVE-2026-14122 Insufficient validation of untrusted input in WebAppInstalls | UNKNOWN | — | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-14123 | Chromium: CVE-2026-14123 Incorrect security UI in Chrome for iOS | UNKNOWN | — | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-14124 | Chromium: CVE-2026-14124 Inappropriate implementation in CredentialProvider | UNKNOWN | — | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-14125 | Chromium: CVE-2026-14125 Uninitialized Use in ANGLE | UNKNOWN | — | 20%ile | Microsoft | 2026-07-14 |
| CVE-2026-14126 | Chromium: CVE-2026-14126 Incorrect security UI in UI | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-14127 | Chromium: CVE-2026-14127 Inappropriate implementation in Printing | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-14128 | Chromium: CVE-2026-14128 Insufficient data validation in Chrome for iOS | UNKNOWN | — | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-14129 | Chromium: CVE-2026-14129 Incorrect security UI in PreviewTab | UNKNOWN | — | 10%ile | Microsoft | 2026-07-14 |
| CVE-2026-14130 | Chromium: CVE-2026-14130 Incorrect security UI in Omnibox | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-14131 | Chromium: CVE-2026-14131 Insufficient validation of untrusted input in WebAppInstalls | UNKNOWN | — | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-14132 | Chromium: CVE-2026-14132 Inappropriate implementation in WebXR | UNKNOWN | — | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-14133 | Chromium: CVE-2026-14133 Race in History Embeddings | UNKNOWN | — | 8%ile | Microsoft | 2026-07-14 |
| CVE-2026-14134 | Chromium: CVE-2026-14134 Inappropriate implementation in Autofill | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-14135 | Chromium: CVE-2026-14135 Insufficient validation of untrusted input in Network | UNKNOWN | — | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-14136 | Chromium: CVE-2026-14136 Incorrect security UI in Chrome for iOS | UNKNOWN | — | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-14137 | Chromium: CVE-2026-14137 Insufficient validation of untrusted input in Chrome for iOS | UNKNOWN | — | 13%ile | Microsoft | 2026-07-14 |
| CVE-2026-14138 | Chromium: CVE-2026-14138 Inappropriate implementation in WebAppInstalls | UNKNOWN | — | 10%ile | Microsoft | 2026-07-14 |
| CVE-2026-14139 | Chromium: CVE-2026-14139 Inappropriate implementation in TabStrip | UNKNOWN | — | 10%ile | Microsoft | 2026-07-14 |
| CVE-2026-14140 | Chromium: CVE-2026-14140 Insufficient validation of untrusted input in Input | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-14141 | Chromium: CVE-2026-14141 Incorrect security UI in Document Picture-in-Picture | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-14142 | Chromium: CVE-2026-14142 Inappropriate implementation in Extensions | UNKNOWN | — | 11%ile | Microsoft | 2026-07-14 |
| CVE-2026-14143 | Chromium: CVE-2026-14143 Incorrect security UI in Passwords | UNKNOWN | — | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-14144 | Chromium: CVE-2026-14144 Incorrect security UI in Views | UNKNOWN | — | 10%ile | Microsoft | 2026-07-14 |
| CVE-2026-14145 | Chromium: CVE-2026-14145 Inappropriate implementation in CSS | UNKNOWN | — | 13%ile | Microsoft | 2026-07-14 |
| CVE-2026-14146 | Chromium: CVE-2026-14146 Inappropriate implementation in CSS | UNKNOWN | — | 25%ile | Microsoft | 2026-07-14 |
| CVE-2026-14147 | Chromium: CVE-2026-14147 Inappropriate implementation in CSS | UNKNOWN | — | 13%ile | Microsoft | 2026-07-14 |
| CVE-2026-14148 | Chromium: CVE-2026-14148 Type Confusion in CSS | UNKNOWN | — | 25%ile | Microsoft | 2026-07-14 |
| CVE-2026-14149 | Chromium: CVE-2026-14149 Use after free in Audio | UNKNOWN | — | 36%ile | Microsoft | 2026-07-14 |
| CVE-2026-14150 | Chromium: CVE-2026-14150 Insufficient validation of untrusted input in Speech | UNKNOWN | — | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-14151 | Chromium: CVE-2026-14151 Inappropriate implementation in AI | UNKNOWN | — | 26%ile | Microsoft | 2026-07-14 |
| CVE-2026-14152 | Chromium: CVE-2026-14152 Out of bounds write in ANGLE | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-14153 | Chromium: CVE-2026-14153 Inappropriate implementation in Glic | UNKNOWN | — | 18%ile | Microsoft | 2026-07-14 |
| CVE-2026-14154 | Chromium: CVE-2026-14154 Inappropriate implementation in DevTools | UNKNOWN | — | 8%ile | Microsoft | 2026-07-14 |
| CVE-2026-14155 | Chromium: CVE-2026-14155 Insufficient policy enforcement in StorageAccessAPI | UNKNOWN | — | 23%ile | Microsoft | 2026-07-14 |
| CVE-2026-14156 | Chromium: CVE-2026-14156 Policy bypass in StorageAccessAPI | UNKNOWN | — | 21%ile | Microsoft | 2026-07-14 |
| CVE-2026-14382 | Chromium: CVE-2026-14382 Insufficient validation of untrusted input in ANGLE | UNKNOWN | — | 20%ile | Microsoft | 2026-07-14 |
| CVE-2026-14385 | Chromium: CVE-2026-14385 Heap buffer overflow in ANGLE | UNKNOWN | — | 26%ile | Microsoft | 2026-07-14 |
| CVE-2026-14386 | Chromium: CVE-2026-14386 Out of bounds read in ANGLE | UNKNOWN | — | 20%ile | Microsoft | 2026-07-14 |
| CVE-2026-14388 | Chromium: CVE-2026-14388 Out of bounds read in ANGLE | UNKNOWN | — | 20%ile | Microsoft | 2026-07-14 |
| CVE-2026-14390 | Chromium: CVE-2026-14390 Use after free in ANGLE | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-14391 | Chromium: CVE-2026-14391 Integer overflow in ANGLE | UNKNOWN | — | 14%ile | Microsoft | 2026-07-14 |
| CVE-2026-14392 | Chromium: CVE-2026-14392 Out of bounds write in Tint | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-14393 | Chromium: CVE-2026-14393 Use after free in V8 | UNKNOWN | — | 36%ile | Microsoft | 2026-07-14 |
| CVE-2026-14394 | Chromium: CVE-2026-14394 Use after free in V8 | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-14395 | Chromium: CVE-2026-14395 Out of bounds write in V8 | UNKNOWN | — | 36%ile | Microsoft | 2026-07-14 |
| CVE-2026-14396 | Chromium: CVE-2026-14396 Out of bounds read in ANGLE | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-14397 | Chromium: CVE-2026-14397 Out of bounds write in ANGLE | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-14398 | Chromium: CVE-2026-14398 Use after free in ANGLE | UNKNOWN | — | 14%ile | Microsoft | 2026-07-14 |
| CVE-2026-14399 | Chromium: CVE-2026-14399 Uninitialized Use in Dawn | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-14400 | Chromium: CVE-2026-14400 Out of bounds write in ANGLE | UNKNOWN | — | 14%ile | Microsoft | 2026-07-14 |
| CVE-2026-14401 | Chromium: CVE-2026-14401 Insufficient validation of untrusted input in ANGLE | UNKNOWN | — | 15%ile | Microsoft | 2026-07-14 |
| CVE-2026-14402 | Chromium: CVE-2026-14402 Uninitialized Use in ANGLE | UNKNOWN | — | 13%ile | Microsoft | 2026-07-14 |
| CVE-2026-14403 | Chromium: CVE-2026-14403 Use after free in V8 | UNKNOWN | — | 36%ile | Microsoft | 2026-07-14 |
| CVE-2026-14404 | Chromium: CVE-2026-14404 Inappropriate implementation in PDFium | UNKNOWN | — | 19%ile | Microsoft | 2026-07-14 |
| CVE-2026-14405 | Chromium: CVE-2026-14405 Uninitialized Use in V8 | UNKNOWN | — | 43%ile | Microsoft | 2026-07-14 |
| CVE-2026-14406 | Chromium: CVE-2026-14406 Out of bounds read in V8 | UNKNOWN | — | 15%ile | Microsoft | 2026-07-14 |
| CVE-2026-14407 | Chromium: CVE-2026-14407 Inappropriate implementation in V8 | UNKNOWN | — | 38%ile | Microsoft | 2026-07-14 |
| CVE-2026-14408 | Chromium: CVE-2026-14408 Uninitialized Use in Dawn | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-14409 | Chromium: CVE-2026-14409 Inappropriate implementation in V8 | UNKNOWN | — | 30%ile | Microsoft | 2026-07-14 |
| CVE-2026-14410 | Chromium: CVE-2026-14410 Inappropriate implementation in Skia | UNKNOWN | — | 10%ile | Microsoft | 2026-07-14 |
| CVE-2026-14411 | Chromium: CVE-2026-14411 Insufficient validation of untrusted input in ANGLE | UNKNOWN | — | 19%ile | Microsoft | 2026-07-14 |
| CVE-2026-14412 | Chromium: CVE-2026-14412 Insufficient validation of untrusted input in ANGLE | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-14413 | Chromium: CVE-2026-14413 Uninitialized Use in ANGLE | UNKNOWN | — | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-14414 | Chromium: CVE-2026-14414 Insufficient validation of untrusted input in Skia | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-14415 | Chromium: CVE-2026-14415 Inappropriate implementation in V8 | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-14416 | Chromium: CVE-2026-14416 Out of bounds read in Dawn | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-14417 | Chromium: CVE-2026-14417 Use after free in Dawn | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-14418 | Chromium: CVE-2026-14418 Uninitialized Use in ANGLE | UNKNOWN | — | 9%ile | Microsoft | 2026-07-14 |
| CVE-2026-14419 | Chromium: CVE-2026-14419 Use after free in Skia | UNKNOWN | — | 14%ile | Microsoft | 2026-07-14 |
| CVE-2026-14420 | Chromium: CVE-2026-14420 Out of bounds read and write in Dawn | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-14421 | Chromium: CVE-2026-14421 Uninitialized Use in Dawn | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-14422 | Chromium: CVE-2026-14422 Out of bounds read and write in Tint | UNKNOWN | — | 31%ile | Microsoft | 2026-07-14 |
| CVE-2026-14423 | Chromium: CVE-2026-14423 Type Confusion in Tint | UNKNOWN | — | 32%ile | Microsoft | 2026-07-14 |
| CVE-2026-14424 | Chromium: CVE-2026-14424 Use after free in Dawn | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-14425 | Chromium: CVE-2026-14425 Use after free in ANGLE | UNKNOWN | — | 13%ile | Microsoft | 2026-07-14 |
| CVE-2026-14426 | Chromium: CVE-2026-14426 Use after free in V8 | UNKNOWN | — | 30%ile | Microsoft | 2026-07-14 |
| CVE-2026-14427 | Chromium: CVE-2026-14427 Heap buffer overflow in Skia | UNKNOWN | — | 18%ile | Microsoft | 2026-07-14 |
| CVE-2026-14428 | Chromium: CVE-2026-14428 Insufficient validation of untrusted input in Dawn | UNKNOWN | — | 26%ile | Microsoft | 2026-07-14 |
| CVE-2026-14429 | Chromium: CVE-2026-14429 Insufficient validation of untrusted input in Skia | UNKNOWN | — | 15%ile | Microsoft | 2026-07-14 |
| CVE-2026-14430 | Chromium: CVE-2026-14430 Integer overflow in V8 | UNKNOWN | — | 36%ile | Microsoft | 2026-07-14 |
| CVE-2026-14431 | Chromium: CVE-2026-14431 Type Confusion in V8 | UNKNOWN | — | 43%ile | Microsoft | 2026-07-14 |
| CVE-2026-14432 | Chromium: CVE-2026-14432 Use after free in V8 | UNKNOWN | — | 36%ile | Microsoft | 2026-07-14 |
| CVE-2026-15107 | Chromium: CVE-2026-15107 Use after free in IndexedDB | UNKNOWN | — | 36%ile | Microsoft | 2026-07-14 |
| CVE-2026-15108 | Chromium: CVE-2026-15108 Integer overflow in Extensions API | UNKNOWN | — | 10%ile | Microsoft | 2026-07-14 |
| CVE-2026-15109 | Chromium: CVE-2026-15109 Uninitialized Use in ANGLE | UNKNOWN | — | 21%ile | Microsoft | 2026-07-14 |
| CVE-2026-15110 | Chromium: CVE-2026-15110 Use after free in Extensions | UNKNOWN | — | 18%ile | Microsoft | 2026-07-14 |
| CVE-2026-15111 | Chromium: CVE-2026-15111 Use after free in Views | UNKNOWN | — | 23%ile | Microsoft | 2026-07-14 |
| CVE-2026-15112 | Chromium: CVE-2026-15112 Use after free in Ozone | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-15113 | Chromium: CVE-2026-15113 Use after free in Autofill | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-15114 | Chromium: CVE-2026-15114 Out of bounds read and write in Codecs | UNKNOWN | — | 25%ile | Microsoft | 2026-07-14 |
| CVE-2026-15115 | Chromium: CVE-2026-15115 Insufficient validation of untrusted input in WebAppInstalls | UNKNOWN | — | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-15116 | Chromium: CVE-2026-15116 Use after free in Actor | UNKNOWN | — | 36%ile | Microsoft | 2026-07-14 |
| CVE-2026-15117 | Chromium: CVE-2026-15117 Use after free in Payments | UNKNOWN | — | 23%ile | Microsoft | 2026-07-14 |
| CVE-2026-15118 | Chromium: CVE-2026-15118 Use after free in Input | UNKNOWN | — | 36%ile | Microsoft | 2026-07-14 |
| CVE-2026-15119 | Chromium: CVE-2026-15119 Inappropriate implementation in GetUserMedia | UNKNOWN | — | 15%ile | Microsoft | 2026-07-14 |
| CVE-2026-15120 | Chromium: CVE-2026-15120 Use after free in Core | UNKNOWN | — | 23%ile | Microsoft | 2026-07-14 |
| CVE-2026-15121 | Chromium: CVE-2026-15121 Use after free in WebRTC | UNKNOWN | — | 44%ile | Microsoft | 2026-07-14 |
| CVE-2026-15122 | Chromium: CVE-2026-15122 Insufficient validation of untrusted input in Codecs | UNKNOWN | — | 26%ile | Microsoft | 2026-07-14 |
| CVE-2026-15123 | Chromium: CVE-2026-15123 Insufficient data validation in DOM | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-15124 | Chromium: CVE-2026-15124 Insufficient policy enforcement in Passwords | UNKNOWN | — | 19%ile | Microsoft | 2026-07-14 |
| CVE-2026-15125 | Chromium: CVE-2026-15125 Inappropriate implementation in Forms | UNKNOWN | — | 34%ile | Microsoft | 2026-07-14 |
| CVE-2026-15126 | Chromium: CVE-2026-15126 Use after free in Forms | UNKNOWN | — | 36%ile | Microsoft | 2026-07-14 |
| CVE-2026-15127 | Chromium: CVE-2026-15127 Inappropriate implementation in WebGL | UNKNOWN | — | 13%ile | Microsoft | 2026-07-14 |
| CVE-2026-15128 | Chromium: CVE-2026-15128 Inappropriate implementation in Forms | UNKNOWN | — | 13%ile | Microsoft | 2026-07-14 |
| CVE-2026-15129 | Chromium: CVE-2026-15129 Use after free in Views | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-15130 | Chromium: CVE-2026-15130 Insufficient policy enforcement in Navigation | UNKNOWN | — | 19%ile | Microsoft | 2026-07-14 |
| CVE-2026-15131 | Chromium: CVE-2026-15131 Insufficient data validation in Navigation | UNKNOWN | — | 19%ile | Microsoft | 2026-07-14 |
| CVE-2026-15132 | Chromium: CVE-2026-15132 Uninitialized Use in V8 | UNKNOWN | — | 39%ile | Microsoft | 2026-07-14 |
| CVE-2026-15133 | Chromium: CVE-2026-15133 Use after free in InterestGroups | UNKNOWN | — | 36%ile | Microsoft | 2026-07-14 |
| CVE-2026-15764 | Chromium: CVE-2026-15764 Use after free in Ozone | UNKNOWN | — | 23%ile | Microsoft | 2026-07-14 |
| CVE-2026-15765 | Chromium: CVE-2026-15765 Use after free in Ozone | UNKNOWN | — | 23%ile | Microsoft | 2026-07-14 |
| CVE-2026-15766 | Chromium: CVE-2026-15766 Uninitialized Use in Skia | UNKNOWN | — | 34%ile | Microsoft | 2026-07-14 |
| CVE-2026-15767 | Chromium: CVE-2026-15767 Heap buffer overflow in libyuv | UNKNOWN | — | 36%ile | Microsoft | 2026-07-14 |
| CVE-2026-15768 | Chromium: CVE-2026-15768 Insufficient policy enforcement in HTML-in-Canvas | UNKNOWN | — | 15%ile | Microsoft | 2026-07-14 |
| CVE-2026-15769 | Chromium: CVE-2026-15769 Insufficient validation of untrusted input in Linux Toolkit Theming | UNKNOWN | — | 26%ile | Microsoft | 2026-07-14 |
| CVE-2026-15770 | Chromium: CVE-2026-15770 Uninitialized Use in V8 | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-15771 | Chromium: CVE-2026-15771 Insufficient validation of untrusted input in Media | UNKNOWN | — | 23%ile | Microsoft | 2026-07-14 |
| CVE-2026-15772 | Chromium: CVE-2026-15772 Use after free in GPU | UNKNOWN | — | 23%ile | Microsoft | 2026-07-14 |
| CVE-2026-15773 | Chromium: CVE-2026-15773 Use after free in Core | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-15774 | Chromium: CVE-2026-15774 Use after free in Skia | UNKNOWN | — | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-15775 | Chromium: CVE-2026-15775 Insufficient policy enforcement in V8 | UNKNOWN | — | 15%ile | Microsoft | 2026-07-14 |
| CVE-2026-15776 | Chromium: CVE-2026-15776 Type Confusion in V8 | UNKNOWN | — | 43%ile | Microsoft | 2026-07-14 |
| CVE-2026-15777 | Chromium: CVE-2026-15777 Use after free in UI | UNKNOWN | — | 23%ile | Microsoft | 2026-07-14 |
| CVE-2026-15778 | Chromium: CVE-2026-15778 Insufficient validation of untrusted input in Navigation | UNKNOWN | — | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-15899 | Chromium: CVE-2026-15899 Use after free in CameraCapture | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-15900 | Chromium: CVE-2026-15900 Use after free in GPU | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-15901 | Chromium: CVE-2026-15901 Use after free in Network | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-15902 | Chromium: CVE-2026-15902 Use after free in Cast | UNKNOWN | — | 36%ile | Microsoft | 2026-07-14 |
| CVE-2026-15903 | Chromium: CVE-2026-15903 Out of bounds read and write in V8 | UNKNOWN | — | 36%ile | Microsoft | 2026-07-14 |
| CVE-2026-15904 | Chromium: CVE-2026-15904 Use after free in Ozone | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-15905 | Chromium: CVE-2026-15905 Use after free in Aura | UNKNOWN | — | 3%ile | Microsoft | 2026-07-14 |
| CVE-2026-16413 | Chromium: CVE-2026-16413 Out of bounds write in ANGLE | UNKNOWN | — | 19%ile | Microsoft | 2026-07-14 |
| CVE-2026-16414 | Chromium: CVE-2026-16414 Insufficient validation of untrusted input in Chromecast | UNKNOWN | — | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-16415 | Chromium: CVE-2026-16415 Insufficient validation of untrusted input in Extensions | UNKNOWN | — | 17%ile | Microsoft | 2026-07-14 |
| CVE-2026-16416 | Chromium: CVE-2026-16416 Integer overflow in Chromecast | UNKNOWN | — | 3%ile | Microsoft | 2026-07-14 |
| CVE-2026-16417 | Chromium: CVE-2026-16417 Uninitialized Use in Skia | UNKNOWN | — | 14%ile | Microsoft | 2026-07-14 |
| CVE-2026-16418 | Chromium: CVE-2026-16418 Stack buffer overflow in V8 | UNKNOWN | — | 39%ile | Microsoft | 2026-07-14 |
| CVE-2026-16419 | Chromium: CVE-2026-16419 Out of bounds read and write in ANGLE | UNKNOWN | — | 17%ile | Microsoft | 2026-07-14 |
| CVE-2026-16420 | Chromium: CVE-2026-16420 Type Confusion in WebAudio | UNKNOWN | — | 47%ile | Microsoft | 2026-07-14 |
| CVE-2026-16421 | Chromium: CVE-2026-16421 Inappropriate implementation in WebAudio | UNKNOWN | — | 44%ile | Microsoft | 2026-07-14 |
| CVE-2026-16422 | Chromium: CVE-2026-16422 Insufficient validation of untrusted input in Certificate | UNKNOWN | — | 8%ile | Microsoft | 2026-07-14 |
| CVE-2026-16423 | Chromium: CVE-2026-16423 Use after free in UI | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-16424 | Chromium: CVE-2026-16424 Use after free in GPU | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-16804 | Chromium: CVE-2026-16804 Use after free in Input | UNKNOWN | — | 23%ile | Microsoft | 2026-07-14 |
| CVE-2026-16805 | Chromium: CVE-2026-16805 Use after free in Blink | UNKNOWN | — | 36%ile | Microsoft | 2026-07-14 |
| CVE-2026-16806 | Chromium: CVE-2026-16806 Use after free in WebMCP | UNKNOWN | — | 44%ile | Microsoft | 2026-07-14 |
| CVE-2026-16807 | Chromium: CVE-2026-16807 Out of bounds write in Codecs | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-17650 | Chromium: CVE-2026-17650 Use after free in Compositing | UNKNOWN | — | 23%ile | Microsoft | 2026-07-14 |
| CVE-2026-17651 | Chromium: CVE-2026-17651 Insufficient validation of untrusted input in Dawn | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-17652 | Chromium: CVE-2026-17652 Use after free in Views | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-17653 | Chromium: CVE-2026-17653 Use after free in Skia | UNKNOWN | — | 42%ile | Microsoft | 2026-07-14 |
| CVE-2026-17654 | Chromium: CVE-2026-17654 Race in Updater | UNKNOWN | — | 1%ile | Microsoft | 2026-07-14 |
| CVE-2026-17655 | Chromium: CVE-2026-17655 Insufficient validation of untrusted input in ANGLE | UNKNOWN | — | 46%ile | Microsoft | 2026-07-14 |
| CVE-2026-17656 | Chromium: CVE-2026-17656 Use after free in Ozone | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-17657 | Chromium: CVE-2026-17657 Use after free in Navigation | UNKNOWN | — | 23%ile | Microsoft | 2026-07-14 |
| CVE-2026-17658 | Chromium: CVE-2026-17658 Use after free in V8 | UNKNOWN | — | 36%ile | Microsoft | 2026-07-14 |
| CVE-2026-17659 | Chromium: CVE-2026-17659 Inappropriate implementation in SiteIsolation | UNKNOWN | — | 10%ile | Microsoft | 2026-07-14 |
| CVE-2026-17660 | Chromium: CVE-2026-17660 Insufficient validation of untrusted input in Network | UNKNOWN | — | 26%ile | Microsoft | 2026-07-14 |
| CVE-2026-17661 | Chromium: CVE-2026-17661 Use after free in Loader | UNKNOWN | — | 36%ile | Microsoft | 2026-07-14 |
| CVE-2026-17662 | Chromium: CVE-2026-17662 Insufficient policy enforcement in Prefetch | UNKNOWN | — | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-17663 | Chromium: CVE-2026-17663 Insufficient validation of untrusted input in GPU | UNKNOWN | — | 26%ile | Microsoft | 2026-07-14 |
| CVE-2026-17664 | Chromium: CVE-2026-17664 Insufficient validation of untrusted input in Loader | UNKNOWN | — | 33%ile | Microsoft | 2026-07-14 |
| CVE-2026-17665 | Chromium: CVE-2026-17665 Use after free in V8 | UNKNOWN | — | 36%ile | Microsoft | 2026-07-14 |
| CVE-2026-17666 | Chromium: CVE-2026-17666 Cryptographic Flaw in Enterprise | UNKNOWN | — | 7%ile | Microsoft | 2026-07-14 |
| CVE-2026-17667 | Chromium: CVE-2026-17667 Uninitialized Use in ANGLE | UNKNOWN | — | 44%ile | Microsoft | 2026-07-14 |
| CVE-2026-17668 | Chromium: CVE-2026-17668 Uninitialized Use in ANGLE | UNKNOWN | — | 44%ile | Microsoft | 2026-07-14 |
| CVE-2026-17669 | Chromium: CVE-2026-17669 Inappropriate implementation in Chrome for iOS | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-17670 | Chromium: CVE-2026-17670 Use after free in Views | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-17671 | Chromium: CVE-2026-17671 Insufficient validation of untrusted input in ANGLE | UNKNOWN | — | 44%ile | Microsoft | 2026-07-14 |
| CVE-2026-17672 | Chromium: CVE-2026-17672 Insufficient validation of untrusted input in Chromecast | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-17673 | Chromium: CVE-2026-17673 Integer overflow in QUIC | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-17674 | Chromium: CVE-2026-17674 Inappropriate implementation in HTML | UNKNOWN | — | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-17675 | Chromium: CVE-2026-17675 Out of bounds write in ANGLE | UNKNOWN | — | 37%ile | Microsoft | 2026-07-14 |
| CVE-2026-17676 | Chromium: CVE-2026-17676 Inappropriate implementation in ANGLE | UNKNOWN | — | 42%ile | Microsoft | 2026-07-14 |
| CVE-2026-17677 | Chromium: CVE-2026-17677 Inappropriate implementation in ANGLE | UNKNOWN | — | 41%ile | Microsoft | 2026-07-14 |
| CVE-2026-17678 | Chromium: CVE-2026-17678 Out of bounds read in ANGLE | UNKNOWN | — | 44%ile | Microsoft | 2026-07-14 |
| CVE-2026-17679 | Chromium: CVE-2026-17679 Insufficient validation of untrusted input in Print Preview | UNKNOWN | — | 25%ile | Microsoft | 2026-07-14 |
| CVE-2026-17680 | Chromium: CVE-2026-17680 Heap buffer overflow in Color | UNKNOWN | — | 31%ile | Microsoft | 2026-07-14 |
| CVE-2026-17681 | Chromium: CVE-2026-17681 Insufficient validation of untrusted input in Web Authentication | UNKNOWN | — | 34%ile | Microsoft | 2026-07-14 |
| CVE-2026-17682 | Chromium: CVE-2026-17682 Integer overflow in ANGLE | UNKNOWN | — | 44%ile | Microsoft | 2026-07-14 |
| CVE-2026-17683 | Chromium: CVE-2026-17683 Inappropriate implementation in ANGLE | UNKNOWN | — | 41%ile | Microsoft | 2026-07-14 |
| CVE-2026-17684 | Chromium: CVE-2026-17684 Insufficient validation of untrusted input in Chrome for iOS | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-17685 | Chromium: CVE-2026-17685 Use after free in Autofill | UNKNOWN | — | 36%ile | Microsoft | 2026-07-14 |
| CVE-2026-17686 | Chromium: CVE-2026-17686 Insufficient validation of untrusted input in Passwords | UNKNOWN | — | 26%ile | Microsoft | 2026-07-14 |
| CVE-2026-17687 | Chromium: CVE-2026-17687 Type Confusion in ANGLE | UNKNOWN | — | 46%ile | Microsoft | 2026-07-14 |
| CVE-2026-17688 | Chromium: CVE-2026-17688 Use after free in Input | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-17689 | Chromium: CVE-2026-17689 Uninitialized Use in ANGLE | UNKNOWN | — | 39%ile | Microsoft | 2026-07-14 |
| CVE-2026-17690 | Chromium: CVE-2026-17690 Insufficient validation of untrusted input in PDF | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-17691 | Chromium: CVE-2026-17691 Out of bounds write in ANGLE | UNKNOWN | — | 41%ile | Microsoft | 2026-07-14 |
| CVE-2026-17692 | Chromium: CVE-2026-17692 Use after free in DataTransfer | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-17693 | Chromium: CVE-2026-17693 Inappropriate implementation in FileSystem | UNKNOWN | — | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-17694 | Chromium: CVE-2026-17694 Use after free in DOM | UNKNOWN | — | 36%ile | Microsoft | 2026-07-14 |
| CVE-2026-17695 | Chromium: CVE-2026-17695 Inappropriate implementation in ANGLE | UNKNOWN | — | 41%ile | Microsoft | 2026-07-14 |
| CVE-2026-17696 | Chromium: CVE-2026-17696 Side-channel information leakage in Media | UNKNOWN | — | 18%ile | Microsoft | 2026-07-14 |
| CVE-2026-17697 | Chromium: CVE-2026-17697 Type Confusion in ANGLE | UNKNOWN | — | 46%ile | Microsoft | 2026-07-14 |
| CVE-2026-17698 | Chromium: CVE-2026-17698 Insufficient validation of untrusted input in UI | UNKNOWN | — | 19%ile | Microsoft | 2026-07-14 |
| CVE-2026-17699 | Chromium: CVE-2026-17699 Use after free in Views | UNKNOWN | — | 3%ile | Microsoft | 2026-07-14 |
| CVE-2026-17700 | Chromium: CVE-2026-17700 Insufficient validation of untrusted input in Actor | UNKNOWN | — | 18%ile | Microsoft | 2026-07-14 |
| CVE-2026-17701 | Chromium: CVE-2026-17701 Out of bounds read in ANGLE | UNKNOWN | — | 40%ile | Microsoft | 2026-07-14 |
| CVE-2026-17702 | Chromium: CVE-2026-17702 Inappropriate implementation in Skia | UNKNOWN | — | 24%ile | Microsoft | 2026-07-14 |
| CVE-2026-17703 | Chromium: CVE-2026-17703 Policy bypass in Chrome for iOS | UNKNOWN | — | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-17704 | Chromium: CVE-2026-17704 Use after free in ANGLE | UNKNOWN | — | 44%ile | Microsoft | 2026-07-14 |
| CVE-2026-17705 | Chromium: CVE-2026-17705 Integer overflow in libxml | UNKNOWN | — | 36%ile | Microsoft | 2026-07-14 |
| CVE-2026-17706 | Chromium: CVE-2026-17706 Insufficient validation of untrusted input in Media | UNKNOWN | — | 18%ile | Microsoft | 2026-07-14 |
| CVE-2026-17707 | Chromium: CVE-2026-17707 Uninitialized Use in Media | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-17708 | Chromium: CVE-2026-17708 Use after free in Audio | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-17709 | Chromium: CVE-2026-17709 Race in Downloads | UNKNOWN | — | 20%ile | Microsoft | 2026-07-14 |
| CVE-2026-17710 | Chromium: CVE-2026-17710 Inappropriate implementation in MHTML | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-17711 | Chromium: CVE-2026-17711 Race in Downloads | UNKNOWN | — | 20%ile | Microsoft | 2026-07-14 |
| CVE-2026-17712 | Chromium: CVE-2026-17712 Race in Skia | UNKNOWN | — | 39%ile | Microsoft | 2026-07-14 |
| CVE-2026-17713 | Chromium: CVE-2026-17713 Insufficient validation of untrusted input in Accessibility | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-17714 | Chromium: CVE-2026-17714 Uninitialized Use in ANGLE | UNKNOWN | — | 44%ile | Microsoft | 2026-07-14 |
| CVE-2026-17715 | Chromium: CVE-2026-17715 Inappropriate implementation in Passwords | UNKNOWN | — | 8%ile | Microsoft | 2026-07-14 |
| CVE-2026-17716 | Chromium: CVE-2026-17716 Use after free in Updater | UNKNOWN | — | 3%ile | Microsoft | 2026-07-14 |
| CVE-2026-17717 | Chromium: CVE-2026-17717 Integer overflow in ANGLE | UNKNOWN | — | 44%ile | Microsoft | 2026-07-14 |
| CVE-2026-17718 | Chromium: CVE-2026-17718 Use after free in ANGLE | UNKNOWN | — | 38%ile | Microsoft | 2026-07-14 |
| CVE-2026-17719 | Chromium: CVE-2026-17719 Use after free in Input | UNKNOWN | — | 36%ile | Microsoft | 2026-07-14 |
| CVE-2026-17720 | Chromium: CVE-2026-17720 Insufficient policy enforcement in Passwords | UNKNOWN | — | 8%ile | Microsoft | 2026-07-14 |
| CVE-2026-17721 | Chromium: CVE-2026-17721 Out of bounds write in ANGLE | UNKNOWN | — | 38%ile | Microsoft | 2026-07-14 |
| CVE-2026-17722 | Chromium: CVE-2026-17722 Object lifecycle issue in WebView | UNKNOWN | — | 23%ile | Microsoft | 2026-07-14 |
| CVE-2026-17723 | Chromium: CVE-2026-17723 Use after free in Media | UNKNOWN | — | 23%ile | Microsoft | 2026-07-14 |
| CVE-2026-17724 | Chromium: CVE-2026-17724 Race in Chrome for iOS | UNKNOWN | — | 7%ile | Microsoft | 2026-07-14 |
| CVE-2026-17725 | Chromium: CVE-2026-17725 Type Confusion in V8 | UNKNOWN | — | 39%ile | Microsoft | 2026-07-14 |
| CVE-2026-17726 | Chromium: CVE-2026-17726 Integer overflow in WebGL | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-17727 | Chromium: CVE-2026-17727 Out of bounds write in WebGL | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-17728 | Chromium: CVE-2026-17728 Inappropriate implementation in Extensions | UNKNOWN | — | 13%ile | Microsoft | 2026-07-14 |
| CVE-2026-17729 | Chromium: CVE-2026-17729 Use after free in V8 | UNKNOWN | — | 31%ile | Microsoft | 2026-07-14 |
| CVE-2026-17730 | Chromium: CVE-2026-17730 Side-channel information leakage in Autofill | UNKNOWN | — | 18%ile | Microsoft | 2026-07-14 |
| CVE-2026-17731 | Chromium: CVE-2026-17731 Inappropriate implementation in Autofill | UNKNOWN | — | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-17732 | Chromium: CVE-2026-17732 Inappropriate implementation in SVG | UNKNOWN | — | 8%ile | Microsoft | 2026-07-14 |
| CVE-2026-17733 | Chromium: CVE-2026-17733 Inappropriate implementation in QUIC | UNKNOWN | — | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-17734 | Chromium: CVE-2026-17734 Inappropriate implementation in Autofill | UNKNOWN | — | 13%ile | Microsoft | 2026-07-14 |
| CVE-2026-17735 | Chromium: CVE-2026-17735 Insufficient validation of untrusted input in BFCache | UNKNOWN | — | 25%ile | Microsoft | 2026-07-14 |
| CVE-2026-17736 | Chromium: CVE-2026-17736 Insufficient validation of untrusted input in WebView | UNKNOWN | — | 10%ile | Microsoft | 2026-07-14 |
| CVE-2026-17737 | Chromium: CVE-2026-17737 Use after free in Bluetooth | UNKNOWN | — | 9%ile | Microsoft | 2026-07-14 |
| CVE-2026-17738 | Chromium: CVE-2026-17738 Insufficient validation of untrusted input in Payments | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-17739 | Chromium: CVE-2026-17739 Insufficient policy enforcement in Extensions | UNKNOWN | — | 4%ile | Microsoft | 2026-07-14 |
| CVE-2026-17740 | Chromium: CVE-2026-17740 Uninitialized Use in ANGLE | UNKNOWN | — | 33%ile | Microsoft | 2026-07-14 |
| CVE-2026-17741 | Chromium: CVE-2026-17741 Insufficient validation of untrusted input in WebView | UNKNOWN | — | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-17742 | Chromium: CVE-2026-17742 Insufficient policy enforcement in Payments | UNKNOWN | — | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-17743 | Chromium: CVE-2026-17743 Insufficient policy enforcement in ControlledFrame | UNKNOWN | — | 15%ile | Microsoft | 2026-07-14 |
| CVE-2026-17744 | Chromium: CVE-2026-17744 Inappropriate implementation in File Input | UNKNOWN | — | 11%ile | Microsoft | 2026-07-14 |
| CVE-2026-17745 | Chromium: CVE-2026-17745 Out of bounds read in Skia | UNKNOWN | — | 19%ile | Microsoft | 2026-07-14 |
| CVE-2026-17746 | Chromium: CVE-2026-17746 Use after free in GPU | UNKNOWN | — | 9%ile | Microsoft | 2026-07-14 |
| CVE-2026-17747 | Chromium: CVE-2026-17747 Insufficient validation of untrusted input in Payments | UNKNOWN | — | 15%ile | Microsoft | 2026-07-14 |
| CVE-2026-17748 | Chromium: CVE-2026-17748 Inappropriate implementation in Extensions | UNKNOWN | — | 15%ile | Microsoft | 2026-07-14 |
| CVE-2026-17749 | Chromium: CVE-2026-17749 Insufficient validation of untrusted input in Extensions | UNKNOWN | — | 18%ile | Microsoft | 2026-07-14 |
| CVE-2026-17750 | Chromium: CVE-2026-17750 Use after free in ANGLE | UNKNOWN | — | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-17751 | Chromium: CVE-2026-17751 Inappropriate implementation in AdFilter | UNKNOWN | — | 34%ile | Microsoft | 2026-07-14 |
| CVE-2026-17752 | Chromium: CVE-2026-17752 Use after free in Views | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-17753 | Chromium: CVE-2026-17753 Inappropriate implementation in Autofill | UNKNOWN | — | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-17754 | Chromium: CVE-2026-17754 Inappropriate implementation in Blink | UNKNOWN | — | 15%ile | Microsoft | 2026-07-14 |
| CVE-2026-17755 | Chromium: CVE-2026-17755 Incorrect security UI in Extensions | UNKNOWN | — | 8%ile | Microsoft | 2026-07-14 |
| CVE-2026-17756 | Chromium: CVE-2026-17756 Insufficient policy enforcement in Presentation | UNKNOWN | — | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-17757 | Chromium: CVE-2026-17757 Uninitialized Use in Skia | UNKNOWN | — | 33%ile | Microsoft | 2026-07-14 |
| CVE-2026-17758 | Chromium: CVE-2026-17758 Heap buffer overflow in Dawn | UNKNOWN | — | 31%ile | Microsoft | 2026-07-14 |
| CVE-2026-17759 | Chromium: CVE-2026-17759 Uninitialized Use in Codecs | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-17760 | Chromium: CVE-2026-17760 Side-channel information leakage in NoStatePrefetch | UNKNOWN | — | 18%ile | Microsoft | 2026-07-14 |
| CVE-2026-17761 | Chromium: CVE-2026-17761 Insufficient validation of untrusted input in Chrome for iOS | UNKNOWN | — | 10%ile | Microsoft | 2026-07-14 |
| CVE-2026-17762 | Chromium: CVE-2026-17762 Inappropriate implementation in Chrome for iOS | UNKNOWN | — | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-17763 | Chromium: CVE-2026-17763 Inappropriate implementation in GPU | UNKNOWN | — | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-17764 | Chromium: CVE-2026-17764 Inappropriate implementation in FedCM | UNKNOWN | — | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-17765 | Chromium: CVE-2026-17765 Inappropriate implementation in WebProtect | UNKNOWN | — | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-17766 | Chromium: CVE-2026-17766 Insufficient validation of untrusted input in Clipboard | UNKNOWN | — | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-17767 | Chromium: CVE-2026-17767 Insufficient validation of untrusted input in WebView | UNKNOWN | — | 18%ile | Microsoft | 2026-07-14 |
| CVE-2026-17768 | Chromium: CVE-2026-17768 Insufficient validation of untrusted input in WebSockets | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-17769 | Chromium: CVE-2026-17769 Insufficient validation of untrusted input in Cast | UNKNOWN | — | 18%ile | Microsoft | 2026-07-14 |
| CVE-2026-17770 | Chromium: CVE-2026-17770 Out of bounds read in Media | UNKNOWN | — | 17%ile | Microsoft | 2026-07-14 |
| CVE-2026-17771 | Chromium: CVE-2026-17771 Uninitialized Use in Skia | UNKNOWN | — | 33%ile | Microsoft | 2026-07-14 |
| CVE-2026-17772 | Chromium: CVE-2026-17772 Out of bounds read in WebGL | UNKNOWN | — | 18%ile | Microsoft | 2026-07-14 |
| CVE-2026-17773 | Chromium: CVE-2026-17773 Insufficient validation of untrusted input in Cast | UNKNOWN | — | 18%ile | Microsoft | 2026-07-14 |
| CVE-2026-17774 | Chromium: CVE-2026-17774 Insufficient validation of untrusted input in Variations | UNKNOWN | — | 7%ile | Microsoft | 2026-07-14 |
| CVE-2026-17775 | Chromium: CVE-2026-17775 Inappropriate implementation in PresentationAPI | UNKNOWN | — | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-17776 | Chromium: CVE-2026-17776 Policy bypass in Receiver | UNKNOWN | — | 9%ile | Microsoft | 2026-07-14 |
| CVE-2026-17777 | Chromium: CVE-2026-17777 Inappropriate implementation in Autofill | UNKNOWN | — | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-17778 | Chromium: CVE-2026-17778 Use after free in Extensions | UNKNOWN | — | 32%ile | Microsoft | 2026-07-14 |
| CVE-2026-17779 | Chromium: CVE-2026-17779 Inappropriate implementation in Site Isolation | UNKNOWN | — | 17%ile | Microsoft | 2026-07-14 |
| CVE-2026-17780 | Chromium: CVE-2026-17780 Inappropriate implementation in Isolated Web Apps | UNKNOWN | — | 13%ile | Microsoft | 2026-07-14 |
| CVE-2026-17781 | Chromium: CVE-2026-17781 Inappropriate implementation in Extensions | UNKNOWN | — | 9%ile | Microsoft | 2026-07-14 |
| CVE-2026-17782 | Chromium: CVE-2026-17782 Incorrect security UI in Chrome for iOS | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-17783 | Chromium: CVE-2026-17783 Inappropriate implementation in Loader | UNKNOWN | — | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-17784 | Chromium: CVE-2026-17784 Use after free in Audio | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-17785 | Chromium: CVE-2026-17785 Uninitialized Use in ANGLE | UNKNOWN | — | 33%ile | Microsoft | 2026-07-14 |
| CVE-2026-17786 | Chromium: CVE-2026-17786 Insufficient validation of untrusted input in DevTools | UNKNOWN | — | 18%ile | Microsoft | 2026-07-14 |
| CVE-2026-17787 | Chromium: CVE-2026-17787 Inappropriate implementation in DevTools | UNKNOWN | — | 15%ile | Microsoft | 2026-07-14 |
| CVE-2026-17788 | Chromium: CVE-2026-17788 Inappropriate implementation in Blink | UNKNOWN | — | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-17789 | Chromium: CVE-2026-17789 Insufficient validation of untrusted input in Chrome for iOS | UNKNOWN | — | 20%ile | Microsoft | 2026-07-14 |
| CVE-2026-17790 | Chromium: CVE-2026-17790 Uninitialized Use in ANGLE | UNKNOWN | — | 31%ile | Microsoft | 2026-07-14 |
| CVE-2026-17791 | Chromium: CVE-2026-17791 Insufficient validation of untrusted input in Payments | UNKNOWN | — | 21%ile | Microsoft | 2026-07-14 |
| CVE-2026-17792 | Chromium: CVE-2026-17792 Inappropriate implementation in Credential Management | UNKNOWN | — | 21%ile | Microsoft | 2026-07-14 |
| CVE-2026-17793 | Chromium: CVE-2026-17793 Inappropriate implementation in Messages | UNKNOWN | — | 21%ile | Microsoft | 2026-07-14 |
| CVE-2026-17794 | Chromium: CVE-2026-17794 Insufficient validation of untrusted input in Mobile | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-17795 | Chromium: CVE-2026-17795 Insufficient validation of untrusted input in GetUserMedia | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-17796 | Chromium: CVE-2026-17796 Side-channel information leakage in WebXR | UNKNOWN | — | 25%ile | Microsoft | 2026-07-14 |
| CVE-2026-17797 | Chromium: CVE-2026-17797 Inappropriate implementation in CSS | UNKNOWN | — | 13%ile | Microsoft | 2026-07-14 |
| CVE-2026-17798 | Chromium: CVE-2026-17798 Inappropriate implementation in Cast | UNKNOWN | — | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-17799 | Chromium: CVE-2026-17799 Insufficient validation of untrusted input in Safe Browsing | UNKNOWN | — | 11%ile | Microsoft | 2026-07-14 |
| CVE-2026-17800 | Chromium: CVE-2026-17800 Side-channel information leakage in MediaRecording | UNKNOWN | — | 25%ile | Microsoft | 2026-07-14 |
| CVE-2026-17801 | Chromium: CVE-2026-17801 Out of bounds memory access in ANGLE | UNKNOWN | — | 37%ile | Microsoft | 2026-07-14 |
| CVE-2026-17802 | Chromium: CVE-2026-17802 Side-channel information leakage in GPU | UNKNOWN | — | 18%ile | Microsoft | 2026-07-14 |
| CVE-2026-17803 | Chromium: CVE-2026-17803 Insufficient validation of untrusted input in Save to Drive | UNKNOWN | — | 25%ile | Microsoft | 2026-07-14 |
| CVE-2026-17804 | Chromium: CVE-2026-17804 Use after free in Media | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-17805 | Chromium: CVE-2026-17805 Insufficient policy enforcement in Glic | UNKNOWN | — | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-17806 | Chromium: CVE-2026-17806 Insufficient validation of untrusted input in Extensions | UNKNOWN | — | 10%ile | Microsoft | 2026-07-14 |
| CVE-2026-17807 | Chromium: CVE-2026-17807 Use after free in V8 | UNKNOWN | — | 36%ile | Microsoft | 2026-07-14 |
| CVE-2026-17808 | Chromium: CVE-2026-17808 Uninitialized Use in WebGL | UNKNOWN | — | 21%ile | Microsoft | 2026-07-14 |
| CVE-2026-17809 | Chromium: CVE-2026-17809 Insufficient validation of untrusted input in Extensions | UNKNOWN | — | 10%ile | Microsoft | 2026-07-14 |
| CVE-2026-17810 | Chromium: CVE-2026-17810 Uninitialized Use in Dawn | UNKNOWN | — | 21%ile | Microsoft | 2026-07-14 |
| CVE-2026-17811 | Chromium: CVE-2026-17811 Use after free in ANGLE | UNKNOWN | — | 13%ile | Microsoft | 2026-07-14 |
| CVE-2026-17812 | Chromium: CVE-2026-17812 Inappropriate implementation in DigitalCredentials | UNKNOWN | — | 17%ile | Microsoft | 2026-07-14 |
| CVE-2026-17813 | Chromium: CVE-2026-17813 Insufficient policy enforcement in Chrome for iOS | UNKNOWN | — | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-17814 | Chromium: CVE-2026-17814 Insufficient validation of untrusted input in Chrome for iOS | UNKNOWN | — | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-17815 | Chromium: CVE-2026-17815 Insufficient policy enforcement in GuestView | UNKNOWN | — | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-17816 | Chromium: CVE-2026-17816 Inappropriate implementation in Speech | UNKNOWN | — | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-17817 | Chromium: CVE-2026-17817 Inappropriate implementation in ReportingAndNEL | UNKNOWN | — | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-17818 | Chromium: CVE-2026-17818 Inappropriate implementation in Network | UNKNOWN | — | 13%ile | Microsoft | 2026-07-14 |
| CVE-2026-17819 | Chromium: CVE-2026-17819 Inappropriate implementation in WebAppInstalls | UNKNOWN | — | 21%ile | Microsoft | 2026-07-14 |
| CVE-2026-17820 | Chromium: CVE-2026-17820 Insufficient policy enforcement in Autofill | UNKNOWN | — | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-17821 | Chromium: CVE-2026-17821 Insufficient policy enforcement in Extensions | UNKNOWN | — | 13%ile | Microsoft | 2026-07-14 |
| CVE-2026-17822 | Chromium: CVE-2026-17822 Inappropriate implementation in Chrome for iOS | UNKNOWN | — | 14%ile | Microsoft | 2026-07-14 |
| CVE-2026-17823 | Chromium: CVE-2026-17823 Insufficient policy enforcement in WebXR | UNKNOWN | — | 15%ile | Microsoft | 2026-07-14 |
| CVE-2026-17824 | Chromium: CVE-2026-17824 Insufficient policy enforcement in ServiceWorker | UNKNOWN | — | 21%ile | Microsoft | 2026-07-14 |
| CVE-2026-17825 | Chromium: CVE-2026-17825 Insufficient policy enforcement in Passwords | UNKNOWN | — | 21%ile | Microsoft | 2026-07-14 |
| CVE-2026-17826 | Chromium: CVE-2026-17826 Inappropriate implementation in Chrome for iOS | UNKNOWN | — | 8%ile | Microsoft | 2026-07-14 |
| CVE-2026-17827 | Chromium: CVE-2026-17827 Inappropriate implementation in CSS | UNKNOWN | — | 13%ile | Microsoft | 2026-07-14 |
| CVE-2026-17828 | Chromium: CVE-2026-17828 Inappropriate implementation in Chrome for iOS | UNKNOWN | — | 21%ile | Microsoft | 2026-07-14 |
| CVE-2026-17829 | Chromium: CVE-2026-17829 Insufficient policy enforcement in Passwords | UNKNOWN | — | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-17830 | Chromium: CVE-2026-17830 Inappropriate implementation in Chrome for iOS | UNKNOWN | — | 21%ile | Microsoft | 2026-07-14 |
| CVE-2026-17831 | Chromium: CVE-2026-17831 Insufficient validation of untrusted input in Passwords | UNKNOWN | — | 21%ile | Microsoft | 2026-07-14 |
| CVE-2026-17832 | Chromium: CVE-2026-17832 Use after free in ANGLE | UNKNOWN | — | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-17833 | Chromium: CVE-2026-17833 Inappropriate implementation in Passwords | UNKNOWN | — | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-17834 | Chromium: CVE-2026-17834 Inappropriate implementation in Passwords | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-17835 | Chromium: CVE-2026-17835 Inappropriate implementation in Chrome for iOS | UNKNOWN | — | 21%ile | Microsoft | 2026-07-14 |
| CVE-2026-17836 | Chromium: CVE-2026-17836 Use after free in V8 | UNKNOWN | — | 36%ile | Microsoft | 2026-07-14 |
| CVE-2026-17837 | Chromium: CVE-2026-17837 Insufficient validation of untrusted input in DevTools | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-17838 | Chromium: CVE-2026-17838 Incorrect security UI in Chrome for iOS | UNKNOWN | — | 21%ile | Microsoft | 2026-07-14 |
| CVE-2026-17839 | Chromium: CVE-2026-17839 Inappropriate implementation in Chrome for iOS | UNKNOWN | — | 21%ile | Microsoft | 2026-07-14 |
| CVE-2026-17840 | Chromium: CVE-2026-17840 Incorrect security UI in Passwords | UNKNOWN | — | 21%ile | Microsoft | 2026-07-14 |
| CVE-2026-17841 | Chromium: CVE-2026-17841 Race in Chrome for iOS | UNKNOWN | — | 14%ile | Microsoft | 2026-07-14 |
| CVE-2026-17842 | Chromium: CVE-2026-17842 Inappropriate implementation in Chrome for iOS | UNKNOWN | — | 15%ile | Microsoft | 2026-07-14 |
| CVE-2026-17843 | Chromium: CVE-2026-17843 Inappropriate implementation in CSS | UNKNOWN | — | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-17844 | Chromium: CVE-2026-17844 Insufficient validation of untrusted input in Cast | UNKNOWN | — | 5%ile | Microsoft | 2026-07-14 |
| CVE-2026-17845 | Chromium: CVE-2026-17845 Inappropriate implementation in CSS | UNKNOWN | — | 13%ile | Microsoft | 2026-07-14 |
| CVE-2026-17846 | Chromium: CVE-2026-17846 Inappropriate implementation in Media | UNKNOWN | — | 15%ile | Microsoft | 2026-07-14 |
| CVE-2026-17847 | Chromium: CVE-2026-17847 Insufficient validation of untrusted input in ANGLE | UNKNOWN | — | 31%ile | Microsoft | 2026-07-14 |
| CVE-2026-17848 | Chromium: CVE-2026-17848 Insufficient validation of untrusted input in Codecs | UNKNOWN | — | 25%ile | Microsoft | 2026-07-14 |
| CVE-2026-17849 | Chromium: CVE-2026-17849 Inappropriate implementation in Chrome for iOS | UNKNOWN | — | 13%ile | Microsoft | 2026-07-14 |
| CVE-2026-17850 | Chromium: CVE-2026-17850 Inappropriate implementation in Permissions | UNKNOWN | — | 15%ile | Microsoft | 2026-07-14 |
| CVE-2026-17851 | Chromium: CVE-2026-17851 Side-channel information leakage in Autofill | UNKNOWN | — | 18%ile | Microsoft | 2026-07-14 |
| CVE-2026-17852 | Chromium: CVE-2026-17852 Inappropriate implementation in Media Router | UNKNOWN | — | 15%ile | Microsoft | 2026-07-14 |
| CVE-2026-17853 | Chromium: CVE-2026-17853 Inappropriate implementation in DevTools | UNKNOWN | — | 13%ile | Microsoft | 2026-07-14 |
| CVE-2026-17854 | Chromium: CVE-2026-17854 Insufficient policy enforcement in WebMCP | UNKNOWN | — | 15%ile | Microsoft | 2026-07-14 |
| CVE-2026-17855 | Chromium: CVE-2026-17855 Race in DevTools | UNKNOWN | — | 20%ile | Microsoft | 2026-07-14 |
| CVE-2026-17856 | Chromium: CVE-2026-17856 Inappropriate implementation in Network | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-17857 | Chromium: CVE-2026-17857 Inappropriate implementation in Network | UNKNOWN | — | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-17858 | Chromium: CVE-2026-17858 Uninitialized Use in WebNN | UNKNOWN | — | 21%ile | Microsoft | 2026-07-14 |
| CVE-2026-17859 | Chromium: CVE-2026-17859 Side-channel information leakage in Favicons | UNKNOWN | — | 18%ile | Microsoft | 2026-07-14 |
| CVE-2026-17860 | Chromium: CVE-2026-17860 Insufficient validation of untrusted input in Mobile | UNKNOWN | — | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-17861 | Chromium: CVE-2026-17861 Insufficient validation of untrusted input in Updater | UNKNOWN | — | 3%ile | Microsoft | 2026-07-14 |
| CVE-2026-17862 | Chromium: CVE-2026-17862 Use after free in Tracing | UNKNOWN | — | 3%ile | Microsoft | 2026-07-14 |
| CVE-2026-17863 | Chromium: CVE-2026-17863 Inappropriate implementation in Browser | UNKNOWN | — | 3%ile | Microsoft | 2026-07-14 |
| CVE-2026-17864 | Chromium: CVE-2026-17864 Inappropriate implementation in Updater | UNKNOWN | — | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-17865 | Chromium: CVE-2026-17865 Inappropriate implementation in Crypto | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-17866 | Chromium: CVE-2026-17866 Type Confusion in Tab | UNKNOWN | — | 11%ile | Microsoft | 2026-07-14 |
| CVE-2026-17867 | Chromium: CVE-2026-17867 Insufficient validation of untrusted input in Dawn | UNKNOWN | — | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-17868 | Chromium: CVE-2026-17868 Insufficient policy enforcement in USB | UNKNOWN | — | 26%ile | Microsoft | 2026-07-14 |
| CVE-2026-17869 | Chromium: CVE-2026-17869 Out of bounds read in WebXR | UNKNOWN | — | 26%ile | Microsoft | 2026-07-14 |
| CVE-2026-17870 | Chromium: CVE-2026-17870 Insufficient validation of untrusted input in Cast | UNKNOWN | — | 5%ile | Microsoft | 2026-07-14 |
| CVE-2026-17871 | Chromium: CVE-2026-17871 Inappropriate implementation in Passwords | UNKNOWN | — | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-17872 | Chromium: CVE-2026-17872 Cryptographic Flaw in WebAppInstalls | UNKNOWN | — | 0%ile | Microsoft | 2026-07-14 |
| CVE-2026-17873 | Chromium: CVE-2026-17873 Insufficient policy enforcement in Chrome for iOS | UNKNOWN | — | 21%ile | Microsoft | 2026-07-14 |
| CVE-2026-17874 | Chromium: CVE-2026-17874 Inappropriate implementation in Chrome for iOS | UNKNOWN | — | 17%ile | Microsoft | 2026-07-14 |
| CVE-2026-17875 | Chromium: CVE-2026-17875 Use after free in PDFium | UNKNOWN | — | 32%ile | Microsoft | 2026-07-14 |
| CVE-2026-17876 | Chromium: CVE-2026-17876 Inappropriate implementation in Payments | UNKNOWN | — | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-17877 | Chromium: CVE-2026-17877 Inappropriate implementation in Chromoting | UNKNOWN | — | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-17878 | Chromium: CVE-2026-17878 Inappropriate implementation in CSS | UNKNOWN | — | 13%ile | Microsoft | 2026-07-14 |
| CVE-2026-17879 | Chromium: CVE-2026-17879 Inappropriate implementation in Autofill | UNKNOWN | — | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-17880 | Chromium: CVE-2026-17880 Inappropriate implementation in Autofill | UNKNOWN | — | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-17881 | Chromium: CVE-2026-17881 Use after free in WebXR | UNKNOWN | — | 44%ile | Microsoft | 2026-07-14 |
| CVE-2026-17882 | Chromium: CVE-2026-17882 Policy bypass in Extensions | UNKNOWN | — | 13%ile | Microsoft | 2026-07-14 |
| CVE-2026-17883 | Chromium: CVE-2026-17883 Inappropriate implementation in Headless | UNKNOWN | — | 15%ile | Microsoft | 2026-07-14 |
| CVE-2026-17884 | Chromium: CVE-2026-17884 Object lifecycle issue in WebRTC | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-17885 | Chromium: CVE-2026-17885 Inappropriate implementation in Paint | UNKNOWN | — | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-17886 | Chromium: CVE-2026-17886 Use after free in Enterprise | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-17887 | Chromium: CVE-2026-17887 Use after free in TabStrip | UNKNOWN | — | 23%ile | Microsoft | 2026-07-14 |
| CVE-2026-17888 | Chromium: CVE-2026-17888 Insufficient validation of untrusted input in WebUI | UNKNOWN | — | 11%ile | Microsoft | 2026-07-14 |
| CVE-2026-17889 | Chromium: CVE-2026-17889 Uninitialized Use in WebXR | UNKNOWN | — | 21%ile | Microsoft | 2026-07-14 |
| CVE-2026-17890 | Chromium: CVE-2026-17890 Insufficient validation of untrusted input in DevTools | UNKNOWN | — | 10%ile | Microsoft | 2026-07-14 |
| CVE-2026-17891 | Chromium: CVE-2026-17891 Use after free in ANGLE | UNKNOWN | — | 5%ile | Microsoft | 2026-07-14 |
| CVE-2026-17892 | Chromium: CVE-2026-17892 Inappropriate implementation in WebXR | UNKNOWN | — | 25%ile | Microsoft | 2026-07-14 |
| CVE-2026-17893 | Chromium: CVE-2026-17893 Insufficient validation of untrusted input in Updater | UNKNOWN | — | 10%ile | Microsoft | 2026-07-14 |
| CVE-2026-17894 | Chromium: CVE-2026-17894 Use after free in Views | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-17895 | Chromium: CVE-2026-17895 Inappropriate implementation in DataTransfer | UNKNOWN | — | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-17896 | Chromium: CVE-2026-17896 Use after free in DevTools | UNKNOWN | — | 30%ile | Microsoft | 2026-07-14 |
| CVE-2026-17897 | Chromium: CVE-2026-17897 Inappropriate implementation in ORB | UNKNOWN | — | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-17898 | Chromium: CVE-2026-17898 Use after free in DevTools | UNKNOWN | — | 18%ile | Microsoft | 2026-07-14 |
| CVE-2026-17899 | Chromium: CVE-2026-17899 Insufficient policy enforcement in DevTools | UNKNOWN | — | 18%ile | Microsoft | 2026-07-14 |
| CVE-2026-17900 | Chromium: CVE-2026-17900 Inappropriate implementation in Enterprise | UNKNOWN | — | 9%ile | Microsoft | 2026-07-14 |
| CVE-2026-17901 | Chromium: CVE-2026-17901 Inappropriate implementation in Sharing | UNKNOWN | — | 14%ile | Microsoft | 2026-07-14 |
| CVE-2026-17902 | Chromium: CVE-2026-17902 Inappropriate implementation in Editing | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-17903 | Chromium: CVE-2026-17903 Insufficient policy enforcement in Chromecast | UNKNOWN | — | 6%ile | Microsoft | 2026-07-14 |
| CVE-2026-17904 | Chromium: CVE-2026-17904 Insufficient policy enforcement in NFC | UNKNOWN | — | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-17905 | Chromium: CVE-2026-17905 Inappropriate implementation in SurfaceCapture | UNKNOWN | — | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-17906 | Chromium: CVE-2026-17906 Insufficient validation of untrusted input in Bluetooth | UNKNOWN | — | 10%ile | Microsoft | 2026-07-14 |
| CVE-2026-17907 | Chromium: CVE-2026-17907 Side-channel information leakage in Network | UNKNOWN | — | 18%ile | Microsoft | 2026-07-14 |
| CVE-2026-17908 | Chromium: CVE-2026-17908 Insufficient validation of untrusted input in Printing | UNKNOWN | — | 10%ile | Microsoft | 2026-07-14 |
| CVE-2026-17909 | Chromium: CVE-2026-17909 Insufficient validation of untrusted input in Isolated Web Apps | UNKNOWN | — | 19%ile | Microsoft | 2026-07-14 |
| CVE-2026-17910 | Chromium: CVE-2026-17910 Insufficient policy enforcement in NFC | UNKNOWN | — | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-17911 | Chromium: CVE-2026-17911 Insufficient policy enforcement in SVG | UNKNOWN | — | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-17912 | Chromium: CVE-2026-17912 Inappropriate implementation in Chrome for iOS | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-17913 | Chromium: CVE-2026-17913 Inappropriate implementation in Chrome for iOS | UNKNOWN | — | 17%ile | Microsoft | 2026-07-14 |
| CVE-2026-17914 | Chromium: CVE-2026-17914 Side-channel information leakage in Skia | UNKNOWN | — | 14%ile | Microsoft | 2026-07-14 |
| CVE-2026-17915 | Chromium: CVE-2026-17915 Inappropriate implementation in WebView | UNKNOWN | — | 17%ile | Microsoft | 2026-07-14 |
| CVE-2026-17916 | Chromium: CVE-2026-17916 Insufficient policy enforcement in Settings | UNKNOWN | — | 13%ile | Microsoft | 2026-07-14 |
| CVE-2026-17917 | Chromium: CVE-2026-17917 Policy bypass in Chrome for iOS | UNKNOWN | — | 21%ile | Microsoft | 2026-07-14 |
| CVE-2026-17918 | Chromium: CVE-2026-17918 Use after free in Sync | UNKNOWN | — | 36%ile | Microsoft | 2026-07-14 |
| CVE-2026-17919 | Chromium: CVE-2026-17919 Insufficient policy enforcement in Enterprise | UNKNOWN | — | 6%ile | Microsoft | 2026-07-14 |
| CVE-2026-17920 | Chromium: CVE-2026-17920 Use after free in V8 | UNKNOWN | — | 23%ile | Microsoft | 2026-07-14 |
| CVE-2026-17921 | Chromium: CVE-2026-17921 Insufficient validation of untrusted input in Navigation | UNKNOWN | — | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-17922 | Chromium: CVE-2026-17922 Inappropriate implementation in Enterprise | UNKNOWN | — | 38%ile | Microsoft | 2026-07-14 |
| CVE-2026-17923 | Chromium: CVE-2026-17923 Policy bypass in Enterprise | UNKNOWN | — | 20%ile | Microsoft | 2026-07-14 |
| CVE-2026-17924 | Chromium: CVE-2026-17924 Use after free in DNS | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-17925 | Chromium: CVE-2026-17925 Inappropriate implementation in Cast | UNKNOWN | — | 10%ile | Microsoft | 2026-07-14 |
| CVE-2026-17926 | Chromium: CVE-2026-17926 Insufficient validation of untrusted input in DevTools | UNKNOWN | — | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-17927 | Chromium: CVE-2026-17927 Insufficient policy enforcement in DevTools | UNKNOWN | — | 6%ile | Microsoft | 2026-07-14 |
| CVE-2026-17928 | Chromium: CVE-2026-17928 Inappropriate implementation in DataTransfer | UNKNOWN | — | 18%ile | Microsoft | 2026-07-14 |
| CVE-2026-17929 | Chromium: CVE-2026-17929 Insufficient validation of untrusted input in DevTools | UNKNOWN | — | 20%ile | Microsoft | 2026-07-14 |
| CVE-2026-17930 | Chromium: CVE-2026-17930 Insufficient validation of untrusted input in Extensions | UNKNOWN | — | 26%ile | Microsoft | 2026-07-14 |
| CVE-2026-17931 | Chromium: CVE-2026-17931 Inappropriate implementation in DevTools | UNKNOWN | — | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-17932 | Chromium: CVE-2026-17932 Use after free in DataTransfer | UNKNOWN | — | 3%ile | Microsoft | 2026-07-14 |
| CVE-2026-17933 | Chromium: CVE-2026-17933 Inappropriate implementation in DOMStorage | UNKNOWN | — | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-17934 | Chromium: CVE-2026-17934 Insufficient validation of untrusted input in DevTools | UNKNOWN | — | 17%ile | Microsoft | 2026-07-14 |
| CVE-2026-17935 | Chromium: CVE-2026-17935 Heap buffer overflow in Codecs | UNKNOWN | — | 39%ile | Microsoft | 2026-07-14 |
| CVE-2026-17936 | Chromium: CVE-2026-17936 Inappropriate implementation in DevTools | UNKNOWN | — | 15%ile | Microsoft | 2026-07-14 |
| CVE-2026-17937 | Chromium: CVE-2026-17937 Inappropriate implementation in DevTools | UNKNOWN | — | 17%ile | Microsoft | 2026-07-14 |
| CVE-2026-17938 | Chromium: CVE-2026-17938 Inappropriate implementation in FullScreen | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-17939 | Chromium: CVE-2026-17939 Inappropriate implementation in Passwords | UNKNOWN | — | 13%ile | Microsoft | 2026-07-14 |
| CVE-2026-17940 | Chromium: CVE-2026-17940 Insufficient validation of untrusted input in Picture-in-Picture | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-17941 | Chromium: CVE-2026-17941 Inappropriate implementation in Chrome for iOS | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-17942 | Chromium: CVE-2026-17942 Side-channel information leakage in SVG | UNKNOWN | — | 18%ile | Microsoft | 2026-07-14 |
| CVE-2026-17943 | Chromium: CVE-2026-17943 Inappropriate implementation in Parser | UNKNOWN | — | 17%ile | Microsoft | 2026-07-14 |
| CVE-2026-17944 | Chromium: CVE-2026-17944 Inappropriate implementation in Chrome for iOS | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-17945 | Chromium: CVE-2026-17945 Inappropriate implementation in Navigation | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-17946 | Chromium: CVE-2026-17946 Uninitialized Use in Dawn | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-17947 | Chromium: CVE-2026-17947 Use after free in WebSockets | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-17948 | Chromium: CVE-2026-17948 Type Confusion in V8 | UNKNOWN | — | 18%ile | Microsoft | 2026-07-14 |
| CVE-2026-17949 | Chromium: CVE-2026-17949 Uninitialized Use in GPU | UNKNOWN | — | 21%ile | Microsoft | 2026-07-14 |
| CVE-2026-17950 | Chromium: CVE-2026-17950 Policy bypass in Safebrowsing | UNKNOWN | — | 31%ile | Microsoft | 2026-07-14 |
| CVE-2026-17951 | Chromium: CVE-2026-17951 Heap buffer overflow in WebRTC | UNKNOWN | — | 31%ile | Microsoft | 2026-07-14 |
| CVE-2026-17952 | Chromium: CVE-2026-17952 Inappropriate implementation in V8 | UNKNOWN | — | 17%ile | Microsoft | 2026-07-14 |
| CVE-2026-17953 | Chromium: CVE-2026-17953 Insufficient policy enforcement in WebView | UNKNOWN | — | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-17954 | Chromium: CVE-2026-17954 Policy bypass in MHTML | UNKNOWN | — | 10%ile | Microsoft | 2026-07-14 |
| CVE-2026-17955 | Chromium: CVE-2026-17955 Insufficient validation of untrusted input in Payments | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-17956 | Chromium: CVE-2026-17956 Inappropriate implementation in Scheduling | UNKNOWN | — | 34%ile | Microsoft | 2026-07-14 |
| CVE-2026-17957 | Chromium: CVE-2026-17957 Inappropriate implementation in CORS | UNKNOWN | — | 8%ile | Microsoft | 2026-07-14 |
| CVE-2026-17958 | Chromium: CVE-2026-17958 Inappropriate implementation in Views | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-17959 | Chromium: CVE-2026-17959 Inappropriate implementation in Network | UNKNOWN | — | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-17960 | Chromium: CVE-2026-17960 Inappropriate implementation in Chrome for iOS | UNKNOWN | — | 17%ile | Microsoft | 2026-07-14 |
| CVE-2026-17961 | Chromium: CVE-2026-17961 Inappropriate implementation in Session | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-17962 | Chromium: CVE-2026-17962 Inappropriate implementation in Blink | UNKNOWN | — | 13%ile | Microsoft | 2026-07-14 |
| CVE-2026-17963 | Chromium: CVE-2026-17963 Inappropriate implementation in SVG | UNKNOWN | — | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-17964 | Chromium: CVE-2026-17964 Incorrect security UI in UI | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-17965 | Chromium: CVE-2026-17965 Incorrect security UI in Chrome for iOS | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-17966 | Chromium: CVE-2026-17966 Inappropriate implementation in Views | UNKNOWN | — | 3%ile | Microsoft | 2026-07-14 |
| CVE-2026-17967 | Chromium: CVE-2026-17967 Use after free in Chrome for iOS | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-17968 | Chromium: CVE-2026-17968 Uninitialized Use in WebXR | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-17969 | Chromium: CVE-2026-17969 Inappropriate implementation in Passwords | UNKNOWN | — | 34%ile | Microsoft | 2026-07-14 |
| CVE-2026-17970 | Chromium: CVE-2026-17970 Insufficient validation of untrusted input in Passwords | UNKNOWN | — | 8%ile | Microsoft | 2026-07-14 |
| CVE-2026-17971 | Chromium: CVE-2026-17971 Inappropriate implementation in Frame | UNKNOWN | — | 31%ile | Microsoft | 2026-07-14 |
| CVE-2026-17972 | Chromium: CVE-2026-17972 Inappropriate implementation in Chrome for iOS | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-17973 | Chromium: CVE-2026-17973 Inappropriate implementation in Views | UNKNOWN | — | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-17974 | Chromium: CVE-2026-17974 Insufficient policy enforcement in DevTools | UNKNOWN | — | 13%ile | Microsoft | 2026-07-14 |
| CVE-2026-17975 | Chromium: CVE-2026-17975 Inappropriate implementation in IME | UNKNOWN | — | 25%ile | Microsoft | 2026-07-14 |
| CVE-2026-17976 | Chromium: CVE-2026-17976 Policy bypass in Extensions | UNKNOWN | — | 8%ile | Microsoft | 2026-07-14 |
| CVE-2026-17977 | Chromium: CVE-2026-17977 Policy bypass in CSS | UNKNOWN | — | 13%ile | Microsoft | 2026-07-14 |
| CVE-2026-17978 | Chromium: CVE-2026-17978 Side-channel information leakage in WebCodecs | UNKNOWN | — | 21%ile | Microsoft | 2026-07-14 |
| CVE-2026-17979 | Chromium: CVE-2026-17979 Race in V8 | UNKNOWN | — | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-17980 | Chromium: CVE-2026-17980 Inappropriate implementation in UI | UNKNOWN | — | 14%ile | Microsoft | 2026-07-14 |
| CVE-2026-17981 | Chromium: CVE-2026-17981 Inappropriate implementation in Blink | UNKNOWN | — | 12%ile | Microsoft | 2026-07-14 |
| CVE-2026-17982 | Chromium: CVE-2026-17982 Insufficient validation of untrusted input in Cast | UNKNOWN | — | 17%ile | Microsoft | 2026-07-14 |
| CVE-2026-17983 | Chromium: CVE-2026-17983 Incorrect security UI in Global Media Controls | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-17984 | Chromium: CVE-2026-17984 Inappropriate implementation in Browser | UNKNOWN | — | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-17985 | Chromium: CVE-2026-17985 Insufficient policy enforcement in Speech | UNKNOWN | — | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-17986 | Chromium: CVE-2026-17986 Insufficient policy enforcement in Bluetooth | UNKNOWN | — | 21%ile | Microsoft | 2026-07-14 |
| CVE-2026-17987 | Chromium: CVE-2026-17987 Insufficient validation of untrusted input in Notifications | UNKNOWN | — | 25%ile | Microsoft | 2026-07-14 |
| CVE-2026-17988 | Chromium: CVE-2026-17988 Insufficient validation of untrusted input in Navigation | UNKNOWN | — | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-17989 | Chromium: CVE-2026-17989 Type Confusion in V8 | UNKNOWN | — | 39%ile | Microsoft | 2026-07-14 |
| CVE-2026-17990 | Chromium: CVE-2026-17990 Insufficient validation of untrusted input in WebAuthn | UNKNOWN | — | 25%ile | Microsoft | 2026-07-14 |
| CVE-2026-17991 | Chromium: CVE-2026-17991 Insufficient validation of untrusted input in AI | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-17992 | Chromium: CVE-2026-17992 Uninitialized Use in Skia | UNKNOWN | — | 18%ile | Microsoft | 2026-07-14 |
| CVE-2026-17993 | Chromium: CVE-2026-17993 Race in Updater | UNKNOWN | — | 0%ile | Microsoft | 2026-07-14 |
| CVE-2026-17994 | Chromium: CVE-2026-17994 Inappropriate implementation in Media | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-17995 | Chromium: CVE-2026-17995 Out of bounds read in Dawn | UNKNOWN | — | 26%ile | Microsoft | 2026-07-14 |
| CVE-2026-17996 | Chromium: CVE-2026-17996 Inappropriate implementation in Browser | UNKNOWN | — | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-17997 | Chromium: CVE-2026-17997 Inappropriate implementation in Passwords | UNKNOWN | — | 8%ile | Microsoft | 2026-07-14 |
| CVE-2026-17998 | Chromium: CVE-2026-17998 Incorrect security UI in Extensions | UNKNOWN | — | 8%ile | Microsoft | 2026-07-14 |
| CVE-2026-17999 | Chromium: CVE-2026-17999 Incorrect security UI in PictureInPicture | UNKNOWN | — | 14%ile | Microsoft | 2026-07-14 |
| CVE-2026-18000 | Chromium: CVE-2026-18000 Insufficient policy enforcement in USB | UNKNOWN | — | 8%ile | Microsoft | 2026-07-14 |
| CVE-2026-18001 | Chromium: CVE-2026-18001 Inappropriate implementation in WebGL | UNKNOWN | — | 25%ile | Microsoft | 2026-07-14 |
| CVE-2026-18002 | Chromium: CVE-2026-18002 Insufficient validation of untrusted input in Google Lens | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-18003 | Chromium: CVE-2026-18003 Inappropriate implementation in Chrome for iOS | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-18004 | Chromium: CVE-2026-18004 Insufficient policy enforcement in Speech | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-18005 | Chromium: CVE-2026-18005 Inappropriate implementation in WebXR | UNKNOWN | — | 25%ile | Microsoft | 2026-07-14 |
| CVE-2026-18006 | Chromium: CVE-2026-18006 Inappropriate implementation in Google Lens | UNKNOWN | — | 4%ile | Microsoft | 2026-07-14 |
| CVE-2026-18007 | Chromium: CVE-2026-18007 Inappropriate implementation in Input | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-18008 | Chromium: CVE-2026-18008 Inappropriate implementation in Settings | UNKNOWN | — | 13%ile | Microsoft | 2026-07-14 |
| CVE-2026-18009 | Chromium: CVE-2026-18009 Insufficient validation of untrusted input in Passwords | UNKNOWN | — | 13%ile | Microsoft | 2026-07-14 |
| CVE-2026-18010 | Chromium: CVE-2026-18010 Inappropriate implementation in Passwords | UNKNOWN | — | 13%ile | Microsoft | 2026-07-14 |
| CVE-2026-18011 | Chromium: CVE-2026-18011 Inappropriate implementation in Chrome for iOS | UNKNOWN | — | 3%ile | Microsoft | 2026-07-14 |
| CVE-2026-18012 | Chromium: CVE-2026-18012 Use after free in PDFium | UNKNOWN | — | 32%ile | Microsoft | 2026-07-14 |
| CVE-2026-18013 | Chromium: CVE-2026-18013 Inappropriate implementation in Chrome for iOS | UNKNOWN | — | 16%ile | Microsoft | 2026-07-14 |
| CVE-2026-18014 | Chromium: CVE-2026-18014 Insufficient validation of untrusted input in DevTools | UNKNOWN | — | 20%ile | Microsoft | 2026-07-14 |
| CVE-2026-18015 | Chromium: CVE-2026-18015 Inappropriate implementation in Tint | UNKNOWN | — | 28%ile | Microsoft | 2026-07-14 |
| CVE-2026-18016 | Chromium: CVE-2026-18016 Insufficient policy enforcement in Chrome for iOS | UNKNOWN | — | 9%ile | Microsoft | 2026-07-14 |
| CVE-2026-18017 | Chromium: CVE-2026-18017 Use after free in Dawn | UNKNOWN | — | 36%ile | Microsoft | 2026-07-14 |
| CVE-2026-18018 | Chromium: CVE-2026-18018 Inappropriate implementation in Updater | UNKNOWN | — | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-18019 | Chromium: CVE-2026-18019 Side-channel information leakage in Media | UNKNOWN | — | 18%ile | Microsoft | 2026-07-14 |
| CVE-2026-40400 | Windows PowerShell Remote Code Execution Vulnerability | UNKNOWN | — | 59%ile | Microsoft | 2026-07-14 |
| CVE-2026-48561 | Microsoft Edge Copilot Remote Code Execution Vulnerability | UNKNOWN | — | 59%ile | Microsoft | 2026-07-14 |
| CVE-2026-50375 | DirectX Graphics Kernel Elevation of Privilege Vulnerability | UNKNOWN | — | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-50436 | Windows Kernel Elevation of Privilege Vulnerability | UNKNOWN | — | 27%ile | Microsoft | 2026-07-14 |
| CVE-2026-50454 | Windows User Interface Core Elevation of Privilege Vulnerability | UNKNOWN | — | 31%ile | Microsoft | 2026-07-14 |
| CVE-2026-54998 | Microsoft Exchange Online Elevation of Privilege Vulnerability | UNKNOWN | — | 56%ile | Microsoft | 2026-07-14 |
| CVE-2026-56160 | Azure Red Hat OpenShift (ARO) Elevation of Privilege Vulnerability | UNKNOWN | — | 56%ile | Microsoft | 2026-07-14 |
| CVE-2026-56163 | Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability | UNKNOWN | — | 60%ile | Microsoft | 2026-07-14 |
| CVE-2026-57089 | Windows SMB Server Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability | UNKNOWN | — | 52%ile | Microsoft | 2026-07-14 |
| CVE-2026-58643 | Windows Admin Center Spoofing Vulnerability | UNKNOWN | — | 36%ile | Microsoft | 2026-07-14 |
| CVE-2026-45480 | Azure Active Directory Elevation of Privilege Vulnerability | CRITICAL | 10.0 | 60%ile | Microsoft | 2026-06-09 |
| CVE-2026-48567 | Azure HorizonDB Elevation of Privilege Vulnerability | CRITICAL | 10.0 | 64%ile | Microsoft | 2026-06-09 |
| CVE-2026-47647 | Dynamics 365 Elevation of Privilege Vulnerability | CRITICAL | 9.9 | 56%ile | Microsoft | 2026-06-09 |
| CVE-2026-48584 | Microsoft Azure Synapse Elevation of Privilege Vulnerability | CRITICAL | 9.9 | 60%ile | Microsoft | 2026-06-09 |
| CVE-2026-52919 | batman-adv: fix tp_meter counter underflow during shutdown | CRITICAL | 9.8 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-52922 | batman-adv: dat: handle forward allocation error | CRITICAL | 9.8 | 33%ile | Microsoft | 2026-06-09 |
| CVE-2026-52931 | batman-adv: tp_meter: avoid use of uninit sender vars | CRITICAL | 9.8 | 43%ile | Microsoft | 2026-06-09 |
| CVE-2026-52934 | batman-adv: tvlv: reject oversized TVLV packets | CRITICAL | 9.8 | 16%ile | Microsoft | 2026-06-09 |
| CVE-2026-52947 | net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove | CRITICAL | 9.8 | 1%ile | Microsoft | 2026-06-09 |
| CVE-2026-52989 | nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers | CRITICAL | 9.8 | 29%ile | Microsoft | 2026-06-09 |
| CVE-2026-52991 | sched/psi: fix race between file release and pressure write | CRITICAL | 9.8 | 4%ile | Microsoft | 2026-06-09 |
| CVE-2026-52993 | tipc: fix double-free in tipc_buf_append() | CRITICAL | 9.8 | 35%ile | Microsoft | 2026-06-09 |
| CVE-2026-53000 | netfilter: nat: use kfree_rcu to release ops | CRITICAL | 9.8 | 8%ile | Microsoft | 2026-06-09 |
| CVE-2026-53002 | netfilter: conntrack: remove sprintf usage | CRITICAL | 9.8 | 31%ile | Microsoft | 2026-06-09 |
| CVE-2026-53009 | ice: fix double-free of tx_buf skb | CRITICAL | 9.8 | 8%ile | Microsoft | 2026-06-09 |
| CVE-2026-53010 | ksmbd: fix use-after-free in smb2_open during durable reconnect | CRITICAL | 9.8 | 39%ile | Microsoft | 2026-06-09 |
| CVE-2026-53017 | f2fs: fix data loss caused by incorrect use of nat_entry flag | CRITICAL | 9.8 | 5%ile | Microsoft | 2026-06-09 |
| CVE-2026-53018 | f2fs: avoid reading already updated pages during GC | CRITICAL | 9.8 | 5%ile | Microsoft | 2026-06-09 |
| CVE-2026-53025 | greybus: raw: fix use-after-free on cdev close | CRITICAL | 9.8 | 6%ile | Microsoft | 2026-06-09 |
| CVE-2026-53036 | bpf, arm64: Fix off-by-one in check_imm signed range check | CRITICAL | 9.8 | 3%ile | Microsoft | 2026-06-09 |
| CVE-2026-53053 | iommu/amd: Fix clone_alias() to use the original device's devid | CRITICAL | 9.8 | 3%ile | Microsoft | 2026-06-09 |
| CVE-2026-53062 | dm cache policy smq: fix missing locks in invalidating cache blocks | CRITICAL | 9.8 | 1%ile | Microsoft | 2026-06-09 |
| CVE-2026-53075 | ppp: require CAP_NET_ADMIN in target netns for unattached ioctls | CRITICAL | 9.8 | 20%ile | Microsoft | 2026-06-09 |
| CVE-2026-53077 | net/rds: Restrict use of RDS/IB to the initial network namespace | CRITICAL | 9.8 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53086 | net: bcmgenet: fix racing timeout handler | CRITICAL | 9.8 | 23%ile | Microsoft | 2026-06-09 |
| CVE-2026-54906 | concurrent-ruby: ReadWriteLock allows wrong-thread write release and stray read-release counter corruption | CRITICAL | 9.8 | 5%ile | Microsoft | 2026-06-09 |
| CVE-2026-26142 | Nuance PowerScribe Remote Code Execution Vulnerability | CRITICAL | 9.8 | 80%ile | Microsoft | 2026-06-09 |
| CVE-2026-44815 | DHCP Client Service Remote Code Execution Vulnerability | CRITICAL | 9.8 | 66%ile | Microsoft | 2026-06-09 |
| CVE-2026-45657 | Windows Kernel Remote Code Execution Vulnerability | CRITICAL | 9.8 | 97%ile | Microsoft | 2026-06-09 |
| CVE-2026-47291 | HTTP.sys Remote Code Execution Vulnerability | CRITICAL | 9.8 | 98%ile | Microsoft | 2026-06-09 |
| CVE-2026-47643 | Azure Stack Edge Remote Code Execution Vulnerability | CRITICAL | 9.8 | 55%ile | Microsoft | 2026-06-09 |
| CVE-2026-54130 | M365 Copilot Information Disclosure Vulnerability | CRITICAL | 9.8 | 65%ile | Microsoft | 2026-06-09 |
| CVE-2026-53043 | ocfs2/dlm: validate qr_numregions in dlm_match_regions() | CRITICAL | 9.8 | 44%ile | Microsoft | 2026-06-09 |
| CVE-2026-53049 | gfs2: add some missing log locking | CRITICAL | 9.8 | 33%ile | Microsoft | 2026-06-09 |
| CVE-2026-53045 | memory: tegra124-emc: Fix dll_change check | CRITICAL | 9.8 | 44%ile | Microsoft | 2026-06-09 |
| CVE-2026-52913 | batman-adv: v: stop OGMv2 on disabled interface | CRITICAL | 9.8 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53052 | ASoC: qcom: qdsp6: topology: check widget type before accessing data | CRITICAL | 9.8 | 5%ile | Microsoft | 2026-06-09 |
| CVE-2026-53130 | fs/omfs: reject s_sys_blocksize smaller than OMFS_DIR_START | CRITICAL | 9.8 | 8%ile | Microsoft | 2026-06-09 |
| CVE-2026-52944 | ksmbd: fix FSCTL permission bypass by adding a permission check for FSCTL_SET_SPARSE | CRITICAL | 9.8 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53309 | ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison | CRITICAL | 9.8 | 34%ile | Microsoft | 2026-06-09 |
| CVE-2026-7531 | Use-after-free in PQC hybrid key-share handling | CRITICAL | 9.8 | 43%ile | Microsoft | 2026-06-09 |
| CVE-2026-42904 | Windows TCP/IP Elevation of Privilege Vulnerability | CRITICAL | 9.6 | 38%ile | Microsoft | 2026-06-09 |
| CVE-2026-47281 | Visual Studio Code Elevation of Privilege Vulnerability | CRITICAL | 9.6 | 58%ile | Microsoft | 2026-06-09 |
| CVE-2026-48582 | Microsoft Exchange Online Elevation of Privilege Vulnerability | CRITICAL | 9.6 | 53%ile | Microsoft | 2026-06-09 |
| CVE-2026-44631 | Apache HTTP Server: Heap Underflow in `ap_regname` via Signed Char Overflow | CRITICAL | 9.4 | 43%ile | Microsoft | 2026-06-09 |
| CVE-2025-10263 | ARM: CVE-2025-10263 Completion of affected memory accesses might not be guaranteed by completion of a TLBI [kernel] | CRITICAL | 9.3 | 46%ile | Microsoft | 2026-06-09 |
| CVE-2026-47646 | Dynamics 365 Customer Voice Spoofing Vulnerability | CRITICAL | 9.3 | 40%ile | Microsoft | 2026-06-09 |
| CVE-2026-12087 | Socket versions before 2.041 for Perl have an out-of-bounds heap read | CRITICAL | 9.1 | 47%ile | Microsoft | 2026-06-09 |
| CVE-2026-53176 | IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN | CRITICAL | 9.1 | 55%ile | Microsoft | 2026-06-09 |
| CVE-2026-45602 | Windows Dynamic Host Configuration Protocol (DHCP) Tampering Vulnerability | CRITICAL | 9.1 | 30%ile | Microsoft | 2026-06-09 |
| CVE-2026-48579 | Microsoft Exchange Online Information Disclosure Vulnerability | CRITICAL | 9.1 | 63%ile | Microsoft | 2026-06-09 |
| CVE-2026-6094 | Heap buffer overread in wc_PKCS7_DecodeEnvelopedData parsing crafted PKCS7 EnvelopedData | CRITICAL | 9.1 | 44%ile | Microsoft | 2026-06-09 |
| CVE-2026-45447 | Heap Use-After-Free in the PKCS7_verify() Function | HIGH | 8.8 | 90%ile | Microsoft | 2026-06-09 |
| CVE-2026-48715 | radvdump's Route Information Option Parser has a Stack Buffer Overflow | HIGH | 8.8 | 27%ile | Microsoft | 2026-06-09 |
| CVE-2026-56115 | Bootimus 0.1.70 Broken Access Control via JWTMiddleware Authorization Bypass | HIGH | 8.8 | 39%ile | Microsoft | 2026-06-09 |
| CVE-2026-6893 | Dracut: dracut: root code execution via dhcp options command injection | HIGH | 8.8 | 70%ile | Microsoft | 2026-06-09 |
| CVE-2026-9698 | DBI versions before 1.648 for Perl saved errors in a limited-sized buffer | HIGH | 8.8 | 40%ile | Microsoft | 2026-06-09 |
| CVE-2026-32193 | Azure Kubernetes Service (AKS) Remote Code Execution Vulnerability | HIGH | 8.8 | 27%ile | Microsoft | 2026-06-09 |
| CVE-2026-32208 | Microsoft Entra ID Spoofing Vulnerability | HIGH | 8.8 | 44%ile | Microsoft | 2026-06-09 |
| CVE-2026-40371 | Microsoft Dynamics 365 (on-premises) Elevation of Privilege Vulnerability | HIGH | 8.8 | 50%ile | Microsoft | 2026-06-09 |
| CVE-2026-42985 | Remote Desktop Client Remote Code Execution Vulnerability | HIGH | 8.8 | 70%ile | Microsoft | 2026-06-09 |
| CVE-2026-45484 | Microsoft SharePoint Elevation of Privilege Vulnerability | HIGH | 8.8 | 98%ile | Microsoft | 2026-06-09 |
| CVE-2026-45504 | Microsoft Exchange Server Elevation of Privilege Vulnerability | HIGH | 8.8 | 68%ile | Microsoft | 2026-06-09 |
| CVE-2026-45648 | Windows Active Directory Domain Services Remote Code Execution Vulnerability | HIGH | 8.8 | 66%ile | Microsoft | 2026-06-09 |
| CVE-2026-47289 | Remote Desktop Client Remote Code Execution Vulnerability | HIGH | 8.8 | 61%ile | Microsoft | 2026-06-09 |
| CVE-2026-47645 | Microsoft 365 Copilot's Business Chat Elevation of Privilege Vulnerability | HIGH | 8.8 | 55%ile | Microsoft | 2026-06-09 |
| CVE-2026-47653 | Remote Desktop Client Remote Code Execution Vulnerability | HIGH | 8.8 | 49%ile | Microsoft | 2026-06-09 |
| CVE-2026-10879 | DBI versions before 1.648 for Perl have a heap overflow when preparsing SQL statements with more than 9 binders | HIGH | 8.6 | 42%ile | Microsoft | 2026-06-09 |
| CVE-2026-29167 | Apache HTTP Server: mod_ldap per-dir use-after-free | HIGH | 8.6 | 53%ile | Microsoft | 2026-06-09 |
| CVE-2026-13325 | Virt-handler-rhel9: kubevirt: kubevirt: disabletls migration setting removes authentication, exposing unauthenticated vi | HIGH | 8.5 | — | Microsoft | 2026-06-09 |
| CVE-2026-41098 | Azure Stack Edge Spoofing Vulnerability | HIGH | 8.4 | 58%ile | Microsoft | 2026-06-09 |
| CVE-2026-44810 | Microsoft Cryptographic Services Elevation of Privilege Vulnerability | HIGH | 8.4 | 18%ile | Microsoft | 2026-06-09 |
| CVE-2026-45456 | Microsoft Outlook and Word Remote Code Execution Vulnerability | HIGH | 8.4 | 38%ile | Microsoft | 2026-06-09 |
| CVE-2026-45458 | Microsoft Outlook and Word Remote Code Execution Vulnerability | HIGH | 8.4 | 38%ile | Microsoft | 2026-06-09 |
| CVE-2026-45461 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 8.4 | 33%ile | Microsoft | 2026-06-09 |
| CVE-2026-45463 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 8.4 | 30%ile | Microsoft | 2026-06-09 |
| CVE-2026-45472 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 8.4 | 30%ile | Microsoft | 2026-06-09 |
| CVE-2026-45474 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 8.4 | 30%ile | Microsoft | 2026-06-09 |
| CVE-2026-45482 | Microsoft Visual Studio Code CoPilot Chat Security Feature Bypass Vulnerability | HIGH | 8.4 | 28%ile | Microsoft | 2026-06-09 |
| CVE-2026-45607 | Windows Hyper-V Remote Code Execution Vulnerability | HIGH | 8.4 | 29%ile | Microsoft | 2026-06-09 |
| CVE-2026-45641 | Windows Hyper-V Remote Code Execution Vulnerability | HIGH | 8.4 | 24%ile | Microsoft | 2026-06-09 |
| CVE-2026-47635 | Microsoft Outlook and Word Remote Code Execution Vulnerability | HIGH | 8.4 | 27%ile | Microsoft | 2026-06-09 |
| CVE-2026-52911 | ksmbd: scope conn->binding slowpath to bound sessions only | HIGH | 8.4 | 52%ile | Microsoft | 2026-06-09 |
| CVE-2026-50521 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | HIGH | 8.3 | 57%ile | Microsoft | 2026-06-09 |
| CVE-2026-49759 | Stack buffer overflow in SCTP error cause parsing in inet_drv allows remote VM crash | HIGH | 8.2 | 43%ile | Microsoft | 2026-06-09 |
| CVE-2026-57235 | Nokogiri: Possible Out-of-Bounds Read in `Nokogiri::XML::NodeSet#[]` | HIGH | 8.2 | 37%ile | Microsoft | 2026-06-09 |
| CVE-2026-57236 | Nokogiri: Possible Use-After-Free when `Nokogiri::XML::Document#encoding=` raises an exception | HIGH | 8.2 | 37%ile | Microsoft | 2026-06-09 |
| CVE-2026-44822 | Microsoft Excel Information Disclosure Vulnerability | HIGH | 8.2 | 44%ile | Microsoft | 2026-06-09 |
| CVE-2026-45476 | Microsoft Azure Network Adapter Elevation of Privilege Vulnerability | HIGH | 8.2 | 26%ile | Microsoft | 2026-06-09 |
| CVE-2026-47652 | Windows Hyper-V Remote Code Execution Vulnerability | HIGH | 8.2 | 28%ile | Microsoft | 2026-06-09 |
| CVE-2026-42055 | NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability | HIGH | 8.1 | 94%ile | Microsoft | 2026-06-09 |
| CVE-2026-46331 | net/sched: fix pedit partial COW leading to page cache corruption | HIGH | 8.1 | 51%ile | Microsoft | 2026-06-09 |
| CVE-2026-55200 | libssh2 - Out-of-Bounds Write via Unchecked packet_length in transport.c | HIGH | 8.1 | 90%ile | Microsoft | 2026-06-09 |
| CVE-2026-7383 | Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion | HIGH | 8.1 | 57%ile | Microsoft | 2026-06-09 |
| CVE-2026-42835 | Microsoft Teams for Android Information Disclosure Vulnerability | HIGH | 8.1 | 70%ile | Microsoft | 2026-06-09 |
| CVE-2026-42974 | Windows Performance Monitor Remote Code Execution Vulnerability | HIGH | 8.1 | 51%ile | Microsoft | 2026-06-09 |
| CVE-2026-42981 | Windows Performance Monitor Remote Code Execution Vulnerability | HIGH | 8.1 | 51%ile | Microsoft | 2026-06-09 |
| CVE-2026-42987 | Windows Deployment Services (WDS) Remote Code Execution | HIGH | 8.1 | 48%ile | Microsoft | 2026-06-09 |
| CVE-2026-45503 | Microsoft Exchange Server Information Disclosure Vulnerability | HIGH | 8.1 | 39%ile | Microsoft | 2026-06-09 |
| CVE-2026-45599 | Windows UPnP Device Host Remote Code Execution Vulnerability | HIGH | 8.1 | 44%ile | Microsoft | 2026-06-09 |
| CVE-2026-45635 | Windows UPnP Device Host Remote Code Execution Vulnerability | HIGH | 8.1 | 46%ile | Microsoft | 2026-06-09 |
| CVE-2026-47631 | Microsoft Exchange Server Spoofing Vulnerability | HIGH | 8.1 | 29%ile | Microsoft | 2026-06-09 |
| CVE-2026-56123 | socat 1.8.0.0 - 1.8.1.1 Heap Buffer Overflow via SOCKS5 Reply Parser | HIGH | 8.1 | 24%ile | Microsoft | 2026-06-09 |
| CVE-2026-11816 | Path Traversal in keras-team/keras | HIGH | 8.1 | 47%ile | Microsoft | 2026-06-09 |
| CVE-2026-45644 | Microsoft Live Share Canvas SDK Elevation of Privilege Vulnerability | HIGH | 8.0 | 46%ile | Microsoft | 2026-06-09 |
| CVE-2026-47298 | Microsoft SharePoint Server Remote Code Execution Vulnerability | HIGH | 8.0 | 52%ile | Microsoft | 2026-06-09 |
| CVE-2026-45588 | Secure Boot Security Feature Bypass Vulnerability | HIGH | 7.9 | 23%ile | Microsoft | 2026-06-09 |
| CVE-2026-45654 | Secure Boot Security Feature Bypass Vulnerability | HIGH | 7.9 | 24%ile | Microsoft | 2026-06-09 |
| CVE-2026-47656 | Windows Boot Manager Security Feature Bypass Vulnerability | HIGH | 7.9 | 23%ile | Microsoft | 2026-06-09 |
| CVE-2026-48568 | Secure Boot Security Feature Bypass Vulnerability | HIGH | 7.9 | 23%ile | Microsoft | 2026-06-09 |
| CVE-2026-48570 | Secure Boot Security Feature Bypass Vulnerability | HIGH | 7.9 | 23%ile | Microsoft | 2026-06-09 |
| CVE-2026-48573 | Secure Boot Security Feature Bypass Vulnerability | HIGH | 7.9 | 64%ile | Microsoft | 2026-06-09 |
| CVE-2026-48575 | Secure Boot Security Feature Bypass Vulnerability | HIGH | 7.9 | 23%ile | Microsoft | 2026-06-09 |
| CVE-2026-48576 | Secure Boot Security Feature Bypass Vulnerability | HIGH | 7.9 | 64%ile | Microsoft | 2026-06-09 |
| CVE-2026-48578 | Secure Boot Security Feature Bypass Vulnerability | HIGH | 7.9 | 19%ile | Microsoft | 2026-06-09 |
| CVE-2026-11332 | Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution | HIGH | 7.8 | 13%ile | Microsoft | 2026-06-09 |
| CVE-2026-11822 | SQLite before 3.53.2 Memory Corruption in FTS5 Extension | HIGH | 7.8 | 9%ile | Microsoft | 2026-06-09 |
| CVE-2026-11824 | SQLite before 3.53.2 Heap Buffer Overflow via FTS5 fts5ChunkIterate | HIGH | 7.8 | 8%ile | Microsoft | 2026-06-09 |
| CVE-2026-12505 | Cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall | HIGH | 7.8 | 5%ile | Microsoft | 2026-06-09 |
| CVE-2026-43958 | Rrdtool: rrdtool: stack buffer overflow allows local code execution or denial of service | HIGH | 7.8 | 7%ile | Microsoft | 2026-06-09 |
| CVE-2026-46243 | smb: client: reject userspace cifs.spnego descriptions | HIGH | 7.8 | 36%ile | Microsoft | 2026-06-09 |
| CVE-2026-46274 | io-wq: check that the predecessor is hashed in io_wq_remove_pending() | HIGH | 7.8 | 3%ile | Microsoft | 2026-06-09 |
| CVE-2026-46324 | netfilter: nf_tables: use list_del_rcu for netlink hooks | HIGH | 7.8 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-50256 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libxfo | HIGH | 7.8 | 5%ile | Microsoft | 2026-06-09 |
| CVE-2026-50258 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb key types due to unchecked shif | HIGH | 7.8 | 5%ile | Microsoft | 2026-06-09 |
| CVE-2026-50259 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb setmap request via mapwidths in | HIGH | 7.8 | 6%ile | Microsoft | 2026-06-09 |
| CVE-2026-50261 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in syncchangecounter() | HIGH | 7.8 | 4%ile | Microsoft | 2026-06-09 |
| CVE-2026-52908 | RDMA: During rereg_mr ensure that REREG_ACCESS is compatible | HIGH | 7.8 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-52909 | ip6_vti: set netns_immutable on the fallback device. | HIGH | 7.8 | 1%ile | Microsoft | 2026-06-09 |
| CVE-2026-52910 | bpf: Free reuseport cBPF prog after RCU grace period. | HIGH | 7.8 | 4%ile | Microsoft | 2026-06-09 |
| CVE-2026-52912 | netfilter: nf_queue: hold bridge skb->dev while queued | HIGH | 7.8 | 5%ile | Microsoft | 2026-06-09 |
| CVE-2026-52923 | ipc: limit next_id allocation to the valid ID range | HIGH | 7.8 | 12%ile | Microsoft | 2026-06-09 |
| CVE-2026-52926 | batman-adv: clear current gateway during teardown | HIGH | 7.8 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-52943 | net: skbuff: fix missing zerocopy reference in pskb_carve helpers | HIGH | 7.8 | 23%ile | Microsoft | 2026-06-09 |
| CVE-2026-52972 | crypto: af_alg - Cap AEAD AD length to 0x80000000 | HIGH | 7.8 | 4%ile | Microsoft | 2026-06-09 |
| CVE-2026-53005 | af_unix: Drop all SCM attributes for SOCKMAP. | HIGH | 7.8 | 3%ile | Microsoft | 2026-06-09 |
| CVE-2026-53068 | drm/komeda: fix integer overflow in AFBC framebuffer size check | HIGH | 7.8 | 6%ile | Microsoft | 2026-06-09 |
| CVE-2026-53097 | wifi: mt76: mt7996: fix use-after-free bugs in mt7996_mac_dump_work() | HIGH | 7.8 | 6%ile | Microsoft | 2026-06-09 |
| CVE-2026-53143 | drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 | HIGH | 7.8 | 4%ile | Microsoft | 2026-06-09 |
| CVE-2026-53198 | ksmbd: fix use-after-free of a deferred file_lock on double SMB2_CANCEL | HIGH | 7.8 | 39%ile | Microsoft | 2026-06-09 |
| CVE-2026-53246 | sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing | HIGH | 7.8 | 38%ile | Microsoft | 2026-06-09 |
| CVE-2026-53262 | l2tp: pppol2tp: hold reference to session in pppol2tp_ioctl() | HIGH | 7.8 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-55693 | Vim: Out-of-bounds Write in Spell File Word Count | HIGH | 7.8 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-55895 | Vim: Vimscript Code Injection in netrw NetrwLocalRmFile() via crafted filename | HIGH | 7.8 | 13%ile | Microsoft | 2026-06-09 |
| CVE-2026-57455 | Vim: Stack out-of-bounds write in `spell_soundfold_sofo()` via an over-length `soundfold()` argument | HIGH | 7.8 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-57456 | Vim: Arbitrary Code Execution via Python Omni-Completion Docstrings | HIGH | 7.8 | 4%ile | Microsoft | 2026-06-09 |
| CVE-2026-33828 | Windows Device Health Attestation (DHA) Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-06-09 |
| CVE-2026-40404 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | HIGH | 7.8 | 27%ile | Microsoft | 2026-06-09 |
| CVE-2026-40409 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | HIGH | 7.8 | 22%ile | Microsoft | 2026-06-09 |
| CVE-2026-41092 | Microsoft Kinect Elevation of Privilege Vulnerability | HIGH | 7.8 | 23%ile | Microsoft | 2026-06-09 |
| CVE-2026-42828 | Windows Projected File System Elevation of Privilege Vulnerability | HIGH | 7.8 | 26%ile | Microsoft | 2026-06-09 |
| CVE-2026-42829 | Windows Administrator Protection Secure Feature Bypass Vulnerability | HIGH | 7.8 | 22%ile | Microsoft | 2026-06-09 |
| CVE-2026-42837 | Windows Projected File System Elevation of Privilege Vulnerability | HIGH | 7.8 | 26%ile | Microsoft | 2026-06-09 |
| CVE-2026-42902 | Microsoft PowerToys Elevation of Privilege Vulnerability | HIGH | 7.8 | 22%ile | Microsoft | 2026-06-09 |
| CVE-2026-42905 | Windows DWM Core Library Elevation of Privilege Vulnerability | HIGH | 7.8 | 81%ile | Microsoft | 2026-06-09 |
| CVE-2026-42910 | Windows Hotpatch Monitoring Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 21%ile | Microsoft | 2026-06-09 |
| CVE-2026-42916 | NT OS Kernel Elevation of Privilege Vulnerability | HIGH | 7.8 | 26%ile | Microsoft | 2026-06-09 |
| CVE-2026-42977 | Windows Push Notifications Elevation of Privilege Vulnerability | HIGH | 7.8 | 9%ile | Microsoft | 2026-06-09 |
| CVE-2026-42978 | Windows Push Notifications Elevation of Privilege Vulnerability | HIGH | 7.8 | 16%ile | Microsoft | 2026-06-09 |
| CVE-2026-42979 | Windows Push Notifications Elevation of Privilege Vulnerability | HIGH | 7.8 | 9%ile | Microsoft | 2026-06-09 |
| CVE-2026-42980 | NT OS Kernel Elevation of Privilege Vulnerability | HIGH | 7.8 | 94%ile | Microsoft | 2026-06-09 |
| CVE-2026-42983 | Windows DWM Core Library Elevation of Privilege Vulnerability | HIGH | 7.8 | 21%ile | Microsoft | 2026-06-09 |
| CVE-2026-42986 | Microsoft Graphics Component Elevation of Privilege Vulnerability | HIGH | 7.8 | 81%ile | Microsoft | 2026-06-09 |
| CVE-2026-42989 | Winlogon Elevation of Privilege Vulnerability | HIGH | 7.8 | 83%ile | Microsoft | 2026-06-09 |
| CVE-2026-42991 | Windows Push Notifications Elevation of Privilege Vulnerability | HIGH | 7.8 | 8%ile | Microsoft | 2026-06-09 |
| CVE-2026-44802 | Windows DWM Core Library Elevation of Privilege Vulnerability | HIGH | 7.8 | 19%ile | Microsoft | 2026-06-09 |
| CVE-2026-44803 | Windows Graphics Component Remote Code Execution Vulnerability | HIGH | 7.8 | 44%ile | Microsoft | 2026-06-09 |
| CVE-2026-44804 | Windows DWM Core Library Elevation of Privilege Vulnerability | HIGH | 7.8 | 19%ile | Microsoft | 2026-06-09 |
| CVE-2026-44807 | Windows DWM Core Library Elevation of Privilege Vulnerability | HIGH | 7.8 | 19%ile | Microsoft | 2026-06-09 |
| CVE-2026-44808 | Windows DWM Core Library Elevation of Privilege Vulnerability | HIGH | 7.8 | 19%ile | Microsoft | 2026-06-09 |
| CVE-2026-44809 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 19%ile | Microsoft | 2026-06-09 |
| CVE-2026-44811 | Windows DWM Core Library Elevation of Privilege Vulnerability | HIGH | 7.8 | 19%ile | Microsoft | 2026-06-09 |
| CVE-2026-44812 | Windows Graphics Component Remote Code Execution Vulnerability | HIGH | 7.8 | 44%ile | Microsoft | 2026-06-09 |
| CVE-2026-44813 | Windows DWM Core Library Elevation of Privilege Vulnerability | HIGH | 7.8 | 19%ile | Microsoft | 2026-06-09 |
| CVE-2026-44817 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 31%ile | Microsoft | 2026-06-09 |
| CVE-2026-44819 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-06-09 |
| CVE-2026-44820 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 31%ile | Microsoft | 2026-06-09 |
| CVE-2026-44823 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 31%ile | Microsoft | 2026-06-09 |
| CVE-2026-44824 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-06-09 |
| CVE-2026-45457 | Microsoft Word Remote Code Execution Vulnerability | HIGH | 7.8 | 31%ile | Microsoft | 2026-06-09 |
| CVE-2026-45469 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 31%ile | Microsoft | 2026-06-09 |
| CVE-2026-45471 | Microsoft Word Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-06-09 |
| CVE-2026-45475 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2026-06-09 |
| CVE-2026-45486 | Microsoft Word Remote Code Execution Vulnerability | HIGH | 7.8 | 31%ile | Microsoft | 2026-06-09 |
| CVE-2026-45487 | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 8%ile | Microsoft | 2026-06-09 |
| CVE-2026-45490 | .NET SDK Elevation of Privilege Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2026-06-09 |
| CVE-2026-45586 | Windows Collaborative Translation Framework (CTFMON) Elevation of Privilege Vulnerability | HIGH | 7.8 | 90%ile | Microsoft | 2026-06-09 |
| CVE-2026-45592 | Windows Internet (wininet.dll) Elevation of Privilege Vulnerability | HIGH | 7.8 | 21%ile | Microsoft | 2026-06-09 |
| CVE-2026-45593 | Windows SDK Elevation of Privilege Vulnerability | HIGH | 7.8 | 21%ile | Microsoft | 2026-06-09 |
| CVE-2026-45600 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 21%ile | Microsoft | 2026-06-09 |
| CVE-2026-45605 | Windows Bluetooth Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 21%ile | Microsoft | 2026-06-09 |
| CVE-2026-45636 | Windows NTFS Remote Code Execution Vulnerability | HIGH | 7.8 | 35%ile | Microsoft | 2026-06-09 |
| CVE-2026-45637 | Microsoft DWM Core Library Elevation of Privilege Vulnerability | HIGH | 7.8 | 21%ile | Microsoft | 2026-06-09 |
| CVE-2026-45638 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | HIGH | 7.8 | 21%ile | Microsoft | 2026-06-09 |
| CVE-2026-45643 | Microsoft Word Remote Code Execution Vulnerability | HIGH | 7.8 | 31%ile | Microsoft | 2026-06-09 |
| CVE-2026-45645 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 7.8 | 31%ile | Microsoft | 2026-06-09 |
| CVE-2026-45656 | UEFI Secure Boot Security Feature Bypass Vulnerability | HIGH | 7.8 | 25%ile | Microsoft | 2026-06-09 |
| CVE-2026-45658 | Windows BitLocker Security Feature Bypass Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2026-06-09 |
| CVE-2026-47292 | Visual Studio Code MSSQL Extension Remote Code Execution Vulnerability | HIGH | 7.8 | 38%ile | Microsoft | 2026-06-09 |
| CVE-2026-48565 | Windows Narrator Braille Elevation of Privilege Vulnerability | HIGH | 7.8 | 38%ile | Microsoft | 2026-06-09 |
| CVE-2026-48574 | Windows Media Remote Code Execution Vulnerability | HIGH | 7.8 | 39%ile | Microsoft | 2026-06-09 |
| CVE-2026-48583 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.8 | 19%ile | Microsoft | 2026-06-09 |
| CVE-2026-49161 | Microsoft PC Manager Security Feature Bypass Vulnerability | HIGH | 7.8 | 15%ile | Microsoft | 2026-06-09 |
| CVE-2026-50511 | Microsoft PC Manager Elevation of Privilege Vulnerability | HIGH | 7.8 | 26%ile | Microsoft | 2026-06-09 |
| CVE-2026-50512 | Microsoft PC Manager Elevation of Privilege Vulnerability | HIGH | 7.8 | 17%ile | Microsoft | 2026-06-09 |
| CVE-2026-50656 | Microsoft Defender Elevation of Privilege Vulnerability | HIGH | 7.8 | 96%ile | Microsoft | 2026-06-09 |
| CVE-2026-8863 | UEFI Secure Boot Security Feature Bypass Vulnerability | HIGH | 7.8 | 1%ile | Microsoft | 2026-06-09 |
| CVE-2026-46301 | spi: topcliff-pch: fix use-after-free on unbind | HIGH | 7.8 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53159 | misc: fastrpc: fix DMA address corruption due to find_vma misuse | HIGH | 7.8 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53194 | USB: serial: kl5kusb105: fix bulk-out buffer overflow | HIGH | 7.8 | 4%ile | Microsoft | 2026-06-09 |
| CVE-2026-53039 | ocfs2: validate group add input before caching | HIGH | 7.8 | 5%ile | Microsoft | 2026-06-09 |
| CVE-2026-53247 | net: ethernet: mtk_eth_soc: Fix use-after-free in metadata dst teardown | HIGH | 7.8 | 53%ile | Microsoft | 2026-06-09 |
| CVE-2026-53196 | USB: serial: io_ti: fix heap overflow in get_manuf_info() | HIGH | 7.8 | 19%ile | Microsoft | 2026-06-09 |
| CVE-2026-53215 | net: mvpp2: refill RX buffers before XDP or skb use | HIGH | 7.8 | 43%ile | Microsoft | 2026-06-09 |
| CVE-2026-53160 | misc: fastrpc: fix use-after-free race in fastrpc_map_create | HIGH | 7.8 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-52935 | xfrm: espintcp: do not reuse an in-progress partial send | HIGH | 7.8 | 1%ile | Microsoft | 2026-06-09 |
| CVE-2026-32174 | Azure Bot Service Elevation of Privilege Vulnerability | HIGH | 7.7 | 56%ile | Microsoft | 2026-06-09 |
| CVE-2026-45497 | Microsoft M365 Copilot Remote Code Execution Vulnerability | HIGH | 7.7 | 39%ile | Microsoft | 2026-06-09 |
| CVE-2026-11625 | Bytes::Random::Secure versions through 0.29 for Perl share internal state across forked processes | HIGH | 7.5 | 43%ile | Microsoft | 2026-06-09 |
| CVE-2026-14164 | Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack() | HIGH | 7.5 | 56%ile | Microsoft | 2026-06-09 |
| CVE-2026-27145 | Inefficient candidate hostname parsing in crypto/x509 | HIGH | 7.5 | 48%ile | Microsoft | 2026-06-09 |
| CVE-2026-34180 | Heap Buffer Over-read in ASN.1 Content Parsing | HIGH | 7.5 | 64%ile | Microsoft | 2026-06-09 |
| CVE-2026-34183 | Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler | HIGH | 7.5 | 64%ile | Microsoft | 2026-06-09 |
| CVE-2026-34355 | Apache HTTP Server: mod_proxy_html buffer overflow | HIGH | 7.5 | 67%ile | Microsoft | 2026-06-09 |
| CVE-2026-34356 | Apache HTTP Server: ProxyPassReverseCookieMap buffer overflow | HIGH | 7.5 | 54%ile | Microsoft | 2026-06-09 |
| CVE-2026-42504 | Quadratic complexity in WordDecoder.DecodeHeader in mime | HIGH | 7.5 | 47%ile | Microsoft | 2026-06-09 |
| CVE-2026-42535 | Apache HTTP Server: mod_dav_fs protected directory access | HIGH | 7.5 | 45%ile | Microsoft | 2026-06-09 |
| CVE-2026-42536 | Apache HTTP Server: mod_xml2enc heap overflow | HIGH | 7.5 | 64%ile | Microsoft | 2026-06-09 |
| CVE-2026-45445 | AES-OCB IV Ignored on EVP_Cipher() Path | HIGH | 7.5 | 53%ile | Microsoft | 2026-06-09 |
| CVE-2026-49975 | Apache HTTP Server: mod_http2 denial of service | HIGH | 7.5 | 98%ile | Microsoft | 2026-06-09 |
| CVE-2026-50031 | ipmi-oem in FreeIPMI before 1.6.18 has exploitable buffer overflows on response messages. The Intelligent Platform Manag | HIGH | 7.5 | 43%ile | Microsoft | 2026-06-09 |
| CVE-2026-52955 | libceph: Fix potential out-of-bounds access in crush_decode() | HIGH | 7.5 | 32%ile | Microsoft | 2026-06-09 |
| CVE-2026-52956 | libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() | HIGH | 7.5 | 53%ile | Microsoft | 2026-06-09 |
| CVE-2026-52957 | libceph: Fix potential null-ptr-deref in decode_choose_args() | HIGH | 7.5 | 44%ile | Microsoft | 2026-06-09 |
| CVE-2026-52986 | netfilter: nf_conntrack_sip: don't use simple_strtoul | HIGH | 7.5 | 50%ile | Microsoft | 2026-06-09 |
| CVE-2026-53284 | btrfs: only release the dirty pages io tree after successful writes | HIGH | 7.5 | 41%ile | Microsoft | 2026-06-09 |
| CVE-2026-55203 | HAProxy - Integer Overflow in FCGI Demux Record Length Field | HIGH | 7.5 | 27%ile | Microsoft | 2026-06-09 |
| CVE-2026-55204 | HAProxy - NULL Pointer Dereference in hpack_dht_insert Function | HIGH | 7.5 | 42%ile | Microsoft | 2026-06-09 |
| CVE-2026-57434 | Nokogiri: Null Pointer Dereference calling methods on uninitialized wrapper classes | HIGH | 7.5 | 40%ile | Microsoft | 2026-06-09 |
| CVE-2026-57435 | Nokogiri: Possible Use-After-Free when setting an attribute value via `Nokogiri::XML::Attr#value=` or `#content=` | HIGH | 7.5 | 40%ile | Microsoft | 2026-06-09 |
| CVE-2026-57585 | MessagePack: Out-of-bounds read/crash on Unpacker reuse after caught error | HIGH | 7.5 | 42%ile | Microsoft | 2026-06-09 |
| CVE-2026-58016 | Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml" | HIGH | 7.5 | 47%ile | Microsoft | 2026-06-09 |
| CVE-2026-8829 | HTML::Entities versions before 3.84 for Perl read freed heap memory in _decode_entities | HIGH | 7.5 | 35%ile | Microsoft | 2026-06-09 |
| CVE-2026-9076 | Out-of-Bounds Read in CMS Password-Based Decryption | HIGH | 7.5 | 53%ile | Microsoft | 2026-06-09 |
| CVE-2026-9675 | undici WebSocket client vulnerable to denial of service via cumulative fragment bypass | HIGH | 7.5 | 37%ile | Microsoft | 2026-06-09 |
| CVE-2026-42764 | NULL Pointer Dereference in QUIC Server Initial Packet Handling | HIGH | 7.5 | 67%ile | Microsoft | 2026-06-09 |
| CVE-2026-40376 | Visual Studio Code Elevation of Privilege Vulnerability | HIGH | 7.5 | 52%ile | Microsoft | 2026-06-09 |
| CVE-2026-42908 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability | HIGH | 7.5 | 59%ile | Microsoft | 2026-06-09 |
| CVE-2026-42909 | Remote Desktop Client Remote Code Execution Vulnerability | HIGH | 7.5 | 34%ile | Microsoft | 2026-06-09 |
| CVE-2026-42913 | Remote Desktop Client Remote Code Execution Vulnerability | HIGH | 7.5 | 41%ile | Microsoft | 2026-06-09 |
| CVE-2026-42992 | Remote Desktop Client Remote Code Execution Vulnerability | HIGH | 7.5 | 40%ile | Microsoft | 2026-06-09 |
| CVE-2026-42993 | Remote Desktop Client Remote Code Execution Vulnerability | HIGH | 7.5 | 38%ile | Microsoft | 2026-06-09 |
| CVE-2026-44799 | Remote Desktop Client Remote Code Execution Vulnerability | HIGH | 7.5 | 40%ile | Microsoft | 2026-06-09 |
| CVE-2026-44801 | Remote Desktop Client Remote Code Execution Vulnerability | HIGH | 7.5 | 40%ile | Microsoft | 2026-06-09 |
| CVE-2026-45583 | Microsoft Exchange Server Remote Code Execution Vulnerability | HIGH | 7.5 | 44%ile | Microsoft | 2026-06-09 |
| CVE-2026-45591 | ASP.NET Core Denial of Service Vulnerability | HIGH | 7.5 | 85%ile | Microsoft | 2026-06-09 |
| CVE-2026-45639 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability | HIGH | 7.5 | 59%ile | Microsoft | 2026-06-09 |
| CVE-2026-47633 | Microsoft Cost Management Information Disclosure Vulnerability | HIGH | 7.5 | 64%ile | Microsoft | 2026-06-09 |
| CVE-2026-47654 | Remote Desktop Client Remote Code Execution Vulnerability | HIGH | 7.5 | 46%ile | Microsoft | 2026-06-09 |
| CVE-2026-48563 | Remote Desktop Client Remote Code Execution Vulnerability | HIGH | 7.5 | 46%ile | Microsoft | 2026-06-09 |
| CVE-2026-49160 | HTTP.sys Denial of Service Vulnerability | HIGH | 7.5 | 99%ile | Microsoft | 2026-06-09 |
| CVE-2026-42765 | NULL Dereference in Certificate Verification with OCSP Checking | HIGH | 7.5 | 43%ile | Microsoft | 2026-06-09 |
| CVE-2026-46669 | `openvm-pairing` pairing check missing proper subfield check on scaling factor | HIGH | 7.5 | 13%ile | Microsoft | 2026-06-09 |
| CVE-2026-48779 | ws: Memory exhaustion DoS from tiny fragments and data chunks | HIGH | 7.5 | 73%ile | Microsoft | 2026-06-09 |
| CVE-2026-7532 | iPAddress name constraints not enforced when WOLFSSL_IP_ALT_NAME is undefined | HIGH | 7.5 | 21%ile | Microsoft | 2026-06-09 |
| CVE-2026-55960 | Un-negotiated Raw Public Key (RFC 7250) accepted in place of X.509, bypassing chain validation | HIGH | 7.5 | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-55961 | wolfSSL_PKCS7_verify() reports success for degenerate (certs-only) PKCS#7 with no signer | HIGH | 7.5 | 4%ile | Microsoft | 2026-06-09 |
| CVE-2026-6331 | HMAC zero-length tag forgery in EVP_DigestVerifyFinal | HIGH | 7.5 | 9%ile | Microsoft | 2026-06-09 |
| CVE-2026-6731 | X.509 name constraint bypass via Subject CN treated as a DNS name | HIGH | 7.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-55958 | Renesas TSIP TLS 1.3 transcript buffer out-of-bounds write in tsip_StoreMessage | HIGH | 7.5 | 39%ile | Microsoft | 2026-06-09 |
| CVE-2026-6325 | Out-of-bounds write in SetSuitesHashSigAlgo on oversized signature algorithms list | HIGH | 7.5 | 22%ile | Microsoft | 2026-06-09 |
| CVE-2026-10512 | X25519 x86_64 assembly final reduction leaves non-canonical field element | HIGH | 7.5 | 39%ile | Microsoft | 2026-06-09 |
| CVE-2026-8720 | HMAC-BLAKE2 final discards message when key length exceeds block size | HIGH | 7.5 | 5%ile | Microsoft | 2026-06-09 |
| CVE-2026-10097 | ML-KEM-1024 x64 AVX2 incomplete cipher text comparison enables IND-CCA2 break and static private-key recovery | HIGH | 7.5 | 18%ile | Microsoft | 2026-06-09 |
| CVE-2026-11310 | X.509 trust-chain bypass in wolfSSL_X509_verify_cert() via untrusted intermediate anchoring | HIGH | 7.5 | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-37460 | Missing input validation in the rfapiRibBi2Ri() function (rfapi_rib.c) of FRRouting (FRR) stable/10.0 to stable/10.6 all | HIGH | 7.5 | 27%ile | Microsoft | 2026-06-09 |
| CVE-2026-12143 | form-data does not escape CR/LF/quote in multipart field names and filenames (CRLF injection) | HIGH | 7.5 | 52%ile | Microsoft | 2026-06-09 |
| CVE-2026-57231 | Podman: Malformed Image can trick podman run into leaking host environment variables into the container | HIGH | 7.5 | 38%ile | Microsoft | 2026-06-09 |
| CVE-2026-11703 | Missing SNI/ALPN binding on stateful (session-ID) TLS session resumption | HIGH | 7.5 | 30%ile | Microsoft | 2026-06-09 |
| CVE-2026-55967 | AES-GCM streaming APIs do not reject >64 GiB cumulative single messages, enabling counter wrap and keystream reuse | HIGH | 7.5 | 8%ile | Microsoft | 2026-06-09 |
| CVE-2026-11999 | X.509 trust-chain bypass via path-depth exhaustion in wolfSSL_X509_verify_cert() | HIGH | 7.5 | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-7511 | PKCS7_verify signer confusion allows forged signatures to be accepted | HIGH | 7.5 | 17%ile | Microsoft | 2026-06-09 |
| CVE-2026-12340 | Out-of-bounds heap read in SM2/SM3 certificate Subject Key Identifier computation | HIGH | 7.5 | 22%ile | Microsoft | 2026-06-09 |
| CVE-2026-3195 | Qemu-kvm: virtio-snd: heap buffer overflow in virtio_snd_pcm_in_cb (incomplete fix for cve-2024-7730) | HIGH | 7.4 | 6%ile | Microsoft | 2026-06-09 |
| CVE-2026-50292 | In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properti | HIGH | 7.4 | 24%ile | Microsoft | 2026-06-09 |
| CVE-2026-9697 | undici vulnerable to TLS certificate validation bypass via dropped requestTls in SOCKS5 ProxyAgent | HIGH | 7.4 | 40%ile | Microsoft | 2026-06-09 |
| CVE-2026-34181 | PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys | HIGH | 7.4 | 32%ile | Microsoft | 2026-06-09 |
| CVE-2026-11463 | USCiLab Cereal Shared Pointer type confusion | HIGH | 7.3 | 24%ile | Microsoft | 2026-06-09 |
| CVE-2026-12912 | Libtiff: libtiff: heap-based buffer overflow via crafted pixarlog-compressed tiff image | HIGH | 7.3 | 38%ile | Microsoft | 2026-06-09 |
| CVE-2026-44185 | Apache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP `send_request` | HIGH | 7.3 | 55%ile | Microsoft | 2026-06-09 |
| CVE-2026-48913 | Apache HTTP Server: mod_http2 memory corruption when file handles exhausted | HIGH | 7.3 | 41%ile | Microsoft | 2026-06-09 |
| CVE-2026-58014 | Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" | HIGH | 7.3 | 46%ile | Microsoft | 2026-06-09 |
| CVE-2026-45481 | Microsoft SharePoint Server Spoofing Vulnerability | HIGH | 7.3 | 53%ile | Microsoft | 2026-06-09 |
| CVE-2026-47634 | Microsoft SharePoint Server Spoofing Vulnerability | HIGH | 7.3 | 47%ile | Microsoft | 2026-06-09 |
| CVE-2026-46320 | tap: free page on error paths in tap_get_user_xdp() | HIGH | 7.1 | 17%ile | Microsoft | 2026-06-09 |
| CVE-2026-46330 | Revert "net/smc: Introduce TCP ULP support" | HIGH | 7.1 | 4%ile | Microsoft | 2026-06-09 |
| CVE-2026-49839 | jq --rawfile invalid-state reuse after String too long causes heap-buffer-overflow | HIGH | 7.1 | 6%ile | Microsoft | 2026-06-09 |
| CVE-2026-52917 | sctp: diag: reject stale associations in dump_one path | HIGH | 7.1 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-52918 | Bluetooth: serialize accept_q access | HIGH | 7.1 | 12%ile | Microsoft | 2026-06-09 |
| CVE-2026-52942 | netfilter: nf_log: validate MAC header was set before dumping it | HIGH | 7.1 | 3%ile | Microsoft | 2026-06-09 |
| CVE-2026-52953 | iommu/vt-d: Fix oops due to out of scope access | HIGH | 7.1 | 3%ile | Microsoft | 2026-06-09 |
| CVE-2026-52961 | ceph: fix BUG_ON in __ceph_build_xattrs_blob() due to stale blob size | HIGH | 7.1 | 8%ile | Microsoft | 2026-06-09 |
| CVE-2026-52969 | KVM: Reject wrapped offset in kvm_reset_dirty_gfn() | HIGH | 7.1 | 9%ile | Microsoft | 2026-06-09 |
| CVE-2026-53023 | fs/ntfs3: terminate the cached volume label after UTF-8 conversion | HIGH | 7.1 | 5%ile | Microsoft | 2026-06-09 |
| CVE-2026-53024 | greybus: raw: fix use-after-free if write is called after disconnect | HIGH | 7.1 | 6%ile | Microsoft | 2026-06-09 |
| CVE-2026-53027 | fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked() | HIGH | 7.1 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53063 | dm cache: fix write hang in passthrough mode | HIGH | 7.1 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53064 | dm cache: fix null-deref with concurrent writes in passthrough mode | HIGH | 7.1 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53091 | net: pull headers in qdisc_pkt_len_segs_init() | HIGH | 7.1 | 3%ile | Microsoft | 2026-06-09 |
| CVE-2026-53136 | drm/amd/display: Clamp VBIOS HDMI retimer register count to array size | HIGH | 7.1 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53137 | drm/amd/display: Clamp HDMI HDCP2 rx_id_list read to buffer size | HIGH | 7.1 | 4%ile | Microsoft | 2026-06-09 |
| CVE-2026-53178 | staging: rtl8723bs: rtw_mlme: add bounds checks before ie_length subtraction | HIGH | 7.1 | 35%ile | Microsoft | 2026-06-09 |
| CVE-2026-53179 | staging: rtl8723bs: fix buffer over-read in rtw_update_protection | HIGH | 7.1 | 6%ile | Microsoft | 2026-06-09 |
| CVE-2026-53186 | RDMA/srp: bound SRP_RSP sense copy by the received length | HIGH | 7.1 | 44%ile | Microsoft | 2026-06-09 |
| CVE-2026-53212 | netfilter: nft_tunnel: fix use-after-free on object destroy | HIGH | 7.1 | 9%ile | Microsoft | 2026-06-09 |
| CVE-2026-53230 | net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list | HIGH | 7.1 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53253 | Bluetooth: bnep: reject short frames before parsing | HIGH | 7.1 | 18%ile | Microsoft | 2026-06-09 |
| CVE-2026-53265 | dm cache policy smq: check allocation under invalidate lock | HIGH | 7.1 | 1%ile | Microsoft | 2026-06-09 |
| CVE-2026-53268 | netfilter: conntrack_irc: fix possible out-of-bounds read | HIGH | 7.1 | 44%ile | Microsoft | 2026-06-09 |
| CVE-2026-53270 | ipvs: clear the svc scheduler ptr early on edit | HIGH | 7.1 | 5%ile | Microsoft | 2026-06-09 |
| CVE-2026-53689 | CVE-2026-53689 | HIGH | 7.1 | 12%ile | Microsoft | 2026-06-09 |
| CVE-2026-54369 | acl < 2.4.0 Symlink Traversal Privilege Escalation via libacl Functions | HIGH | 7.1 | 4%ile | Microsoft | 2026-06-09 |
| CVE-2026-54371 | attr < 2.6.0 Symlink Traversal Privilege Escalation via getfattr/setfattr | HIGH | 7.1 | 4%ile | Microsoft | 2026-06-09 |
| CVE-2026-57918 | libnfs through 6.0.2 before 935b8db has an xid integer underflow in READ_IOVEC in rpc_read_from_socket in lib/socket.c d | HIGH | 7.1 | 23%ile | Microsoft | 2026-06-09 |
| CVE-2026-45649 | Office for Android Spoofing Vulnerability | HIGH | 7.1 | 37%ile | Microsoft | 2026-06-09 |
| CVE-2026-47288 | Windows Kerberos Key Distribution Center (KDC) Remote Code Execution | HIGH | 7.1 | 43%ile | Microsoft | 2026-06-09 |
| CVE-2026-48569 | Visual Studio Code Security Feature Bypass Vulnerability | HIGH | 7.1 | 30%ile | Microsoft | 2026-06-09 |
| CVE-2026-46285 | mtd: docg3: fix use-after-free in docg3_release() | HIGH | 7.1 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-52996 | ksmbd: fix durable fd leak on ClientGUID mismatch in durable v2 open | HIGH | 7.1 | 6%ile | Microsoft | 2026-06-09 |
| CVE-2026-53041 | ocfs2: fix listxattr handling when the buffer is full | HIGH | 7.1 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53217 | net: mvpp2: sync RX data at the hardware packet offset | HIGH | 7.1 | 32%ile | Microsoft | 2026-06-09 |
| CVE-2026-46293 | clk: microchip: mpfs-ccc: fix out of bounds access during output registration | HIGH | 7.1 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53195 | USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() | HIGH | 7.1 | 4%ile | Microsoft | 2026-06-09 |
| CVE-2026-53098 | wifi: mt76: mt7915: fix use-after-free bugs in mt7915_mac_dump_work() | HIGH | 7.1 | 6%ile | Microsoft | 2026-06-09 |
| CVE-2026-52992 | fs/adfs: validate nzones in adfs_validate_bblk() | HIGH | 7.1 | 7%ile | Microsoft | 2026-06-09 |
| CVE-2026-53016 | crypto: ccp - copy IV using skcipher ivsize | HIGH | 7.1 | 3%ile | Microsoft | 2026-06-09 |
| CVE-2026-53306 | tty: hvc_iucv: fix off-by-one in number of supported devices | HIGH | 7.1 | 5%ile | Microsoft | 2026-06-09 |
| CVE-2026-53303 | f2fs: protect extension_list reading with sb_lock in f2fs_sbi_show() | HIGH | 7.1 | 6%ile | Microsoft | 2026-06-09 |
| CVE-2026-46244 | netfilter: nft_inner: Fix IPv6 inner_thoff desync | HIGH | 7.0 | 36%ile | Microsoft | 2026-06-09 |
| CVE-2026-46275 | Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths | HIGH | 7.0 | 13%ile | Microsoft | 2026-06-09 |
| CVE-2026-46306 | flow_dissector: do not dissect PPPoE PFC frames | HIGH | 7.0 | 39%ile | Microsoft | 2026-06-09 |
| CVE-2026-46319 | net/sched: act_ct: Only release RCU read lock after ct_ft | HIGH | 7.0 | 1%ile | Microsoft | 2026-06-09 |
| CVE-2026-52920 | netfilter: xt_policy: fix strict mode inbound policy matching | HIGH | 7.0 | 23%ile | Microsoft | 2026-06-09 |
| CVE-2026-52924 | sctp: purge outqueue on stale COOKIE-ECHO handling | HIGH | 7.0 | 52%ile | Microsoft | 2026-06-09 |
| CVE-2026-52933 | io_uring/poll: fix signed comparison in io_poll_get_ownership() | HIGH | 7.0 | 4%ile | Microsoft | 2026-06-09 |
| CVE-2026-52998 | netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check | HIGH | 7.0 | 48%ile | Microsoft | 2026-06-09 |
| CVE-2026-53006 | ipv6: fix possible UAF in icmpv6_rcv() | HIGH | 7.0 | 34%ile | Microsoft | 2026-06-09 |
| CVE-2026-53011 | net/sched: taprio: fix use-after-free in advance_sched() on schedule switch | HIGH | 7.0 | 3%ile | Microsoft | 2026-06-09 |
| CVE-2026-53034 | bpf, sockmap: Fix af_unix null-ptr-deref in proto update | HIGH | 7.0 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53059 | dm log: fix out-of-bounds write due to region_count overflow | HIGH | 7.0 | 3%ile | Microsoft | 2026-06-09 |
| CVE-2026-53071 | Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp | HIGH | 7.0 | 37%ile | Microsoft | 2026-06-09 |
| CVE-2026-53072 | Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER | HIGH | 7.0 | 9%ile | Microsoft | 2026-06-09 |
| CVE-2026-53073 | Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error | HIGH | 7.0 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53078 | bpf: Fix same-register dst/src OOB read and pointer leak in sock_ops | HIGH | 7.0 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53131 | netfilter: require Ethernet MAC header before using eth_hdr() | HIGH | 7.0 | 38%ile | Microsoft | 2026-06-09 |
| CVE-2026-53132 | vsock/virtio: fix potential unbounded skb queue | HIGH | 7.0 | 3%ile | Microsoft | 2026-06-09 |
| CVE-2026-53133 | RDMA/umem: Fix truncation for block sizes >= 4G | HIGH | 7.0 | 3%ile | Microsoft | 2026-06-09 |
| CVE-2026-53148 | thunderbolt: Clamp XDomain response data copy to allocation size | HIGH | 7.0 | 3%ile | Microsoft | 2026-06-09 |
| CVE-2026-53150 | thunderbolt: Reject zero-length property entries in validator | HIGH | 7.0 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53167 | fuse: limit FUSE_NOTIFY_RETRIEVE to uptodate folios | HIGH | 7.0 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53168 | fuse: reject fuse_notify() pagecache ops on directories | HIGH | 7.0 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53182 | wifi: nl80211: reject oversized EMA RNR lists | HIGH | 7.0 | 3%ile | Microsoft | 2026-06-09 |
| CVE-2026-53192 | ALSA: timer: Fix UAF at snd_timer_user_params() | HIGH | 7.0 | 1%ile | Microsoft | 2026-06-09 |
| CVE-2026-53208 | Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig | HIGH | 7.0 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53209 | Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend | HIGH | 7.0 | 3%ile | Microsoft | 2026-06-09 |
| CVE-2026-53218 | netfilter: nft_exthdr: fix register tracking for F_PRESENT flag | HIGH | 7.0 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53228 | ipv6: sit: reload inner IPv6 header after GSO offloads | HIGH | 7.0 | 48%ile | Microsoft | 2026-06-09 |
| CVE-2026-53236 | tcp: restrict SO_ATTACH_FILTER to priv users | HIGH | 7.0 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53239 | xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() | HIGH | 7.0 | 1%ile | Microsoft | 2026-06-09 |
| CVE-2026-53242 | ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams | HIGH | 7.0 | 1%ile | Microsoft | 2026-06-09 |
| CVE-2026-53249 | ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options | HIGH | 7.0 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53254 | Bluetooth: RFCOMM: validate skb length in MCC handlers | HIGH | 7.0 | 20%ile | Microsoft | 2026-06-09 |
| CVE-2026-53264 | net/sched: act_api: use RCU with deferred freeing for action lifecycle | HIGH | 7.0 | 42%ile | Microsoft | 2026-06-09 |
| CVE-2026-53267 | netfilter: nft_ct: bail out on template ct in get eval | HIGH | 7.0 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53275 | ipv6: mcast: Fix use-after-free when processing MLD queries | HIGH | 7.0 | 18%ile | Microsoft | 2026-06-09 |
| CVE-2026-34335 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | HIGH | 7.0 | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-41108 | Windows DNS Client Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2026-06-09 |
| CVE-2026-42836 | Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-06-09 |
| CVE-2026-42911 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | HIGH | 7.0 | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-42912 | Windows Telephony Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-06-09 |
| CVE-2026-42984 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.0 | 16%ile | Microsoft | 2026-06-09 |
| CVE-2026-44818 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-06-09 |
| CVE-2026-45596 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | HIGH | 7.0 | 8%ile | Microsoft | 2026-06-09 |
| CVE-2026-45597 | Windows UI Automation Manager (uiamanager.dll) Elevation of Privilege Vulnerability | HIGH | 7.0 | 8%ile | Microsoft | 2026-06-09 |
| CVE-2026-45598 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | HIGH | 7.0 | 8%ile | Microsoft | 2026-06-09 |
| CVE-2026-45601 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | HIGH | 7.0 | 8%ile | Microsoft | 2026-06-09 |
| CVE-2026-45603 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | HIGH | 7.0 | 8%ile | Microsoft | 2026-06-09 |
| CVE-2026-45640 | Windows Bluetooth Port Driver Elevation of Privilege Vulnerability | HIGH | 7.0 | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-45653 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.0 | 16%ile | Microsoft | 2026-06-09 |
| CVE-2026-47293 | Microsoft Office Click-To-Run Elevation of Privilege Vulnerability | HIGH | 7.0 | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-47648 | Windows Storage Elevation of Privilege Vulnerability | HIGH | 7.0 | 12%ile | Microsoft | 2026-06-09 |
| CVE-2026-58050 | libssh2 - Integer Overflow in publickey Subsystem Attribute Allocation | HIGH | 7.0 | 39%ile | Microsoft | 2026-06-09 |
| CVE-2026-53161 | misc: fastrpc: fix use-after-free of fastrpc_user in workqueue context | HIGH | 7.0 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-56132 | In libexpat before 2.8.2, there is a heap-based buffer overflow in doProlog in xmlparse.c because scaffold backing array | MEDIUM | 6.9 | 3%ile | Microsoft | 2026-06-09 |
| CVE-2026-56403 | libexpat before 2.8.2 has an integer overflow in storeAtts. | MEDIUM | 6.9 | 6%ile | Microsoft | 2026-06-09 |
| CVE-2026-56404 | libexpat before 2.8.2 has an integer overflow in addBinding. | MEDIUM | 6.9 | 3%ile | Microsoft | 2026-06-09 |
| CVE-2026-56405 | libexpat before 2.8.2 has an integer overflow in getAttributeId. | MEDIUM | 6.9 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-56406 | libexpat before 2.8.2 has an integer overflow in XML_ParseBuffer because it lacked a check that was present in XML_Parse | MEDIUM | 6.9 | 7%ile | Microsoft | 2026-06-09 |
| CVE-2026-56407 | libexpat before 2.8.2 has an integer overflow in doProlog that is related to storeEntityValue and entity textLen. | MEDIUM | 6.9 | 7%ile | Microsoft | 2026-06-09 |
| CVE-2026-56410 | xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId. | MEDIUM | 6.9 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-56411 | xmlwf in libexpat before 2.8.2 has an integer overflow in endDoctypeDecl via NOTATION declarations. | MEDIUM | 6.9 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-13595 | Util-linux: util-linux: heap use-after-free in libblkid nested partition probing | MEDIUM | 6.8 | 4%ile | Microsoft | 2026-06-09 |
| CVE-2026-53266 | netfilter: bridge: make ebt_snat ARP rewrite writable | MEDIUM | 6.8 | 61%ile | Microsoft | 2026-06-09 |
| CVE-2026-45608 | Windows DHCP Client Information Disclosure Vulnerability | MEDIUM | 6.8 | 27%ile | Microsoft | 2026-06-09 |
| CVE-2026-50507 | Windows BitLocker Security Feature Bypass Vulnerability | MEDIUM | 6.8 | 92%ile | Microsoft | 2026-06-09 |
| CVE-2026-48914 | Qemu-kvm: heap buffer overflow in virtio-blk scsi request handling | MEDIUM | 6.7 | 5%ile | Microsoft | 2026-06-09 |
| CVE-2026-42014 | Gnutls: fix use-after-free in gnutls_pkcs11_token_set_pin | MEDIUM | 6.6 | 4%ile | Microsoft | 2026-06-09 |
| CVE-2026-46323 | net: gro: don't merge zcopy skbs | MEDIUM | 6.6 | 3%ile | Microsoft | 2026-06-09 |
| CVE-2026-50257 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in misyncdestroyfence() | MEDIUM | 6.6 | 4%ile | Microsoft | 2026-06-09 |
| CVE-2026-50260 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in freecounter() | MEDIUM | 6.6 | 4%ile | Microsoft | 2026-06-09 |
| CVE-2026-57438 | Nokogiri: Possible Use-After-Free in XInclude Processing | MEDIUM | 6.6 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2025-15661 | libssh2 - Heap Buffer Over-read via sftp_symlink() in sftp.c | MEDIUM | 6.5 | 51%ile | Microsoft | 2026-06-09 |
| CVE-2026-13208 | Kubevirt: virt-handler-rhel9: kubevirt: virt-handler notify server trusts vmi identity from unauthenticated grpc request | MEDIUM | 6.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-43951 | Apache HTTP Server: OOB Read in `merge_response_headers` can cause crash | MEDIUM | 6.5 | 46%ile | Microsoft | 2026-06-09 |
| CVE-2026-44186 | Apache HTTP Server: Loop in `proxy_ftp_handler` in mod_proxy_ftp | MEDIUM | 6.5 | 48%ile | Microsoft | 2026-06-09 |
| CVE-2026-46433 | lldpd: Heap OOB Read in VLAN Decapsulation memmove | MEDIUM | 6.5 | 13%ile | Microsoft | 2026-06-09 |
| CVE-2026-48855 | SFTP READLINK Leaks Absolute Backend Filesystem Path When Root Is Configured | MEDIUM | 6.5 | 23%ile | Microsoft | 2026-06-09 |
| CVE-2026-48856 | httpc leaks Authorization header to cross-origin redirect targets | MEDIUM | 6.5 | 27%ile | Microsoft | 2026-06-09 |
| CVE-2026-48858 | ftp client PASV response IP not validated against control peer, enabling SSRF and FTP bounce attacks | MEDIUM | 6.5 | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-48860 | Distribution-over-TLS LAN allowlist silently bypassed due to sockname/peername confusion in inet_tls_dist | MEDIUM | 6.5 | 11%ile | Microsoft | 2026-06-09 |
| CVE-2026-53111 | bpf: test_run: Fix the null pointer dereference issue in bpf_lwt_xmit_push_encap | MEDIUM | 6.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53146 | thunderbolt: Limit XDomain response copy to actual frame size | MEDIUM | 6.5 | 18%ile | Microsoft | 2026-06-09 |
| CVE-2026-56116 | dhcpcd Memory Leak DoS via IPv6 Router Advertisement Handling | MEDIUM | 6.5 | 21%ile | Microsoft | 2026-06-09 |
| CVE-2026-56409 | xmlwf in libexpat before 2.8.2 has an integer overflow for the output filename when -d outputDir is used. | MEDIUM | 6.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-57453 | Vim: PowerShell Command Injection via Unescaped Filename in zip.vim Extraction | MEDIUM | 6.5 | 11%ile | Microsoft | 2026-06-09 |
| CVE-2026-58010 | Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() | MEDIUM | 6.5 | 42%ile | Microsoft | 2026-06-09 |
| CVE-2026-58011 | Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime | MEDIUM | 6.5 | 41%ile | Microsoft | 2026-06-09 |
| CVE-2026-58012 | Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char() | MEDIUM | 6.5 | 42%ile | Microsoft | 2026-06-09 |
| CVE-2026-58013 | Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend" | MEDIUM | 6.5 | 43%ile | Microsoft | 2026-06-09 |
| CVE-2026-58051 | libssh2 - Free of Uninitialized Pointer in publickey List Cleanup | MEDIUM | 6.5 | 20%ile | Microsoft | 2026-06-09 |
| CVE-2026-58058 | Nmap - Integer Underflow in IPv6 Extension Header Parsing | MEDIUM | 6.5 | 74%ile | Microsoft | 2026-06-09 |
| CVE-2026-9539 | libslirp TCP URG OOB Read Information Leak | MEDIUM | 6.5 | 13%ile | Microsoft | 2026-06-09 |
| CVE-2026-42824 | M365 Copilot Information Disclosure Vulnerability | MEDIUM | 6.5 | 95%ile | Microsoft | 2026-06-09 |
| CVE-2026-42895 | Microsoft Copilot Tampering Vulnerability | MEDIUM | 6.5 | 53%ile | Microsoft | 2026-06-09 |
| CVE-2026-42903 | Windows Kerberos Denial of Service Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-06-09 |
| CVE-2026-42907 | Windows Shell Information Disclosure Vulnerability | MEDIUM | 6.5 | 57%ile | Microsoft | 2026-06-09 |
| CVE-2026-45454 | Microsoft SharePoint Remote Code Execution Vulnerability | MEDIUM | 6.5 | 76%ile | Microsoft | 2026-06-09 |
| CVE-2026-45501 | Microsoft Exchange Server Spoofing Vulnerability | MEDIUM | 6.5 | 34%ile | Microsoft | 2026-06-09 |
| CVE-2026-47284 | Visual Studio Code Information Disclosure Vulnerability | MEDIUM | 6.5 | 63%ile | Microsoft | 2026-06-09 |
| CVE-2026-47287 | Visual Studio Code Tampering Vulnerability | MEDIUM | 6.5 | 56%ile | Microsoft | 2026-06-09 |
| CVE-2026-47644 | Copilot Chat (Microsoft Edge) Information Disclosure Vulnerability | MEDIUM | 6.5 | 54%ile | Microsoft | 2026-06-09 |
| CVE-2026-47655 | Microsoft Graph Information Disclosure Vulnerability | MEDIUM | 6.5 | 55%ile | Microsoft | 2026-06-09 |
| CVE-2026-50508 | Windows NTLM Spoofing Vulnerability | MEDIUM | 6.5 | 96%ile | Microsoft | 2026-06-09 |
| CVE-2026-50519 | Microsoft Visual Studio Code CoPilot Chat Security Feature Bypass Vulnerability | MEDIUM | 6.5 | 60%ile | Microsoft | 2026-06-09 |
| CVE-2026-6291 | Bleichenbacher padding oracle in PKCS#7 KTRI RSA PKCS#1 v1.5 decryption | MEDIUM | 6.5 | 16%ile | Microsoft | 2026-06-09 |
| CVE-2026-6329 | PKCS#12 MAC verification uses attacker-controlled comparison length | MEDIUM | 6.5 | 12%ile | Microsoft | 2026-06-09 |
| CVE-2026-6330 | ML-KEM ARM64 NEON ciphertext comparison only compares half of the input | MEDIUM | 6.5 | 6%ile | Microsoft | 2026-06-09 |
| CVE-2026-55962 | TLS 1.3 post-handshake authentication: server accepts Finished without client Certificate/CertificateVerify | MEDIUM | 6.5 | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-6091 | Partial-chain verification accepts untrusted intermediate as trust anchor | MEDIUM | 6.5 | 9%ile | Microsoft | 2026-06-09 |
| CVE-2026-13318 | Virt-api-rhel9: kubevirt: kubevirt: ssrf in virt-api port-forward via unvalidated guest-agent-reported ip | MEDIUM | 6.4 | 15%ile | Microsoft | 2026-06-09 |
| CVE-2026-52968 | KVM: s390: pci: fix GAIT table indexing due to double-scaling pointer arithmetic | MEDIUM | 6.4 | 7%ile | Microsoft | 2026-06-09 |
| CVE-2026-53074 | bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb | MEDIUM | 6.4 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53094 | bpf: Fix stale offload->prog pointer after constant blinding | MEDIUM | 6.4 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-13201 | Kubevirt: virt-handler-rhel9: kubevirt: safepath symlink following in virt-handler enables notify socket hijacking and n | MEDIUM | 6.3 | 24%ile | Microsoft | 2026-06-09 |
| CVE-2026-13757 | P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing | MEDIUM | 6.2 | 4%ile | Microsoft | 2026-06-09 |
| CVE-2026-45491 | .NET Tampering Vulnerability | MEDIUM | 6.2 | 33%ile | Microsoft | 2026-06-09 |
| CVE-2026-29170 | Apache HTTP Server: mod_proxy_ftp XSS | MEDIUM | 6.1 | 44%ile | Microsoft | 2026-06-09 |
| CVE-2026-44889 | WebOb: Location header normalization during redirect leads to open redirect | MEDIUM | 6.1 | 19%ile | Microsoft | 2026-06-09 |
| CVE-2026-46322 | tun: free page on build_skb failure in tun_xdp_one() | MEDIUM | 6.1 | 3%ile | Microsoft | 2026-06-09 |
| CVE-2026-46325 | RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE | MEDIUM | 6.1 | 39%ile | Microsoft | 2026-06-09 |
| CVE-2026-53021 | scsi: target: core: Fix integer overflow in UNMAP bounds check | MEDIUM | 6.1 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-57454 | Vim: Out-of-bounds Read with Text Properties | MEDIUM | 6.1 | 6%ile | Microsoft | 2026-06-09 |
| CVE-2026-45500 | Microsoft Exchange Server Spoofing Vulnerability | MEDIUM | 6.1 | 31%ile | Microsoft | 2026-06-09 |
| CVE-2026-12725 | Dnsmasq: dnsmasq: heap buffer overflow in log_query() when logging unsupported ds/dnskey replies | MEDIUM | 5.9 | 45%ile | Microsoft | 2026-06-09 |
| CVE-2026-42766 | Possible NULL Dereference in Password-Based CMS Decryption | MEDIUM | 5.9 | 64%ile | Microsoft | 2026-06-09 |
| CVE-2026-42767 | NULL Pointer Dereference in CRMF EncryptedValue Decryption | MEDIUM | 5.9 | 46%ile | Microsoft | 2026-06-09 |
| CVE-2026-52946 | fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling | MEDIUM | 5.9 | 40%ile | Microsoft | 2026-06-09 |
| CVE-2026-55199 | libssh2 - Pre-Authentication DoS via SSH_MSG_EXT_INFO Handler | MEDIUM | 5.9 | 60%ile | Microsoft | 2026-06-09 |
| CVE-2026-58015 | Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive | MEDIUM | 5.9 | 58%ile | Microsoft | 2026-06-09 |
| CVE-2026-54411 | Linux-PAM through 1.7.2 contains an observable timing discrepancy (CWE-208) in the pam_userdb module's plaintext-passwor | MEDIUM | 5.9 | 25%ile | Microsoft | 2026-06-09 |
| CVE-2025-71315 | drm/vkms: Convert to DRM's vblank timer | MEDIUM | 5.5 | 1%ile | Microsoft | 2026-06-09 |
| CVE-2026-3196 | Qemu-kvm: virtio-snd: integer overflow leading to unbounded memory allocation | MEDIUM | 5.5 | 4%ile | Microsoft | 2026-06-09 |
| CVE-2026-4367 | Libxpm: libxpm: denial of service via out-of-bounds read in xpm file parsing | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-44119 | Apache HTTP Server: escalation of privilege through expressions in .htaccess in multiple modules | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-06-09 |
| CVE-2026-46254 | AppArmor: Allow apparmor to handle unaligned dfa tables | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-06-09 |
| CVE-2026-46273 | ibmveth: Disable GSO for packets with small MSS | MEDIUM | 5.5 | 33%ile | Microsoft | 2026-06-09 |
| CVE-2026-46280 | lib: test_hmm: evict device pages on file close to avoid use-after-free | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-46282 | iio: frequency: admv1013: fix NULL pointer dereference on str | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-46287 | net: txgbe: fix RTNL assertion warning when remove module | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-46289 | lib/scatterlist: fix length calculations in extract_kvec_to_sg | MEDIUM | 5.5 | 40%ile | Microsoft | 2026-06-09 |
| CVE-2026-46291 | crypto: caam - guard HMAC key hex dumps in hash_digest_key | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-46292 | pmdomain: core: Fix detach procedure for virtual devices in genpd | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-46296 | spi: s3c64xx: fix NULL-deref on driver unbind | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-46299 | hfsplus: fix held lock freed on hfsplus_fill_super() | MEDIUM | 5.5 | 0%ile | Microsoft | 2026-06-09 |
| CVE-2026-46302 | selinux: allow multiple opens of /sys/fs/selinux/policy | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-46303 | isofs: validate Rock Ridge CE continuation extent against volume size | MEDIUM | 5.5 | 25%ile | Microsoft | 2026-06-09 |
| CVE-2026-46304 | nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free | MEDIUM | 5.5 | 28%ile | Microsoft | 2026-06-09 |
| CVE-2026-46307 | wifi: ath5k: do not access array OOB | MEDIUM | 5.5 | 15%ile | Microsoft | 2026-06-09 |
| CVE-2026-46312 | media: videobuf2: Set vma_flags in vb2_dma_sg_mmap | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-46314 | drm/v3d: Reject empty multisync extension to prevent infinite loop | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-46321 | tun: free page on short-frame rejection in tun_xdp_one() | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-06-09 |
| CVE-2026-47770 | jq: stack overflow in deep structural equality | MEDIUM | 5.5 | 4%ile | Microsoft | 2026-06-09 |
| CVE-2026-49760 | Stack Buffer Overflow in ei_s_print_term at Very Large Integer | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-06-09 |
| CVE-2026-50262 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds read/write in glx changedrawableattributes | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-06-09 |
| CVE-2026-50263 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free information disclosure in createsaverwindow() | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-06-09 |
| CVE-2026-52915 | netfilter: ip6t_hbh: reject oversized option lists | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-52916 | batman-adv: frag: disallow unicast fragment in fragment | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-52921 | netfilter: ipset: stop hash:* range iteration at end | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-52925 | vrf: Fix a potential NPD when removing a port from a VRF | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-52927 | netfilter: ebtables: fix OOB read in compat_mtw_from_user | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-52928 | af_unix: Reject SIOCATMARK on non-stream sockets | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-52929 | sctp: stream: fully roll back denied add-stream state | MEDIUM | 5.5 | 59%ile | Microsoft | 2026-06-09 |
| CVE-2026-52930 | ipc/shm: serialize orphan cleanup with shm_nattch updates | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-52936 | crypto: jitterentropy - replace long-held spinlock with mutex | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-52937 | tap: fix stack info leak in tap_ioctl() SIOCGIFHWADDR | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-52941 | net/smc: avoid NULL deref of conn->lnk in smc_msg_event tracepoint | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-52948 | i2c: dev: prevent integer overflow in I2C_TIMEOUT ioctl | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-06-09 |
| CVE-2026-52954 | libceph: handle rbtree insertion error in decode_choose_args() | MEDIUM | 5.5 | 44%ile | Microsoft | 2026-06-09 |
| CVE-2026-52958 | libceph: Fix potential out-of-bounds access in osdmap_decode() | MEDIUM | 5.5 | 54%ile | Microsoft | 2026-06-09 |
| CVE-2026-52960 | ceph: put folios not suitable for writeback | MEDIUM | 5.5 | 49%ile | Microsoft | 2026-06-09 |
| CVE-2026-52962 | ceph: fix a buffer leak in __ceph_setxattr() | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-06-09 |
| CVE-2026-52963 | ALSA: usb-audio: Bound MIDI endpoint descriptor scans | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-06-09 |
| CVE-2026-52967 | smb/client: fix possible infinite loop and oob read in symlink_data() | MEDIUM | 5.5 | 34%ile | Microsoft | 2026-06-09 |
| CVE-2026-52970 | netfilter: nft_ct: fix missing expect put in obj eval | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-06-09 |
| CVE-2026-52974 | net: tls: fix strparser anchor skb leak on offload RX setup failure | MEDIUM | 5.5 | 43%ile | Microsoft | 2026-06-09 |
| CVE-2026-52975 | bonding: 3ad: implement proper RCU rules for port->aggregator | MEDIUM | 5.5 | 1%ile | Microsoft | 2026-06-09 |
| CVE-2026-52977 | futex: Prevent lockup in requeue-PI during signal/ timeout wakeup | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-52981 | neigh: let neigh_xmit take skb ownership | MEDIUM | 5.5 | 45%ile | Microsoft | 2026-06-09 |
| CVE-2026-52982 | net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit() | MEDIUM | 5.5 | 45%ile | Microsoft | 2026-06-09 |
| CVE-2026-52984 | net/sched: netem: fix queue limit check to include reordered packets | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-52985 | netdevsim: zero initialize struct iphdr in dummy sk_buff | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-52988 | netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase | MEDIUM | 5.5 | 1%ile | Microsoft | 2026-06-09 |
| CVE-2026-52999 | netfilter: nfnetlink_osf: fix out-of-bounds read on option matching | MEDIUM | 5.5 | 48%ile | Microsoft | 2026-06-09 |
| CVE-2026-53003 | pppoe: drop PFC frames | MEDIUM | 5.5 | 54%ile | Microsoft | 2026-06-09 |
| CVE-2026-53012 | nexthop: fix IPv6 route referencing IPv4 nexthop | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-06-09 |
| CVE-2026-53013 | macvlan: fix macvlan_get_size() not reserving space for IFLA_MACVLAN_BC_CUTOFF | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53015 | erofs: unify lcn as u64 for 32-bit platforms | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53022 | platform/x86: dell-wmi-sysman: bound enumeration string aggregation | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-06-09 |
| CVE-2026-53032 | bpf: Fix NULL deref in map_kptr_match_type for scalar regs | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53035 | bpf, sockmap: Fix af_unix iter deadlock | MEDIUM | 5.5 | 1%ile | Microsoft | 2026-06-09 |
| CVE-2026-53037 | HID: usbhid: fix deadlock in hid_post_reset() | MEDIUM | 5.5 | 1%ile | Microsoft | 2026-06-09 |
| CVE-2026-53047 | efi/capsule-loader: fix incorrect sizeof in phys array reallocation | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-06-09 |
| CVE-2026-53050 | quota: Fix race of dquot_scan_active() with quota deactivation | MEDIUM | 5.5 | 1%ile | Microsoft | 2026-06-09 |
| CVE-2026-53056 | drm/msm/dpu: fix mismatch between power and frequency | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-06-09 |
| CVE-2026-53058 | drm/bridge: cadence: cdns-mhdp8546-core: Set the mhdp connector earlier in atomic_enable() | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-06-09 |
| CVE-2026-53060 | dm cache metadata: fix memory leak on metadata abort retry | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53061 | dm cache: fix dirty mapping checking in passthrough mode switching | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53066 | drm/sun4i: backend: fix error pointer dereference | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-06-09 |
| CVE-2026-53070 | sctp: disable BH before calling udp_tunnel_xmit_skb() | MEDIUM | 5.5 | 22%ile | Microsoft | 2026-06-09 |
| CVE-2026-53076 | bpf: Fix OOB in pcpu_init_value | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53080 | net/sched: cls_fw: fix NULL dereference of "old" filters before change() | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53082 | net: hamradio: 6pack: fix uninit-value in sixpack_receive_buf | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-06-09 |
| CVE-2026-53088 | net: bcmgenet: fix off-by-one in bcmgenet_put_txcb | MEDIUM | 5.5 | 34%ile | Microsoft | 2026-06-09 |
| CVE-2026-53093 | wifi: brcmfmac: Fix error pointer dereference | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-06-09 |
| CVE-2026-53096 | bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path | MEDIUM | 5.5 | 1%ile | Microsoft | 2026-06-09 |
| CVE-2026-53102 | wifi: mt76: Fix memory leak after mt76_connac_mcu_alloc_sta_req() | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53106 | bpf: Do not allow deleting local storage in NMI | MEDIUM | 5.5 | 4%ile | Microsoft | 2026-06-09 |
| CVE-2026-53107 | wifi: libertas: don't kill URBs in interrupt context | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-06-09 |
| CVE-2026-53108 | powerpc/64s: Fix unmap race with PMD migration entries | MEDIUM | 5.5 | 0%ile | Microsoft | 2026-06-09 |
| CVE-2026-53109 | powerpc/pgtable-frag: Fix bad page state in pte_frag_destroy | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53110 | s390/bpf: Zero-extend bpf prog return values and kfunc arguments | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53113 | wifi: ath11k: fix memory leaks in beacon template setup | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53115 | bus: fsl-mc: use generic driver_override infrastructure | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-06-09 |
| CVE-2026-53118 | vdpa: use generic driver_override infrastructure | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53120 | PCI: use generic driver_override infrastructure | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-06-09 |
| CVE-2026-53122 | btrfs: fix deadlock between reflink and transaction commit when using flushoncommit | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53126 | blk-cgroup: fix disk reference leak in blkcg_maybe_throttle_current() | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53128 | drbd: Balance RCU calls in drbd_adm_dump_devices() | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-06-09 |
| CVE-2026-53129 | fs/mbcache: cancel shrink work before destroying the cache | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53135 | drm/amd/display: Fix NULL deref and buffer over-read in SDP debugfs | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53138 | drm/amd/display: Bound VBIOS record-chain walk loops | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53139 | drm/v3d: Skip CSD when it has zeroed workgroups | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53147 | thunderbolt: Validate XDomain request packet size before type cast | MEDIUM | 5.5 | 19%ile | Microsoft | 2026-06-09 |
| CVE-2026-53149 | thunderbolt: Bound root directory content to block size | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53151 | rxrpc: Fix the ACK parser to extract the SACK table for parsing | MEDIUM | 5.5 | 52%ile | Microsoft | 2026-06-09 |
| CVE-2026-53154 | mm/hugetlb: restore reservation on error in hugetlb folio copy paths | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53156 | nvmem: core: fix use-after-free bugs in error paths | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53157 | net: phonet: free phonet_device after RCU grace period | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53163 | locking/rtmutex: Skip remove_waiter() when waiter is not enqueued | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53166 | futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock | MEDIUM | 5.5 | — | Microsoft | 2026-06-09 |
| CVE-2026-53177 | bnxt_en: Fix NULL pointer dereference | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53181 | vsock/vmci: fix sk_ack_backlog leak on failed handshake | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53183 | mptcp: allow subflow rcv wnd to shrink | MEDIUM | 5.5 | 42%ile | Microsoft | 2026-06-09 |
| CVE-2026-53184 | udp: clear skb->dev before running a sockmap verdict | MEDIUM | 5.5 | 42%ile | Microsoft | 2026-06-09 |
| CVE-2026-53190 | drm/virtio: fix dma_fence refcount leak on error in virtio_gpu_dma_fence_wait() | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53199 | hv_netvsc: use kmap_local_page in netvsc_copy_to_send_buf | MEDIUM | 5.5 | 43%ile | Microsoft | 2026-06-09 |
| CVE-2026-53207 | mm/memory-failure: fix hugetlb_lock AA deadlock in get_huge_page_for_hwpoison | MEDIUM | 5.5 | 1%ile | Microsoft | 2026-06-09 |
| CVE-2026-53213 | drm/vc4: fix krealloc() memory leak | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53214 | ipv6: Fix a potential NPD in cleanup_prefix_route() | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53219 | netfilter: x_tables: avoid leaking percpu counter pointers | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53220 | netfilter: revalidate bridge ports | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53221 | ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup() | MEDIUM | 5.5 | 48%ile | Microsoft | 2026-06-09 |
| CVE-2026-53223 | net: guard timestamp cmsgs to real error queue skbs | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-06-09 |
| CVE-2026-53225 | sctp: fix uninit-value in __sctp_rcv_asconf_lookup() | MEDIUM | 5.5 | 48%ile | Microsoft | 2026-06-09 |
| CVE-2026-53226 | gpio: rockchip: fix generic IRQ chip leak on remove | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53227 | net: openvswitch: fix possible kfree_skb of ERR_PTR | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-06-09 |
| CVE-2026-53229 | net/mlx5e: xsk: Fix DMA and xdp_frame leak on XDP_TX xmit failure | MEDIUM | 5.5 | 41%ile | Microsoft | 2026-06-09 |
| CVE-2026-53232 | net: phy: clean the sfp upstream if phy probing fails | MEDIUM | 5.5 | 17%ile | Microsoft | 2026-06-09 |
| CVE-2026-53237 | gpio: mvebu: fix NULL pointer dereference in suspend/resume | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53245 | net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53252 | Bluetooth: fix memory leak in error path of hci_alloc_dev() | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-06-09 |
| CVE-2026-53255 | Bluetooth: MGMT: validate advertising TLV before type checks | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53258 | wifi: fix leak if split 6 GHz scanning fails | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-06-09 |
| CVE-2026-53263 | 6lowpan: fix off-by-one in multicast context address compression | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53269 | netfilter: synproxy: add mutex to guard hook reference counting | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53274 | net/smc: fix sleep-inside-lock in __smc_setsockopt() causing local DoS | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53287 | audit: fix incorrect inheritable capability in CAPSET records | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53289 | ice: fix NULL pointer dereference in ice_reset_all_vfs() | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53291 | ALSA: hda/conexant: Fix missing error check for jack detection | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53292 | net: phonet: do not BUG_ON() in pn_socket_autobind() on failed bind | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-06-09 |
| CVE-2026-53293 | drm/amdgpu: fix AMDGPU_INFO_READ_MMR_REG | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53295 | mailbox: add sanity check for channel array | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-06-09 |
| CVE-2026-53297 | net: mana: Guard mana_remove against double invocation | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-06-09 |
| CVE-2026-53304 | scsi: sg: Resolve soft lockup issue when opening /dev/sgX | MEDIUM | 5.5 | 1%ile | Microsoft | 2026-06-09 |
| CVE-2026-53313 | drm/amd/display: Avoid NULL dereference in dc_dmub_srv error paths | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53314 | padata: Put CPU offline callback in ONLINE section to allow failure | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53317 | wifi: mt76: mt7921: Place upper limit on station AID | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-06-09 |
| CVE-2026-53325 | agp/amd64: Fix broken error propagation in agp_amd64_probe() | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-06-09 |
| CVE-2026-54679 | jq: potential integer overflow in jvp_string_append | MEDIUM | 5.5 | 4%ile | Microsoft | 2026-06-09 |
| CVE-2026-54905 | concurrent-ruby: `ReentrantReadWriteLock` read-count overflow grants a write lock without exclusivity | MEDIUM | 5.5 | 4%ile | Microsoft | 2026-06-09 |
| CVE-2026-55892 | Vim: Out-of-bounds Write in Spell File Prefix Dump | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-57452 | Vim: Out-of-bounds Read with libsodium-encrypted Files | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-06-09 |
| CVE-2026-42906 | Windows Shell Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-06-09 |
| CVE-2026-42915 | Microsoft Windows VMSwitch Denial of Service Vulnerability | MEDIUM | 5.5 | 32%ile | Microsoft | 2026-06-09 |
| CVE-2026-42968 | Windows Telephony Server Information Disclosure Vulnerability | MEDIUM | 5.5 | 33%ile | Microsoft | 2026-06-09 |
| CVE-2026-42969 | Windows Push Notification Information Disclosure Vulnerability | MEDIUM | 5.5 | 34%ile | Microsoft | 2026-06-09 |
| CVE-2026-42970 | Windows Push Notification Information Disclosure Vulnerability | MEDIUM | 5.5 | 36%ile | Microsoft | 2026-06-09 |
| CVE-2026-42971 | Windows Push Notification Information Disclosure Vulnerability | MEDIUM | 5.5 | 40%ile | Microsoft | 2026-06-09 |
| CVE-2026-42972 | Windows Hyper-V Information Disclosure Vulnerability | MEDIUM | 5.5 | 40%ile | Microsoft | 2026-06-09 |
| CVE-2026-42973 | Windows Push Notification Information Disclosure Vulnerability | MEDIUM | 5.5 | 36%ile | Microsoft | 2026-06-09 |
| CVE-2026-44805 | Windows Network Controller (NC) Host Agent Denial of Service Vulnerability | MEDIUM | 5.5 | 29%ile | Microsoft | 2026-06-09 |
| CVE-2026-44814 | Windows DWM Core Library Information Disclosure Vulnerability | MEDIUM | 5.5 | 25%ile | Microsoft | 2026-06-09 |
| CVE-2026-44821 | Microsoft Office Information Disclosure Vulnerability | MEDIUM | 5.5 | 40%ile | Microsoft | 2026-06-09 |
| CVE-2026-45594 | Windows Application Identity (AppID) Information Disclosure Vulnerability | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-06-09 |
| CVE-2026-45604 | Windows Managed Installer Information Disclosure Vulnerability | MEDIUM | 5.5 | 28%ile | Microsoft | 2026-06-09 |
| CVE-2026-45606 | Microsoft UxTheme Library (uxtheme.dll) Denial of Service Vulnerability | MEDIUM | 5.5 | 32%ile | Microsoft | 2026-06-09 |
| CVE-2026-45634 | Windows DHCP Client Information Disclosure Vulnerability | MEDIUM | 5.5 | 30%ile | Microsoft | 2026-06-09 |
| CVE-2026-45647 | Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability | MEDIUM | 5.5 | 12%ile | Microsoft | 2026-06-09 |
| CVE-2026-48566 | Windows DWM Core Library Information Disclosure Vulnerability | MEDIUM | 5.5 | 33%ile | Microsoft | 2026-06-09 |
| CVE-2026-53065 | ASoC: sti: use managed regmap_field allocations | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-06-09 |
| CVE-2026-53158 | misc: fastrpc: Fix NULL pointer dereference in rpmsg callback | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53046 | ksmbd: fix use-after-free from async crypto on Qualcomm crypto engine | MEDIUM | 5.5 | 54%ile | Microsoft | 2026-06-09 |
| CVE-2026-53048 | gfs2: prevent NULL pointer dereference during unmount | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-52964 | ALSA: usb-audio: Bound MIDI 2.0 endpoint descriptor scans | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-06-09 |
| CVE-2026-53320 | nilfs2: reject zero bd_oblocknr in nilfs_ioctl_mark_blocks_dirty() | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-06-09 |
| CVE-2026-53296 | mailbox: mailbox-test: free channels on probe error | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-06-09 |
| CVE-2026-53294 | mailbox: mailbox-test: don't free the reused channel | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-06-09 |
| CVE-2026-53279 | drm/gma500/oaktrail_lvds: fix hang on init failure | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-06-09 |
| CVE-2026-53655 | node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation di | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-06-09 |
| CVE-2026-58055 | nghttp2 nghttpx - HTTP Request/Response Smuggling via Upgrade Request with Content-Length | MEDIUM | 5.4 | 17%ile | Microsoft | 2026-06-09 |
| CVE-2026-33113 | Microsoft SharePoint Server Spoofing Vulnerability | MEDIUM | 5.4 | 44%ile | Microsoft | 2026-06-09 |
| CVE-2026-45453 | Microsoft SharePoint Server Spoofing Vulnerability | MEDIUM | 5.4 | 44%ile | Microsoft | 2026-06-09 |
| CVE-2026-45464 | Microsoft SharePoint Server Spoofing Vulnerability | MEDIUM | 5.4 | 44%ile | Microsoft | 2026-06-09 |
| CVE-2026-45465 | Microsoft SharePoint Server Spoofing Vulnerability | MEDIUM | 5.4 | 44%ile | Microsoft | 2026-06-09 |
| CVE-2026-45595 | Windows Mark of the Web Security Feature Bypass Vulnerability | MEDIUM | 5.4 | 37%ile | Microsoft | 2026-06-09 |
| CVE-2026-47636 | Microsoft SharePoint Server Spoofing Vulnerability | MEDIUM | 5.4 | 44%ile | Microsoft | 2026-06-09 |
| CVE-2026-47639 | Microsoft SharePoint Server Spoofing Vulnerability | MEDIUM | 5.4 | 44%ile | Microsoft | 2026-06-09 |
| CVE-2026-48560 | Microsoft SharePoint Server Spoofing Vulnerability | MEDIUM | 5.4 | 61%ile | Microsoft | 2026-06-09 |
| CVE-2026-40930 | LIBPNG: Chunk smuggling in push-mode APNG parser via unconsumed chunk body | MEDIUM | 5.4 | 10%ile | Microsoft | 2026-06-09 |
| CVE-2026-12969 | Dnsmasq: dnsmasq: out-of-bounds read in find_soa() due to missing extrabytes validation | MEDIUM | 5.3 | 17%ile | Microsoft | 2026-06-09 |
| CVE-2026-42507 | Arbitrary inputs are included in errors without any escaping in net/textproto | MEDIUM | 5.3 | 31%ile | Microsoft | 2026-06-09 |
| CVE-2026-42769 | Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate | MEDIUM | 5.3 | 46%ile | Microsoft | 2026-06-09 |
| CVE-2026-44967 | opentelemetry-cpp: OTLP HTTP exporters read unbounded HTTP response | MEDIUM | 5.3 | 11%ile | Microsoft | 2026-06-09 |
| CVE-2026-57436 | Nokogiri: Possible Use-After-Free when setting `Document#root=` to an invalid node type | MEDIUM | 5.3 | 34%ile | Microsoft | 2026-06-09 |
| CVE-2026-57437 | Nokogiri: Possible Use-After-Free when directly using `NokogirI::XML::XPathContext` beyond document lifetime | MEDIUM | 5.3 | 34%ile | Microsoft | 2026-06-09 |
| CVE-2026-57451 | Vim: Out-of-bounds Read in Text Property Count | MEDIUM | 5.3 | 5%ile | Microsoft | 2026-06-09 |
| CVE-2026-42914 | Windows Kerberos Denial of Service Vulnerability | MEDIUM | 5.3 | 56%ile | Microsoft | 2026-06-09 |
| CVE-2026-45655 | Windows BitLocker Security Feature Bypass Vulnerability | MEDIUM | 5.3 | 36%ile | Microsoft | 2026-06-09 |
| CVE-2026-6450 | CRL critical extension bypass in ParseCRL_Extensions | MEDIUM | 5.3 | 26%ile | Microsoft | 2026-06-09 |
| CVE-2026-55964 | Chain intermediate CA:TRUE without keyCertSign accepted as a signing CA (temporary CA exemption) | MEDIUM | 5.3 | 9%ile | Microsoft | 2026-06-09 |
| CVE-2026-6678 | Integer underflow in wc_PKCS7_DecryptOri handling crafted Other Recipient Info | MEDIUM | 5.3 | 26%ile | Microsoft | 2026-06-09 |
| CVE-2026-10592 | Wildcard DNS SAN bypasses CA name-constraint checks | MEDIUM | 5.3 | 10%ile | Microsoft | 2026-06-09 |
| CVE-2026-10098 | OCSP CertID serial-number length-confusion in wolfSSL_OCSP_resp_find_status | MEDIUM | 5.3 | 9%ile | Microsoft | 2026-06-09 |
| CVE-2026-50265 | Rejected reason: This CVE ID was assigned as a duplicate of CVE-2026-50292 | MEDIUM | 5.3 | — | Microsoft | 2026-06-09 |
| CVE-2026-6092 | Encrypt-then-MAC could fall back to MAC-then-Encrypt when HAVE_ENCRYPT_THEN_MAC is configured | MEDIUM | 5.3 | 32%ile | Microsoft | 2026-06-09 |
| CVE-2026-10275 | OpenSC pkcs11-tool Key Generation pkcs11-tool.c test_kpgen_certwrite buffer overflow | MEDIUM | 5.0 | 22%ile | Microsoft | 2026-06-09 |
| CVE-2026-55655 | Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client ve | MEDIUM | 5.0 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-45502 | Microsoft Exchange Server Information Disclosure Vulnerability | MEDIUM | 5.0 | 98%ile | Microsoft | 2026-06-09 |
| CVE-2026-35188 | Double-free When Checking OCSP Stapled Response | MEDIUM | 5.0 | 23%ile | Microsoft | 2026-06-09 |
| CVE-2026-50219 | libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_GetBuffer, XML_Parse, XML_ParseBuffer, XML_Pars | MEDIUM | 4.9 | 8%ile | Microsoft | 2026-06-09 |
| CVE-2026-56131 | libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_ResumeParser from within handlers in cases of a | MEDIUM | 4.9 | 7%ile | Microsoft | 2026-06-09 |
| CVE-2026-56412 | libexpat before 2.8.2 does not consider XML_TOK_DATA_CHARS in doCdataSection and thus lacks handler call depth tracking | MEDIUM | 4.9 | 7%ile | Microsoft | 2026-06-09 |
| CVE-2026-45446 | Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes | MEDIUM | 4.8 | 38%ile | Microsoft | 2026-06-09 |
| CVE-2026-48142 | NGINX ngx_http_charset_module vulnerability | MEDIUM | 4.8 | 53%ile | Microsoft | 2026-06-09 |
| CVE-2026-46245 | drm/amd/display: Fix dc_link NULL handling in HPD init | MEDIUM | 4.7 | 5%ile | Microsoft | 2026-06-09 |
| CVE-2026-53112 | wifi: rtlwifi: pci: fix possible use-after-free caused by unfinished irq_prepare_bcn_tasklet | MEDIUM | 4.7 | 6%ile | Microsoft | 2026-06-09 |
| CVE-2026-45460 | Microsoft Office Information Disclosure Vulnerability | MEDIUM | 4.7 | 31%ile | Microsoft | 2026-06-09 |
| CVE-2026-45462 | Microsoft SharePoint Server Spoofing Vulnerability | MEDIUM | 4.6 | 43%ile | Microsoft | 2026-06-09 |
| CVE-2026-45467 | Microsoft SharePoint Server Spoofing Vulnerability | MEDIUM | 4.6 | 43%ile | Microsoft | 2026-06-09 |
| CVE-2026-45468 | Microsoft SharePoint Server Spoofing Vulnerability | MEDIUM | 4.6 | 43%ile | Microsoft | 2026-06-09 |
| CVE-2026-45479 | Microsoft SharePoint Server Spoofing Vulnerability | MEDIUM | 4.6 | 43%ile | Microsoft | 2026-06-09 |
| CVE-2026-45483 | Microsoft Office Project Server Spoofing Vulnerability | MEDIUM | 4.6 | 43%ile | Microsoft | 2026-06-09 |
| CVE-2026-47637 | Microsoft SharePoint Server Spoofing Vulnerability | MEDIUM | 4.6 | 43%ile | Microsoft | 2026-06-09 |
| CVE-2026-47638 | Microsoft SharePoint Server Spoofing Vulnerability | MEDIUM | 4.6 | 43%ile | Microsoft | 2026-06-09 |
| CVE-2026-47640 | Microsoft SharePoint Server Spoofing Vulnerability | MEDIUM | 4.6 | 43%ile | Microsoft | 2026-06-09 |
| CVE-2026-47641 | Microsoft SharePoint Server Spoofing Vulnerability | MEDIUM | 4.6 | 43%ile | Microsoft | 2026-06-09 |
| CVE-2026-48562 | Microsoft SharePoint Server Spoofing Vulnerability | MEDIUM | 4.6 | 43%ile | Microsoft | 2026-06-09 |
| CVE-2026-11623 | tmux image.c image_free use after free | MEDIUM | 4.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2025-71313 | PCI: endpoint: Add missing NULL check for alloc_workqueue() | MEDIUM | 4.4 | 5%ile | Microsoft | 2026-06-09 |
| CVE-2026-46250 | MIPS: Work around LLVM bug when gp is used as global register variable | MEDIUM | 4.4 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-53238 | netlabel: validate unlabeled address and mask attribute lengths | MEDIUM | 4.3 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-55653 | Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validati | MEDIUM | 4.3 | 45%ile | Microsoft | 2026-06-09 |
| CVE-2026-45650 | Microsoft Bing Search Spoofing Vulnerability | MEDIUM | 4.3 | 50%ile | Microsoft | 2026-06-09 |
| CVE-2026-6412 | Continued acceptance of SHA-1/MD5 digests in certificate processing | MEDIUM | 4.3 | 1%ile | Microsoft | 2026-06-09 |
| CVE-2026-13218 | Kubevirt: kubevirt: symlink following in writetocachedfile allows host file overwrite from virt-launcher | MEDIUM | 4.2 | 3%ile | Microsoft | 2026-06-09 |
| CVE-2026-11526 | GD versions before 2.86 for Perl allow OS command injection and file overwrite via a 2-arg open() of filename arguments | MEDIUM | 4.2 | 72%ile | Microsoft | 2026-06-09 |
| CVE-2026-45642 | Microsoft Azure Attestation service and Device Health Attestation Service Spoofing Vulnerability | LOW | 3.9 | 25%ile | Microsoft | 2026-06-09 |
| CVE-2026-46272 | coresight: tmc-etr: Fix race condition between sysfs and perf mode | LOW | 3.9 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-13322 | Kubevirt: virt-handler-rhel9: kubevirt: unbounded virtio-serial readline in virt-handler causes oom denial of service | LOW | 3.8 | 3%ile | Microsoft | 2026-06-09 |
| CVE-2026-11525 | undici vulnerable to Set-Cookie SameSite attribute downgrade via permissive substring matching | LOW | 3.7 | 15%ile | Microsoft | 2026-06-09 |
| CVE-2026-42768 | Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt() | LOW | 3.7 | 57%ile | Microsoft | 2026-06-09 |
| CVE-2026-42770 | FFC-DH Peer Validation Uses Attacker-Supplied q | LOW | 3.7 | 43%ile | Microsoft | 2026-06-09 |
| CVE-2026-5419 | Guntls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removal | LOW | 3.7 | 46%ile | Microsoft | 2026-06-09 |
| CVE-2026-46252 | regulator: core: fix locking in regulator_resolve_supply() error path | LOW | 3.4 | 0%ile | Microsoft | 2026-06-09 |
| CVE-2026-45455 | Microsoft Excel Information Disclosure Vulnerability | LOW | 3.3 | 50%ile | Microsoft | 2026-06-09 |
| CVE-2026-45459 | Microsoft Excel Security Feature Bypass Vulnerability | LOW | 3.3 | 31%ile | Microsoft | 2026-06-09 |
| CVE-2026-45466 | Microsoft Word Information Disclosure Vulnerability | LOW | 3.3 | 33%ile | Microsoft | 2026-06-09 |
| CVE-2026-45485 | Microsoft Office Information Disclosure Vulnerability | LOW | 3.3 | 38%ile | Microsoft | 2026-06-09 |
| CVE-2026-10722 | cilium ebpf LoadCollectionSpec/LoadCollectionSpecFromReader btf.go loadRawSpec integer overflow | LOW | 3.3 | 7%ile | Microsoft | 2026-06-09 |
| CVE-2026-49356 | Babel: Arbitrary File Read via sourceMappingURL Comment in @babel/core | LOW | 3.2 | 4%ile | Microsoft | 2026-06-09 |
| CVE-2026-57062 | CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM becaus | LOW | 2.9 | 4%ile | Microsoft | 2026-06-09 |
| CVE-2026-57234 | Nokogiri: XML::Schema on JRuby allows network requests when NONET is set, bypassing CVE-2020-26247 | LOW | 2.6 | 10%ile | Microsoft | 2026-06-09 |
| CVE-2026-53089 | bpf: Fix use-after-free in offloaded map/prog info fill | LOW | 2.5 | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-0864 | Configuration Injection via Carriage Return (\r) in write() method | UNKNOWN | — | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-10846 | Insufficient verification that responses belong to a query | UNKNOWN | — | 4%ile | Microsoft | 2026-06-09 |
| CVE-2026-11972 | tarfile opened in streaming mode mishandles EOF | UNKNOWN | — | 54%ile | Microsoft | 2026-06-09 |
| CVE-2026-12003 | CPython >3.11 Insecure Input Validation resulting in privilege escalation | UNKNOWN | — | 4%ile | Microsoft | 2026-06-09 |
| CVE-2026-3276 | Potential DoS via quadratic complexity in unicodedata.normalize() | UNKNOWN | — | 42%ile | Microsoft | 2026-06-09 |
| CVE-2026-41991 | Predictable Temporary File in GNU gzip | UNKNOWN | — | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-41992 | Global Buffer Overflow in GNU gzip | UNKNOWN | — | 50%ile | Microsoft | 2026-06-09 |
| CVE-2026-4360 | Tarfile.extract() doesn't fully respect filter parameter | UNKNOWN | — | 42%ile | Microsoft | 2026-06-09 |
| CVE-2026-43966 | HTTP Response Splitting via Non-VCHAR Bytes in cow_http_struct_hd:escape_string/2 | UNKNOWN | — | 18%ile | Microsoft | 2026-06-09 |
| CVE-2026-43973 | gun HTTP/1.1 response buffer has no size limit allowing server-controlled memory exhaustion | UNKNOWN | — | 42%ile | Microsoft | 2026-06-09 |
| CVE-2026-47162 | Vim: Vimscript Code Injection in netrw NetrwBookHistSave() via crafted directory name | UNKNOWN | — | 20%ile | Microsoft | 2026-06-09 |
| CVE-2026-47167 | Vim: Vimscript Code Injection in cucumber filetype plugin via crafted step-definition regex | UNKNOWN | — | 3%ile | Microsoft | 2026-06-09 |
| CVE-2026-47240 | Net::IMAP: Command Injection via non-synchronizing literal in "raw" argument | UNKNOWN | — | 58%ile | Microsoft | 2026-06-09 |
| CVE-2026-47242 | Net::IMAP: Command Injection via ID command argument | UNKNOWN | — | 8%ile | Microsoft | 2026-06-09 |
| CVE-2026-49762 | Unbounded integer parsing in the Version module enables CPU and memory exhaustion denial of service | UNKNOWN | — | 4%ile | Microsoft | 2026-06-09 |
| CVE-2026-49851 | Mistune: Potential DoS via quadratic-time parsing in parse_link_text | UNKNOWN | — | 44%ile | Microsoft | 2026-06-09 |
| CVE-2026-52858 | Vim: Arbitrary Code Execution via Python Omni-Completion | UNKNOWN | — | 10%ile | Microsoft | 2026-06-09 |
| CVE-2026-52859 | Vim: Out-of-bounds Read in Terminal Screen Snapshot | UNKNOWN | — | 23%ile | Microsoft | 2026-06-09 |
| CVE-2026-52860 | Vim: Arbitrary Code Execution via Python Omni-Completion | UNKNOWN | — | 13%ile | Microsoft | 2026-06-09 |
| CVE-2026-7774 | tarfile.data_filter path traversal bypass allows writing outside the extraction directory | UNKNOWN | — | 49%ile | Microsoft | 2026-06-09 |
| CVE-2026-8643 | pip can extract console_scripts and gui_scripts outside installation directory | UNKNOWN | — | 25%ile | Microsoft | 2026-06-09 |
| CVE-2026-9669 | bz2.BZ2Decompressor reuse after error can cause a stack buffer overflow | UNKNOWN | — | 37%ile | Microsoft | 2026-06-09 |
| CVE-2026-10881 | Chromium: CVE-2026-10881 Out of bounds read and write in ANGLE | UNKNOWN | — | 50%ile | Microsoft | 2026-06-09 |
| CVE-2026-10882 | Chromium: CVE-2026-10882 Use after free in Network | UNKNOWN | — | 40%ile | Microsoft | 2026-06-09 |
| CVE-2026-10883 | Chromium: CVE-2026-10883 Out of bounds write in ANGLE | UNKNOWN | — | 50%ile | Microsoft | 2026-06-09 |
| CVE-2026-10884 | Chromium: CVE-2026-10884 Use after free in Chromecast | UNKNOWN | — | 21%ile | Microsoft | 2026-06-09 |
| CVE-2026-10886 | Chromium: CVE-2026-10886 Use after free in FileSystem | UNKNOWN | — | 93%ile | Microsoft | 2026-06-09 |
| CVE-2026-10887 | Chromium: CVE-2026-10887 Use after free in Chromoting | UNKNOWN | — | 35%ile | Microsoft | 2026-06-09 |
| CVE-2026-10888 | Chromium: CVE-2026-10888 Use after free in Cast Streaming | UNKNOWN | — | 18%ile | Microsoft | 2026-06-09 |
| CVE-2026-10889 | Chromium: CVE-2026-10889 Out of bounds read in ANGLE | UNKNOWN | — | 23%ile | Microsoft | 2026-06-09 |
| CVE-2026-10890 | Chromium: CVE-2026-10890 Use after free in Cast | UNKNOWN | — | 17%ile | Microsoft | 2026-06-09 |
| CVE-2026-10891 | Chromium: CVE-2026-10891 Use after free in GFX | UNKNOWN | — | 26%ile | Microsoft | 2026-06-09 |
| CVE-2026-10892 | Chromium: CVE-2026-10892 Out of bounds write in GPU | UNKNOWN | — | 26%ile | Microsoft | 2026-06-09 |
| CVE-2026-10893 | Chromium: CVE-2026-10893 Use after free in Chromoting | UNKNOWN | — | 30%ile | Microsoft | 2026-06-09 |
| CVE-2026-10894 | Chromium: CVE-2026-10894 Use after free in Printing | UNKNOWN | — | 21%ile | Microsoft | 2026-06-09 |
| CVE-2026-10895 | Chromium: CVE-2026-10895 Use after free in Ozone | UNKNOWN | — | 33%ile | Microsoft | 2026-06-09 |
| CVE-2026-10897 | Chromium: CVE-2026-10897 Out of bounds write in GPU | UNKNOWN | — | 26%ile | Microsoft | 2026-06-09 |
| CVE-2026-10898 | Chromium: CVE-2026-10898 Stack buffer overflow in GPU | UNKNOWN | — | 26%ile | Microsoft | 2026-06-09 |
| CVE-2026-10899 | Chromium: CVE-2026-10899 Use after free in Ozone | UNKNOWN | — | 21%ile | Microsoft | 2026-06-09 |
| CVE-2026-10900 | Chromium: CVE-2026-10900 Use after free in Passwords | UNKNOWN | — | 21%ile | Microsoft | 2026-06-09 |
| CVE-2026-10901 | Chromium: CVE-2026-10901 Use after free in Passwords | UNKNOWN | — | 28%ile | Microsoft | 2026-06-09 |
| CVE-2026-10902 | Chromium: CVE-2026-10902 Use after free in Ozone | UNKNOWN | — | 33%ile | Microsoft | 2026-06-09 |
| CVE-2026-10903 | Chromium: CVE-2026-10903 Use after free in WebRTC | UNKNOWN | — | 42%ile | Microsoft | 2026-06-09 |
| CVE-2026-10904 | Chromium: CVE-2026-10904 Inappropriate implementation in V8 | UNKNOWN | — | 40%ile | Microsoft | 2026-06-09 |
| CVE-2026-10905 | Chromium: CVE-2026-10905 Use after free in Network | UNKNOWN | — | 21%ile | Microsoft | 2026-06-09 |
| CVE-2026-10906 | Chromium: CVE-2026-10906 Use after free in WebAuthentication | UNKNOWN | — | 26%ile | Microsoft | 2026-06-09 |
| CVE-2026-10907 | Chromium: CVE-2026-10907 Out of bounds write in ANGLE | UNKNOWN | — | 27%ile | Microsoft | 2026-06-09 |
| CVE-2026-10908 | Chromium: CVE-2026-10908 Use after free in FullScreen | UNKNOWN | — | 21%ile | Microsoft | 2026-06-09 |
| CVE-2026-10909 | Chromium: CVE-2026-10909 Use after free in Dawn | UNKNOWN | — | 21%ile | Microsoft | 2026-06-09 |
| CVE-2026-10910 | Chromium: CVE-2026-10910 Type Confusion in V8 | UNKNOWN | — | 37%ile | Microsoft | 2026-06-09 |
| CVE-2026-10911 | Chromium: CVE-2026-10911 Insufficient validation of untrusted input in Media | UNKNOWN | — | 23%ile | Microsoft | 2026-06-09 |
| CVE-2026-10912 | Chromium: CVE-2026-10912 Insufficient validation of untrusted input in Extensions | UNKNOWN | — | 20%ile | Microsoft | 2026-06-09 |
| CVE-2026-10913 | Chromium: CVE-2026-10913 Use after free in ANGLE | UNKNOWN | — | 33%ile | Microsoft | 2026-06-09 |
| CVE-2026-10914 | Chromium: CVE-2026-10914 Use after free in ANGLE | UNKNOWN | — | 33%ile | Microsoft | 2026-06-09 |
| CVE-2026-10916 | Chromium: CVE-2026-10916 Insufficient validation of untrusted input in DevTools | UNKNOWN | — | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-10917 | Chromium: CVE-2026-10917 Insufficient validation of untrusted input in Media | UNKNOWN | — | 23%ile | Microsoft | 2026-06-09 |
| CVE-2026-10918 | Chromium: CVE-2026-10918 Use after free in Viz | UNKNOWN | — | 21%ile | Microsoft | 2026-06-09 |
| CVE-2026-10919 | Chromium: CVE-2026-10919 Use after free in ANGLE | UNKNOWN | — | 23%ile | Microsoft | 2026-06-09 |
| CVE-2026-10920 | Chromium: CVE-2026-10920 Insufficient validation of untrusted input in WebShare | UNKNOWN | — | 23%ile | Microsoft | 2026-06-09 |
| CVE-2026-10921 | Chromium: CVE-2026-10921 Integer overflow in Dawn | UNKNOWN | — | 21%ile | Microsoft | 2026-06-09 |
| CVE-2026-10922 | Chromium: CVE-2026-10922 Insufficient validation of untrusted input in DevTools | UNKNOWN | — | 23%ile | Microsoft | 2026-06-09 |
| CVE-2026-10923 | Chromium: CVE-2026-10923 Use after free in WebAppInstalls | UNKNOWN | — | 29%ile | Microsoft | 2026-06-09 |
| CVE-2026-10924 | Chromium: CVE-2026-10924 Integer overflow in Chromecast | UNKNOWN | — | 21%ile | Microsoft | 2026-06-09 |
| CVE-2026-10925 | Chromium: CVE-2026-10925 Out of bounds write in Skia | UNKNOWN | — | 21%ile | Microsoft | 2026-06-09 |
| CVE-2026-10926 | Chromium: CVE-2026-10926 Use after free in Cast | UNKNOWN | — | 8%ile | Microsoft | 2026-06-09 |
| CVE-2026-10927 | Chromium: CVE-2026-10927 Out of bounds read in Dawn | UNKNOWN | — | 21%ile | Microsoft | 2026-06-09 |
| CVE-2026-10928 | Chromium: CVE-2026-10928 Script injection in Headless | UNKNOWN | — | 35%ile | Microsoft | 2026-06-09 |
| CVE-2026-10929 | Chromium: CVE-2026-10929 Heap buffer overflow in ANGLE | UNKNOWN | — | 24%ile | Microsoft | 2026-06-09 |
| CVE-2026-10930 | Chromium: CVE-2026-10930 Out of bounds read in ANGLE | UNKNOWN | — | 25%ile | Microsoft | 2026-06-09 |
| CVE-2026-10931 | Chromium: CVE-2026-10931 Use after free in FileSystem | UNKNOWN | — | 26%ile | Microsoft | 2026-06-09 |
| CVE-2026-10932 | Chromium: CVE-2026-10932 Use after free in UI | UNKNOWN | — | 23%ile | Microsoft | 2026-06-09 |
| CVE-2026-10933 | Chromium: CVE-2026-10933 Use after free in Audio | UNKNOWN | — | 19%ile | Microsoft | 2026-06-09 |
| CVE-2026-10934 | Chromium: CVE-2026-10934 Use after free in Autofill | UNKNOWN | — | 19%ile | Microsoft | 2026-06-09 |
| CVE-2026-10935 | Chromium: CVE-2026-10935 Inappropriate implementation in V8 | UNKNOWN | — | 34%ile | Microsoft | 2026-06-09 |
| CVE-2026-10936 | Chromium: CVE-2026-10936 Type Confusion in V8 | UNKNOWN | — | 34%ile | Microsoft | 2026-06-09 |
| CVE-2026-10937 | Chromium: CVE-2026-10937 Inappropriate implementation in Passwords | UNKNOWN | — | 20%ile | Microsoft | 2026-06-09 |
| CVE-2026-10938 | Chromium: CVE-2026-10938 Insufficient validation of untrusted input in Input | UNKNOWN | — | 29%ile | Microsoft | 2026-06-09 |
| CVE-2026-10939 | Chromium: CVE-2026-10939 Use after free in WebRTC | UNKNOWN | — | 40%ile | Microsoft | 2026-06-09 |
| CVE-2026-10940 | Chromium: CVE-2026-10940 Race in Codecs | UNKNOWN | — | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-10941 | Chromium: CVE-2026-10941 Out of bounds memory access in Skia | UNKNOWN | — | 38%ile | Microsoft | 2026-06-09 |
| CVE-2026-10942 | Chromium: CVE-2026-10942 Insufficient validation of untrusted input in UI | UNKNOWN | — | 7%ile | Microsoft | 2026-06-09 |
| CVE-2026-10943 | Chromium: CVE-2026-10943 Use after free in WebRTC | UNKNOWN | — | 42%ile | Microsoft | 2026-06-09 |
| CVE-2026-10945 | Chromium: CVE-2026-10945 Use after free in PDF | UNKNOWN | — | 30%ile | Microsoft | 2026-06-09 |
| CVE-2026-10946 | Chromium: CVE-2026-10946 Heap buffer overflow in Media | UNKNOWN | — | 31%ile | Microsoft | 2026-06-09 |
| CVE-2026-10947 | Chromium: CVE-2026-10947 Use after free in WebRTC | UNKNOWN | — | 42%ile | Microsoft | 2026-06-09 |
| CVE-2026-10948 | Chromium: CVE-2026-10948 Use after free in WebRTC | UNKNOWN | — | 42%ile | Microsoft | 2026-06-09 |
| CVE-2026-10949 | Chromium: CVE-2026-10949 Heap buffer overflow in Video | UNKNOWN | — | 24%ile | Microsoft | 2026-06-09 |
| CVE-2026-10953 | Chromium: CVE-2026-10953 Use after free in Core | UNKNOWN | — | 21%ile | Microsoft | 2026-06-09 |
| CVE-2026-10954 | Chromium: CVE-2026-10954 Use after free in Actor | UNKNOWN | — | 33%ile | Microsoft | 2026-06-09 |
| CVE-2026-10955 | Chromium: CVE-2026-10955 Type Confusion in ANGLE | UNKNOWN | — | 32%ile | Microsoft | 2026-06-09 |
| CVE-2026-10956 | Chromium: CVE-2026-10956 Use after free in MimeHandlerView | UNKNOWN | — | 33%ile | Microsoft | 2026-06-09 |
| CVE-2026-10957 | Chromium: CVE-2026-10957 Use after free in Glic | UNKNOWN | — | 30%ile | Microsoft | 2026-06-09 |
| CVE-2026-10959 | Chromium: CVE-2026-10959 Use after free in Input | UNKNOWN | — | 30%ile | Microsoft | 2026-06-09 |
| CVE-2026-10960 | Chromium: CVE-2026-10960 Uninitialized Use in Codecs | UNKNOWN | — | 22%ile | Microsoft | 2026-06-09 |
| CVE-2026-10962 | Chromium: CVE-2026-10962 Type Confusion in Media | UNKNOWN | — | 34%ile | Microsoft | 2026-06-09 |
| CVE-2026-10963 | Chromium: CVE-2026-10963 Integer overflow in V8 | UNKNOWN | — | 30%ile | Microsoft | 2026-06-09 |
| CVE-2026-10964 | Chromium: CVE-2026-10964 Integer overflow in V8 | UNKNOWN | — | 30%ile | Microsoft | 2026-06-09 |
| CVE-2026-10965 | Chromium: CVE-2026-10965 Integer overflow in DevTools | UNKNOWN | — | 30%ile | Microsoft | 2026-06-09 |
| CVE-2026-10966 | Chromium: CVE-2026-10966 Insufficient validation of untrusted input in Codecs | UNKNOWN | — | 23%ile | Microsoft | 2026-06-09 |
| CVE-2026-10967 | Chromium: CVE-2026-10967 Use after free in SurfaceCapture | UNKNOWN | — | 19%ile | Microsoft | 2026-06-09 |
| CVE-2026-10968 | Chromium: CVE-2026-10968 Insufficient validation of untrusted input in Dawn | UNKNOWN | — | 24%ile | Microsoft | 2026-06-09 |
| CVE-2026-10969 | Chromium: CVE-2026-10969 Insufficient validation of untrusted input in Extensions | UNKNOWN | — | 21%ile | Microsoft | 2026-06-09 |
| CVE-2026-10970 | Chromium: CVE-2026-10970 Insufficient validation of untrusted input in InterestGroups | UNKNOWN | — | 21%ile | Microsoft | 2026-06-09 |
| CVE-2026-10971 | Chromium: CVE-2026-10971 Insufficient validation of untrusted input in Printing | UNKNOWN | — | 26%ile | Microsoft | 2026-06-09 |
| CVE-2026-10972 | Chromium: CVE-2026-10972 Use after free in Ozone | UNKNOWN | — | 26%ile | Microsoft | 2026-06-09 |
| CVE-2026-10973 | Chromium: CVE-2026-10973 Uninitialized Use in Dawn | UNKNOWN | — | 62%ile | Microsoft | 2026-06-09 |
| CVE-2026-10974 | Chromium: CVE-2026-10974 Insufficient validation of untrusted input in ANGLE | UNKNOWN | — | 27%ile | Microsoft | 2026-06-09 |
| CVE-2026-10975 | Chromium: CVE-2026-10975 Use after free in WebRTC | UNKNOWN | — | 40%ile | Microsoft | 2026-06-09 |
| CVE-2026-10976 | Chromium: CVE-2026-10976 Uninitialized Use in Dawn | UNKNOWN | — | 27%ile | Microsoft | 2026-06-09 |
| CVE-2026-10977 | Chromium: CVE-2026-10977 Uninitialized Use in Skia | UNKNOWN | — | 29%ile | Microsoft | 2026-06-09 |
| CVE-2026-10978 | Chromium: CVE-2026-10978 Use after free in Chromoting | UNKNOWN | — | 26%ile | Microsoft | 2026-06-09 |
| CVE-2026-10979 | Chromium: CVE-2026-10979 Out of bounds read in ANGLE | UNKNOWN | — | 25%ile | Microsoft | 2026-06-09 |
| CVE-2026-10980 | Chromium: CVE-2026-10980 Insufficient validation of untrusted input in DevTools | UNKNOWN | — | 26%ile | Microsoft | 2026-06-09 |
| CVE-2026-10981 | Chromium: CVE-2026-10981 Insufficient validation of untrusted input in Codecs | UNKNOWN | — | 21%ile | Microsoft | 2026-06-09 |
| CVE-2026-10982 | Chromium: CVE-2026-10982 Use after free in WebXR | UNKNOWN | — | 40%ile | Microsoft | 2026-06-09 |
| CVE-2026-10983 | Chromium: CVE-2026-10983 Insufficient validation of untrusted input in Dawn | UNKNOWN | — | 26%ile | Microsoft | 2026-06-09 |
| CVE-2026-10984 | Chromium: CVE-2026-10984 Inappropriate implementation in Accessibility | UNKNOWN | — | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-10985 | Chromium: CVE-2026-10985 Out of bounds read in Skia | UNKNOWN | — | 25%ile | Microsoft | 2026-06-09 |
| CVE-2026-10986 | Chromium: CVE-2026-10986 Integer overflow in Media | UNKNOWN | — | 26%ile | Microsoft | 2026-06-09 |
| CVE-2026-10987 | Chromium: CVE-2026-10987 Integer overflow in V8 | UNKNOWN | — | 30%ile | Microsoft | 2026-06-09 |
| CVE-2026-10988 | Chromium: CVE-2026-10988 Use after free in Views | UNKNOWN | — | 26%ile | Microsoft | 2026-06-09 |
| CVE-2026-10989 | Chromium: CVE-2026-10989 Inappropriate implementation in V8 | UNKNOWN | — | 26%ile | Microsoft | 2026-06-09 |
| CVE-2026-10990 | Chromium: CVE-2026-10990 Use after free in Glic | UNKNOWN | — | 23%ile | Microsoft | 2026-06-09 |
| CVE-2026-10991 | Chromium: CVE-2026-10991 Use after free in V8 | UNKNOWN | — | 30%ile | Microsoft | 2026-06-09 |
| CVE-2026-10992 | Chromium: CVE-2026-10992 Insufficient data validation in Animation | UNKNOWN | — | 24%ile | Microsoft | 2026-06-09 |
| CVE-2026-10993 | Chromium: CVE-2026-10993 Heap buffer overflow in Skia | UNKNOWN | — | 28%ile | Microsoft | 2026-06-09 |
| CVE-2026-10994 | Chromium: CVE-2026-10994 Uninitialized Use in ANGLE | UNKNOWN | — | 29%ile | Microsoft | 2026-06-09 |
| CVE-2026-10995 | Chromium: CVE-2026-10995 Heap buffer overflow in TabStrip | UNKNOWN | — | 29%ile | Microsoft | 2026-06-09 |
| CVE-2026-10996 | Chromium: CVE-2026-10996 Inappropriate implementation in Workers | UNKNOWN | — | 18%ile | Microsoft | 2026-06-09 |
| CVE-2026-10997 | Chromium: CVE-2026-10997 Insufficient policy enforcement in Extensions | UNKNOWN | — | 15%ile | Microsoft | 2026-06-09 |
| CVE-2026-10998 | Chromium: CVE-2026-10998 Out of bounds read in Media | UNKNOWN | — | 1%ile | Microsoft | 2026-06-09 |
| CVE-2026-10999 | Chromium: CVE-2026-10999 Out of bounds memory access in ANGLE | UNKNOWN | — | 21%ile | Microsoft | 2026-06-09 |
| CVE-2026-11000 | Chromium: CVE-2026-11000 Use after free in Fonts | UNKNOWN | — | 30%ile | Microsoft | 2026-06-09 |
| CVE-2026-11001 | Chromium: CVE-2026-11001 Incorrect security UI in Payments | UNKNOWN | — | 12%ile | Microsoft | 2026-06-09 |
| CVE-2026-11002 | Chromium: CVE-2026-11002 Use after free in Autofill | UNKNOWN | — | 23%ile | Microsoft | 2026-06-09 |
| CVE-2026-11003 | Chromium: CVE-2026-11003 Use after free in WebRTC | UNKNOWN | — | 40%ile | Microsoft | 2026-06-09 |
| CVE-2026-11004 | Chromium: CVE-2026-11004 Out of bounds read in ANGLE | UNKNOWN | — | 21%ile | Microsoft | 2026-06-09 |
| CVE-2026-11005 | Chromium: CVE-2026-11005 Out of bounds read in ANGLE | UNKNOWN | — | 20%ile | Microsoft | 2026-06-09 |
| CVE-2026-11006 | Chromium: CVE-2026-11006 Out of bounds read in Dawn | UNKNOWN | — | 24%ile | Microsoft | 2026-06-09 |
| CVE-2026-11007 | Chromium: CVE-2026-11007 Insufficient validation of untrusted input in WebView | UNKNOWN | — | 24%ile | Microsoft | 2026-06-09 |
| CVE-2026-11008 | Chromium: CVE-2026-11008 Insufficient validation of untrusted input in WebAppInstalls | UNKNOWN | — | 24%ile | Microsoft | 2026-06-09 |
| CVE-2026-11009 | Chromium: CVE-2026-11009 Use after free in USB | UNKNOWN | — | 26%ile | Microsoft | 2026-06-09 |
| CVE-2026-11010 | Chromium: CVE-2026-11010 Use after free in WebShare | UNKNOWN | — | 21%ile | Microsoft | 2026-06-09 |
| CVE-2026-11011 | Chromium: CVE-2026-11011 Insufficient policy enforcement in Password Manager | UNKNOWN | — | 24%ile | Microsoft | 2026-06-09 |
| CVE-2026-11012 | Chromium: CVE-2026-11012 Use after free in Serial | UNKNOWN | — | 21%ile | Microsoft | 2026-06-09 |
| CVE-2026-11013 | Chromium: CVE-2026-11013 Insufficient validation of untrusted input in Network | UNKNOWN | — | 24%ile | Microsoft | 2026-06-09 |
| CVE-2026-11014 | Chromium: CVE-2026-11014 Insufficient policy enforcement in Extensions | UNKNOWN | — | 12%ile | Microsoft | 2026-06-09 |
| CVE-2026-11015 | Chromium: CVE-2026-11015 Out of bounds read in WebGPU | UNKNOWN | — | 25%ile | Microsoft | 2026-06-09 |
| CVE-2026-11016 | Chromium: CVE-2026-11016 Insufficient validation of untrusted input in Network | UNKNOWN | — | 20%ile | Microsoft | 2026-06-09 |
| CVE-2026-11017 | Chromium: CVE-2026-11017 Inappropriate implementation in Link Preview | UNKNOWN | — | 19%ile | Microsoft | 2026-06-09 |
| CVE-2026-11018 | Chromium: CVE-2026-11018 Insufficient policy enforcement in Actor | UNKNOWN | — | 20%ile | Microsoft | 2026-06-09 |
| CVE-2026-11019 | Chromium: CVE-2026-11019 Inappropriate implementation in Payments | UNKNOWN | — | 18%ile | Microsoft | 2026-06-09 |
| CVE-2026-11020 | Chromium: CVE-2026-11020 Inappropriate implementation in Extensions | UNKNOWN | — | 13%ile | Microsoft | 2026-06-09 |
| CVE-2026-11021 | Chromium: CVE-2026-11021 Insufficient validation of untrusted input in GPU | UNKNOWN | — | 26%ile | Microsoft | 2026-06-09 |
| CVE-2026-11022 | Chromium: CVE-2026-11022 Insufficient validation of untrusted input in DevTools | UNKNOWN | — | 20%ile | Microsoft | 2026-06-09 |
| CVE-2026-11023 | Chromium: CVE-2026-11023 Insufficient validation of untrusted input in WebAppInstalls | UNKNOWN | — | 13%ile | Microsoft | 2026-06-09 |
| CVE-2026-11024 | Chromium: CVE-2026-11024 Stack buffer overflow in Skia | UNKNOWN | — | 31%ile | Microsoft | 2026-06-09 |
| CVE-2026-11025 | Chromium: CVE-2026-11025 Insufficient policy enforcement in Navigation | UNKNOWN | — | 20%ile | Microsoft | 2026-06-09 |
| CVE-2026-11026 | Chromium: CVE-2026-11026 Insufficient policy enforcement in Extensions | UNKNOWN | — | 6%ile | Microsoft | 2026-06-09 |
| CVE-2026-11027 | Chromium: CVE-2026-11027 Insufficient validation of untrusted input in Glic | UNKNOWN | — | 21%ile | Microsoft | 2026-06-09 |
| CVE-2026-11028 | Chromium: CVE-2026-11028 Use after free in Media | UNKNOWN | — | 30%ile | Microsoft | 2026-06-09 |
| CVE-2026-11029 | Chromium: CVE-2026-11029 Insufficient validation of untrusted input in Drag and Drop | UNKNOWN | — | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-11030 | Chromium: CVE-2026-11030 Use after free in Network | UNKNOWN | — | 20%ile | Microsoft | 2026-06-09 |
| CVE-2026-11031 | Chromium: CVE-2026-11031 Insufficient validation of untrusted input in Password Manager | UNKNOWN | — | 10%ile | Microsoft | 2026-06-09 |
| CVE-2026-11032 | Chromium: CVE-2026-11032 Insufficient data validation in Password Manager | UNKNOWN | — | 7%ile | Microsoft | 2026-06-09 |
| CVE-2026-11033 | Chromium: CVE-2026-11033 Uninitialized Use in WebML | UNKNOWN | — | 16%ile | Microsoft | 2026-06-09 |
| CVE-2026-11034 | Chromium: CVE-2026-11034 Insufficient validation of untrusted input in Tab Group Sync | UNKNOWN | — | 8%ile | Microsoft | 2026-06-09 |
| CVE-2026-11035 | Chromium: CVE-2026-11035 Insufficient validation of untrusted input in Custom Tabs | UNKNOWN | — | 0%ile | Microsoft | 2026-06-09 |
| CVE-2026-11036 | Chromium: CVE-2026-11036 Inappropriate implementation in DOM | UNKNOWN | — | 6%ile | Microsoft | 2026-06-09 |
| CVE-2026-11037 | Chromium: CVE-2026-11037 Out of bounds write in Codecs | UNKNOWN | — | 20%ile | Microsoft | 2026-06-09 |
| CVE-2026-11038 | Chromium: CVE-2026-11038 Insufficient validation of untrusted input in Subresource Integrity | UNKNOWN | — | 9%ile | Microsoft | 2026-06-09 |
| CVE-2026-11039 | Chromium: CVE-2026-11039 Uninitialized Use in Skia | UNKNOWN | — | 18%ile | Microsoft | 2026-06-09 |
| CVE-2026-11040 | Chromium: CVE-2026-11040 Use after free in ANGLE | UNKNOWN | — | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-11041 | Chromium: CVE-2026-11041 Insufficient validation of untrusted input in Media | UNKNOWN | — | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-11042 | Chromium: CVE-2026-11042 Use after free in Views | UNKNOWN | — | 23%ile | Microsoft | 2026-06-09 |
| CVE-2026-11043 | Chromium: CVE-2026-11043 Out of bounds write in ANGLE | UNKNOWN | — | 23%ile | Microsoft | 2026-06-09 |
| CVE-2026-11044 | Chromium: CVE-2026-11044 Integer overflow in ANGLE | UNKNOWN | — | 21%ile | Microsoft | 2026-06-09 |
| CVE-2026-11045 | Chromium: CVE-2026-11045 Insufficient validation of untrusted input in GPU | UNKNOWN | — | 21%ile | Microsoft | 2026-06-09 |
| CVE-2026-11046 | Chromium: CVE-2026-11046 Insufficient validation of untrusted input in Media | UNKNOWN | — | 30%ile | Microsoft | 2026-06-09 |
| CVE-2026-11047 | Chromium: CVE-2026-11047 Insufficient validation of untrusted input in Base | UNKNOWN | — | 23%ile | Microsoft | 2026-06-09 |
| CVE-2026-11048 | Chromium: CVE-2026-11048 Inappropriate implementation in Extensions | UNKNOWN | — | 5%ile | Microsoft | 2026-06-09 |
| CVE-2026-11049 | Chromium: CVE-2026-11049 Use after free in Password Manager | UNKNOWN | — | 21%ile | Microsoft | 2026-06-09 |
| CVE-2026-11050 | Chromium: CVE-2026-11050 Use after free in V8 | UNKNOWN | — | 21%ile | Microsoft | 2026-06-09 |
| CVE-2026-11051 | Chromium: CVE-2026-11051 Out of bounds read in ANGLE | UNKNOWN | — | 15%ile | Microsoft | 2026-06-09 |
| CVE-2026-11052 | Chromium: CVE-2026-11052 Type Confusion in GPU | UNKNOWN | — | 17%ile | Microsoft | 2026-06-09 |
| CVE-2026-11053 | Chromium: CVE-2026-11053 VULNERABILITY in WebRTC | UNKNOWN | — | — | Microsoft | 2026-06-09 |
| CVE-2026-11054 | Chromium: CVE-2026-11054 Use after free in WebRTC | UNKNOWN | — | 29%ile | Microsoft | 2026-06-09 |
| CVE-2026-11055 | Chromium: CVE-2026-11055 Use after free in ANGLE | UNKNOWN | — | 21%ile | Microsoft | 2026-06-09 |
| CVE-2026-11056 | Chromium: CVE-2026-11056 Insufficient validation of untrusted input in SiteIsolation | UNKNOWN | — | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-11057 | Chromium: CVE-2026-11057 Uninitialized Use in Skia | UNKNOWN | — | 18%ile | Microsoft | 2026-06-09 |
| CVE-2026-11058 | Chromium: CVE-2026-11058 Integer overflow in CredentialProvider | UNKNOWN | — | 11%ile | Microsoft | 2026-06-09 |
| CVE-2026-11059 | Chromium: CVE-2026-11059 Use after free in Blink | UNKNOWN | — | 21%ile | Microsoft | 2026-06-09 |
| CVE-2026-11060 | Chromium: CVE-2026-11060 Use after free in Media | UNKNOWN | — | 21%ile | Microsoft | 2026-06-09 |
| CVE-2026-11061 | Chromium: CVE-2026-11061 Out of bounds read in ANGLE | UNKNOWN | — | 19%ile | Microsoft | 2026-06-09 |
| CVE-2026-11062 | Chromium: CVE-2026-11062 Insufficient policy enforcement in Extensions | UNKNOWN | — | 3%ile | Microsoft | 2026-06-09 |
| CVE-2026-11063 | Chromium: CVE-2026-11063 Insufficient validation of untrusted input in WebNN | UNKNOWN | — | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-11064 | Chromium: CVE-2026-11064 Uninitialized Use in GPU | UNKNOWN | — | 16%ile | Microsoft | 2026-06-09 |
| CVE-2026-11065 | Chromium: CVE-2026-11065 Use after free in ANGLE | UNKNOWN | — | 27%ile | Microsoft | 2026-06-09 |
| CVE-2026-11066 | Chromium: CVE-2026-11066 Insufficient validation of untrusted input in ANGLE | UNKNOWN | — | 19%ile | Microsoft | 2026-06-09 |
| CVE-2026-11067 | Chromium: CVE-2026-11067 Uninitialized Use in Dawn | UNKNOWN | — | 16%ile | Microsoft | 2026-06-09 |
| CVE-2026-11068 | Chromium: CVE-2026-11068 Use after free in WebSockets | UNKNOWN | — | 29%ile | Microsoft | 2026-06-09 |
| CVE-2026-11069 | Chromium: CVE-2026-11069 Insufficient validation of untrusted input in Cast | UNKNOWN | — | 11%ile | Microsoft | 2026-06-09 |
| CVE-2026-11070 | Chromium: CVE-2026-11070 Insufficient validation of untrusted input in Chromoting | UNKNOWN | — | 12%ile | Microsoft | 2026-06-09 |
| CVE-2026-11071 | Chromium: CVE-2026-11071 Use after free in Base | UNKNOWN | — | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-11072 | Chromium: CVE-2026-11072 Use after free in WebView | UNKNOWN | — | 1%ile | Microsoft | 2026-06-09 |
| CVE-2026-11073 | Chromium: CVE-2026-11073 Use after free in WebGL | UNKNOWN | — | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-11074 | Chromium: CVE-2026-11074 Use after free in WebRTC | UNKNOWN | — | 29%ile | Microsoft | 2026-06-09 |
| CVE-2026-11075 | Chromium: CVE-2026-11075 Out of bounds read in V8 | UNKNOWN | — | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-11076 | Chromium: CVE-2026-11076 Type Confusion in CSS | UNKNOWN | — | 24%ile | Microsoft | 2026-06-09 |
| CVE-2026-11077 | Chromium: CVE-2026-11077 Out of bounds read in Dawn | UNKNOWN | — | 21%ile | Microsoft | 2026-06-09 |
| CVE-2026-11078 | Chromium: CVE-2026-11078 Insufficient validation of untrusted input in FileSystem | UNKNOWN | — | 10%ile | Microsoft | 2026-06-09 |
| CVE-2026-11079 | Chromium: CVE-2026-11079 Insufficient validation of untrusted input in Codecs | UNKNOWN | — | 12%ile | Microsoft | 2026-06-09 |
| CVE-2026-11080 | Chromium: CVE-2026-11080 Use after free in WebView | UNKNOWN | — | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-11081 | Chromium: CVE-2026-11081 Policy bypass in Canvas | UNKNOWN | — | 6%ile | Microsoft | 2026-06-09 |
| CVE-2026-11082 | Chromium: CVE-2026-11082 Use after free in GPU | UNKNOWN | — | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-11083 | Chromium: CVE-2026-11083 Inappropriate implementation in Password Manager | UNKNOWN | — | 7%ile | Microsoft | 2026-06-09 |
| CVE-2026-11084 | Chromium: CVE-2026-11084 Inappropriate implementation in Password Manager | UNKNOWN | — | 7%ile | Microsoft | 2026-06-09 |
| CVE-2026-11085 | Chromium: CVE-2026-11085 Integer overflow in GPU | UNKNOWN | — | 16%ile | Microsoft | 2026-06-09 |
| CVE-2026-11086 | Chromium: CVE-2026-11086 Insufficient validation of untrusted input in Dawn | UNKNOWN | — | 20%ile | Microsoft | 2026-06-09 |
| CVE-2026-11087 | Chromium: CVE-2026-11087 Uninitialized Use in ANGLE | UNKNOWN | — | 18%ile | Microsoft | 2026-06-09 |
| CVE-2026-11088 | Chromium: CVE-2026-11088 Integer overflow in ANGLE | UNKNOWN | — | 27%ile | Microsoft | 2026-06-09 |
| CVE-2026-11089 | Chromium: CVE-2026-11089 Uninitialized Use in Media | UNKNOWN | — | 16%ile | Microsoft | 2026-06-09 |
| CVE-2026-11090 | Chromium: CVE-2026-11090 Uninitialized Use in ANGLE | UNKNOWN | — | 18%ile | Microsoft | 2026-06-09 |
| CVE-2026-11091 | Chromium: CVE-2026-11091 Inappropriate implementation in Dawn | UNKNOWN | — | 16%ile | Microsoft | 2026-06-09 |
| CVE-2026-11092 | Chromium: CVE-2026-11092 Insufficient policy enforcement in DevTools | UNKNOWN | — | 7%ile | Microsoft | 2026-06-09 |
| CVE-2026-11093 | Chromium: CVE-2026-11093 Insufficient validation of untrusted input in Printing | UNKNOWN | — | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-11094 | Chromium: CVE-2026-11094 Use after free in Codecs | UNKNOWN | — | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-11095 | Chromium: CVE-2026-11095 Insufficient validation of untrusted input in Codecs | UNKNOWN | — | 20%ile | Microsoft | 2026-06-09 |
| CVE-2026-11096 | Chromium: CVE-2026-11096 Out of bounds read in WebRTC | UNKNOWN | — | 16%ile | Microsoft | 2026-06-09 |
| CVE-2026-11097 | Chromium: CVE-2026-11097 Inappropriate implementation in WebView | UNKNOWN | — | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-11098 | Chromium: CVE-2026-11098 Insufficient validation of untrusted input in GPU | UNKNOWN | — | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-11099 | Chromium: CVE-2026-11099 Vulnerability in Skia | UNKNOWN | — | — | Microsoft | 2026-06-09 |
| CVE-2026-11100 | Chromium: CVE-2026-11100 Use after free in File Input | UNKNOWN | — | 17%ile | Microsoft | 2026-06-09 |
| CVE-2026-11101 | Chromium: CVE-2026-11101 Uninitialized Use in Dawn | UNKNOWN | — | 16%ile | Microsoft | 2026-06-09 |
| CVE-2026-11102 | Chromium: CVE-2026-11102 Inappropriate implementation in Isolated Web Apps | UNKNOWN | — | 31%ile | Microsoft | 2026-06-09 |
| CVE-2026-11103 | Chromium: CVE-2026-11103 Inappropriate implementation in Installer | UNKNOWN | — | 0%ile | Microsoft | 2026-06-09 |
| CVE-2026-11104 | Chromium: CVE-2026-11104 Uninitialized Use in ANGLE | UNKNOWN | — | 18%ile | Microsoft | 2026-06-09 |
| CVE-2026-11105 | Chromium: CVE-2026-11105 Insufficient validation of untrusted input in WebUI | UNKNOWN | — | 16%ile | Microsoft | 2026-06-09 |
| CVE-2026-11106 | Chromium: CVE-2026-11106 Inappropriate implementation in Media | UNKNOWN | — | 8%ile | Microsoft | 2026-06-09 |
| CVE-2026-11107 | Chromium: CVE-2026-11107 Inappropriate implementation in Downloads | UNKNOWN | — | 13%ile | Microsoft | 2026-06-09 |
| CVE-2026-11108 | Chromium: CVE-2026-11108 Inappropriate implementation in NFC | UNKNOWN | — | 13%ile | Microsoft | 2026-06-09 |
| CVE-2026-11109 | Chromium: CVE-2026-11109 Uninitialized Use in ANGLE | UNKNOWN | — | 18%ile | Microsoft | 2026-06-09 |
| CVE-2026-11110 | Chromium: CVE-2026-11110 Uninitialized Use in ANGLE | UNKNOWN | — | 18%ile | Microsoft | 2026-06-09 |
| CVE-2026-11111 | Chromium: CVE-2026-11111 Out of bounds read in ANGLE | UNKNOWN | — | 15%ile | Microsoft | 2026-06-09 |
| CVE-2026-11112 | Chromium: CVE-2026-11112 Insufficient validation of untrusted input in Chromoting | UNKNOWN | — | 12%ile | Microsoft | 2026-06-09 |
| CVE-2026-11113 | Chromium: CVE-2026-11113 Insufficient validation of untrusted input in ANGLE | UNKNOWN | — | 20%ile | Microsoft | 2026-06-09 |
| CVE-2026-11114 | Chromium: CVE-2026-11114 Use after free in Device Trust | UNKNOWN | — | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-11115 | Chromium: CVE-2026-11115 Use after free in Updater | UNKNOWN | — | 0%ile | Microsoft | 2026-06-09 |
| CVE-2026-11116 | Chromium: CVE-2026-11116 Use after free in Chromoting | UNKNOWN | — | 21%ile | Microsoft | 2026-06-09 |
| CVE-2026-11117 | Chromium: CVE-2026-11117 Use after free in Views | UNKNOWN | — | 23%ile | Microsoft | 2026-06-09 |
| CVE-2026-11118 | Chromium: CVE-2026-11118 Use after free in WebRTC | UNKNOWN | — | 33%ile | Microsoft | 2026-06-09 |
| CVE-2026-11119 | Chromium: CVE-2026-11119 Insufficient validation of untrusted input in GPU | UNKNOWN | — | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-11120 | Chromium: CVE-2026-11120 Insufficient validation of untrusted input in Enterprise Reporting | UNKNOWN | — | 18%ile | Microsoft | 2026-06-09 |
| CVE-2026-11121 | Chromium: CVE-2026-11121 Insufficient validation of untrusted input in Skia | UNKNOWN | — | 15%ile | Microsoft | 2026-06-09 |
| CVE-2026-11122 | Chromium: CVE-2026-11122 Inappropriate implementation in Keyboard | UNKNOWN | — | 7%ile | Microsoft | 2026-06-09 |
| CVE-2026-11123 | Chromium: CVE-2026-11123 Uninitialized Use in ANGLE | UNKNOWN | — | 18%ile | Microsoft | 2026-06-09 |
| CVE-2026-11124 | Chromium: CVE-2026-11124 Heap buffer overflow in Skia | UNKNOWN | — | 16%ile | Microsoft | 2026-06-09 |
| CVE-2026-11125 | Chromium: CVE-2026-11125 Use after free in Compositing | UNKNOWN | — | 21%ile | Microsoft | 2026-06-09 |
| CVE-2026-11126 | Chromium: CVE-2026-11126 Insufficient validation of untrusted input in DevTools | UNKNOWN | — | 4%ile | Microsoft | 2026-06-09 |
| CVE-2026-11127 | Chromium: CVE-2026-11127 Inappropriate implementation in WebAPKs | UNKNOWN | — | 6%ile | Microsoft | 2026-06-09 |
| CVE-2026-11128 | Chromium: CVE-2026-11128 Insufficient validation of untrusted input in Web Share | UNKNOWN | — | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-11129 | Chromium: CVE-2026-11129 Inappropriate implementation in Extensions | UNKNOWN | — | 7%ile | Microsoft | 2026-06-09 |
| CVE-2026-11130 | Chromium: CVE-2026-11130 Use after free in Media | UNKNOWN | — | 20%ile | Microsoft | 2026-06-09 |
| CVE-2026-11131 | Chromium: CVE-2026-11131 Use after free in Autofill | UNKNOWN | — | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-11132 | Chromium: CVE-2026-11132 Policy bypass in Paint | UNKNOWN | — | 11%ile | Microsoft | 2026-06-09 |
| CVE-2026-11133 | Chromium: CVE-2026-11133 Insufficient policy enforcement in Paint | UNKNOWN | — | 11%ile | Microsoft | 2026-06-09 |
| CVE-2026-11134 | Chromium: CVE-2026-11134 Insufficient data validation in Media | UNKNOWN | — | 7%ile | Microsoft | 2026-06-09 |
| CVE-2026-11135 | Chromium: CVE-2026-11135 Insufficient policy enforcement in Autofill | UNKNOWN | — | 10%ile | Microsoft | 2026-06-09 |
| CVE-2026-11136 | Chromium: CVE-2026-11136 Use after free in Canvas | UNKNOWN | — | 21%ile | Microsoft | 2026-06-09 |
| CVE-2026-11137 | Chromium: CVE-2026-11137 Uninitialized Use in ANGLE | UNKNOWN | — | 18%ile | Microsoft | 2026-06-09 |
| CVE-2026-11138 | Chromium: CVE-2026-11138 Uninitialized Use in ANGLE | UNKNOWN | — | 18%ile | Microsoft | 2026-06-09 |
| CVE-2026-11139 | Chromium: CVE-2026-11139 Policy bypass in Paint | UNKNOWN | — | 7%ile | Microsoft | 2026-06-09 |
| CVE-2026-11140 | Chromium: CVE-2026-11140 Insufficient validation of untrusted input in Chromecast | UNKNOWN | — | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-11141 | Chromium: CVE-2026-11141 Uninitialized Use in Audio | UNKNOWN | — | 16%ile | Microsoft | 2026-06-09 |
| CVE-2026-11142 | Chromium: CVE-2026-11142 Policy bypass in Paint | UNKNOWN | — | 10%ile | Microsoft | 2026-06-09 |
| CVE-2026-11143 | Chromium: CVE-2026-11143 Heap buffer overflow in Extensions | UNKNOWN | — | 7%ile | Microsoft | 2026-06-09 |
| CVE-2026-11144 | Chromium: CVE-2026-11144 Use after free in Media | UNKNOWN | — | 18%ile | Microsoft | 2026-06-09 |
| CVE-2026-11145 | Chromium: CVE-2026-11145 Race in Geolocation | UNKNOWN | — | 6%ile | Microsoft | 2026-06-09 |
| CVE-2026-11146 | Chromium: CVE-2026-11146 Insufficient validation of untrusted input in Chromoting | UNKNOWN | — | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-11147 | Chromium: CVE-2026-11147 Use after free in WebML | UNKNOWN | — | 29%ile | Microsoft | 2026-06-09 |
| CVE-2026-11148 | Chromium: CVE-2026-11148 Inappropriate implementation in Payments | UNKNOWN | — | 3%ile | Microsoft | 2026-06-09 |
| CVE-2026-11149 | Chromium: CVE-2026-11149 Insufficient validation of untrusted input in Extensions | UNKNOWN | — | 13%ile | Microsoft | 2026-06-09 |
| CVE-2026-11150 | Chromium: CVE-2026-11150 Inappropriate implementation in XML | UNKNOWN | — | 5%ile | Microsoft | 2026-06-09 |
| CVE-2026-11151 | Chromium: CVE-2026-11151 Insufficient validation of untrusted input in Password Manager | UNKNOWN | — | 13%ile | Microsoft | 2026-06-09 |
| CVE-2026-11152 | Chromium: CVE-2026-11152 Object lifecycle issue in Dawn | UNKNOWN | — | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-11153 | Chromium: CVE-2026-11153 Side-channel information leakage in Forms | UNKNOWN | — | 18%ile | Microsoft | 2026-06-09 |
| CVE-2026-11154 | Chromium: CVE-2026-11154 Use after free in Dawn | UNKNOWN | — | 11%ile | Microsoft | 2026-06-09 |
| CVE-2026-11155 | Chromium: CVE-2026-11155 Insufficient policy enforcement in CSS | UNKNOWN | — | 6%ile | Microsoft | 2026-06-09 |
| CVE-2026-11156 | Chromium: CVE-2026-11156 Inappropriate implementation in CSS | UNKNOWN | — | 6%ile | Microsoft | 2026-06-09 |
| CVE-2026-11157 | Chromium: CVE-2026-11157 Script injection in Accessibility | UNKNOWN | — | 2%ile | Microsoft | 2026-06-09 |
| CVE-2026-11158 | Chromium: CVE-2026-11158 Insufficient validation of untrusted input in Downloads | UNKNOWN | — | 0%ile | Microsoft | 2026-06-09 |
| CVE-2026-11159 | Chromium: CVE-2026-11159 Uninitialized Use in Skia | UNKNOWN | — | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-11160 | Chromium: CVE-2026-11160 Out of bounds read in Input | UNKNOWN | — | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-11161 | Chromium: CVE-2026-11161 Insufficient data validation in DataTransfer | UNKNOWN | — | 6%ile | Microsoft | 2026-06-09 |
| CVE-2026-11162 | Chromium: CVE-2026-11162 Insufficient policy enforcement in CSS | UNKNOWN | — | 10%ile | Microsoft | 2026-06-09 |
| CVE-2026-11163 | Chromium: CVE-2026-11163 Use after free in Messages | UNKNOWN | — | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-11164 | Chromium: CVE-2026-11164 Use after free in Blink | UNKNOWN | — | 21%ile | Microsoft | 2026-06-09 |
| CVE-2026-11166 | Chromium: CVE-2026-11166 Inappropriate implementation in SVG | UNKNOWN | — | 10%ile | Microsoft | 2026-06-09 |
| CVE-2026-11167 | Chromium: CVE-2026-11167 Inappropriate implementation in WebView | UNKNOWN | — | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-11168 | Chromium: CVE-2026-11168 Insufficient policy enforcement in Extensions | UNKNOWN | — | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-11169 | Chromium: CVE-2026-11169 Inappropriate implementation in XML | UNKNOWN | — | 11%ile | Microsoft | 2026-06-09 |
| CVE-2026-11170 | Chromium: CVE-2026-11170 Inappropriate implementation in Chromoting | UNKNOWN | — | 15%ile | Microsoft | 2026-06-09 |
| CVE-2026-11171 | Chromium: CVE-2026-11171 Integer overflow in Blink | UNKNOWN | — | 20%ile | Microsoft | 2026-06-09 |
| CVE-2026-11172 | Chromium: CVE-2026-11172 Incorrect security UI in Contact Picker | UNKNOWN | — | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-11173 | Chromium: CVE-2026-11173 Out of bounds write in V8 | UNKNOWN | — | 20%ile | Microsoft | 2026-06-09 |
| CVE-2026-11174 | Chromium: CVE-2026-11174 Insufficient policy enforcement in Site Isolation | UNKNOWN | — | 11%ile | Microsoft | 2026-06-09 |
| CVE-2026-11175 | Chromium: CVE-2026-11175 Incorrect security UI in Messages | UNKNOWN | — | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-11176 | Chromium: CVE-2026-11176 Inappropriate implementation in Media | UNKNOWN | — | 7%ile | Microsoft | 2026-06-09 |
| CVE-2026-11177 | Chromium: CVE-2026-11177 Use after free in Omnibox | UNKNOWN | — | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-11178 | Chromium: CVE-2026-11178 Policy bypass in WebView | UNKNOWN | — | 4%ile | Microsoft | 2026-06-09 |
| CVE-2026-11179 | Chromium: CVE-2026-11179 Inappropriate implementation in ORB | UNKNOWN | — | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-11180 | Chromium: CVE-2026-11180 Policy bypass in SVG | UNKNOWN | — | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-11181 | Chromium: CVE-2026-11181 Inappropriate implementation in Media Session | UNKNOWN | — | 4%ile | Microsoft | 2026-06-09 |
| CVE-2026-11182 | Chromium: CVE-2026-11182 Inappropriate implementation in SVG | UNKNOWN | — | 16%ile | Microsoft | 2026-06-09 |
| CVE-2026-11184 | Chromium: CVE-2026-11184 Insufficient policy enforcement in Actor | UNKNOWN | — | 5%ile | Microsoft | 2026-06-09 |
| CVE-2026-11185 | Chromium: CVE-2026-11185 Use after free in V8 | UNKNOWN | — | 10%ile | Microsoft | 2026-06-09 |
| CVE-2026-11186 | Chromium: CVE-2026-11186 Inappropriate implementation in CSS | UNKNOWN | — | 7%ile | Microsoft | 2026-06-09 |
| CVE-2026-11187 | Chromium: CVE-2026-11187 Insufficient policy enforcement in Glic | UNKNOWN | — | 4%ile | Microsoft | 2026-06-09 |
| CVE-2026-11188 | Chromium: CVE-2026-11188 Use after free in USB | UNKNOWN | — | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-11189 | Chromium: CVE-2026-11189 Insufficient validation of untrusted input in DevTools | UNKNOWN | — | 6%ile | Microsoft | 2026-06-09 |
| CVE-2026-11190 | Chromium: CVE-2026-11190 Insufficient policy enforcement in Extensions | UNKNOWN | — | 6%ile | Microsoft | 2026-06-09 |
| CVE-2026-11191 | Chromium: CVE-2026-11191 Out of bounds memory access in ANGLE | UNKNOWN | — | 21%ile | Microsoft | 2026-06-09 |
| CVE-2026-11192 | Chromium: CVE-2026-11192 Insufficient validation of untrusted input in Password Manager | UNKNOWN | — | 7%ile | Microsoft | 2026-06-09 |
| CVE-2026-11193 | Chromium: CVE-2026-11193 Insufficient policy enforcement in Password Manager | UNKNOWN | — | 12%ile | Microsoft | 2026-06-09 |
| CVE-2026-11194 | Chromium: CVE-2026-11194 Inappropriate implementation in Network | UNKNOWN | — | 8%ile | Microsoft | 2026-06-09 |
| CVE-2026-11195 | Chromium: CVE-2026-11195 Inappropriate implementation in MHTML | UNKNOWN | — | 9%ile | Microsoft | 2026-06-09 |
| CVE-2026-11196 | Chromium: CVE-2026-11196 Type Confusion in XML | UNKNOWN | — | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-11197 | Chromium: CVE-2026-11197 Insufficient policy enforcement in Workers | UNKNOWN | — | 10%ile | Microsoft | 2026-06-09 |
| CVE-2026-11198 | Chromium: CVE-2026-11198 Insufficient validation of untrusted input in Codecs | UNKNOWN | — | 12%ile | Microsoft | 2026-06-09 |
| CVE-2026-11199 | Chromium: CVE-2026-11199 Insufficient validation of untrusted input in WebRTC | UNKNOWN | — | 8%ile | Microsoft | 2026-06-09 |
| CVE-2026-11200 | Chromium: CVE-2026-11200 Inappropriate implementation in WebRTC | UNKNOWN | — | 7%ile | Microsoft | 2026-06-09 |
| CVE-2026-11201 | Chromium: CVE-2026-11201 Use after free in ServiceWorker | UNKNOWN | — | 11%ile | Microsoft | 2026-06-09 |
| CVE-2026-11203 | Chromium: CVE-2026-11203 Policy bypass in GPU | UNKNOWN | — | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-11206 | Chromium: CVE-2026-11206 Policy bypass in ServiceWorker | UNKNOWN | — | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-11207 | Chromium: CVE-2026-11207 Insufficient validation of untrusted input in Autofill | UNKNOWN | — | 12%ile | Microsoft | 2026-06-09 |
| CVE-2026-11208 | Chromium: CVE-2026-11208 Use after free in Codecs | UNKNOWN | — | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-11209 | Chromium: CVE-2026-11209 Insufficient policy enforcement in Passwords | UNKNOWN | — | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-11210 | Chromium: CVE-2026-11210 Insufficient policy enforcement in Safe Browsing | UNKNOWN | — | 8%ile | Microsoft | 2026-06-09 |
| CVE-2026-11211 | Chromium: CVE-2026-11211 Integer overflow in V8 | UNKNOWN | — | 20%ile | Microsoft | 2026-06-09 |
| CVE-2026-11212 | Chromium: CVE-2026-11212 Insufficient policy enforcement in DevTools | UNKNOWN | — | 3%ile | Microsoft | 2026-06-09 |
| CVE-2026-11213 | Chromium: CVE-2026-11213 Insufficient validation of untrusted input in Reading Mode | UNKNOWN | — | 9%ile | Microsoft | 2026-06-09 |
| CVE-2026-11215 | Chromium: CVE-2026-11215 Inappropriate implementation in Cronet | UNKNOWN | — | 5%ile | Microsoft | 2026-06-09 |
| CVE-2026-11216 | Chromium: CVE-2026-11216 Incorrect security UI in File Input | UNKNOWN | — | 6%ile | Microsoft | 2026-06-09 |
| CVE-2026-11217 | Chromium: CVE-2026-11217 Insufficient policy enforcement in Fenced Frames | UNKNOWN | — | 4%ile | Microsoft | 2026-06-09 |
| CVE-2026-11218 | Chromium: CVE-2026-11218 Inappropriate implementation in PlatformIntegration | UNKNOWN | — | 10%ile | Microsoft | 2026-06-09 |
| CVE-2026-11219 | Chromium: CVE-2026-11219 Insufficient data validation in Navigation | UNKNOWN | — | 4%ile | Microsoft | 2026-06-09 |
| CVE-2026-11220 | Chromium: CVE-2026-11220 Insufficient validation of untrusted input in Navigation | UNKNOWN | — | 7%ile | Microsoft | 2026-06-09 |
| CVE-2026-11221 | Chromium: CVE-2026-11221 Insufficient validation of untrusted input in PointerLock | UNKNOWN | — | 4%ile | Microsoft | 2026-06-09 |
| CVE-2026-11222 | Chromium: CVE-2026-11222 Incorrect security UI in Tab Strip | UNKNOWN | — | 6%ile | Microsoft | 2026-06-09 |
| CVE-2026-11223 | Chromium: CVE-2026-11223 Insufficient validation of untrusted input in Network | UNKNOWN | — | 7%ile | Microsoft | 2026-06-09 |
| CVE-2026-11224 | Chromium: CVE-2026-11224 Use after free in Chromoting | UNKNOWN | — | 16%ile | Microsoft | 2026-06-09 |
| CVE-2026-11225 | Chromium: CVE-2026-11225 Incorrect security UI in WebUI | UNKNOWN | — | 5%ile | Microsoft | 2026-06-09 |
| CVE-2026-11226 | Chromium: CVE-2026-11226 Insufficient policy enforcement in PreviewTab | UNKNOWN | — | 4%ile | Microsoft | 2026-06-09 |
| CVE-2026-11227 | Chromium: CVE-2026-11227 Incorrect security UI in Tab Hover Cards | UNKNOWN | — | 5%ile | Microsoft | 2026-06-09 |
| CVE-2026-11228 | Chromium: CVE-2026-11228 Incorrect security UI in File Input | UNKNOWN | — | 4%ile | Microsoft | 2026-06-09 |
| CVE-2026-11229 | Chromium: CVE-2026-11229 Insufficient policy enforcement in Enterprise | UNKNOWN | — | 1%ile | Microsoft | 2026-06-09 |
| CVE-2026-11230 | Chromium: CVE-2026-11230 Use after free in Extensions | UNKNOWN | — | 15%ile | Microsoft | 2026-06-09 |
| CVE-2026-11231 | Chromium: CVE-2026-11231 Inappropriate implementation in Safe Browsing | UNKNOWN | — | 12%ile | Microsoft | 2026-06-09 |
| CVE-2026-11232 | Chromium: CVE-2026-11232 Inappropriate implementation in TabGroups | UNKNOWN | — | 4%ile | Microsoft | 2026-06-09 |
| CVE-2026-11233 | Chromium: CVE-2026-11233 Insufficient validation of untrusted input in FoldableAPIs | UNKNOWN | — | 7%ile | Microsoft | 2026-06-09 |
| CVE-2026-11234 | Chromium: CVE-2026-11234 Insufficient policy enforcement in FoldableAPIs | UNKNOWN | — | 7%ile | Microsoft | 2026-06-09 |
| CVE-2026-11235 | Chromium: CVE-2026-11235 Insufficient validation of untrusted input in Compositing | UNKNOWN | — | 15%ile | Microsoft | 2026-06-09 |
| CVE-2026-11236 | Chromium: CVE-2026-11236 Insufficient policy enforcement in Web Bluetooth | UNKNOWN | — | 8%ile | Microsoft | 2026-06-09 |
| CVE-2026-11237 | Chromium: CVE-2026-11237 Insufficient validation of untrusted input in Media | UNKNOWN | — | 9%ile | Microsoft | 2026-06-09 |
| CVE-2026-11238 | Chromium: CVE-2026-11238 Inappropriate implementation in DevTools | UNKNOWN | — | 6%ile | Microsoft | 2026-06-09 |
| CVE-2026-11239 | Chromium: CVE-2026-11239 Insufficient validation of untrusted input in Extensions | UNKNOWN | — | 13%ile | Microsoft | 2026-06-09 |
| CVE-2026-11240 | Chromium: CVE-2026-11240 Insufficient validation of untrusted input in Loader | UNKNOWN | — | 8%ile | Microsoft | 2026-06-09 |
| CVE-2026-11241 | Chromium: CVE-2026-11241 Insufficient validation of untrusted input in Cast | UNKNOWN | — | 1%ile | Microsoft | 2026-06-09 |
| CVE-2026-11242 | Chromium: CVE-2026-11242 Insufficient validation of untrusted input in Plugins | UNKNOWN | — | 18%ile | Microsoft | 2026-06-09 |
| CVE-2026-11243 | Chromium: CVE-2026-11243 Incorrect security UI in Downloads | UNKNOWN | — | 4%ile | Microsoft | 2026-06-09 |
| CVE-2026-11244 | Chromium: CVE-2026-11244 Insufficient validation of untrusted input in WebAuthentication | UNKNOWN | — | 11%ile | Microsoft | 2026-06-09 |
| CVE-2026-11245 | Chromium: CVE-2026-11245 Inappropriate implementation in Payments | UNKNOWN | — | 7%ile | Microsoft | 2026-06-09 |
| CVE-2026-11246 | Chromium: CVE-2026-11246 Insufficient validation of untrusted input in IndexedDB | UNKNOWN | — | 10%ile | Microsoft | 2026-06-09 |
| CVE-2026-11247 | Chromium: CVE-2026-11247 Insufficient policy enforcement in CustomTabs | UNKNOWN | — | 7%ile | Microsoft | 2026-06-09 |
| CVE-2026-11248 | Chromium: CVE-2026-11248 Policy bypass in Google Lens | UNKNOWN | — | 15%ile | Microsoft | 2026-06-09 |
| CVE-2026-11249 | Chromium: CVE-2026-11249 Use after free in Network | UNKNOWN | — | 8%ile | Microsoft | 2026-06-09 |
| CVE-2026-11250 | Chromium: CVE-2026-11250 Inappropriate implementation in DevTools | UNKNOWN | — | 15%ile | Microsoft | 2026-06-09 |
| CVE-2026-11251 | Chromium: CVE-2026-11251 Insufficient validation of untrusted input in Password Manager | UNKNOWN | — | 8%ile | Microsoft | 2026-06-09 |
| CVE-2026-11252 | Chromium: CVE-2026-11252 Policy bypass in Content Settings | UNKNOWN | — | 7%ile | Microsoft | 2026-06-09 |
| CVE-2026-11253 | Chromium: CVE-2026-11253 Race in Permissions | UNKNOWN | — | 4%ile | Microsoft | 2026-06-09 |
| CVE-2026-11254 | Chromium: CVE-2026-11254 Inappropriate implementation in Permissions | UNKNOWN | — | 7%ile | Microsoft | 2026-06-09 |
| CVE-2026-11255 | Chromium: CVE-2026-11255 Insufficient validation of untrusted input in Storage Access API | UNKNOWN | — | 18%ile | Microsoft | 2026-06-09 |
| CVE-2026-11256 | Chromium: CVE-2026-11256 Out of bounds read in GPU | UNKNOWN | — | 11%ile | Microsoft | 2026-06-09 |
| CVE-2026-11257 | Chromium: CVE-2026-11257 Inappropriate implementation in Browser | UNKNOWN | — | 8%ile | Microsoft | 2026-06-09 |
| CVE-2026-11258 | Chromium: CVE-2026-11258 Inappropriate implementation in File System Access | UNKNOWN | — | 10%ile | Microsoft | 2026-06-09 |
| CVE-2026-11259 | Chromium: CVE-2026-11259 Insufficient validation of untrusted input in Cast | UNKNOWN | — | 8%ile | Microsoft | 2026-06-09 |
| CVE-2026-11260 | Chromium: CVE-2026-11260 Policy bypass in Permissions | UNKNOWN | — | 8%ile | Microsoft | 2026-06-09 |
| CVE-2026-11261 | Chromium: CVE-2026-11261 Insufficient validation of untrusted input in PDF | UNKNOWN | — | 7%ile | Microsoft | 2026-06-09 |
| CVE-2026-11262 | Chromium: CVE-2026-11262 Use after free in TabStrip | UNKNOWN | — | 21%ile | Microsoft | 2026-06-09 |
| CVE-2026-11263 | Chromium: CVE-2026-11263 Insufficient policy enforcement in WebAuthentication | UNKNOWN | — | 17%ile | Microsoft | 2026-06-09 |
| CVE-2026-11264 | Chromium: CVE-2026-11264 Policy bypass in Content Security Policy | UNKNOWN | — | 8%ile | Microsoft | 2026-06-09 |
| CVE-2026-11265 | Chromium: CVE-2026-11265 Insufficient data validation in Autofill | UNKNOWN | — | 10%ile | Microsoft | 2026-06-09 |
| CVE-2026-11266 | Chromium: CVE-2026-11266 Policy bypass in SafeBrowsing | UNKNOWN | — | 6%ile | Microsoft | 2026-06-09 |
| CVE-2026-11267 | Chromium: CVE-2026-11267 Insufficient policy enforcement in Extensions | UNKNOWN | — | 3%ile | Microsoft | 2026-06-09 |
| CVE-2026-11268 | Chromium: CVE-2026-11268 Uninitialized Use in ANGLE | UNKNOWN | — | 16%ile | Microsoft | 2026-06-09 |
| CVE-2026-11269 | Chromium: CVE-2026-11269 Inappropriate implementation in Extensions | UNKNOWN | — | 1%ile | Microsoft | 2026-06-09 |
| CVE-2026-11270 | Chromium: CVE-2026-11270 Inappropriate implementation in UI | UNKNOWN | — | 8%ile | Microsoft | 2026-06-09 |
| CVE-2026-11271 | Chromium: CVE-2026-11271 Incorrect security UI in Passwords | UNKNOWN | — | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-11273 | Chromium: CVE-2026-11273 Insufficient validation of untrusted input in Omnibox | UNKNOWN | — | 5%ile | Microsoft | 2026-06-09 |
| CVE-2026-11275 | Chromium: CVE-2026-11275 Insufficient policy enforcement in Page Info | UNKNOWN | — | 10%ile | Microsoft | 2026-06-09 |
| CVE-2026-11276 | Chromium: CVE-2026-11276 Inappropriate implementation in Cast | UNKNOWN | — | 0%ile | Microsoft | 2026-06-09 |
| CVE-2026-11278 | Chromium: CVE-2026-11278 Inappropriate implementation in CustomTabs | UNKNOWN | — | 4%ile | Microsoft | 2026-06-09 |
| CVE-2026-11279 | Chromium: CVE-2026-11279 Out of bounds read in DevTools | UNKNOWN | — | 22%ile | Microsoft | 2026-06-09 |
| CVE-2026-11281 | Chromium: CVE-2026-11281 Integer overflow in Chromoting | UNKNOWN | — | 0%ile | Microsoft | 2026-06-09 |
| CVE-2026-11282 | Chromium: CVE-2026-11282 Policy bypass in Sandbox | UNKNOWN | — | 16%ile | Microsoft | 2026-06-09 |
| CVE-2026-11283 | Chromium: CVE-2026-11283 Policy bypass in Shortcuts | UNKNOWN | — | 10%ile | Microsoft | 2026-06-09 |
| CVE-2026-11284 | Chromium: CVE-2026-11284 Side-channel information leakage in PerformanceAPIs | UNKNOWN | — | 15%ile | Microsoft | 2026-06-09 |
| CVE-2026-11286 | Chromium: CVE-2026-11286 Insufficient validation of untrusted input in Wallet | UNKNOWN | — | 4%ile | Microsoft | 2026-06-09 |
| CVE-2026-11287 | Chromium: CVE-2026-11287 Insufficient validation of untrusted input in Navigation | UNKNOWN | — | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-11288 | Chromium: CVE-2026-11288 Policy bypass in CSS | UNKNOWN | — | 10%ile | Microsoft | 2026-06-09 |
| CVE-2026-11289 | Chromium: CVE-2026-11289 Side-channel information leakage in Paint | UNKNOWN | — | 10%ile | Microsoft | 2026-06-09 |
| CVE-2026-11290 | Chromium: CVE-2026-11290 Integer overflow in WebView | UNKNOWN | — | 0%ile | Microsoft | 2026-06-09 |
| CVE-2026-11291 | Chromium: CVE-2026-11291 Policy bypass in Android Autofill | UNKNOWN | — | 5%ile | Microsoft | 2026-06-09 |
| CVE-2026-11292 | Chromium: CVE-2026-11292 Policy bypass in Blink | UNKNOWN | — | 8%ile | Microsoft | 2026-06-09 |
| CVE-2026-11293 | Chromium: CVE-2026-11293 Use after free in Input | UNKNOWN | — | 10%ile | Microsoft | 2026-06-09 |
| CVE-2026-11294 | Chromium: CVE-2026-11294 Inappropriate implementation in Passwords | UNKNOWN | — | 4%ile | Microsoft | 2026-06-09 |
| CVE-2026-11295 | Chromium: CVE-2026-11295 Inappropriate implementation in WebView | UNKNOWN | — | 11%ile | Microsoft | 2026-06-09 |
| CVE-2026-11296 | Chromium: CVE-2026-11296 Inappropriate implementation in ImageCapture | UNKNOWN | — | 7%ile | Microsoft | 2026-06-09 |
| CVE-2026-11297 | Chromium: CVE-2026-11297 Insufficient validation of untrusted input in Reader Mode | UNKNOWN | — | 0%ile | Microsoft | 2026-06-09 |
| CVE-2026-11299 | Chromium: CVE-2026-11299 Out of bounds read in Fonts | UNKNOWN | — | 10%ile | Microsoft | 2026-06-09 |
| CVE-2026-11300 | Chromium: CVE-2026-11300 Inappropriate implementation in Permissions | UNKNOWN | — | 4%ile | Microsoft | 2026-06-09 |
| CVE-2026-11301 | Chromium: CVE-2026-11301 Out of bounds read in LiveCaption | UNKNOWN | — | 11%ile | Microsoft | 2026-06-09 |
| CVE-2026-11303 | Chromium: CVE-2026-11303 Use after free in PDFium | UNKNOWN | — | 15%ile | Microsoft | 2026-06-09 |
| CVE-2026-11304 | Chromium: CVE-2026-11304 Use after free in PDFium | UNKNOWN | — | 8%ile | Microsoft | 2026-06-09 |
| CVE-2026-11305 | Chromium: CVE-2026-11305 Use after free in PDFium | UNKNOWN | — | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-11306 | Chromium: CVE-2026-11306 Use after free in PDFium | UNKNOWN | — | 13%ile | Microsoft | 2026-06-09 |
| CVE-2026-11307 | Chromium: CVE-2026-11307 Use after free in PDFium | UNKNOWN | — | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-11308 | Chromium: CVE-2026-11308 Inappropriate implementation in Extensions | UNKNOWN | — | 1%ile | Microsoft | 2026-06-09 |
| CVE-2026-11309 | Chromium: CVE-2026-11309 Insufficient policy enforcement in History | UNKNOWN | — | 3%ile | Microsoft | 2026-06-09 |
| CVE-2026-11628 | Chromium: CVE-2026-11628 Use after free in Ozone | UNKNOWN | — | 8%ile | Microsoft | 2026-06-09 |
| CVE-2026-11629 | Chromium: CVE-2026-11629 Use after free in Ozone | UNKNOWN | — | 19%ile | Microsoft | 2026-06-09 |
| CVE-2026-11630 | Chromium: CVE-2026-11630 Use after free in File Input | UNKNOWN | — | 17%ile | Microsoft | 2026-06-09 |
| CVE-2026-11631 | Chromium: CVE-2026-11631 Use after free in Aura | UNKNOWN | — | 13%ile | Microsoft | 2026-06-09 |
| CVE-2026-11632 | Chromium: CVE-2026-11632 Use after free in TabStrip | UNKNOWN | — | 18%ile | Microsoft | 2026-06-09 |
| CVE-2026-11633 | Chromium: CVE-2026-11633 Use after free in Bluetooth | UNKNOWN | — | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-11634 | Chromium: CVE-2026-11634 Use after free in Gamepad | UNKNOWN | — | 17%ile | Microsoft | 2026-06-09 |
| CVE-2026-11635 | Chromium: CVE-2026-11635 Use after free in Bluetooth | UNKNOWN | — | 13%ile | Microsoft | 2026-06-09 |
| CVE-2026-11636 | Chromium: CVE-2026-11636 Use after free in Autofill | UNKNOWN | — | 13%ile | Microsoft | 2026-06-09 |
| CVE-2026-11637 | Chromium: CVE-2026-11637 Use after free in Views | UNKNOWN | — | 18%ile | Microsoft | 2026-06-09 |
| CVE-2026-11638 | Chromium: CVE-2026-11638 Use after free in Printing | UNKNOWN | — | 17%ile | Microsoft | 2026-06-09 |
| CVE-2026-11639 | Chromium: CVE-2026-11639 Use after free in Compositing | UNKNOWN | — | 20%ile | Microsoft | 2026-06-09 |
| CVE-2026-11640 | Chromium: CVE-2026-11640 Integer overflow in libyuv | UNKNOWN | — | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-11641 | Chromium: CVE-2026-11641 Use after free in Bluetooth | UNKNOWN | — | 20%ile | Microsoft | 2026-06-09 |
| CVE-2026-11642 | Chromium: CVE-2026-11642 Use after free in Web Apps | UNKNOWN | — | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-11643 | Chromium: CVE-2026-11643 Use after free in Proxy | UNKNOWN | — | 20%ile | Microsoft | 2026-06-09 |
| CVE-2026-11644 | Chromium: CVE-2026-11644 Use after free in Views | UNKNOWN | — | 10%ile | Microsoft | 2026-06-09 |
| CVE-2026-11645 | Chromium: CVE-2026-11645 Out of bounds memory access in V8 | UNKNOWN | — | 84%ile | Microsoft | 2026-06-09 |
| CVE-2026-11646 | Chromium: CVE-2026-11646 Use after free in ViewTransitions | UNKNOWN | — | 18%ile | Microsoft | 2026-06-09 |
| CVE-2026-11647 | Chromium: CVE-2026-11647 Use after free in Printing | UNKNOWN | — | 13%ile | Microsoft | 2026-06-09 |
| CVE-2026-11648 | Chromium: CVE-2026-11648 Use after free in FullScreen | UNKNOWN | — | 18%ile | Microsoft | 2026-06-09 |
| CVE-2026-11649 | Chromium: CVE-2026-11649 Use after free in V8 | UNKNOWN | — | 24%ile | Microsoft | 2026-06-09 |
| CVE-2026-11650 | Chromium: CVE-2026-11650 Use after free in V8 | UNKNOWN | — | 24%ile | Microsoft | 2026-06-09 |
| CVE-2026-11651 | Chromium: CVE-2026-11651 Use after free in Network | UNKNOWN | — | 27%ile | Microsoft | 2026-06-09 |
| CVE-2026-11652 | Chromium: CVE-2026-11652 Use after free in Extensions | UNKNOWN | — | 15%ile | Microsoft | 2026-06-09 |
| CVE-2026-11653 | Chromium: CVE-2026-11653 Insufficient validation of untrusted input in Extensions | UNKNOWN | — | 13%ile | Microsoft | 2026-06-09 |
| CVE-2026-11654 | Chromium: CVE-2026-11654 Use after free in CameraCapture | UNKNOWN | — | 17%ile | Microsoft | 2026-06-09 |
| CVE-2026-11655 | Chromium: CVE-2026-11655 Integer overflow in Media | UNKNOWN | — | 15%ile | Microsoft | 2026-06-09 |
| CVE-2026-11656 | Chromium: CVE-2026-11656 Use after free in ServiceWorker | UNKNOWN | — | 6%ile | Microsoft | 2026-06-09 |
| CVE-2026-11657 | Chromium: CVE-2026-11657 Use after free in Payments | UNKNOWN | — | 17%ile | Microsoft | 2026-06-09 |
| CVE-2026-11658 | Chromium: CVE-2026-11658 Insufficient validation of untrusted input in Extensions | UNKNOWN | — | 13%ile | Microsoft | 2026-06-09 |
| CVE-2026-11659 | Chromium: CVE-2026-11659 Insufficient validation of untrusted input in UI | UNKNOWN | — | 17%ile | Microsoft | 2026-06-09 |
| CVE-2026-11660 | Chromium: CVE-2026-11660 Insufficient validation of untrusted input in New Tab Page | UNKNOWN | — | 18%ile | Microsoft | 2026-06-09 |
| CVE-2026-11661 | Chromium: CVE-2026-11661 Use after free in Views | UNKNOWN | — | 15%ile | Microsoft | 2026-06-09 |
| CVE-2026-11662 | Chromium: CVE-2026-11662 Type Confusion in Bindings | UNKNOWN | — | 30%ile | Microsoft | 2026-06-09 |
| CVE-2026-11663 | Chromium: CVE-2026-11663 Use after free in Skia | UNKNOWN | — | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-11664 | Chromium: CVE-2026-11664 Use after free in Payments | UNKNOWN | — | 17%ile | Microsoft | 2026-06-09 |
| CVE-2026-11665 | Chromium: CVE-2026-11665 Out of bounds read in Dawn | UNKNOWN | — | 12%ile | Microsoft | 2026-06-09 |
| CVE-2026-11666 | Chromium: CVE-2026-11666 Insufficient validation of untrusted input in Input | UNKNOWN | — | 12%ile | Microsoft | 2026-06-09 |
| CVE-2026-11667 | Chromium: CVE-2026-11667 Out of bounds read in WebRTC | UNKNOWN | — | 12%ile | Microsoft | 2026-06-09 |
| CVE-2026-11668 | Chromium: CVE-2026-11668 Uninitialized Use in Codecs | UNKNOWN | — | 9%ile | Microsoft | 2026-06-09 |
| CVE-2026-11669 | Chromium: CVE-2026-11669 Integer overflow in Media | UNKNOWN | — | 12%ile | Microsoft | 2026-06-09 |
| CVE-2026-11670 | Chromium: CVE-2026-11670 Use after free in PDF | UNKNOWN | — | 13%ile | Microsoft | 2026-06-09 |
| CVE-2026-11671 | Chromium: CVE-2026-11671 Use after free in Navigation | UNKNOWN | — | 16%ile | Microsoft | 2026-06-09 |
| CVE-2026-11672 | Chromium: CVE-2026-11672 Out of bounds write in GPU | UNKNOWN | — | 15%ile | Microsoft | 2026-06-09 |
| CVE-2026-11673 | Chromium: CVE-2026-11673 Use after free in InterestGroups | UNKNOWN | — | 16%ile | Microsoft | 2026-06-09 |
| CVE-2026-11674 | Chromium: CVE-2026-11674 Use after free in Guest View | UNKNOWN | — | 16%ile | Microsoft | 2026-06-09 |
| CVE-2026-11675 | Chromium: CVE-2026-11675 Insufficient validation of untrusted input in Skia | UNKNOWN | — | 11%ile | Microsoft | 2026-06-09 |
| CVE-2026-11676 | Chromium: CVE-2026-11676 Insufficient validation of untrusted input in Dawn | UNKNOWN | — | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-11677 | Chromium: CVE-2026-11677 Race in Network | UNKNOWN | — | 4%ile | Microsoft | 2026-06-09 |
| CVE-2026-11678 | Chromium: CVE-2026-11678 Integer overflow in libyuv | UNKNOWN | — | 7%ile | Microsoft | 2026-06-09 |
| CVE-2026-11679 | Chromium: CVE-2026-11679 Use after free in Codecs | UNKNOWN | — | 8%ile | Microsoft | 2026-06-09 |
| CVE-2026-11680 | Chromium: CVE-2026-11680 Use after free in Media | UNKNOWN | — | 16%ile | Microsoft | 2026-06-09 |
| CVE-2026-11681 | Chromium: CVE-2026-11681 Use after free in Ozone | UNKNOWN | — | 10%ile | Microsoft | 2026-06-09 |
| CVE-2026-11682 | Chromium: CVE-2026-11682 Insufficient validation of untrusted input in Views | UNKNOWN | — | 9%ile | Microsoft | 2026-06-09 |
| CVE-2026-11683 | Chromium: CVE-2026-11683 Use after free in WebCodecs | UNKNOWN | — | 24%ile | Microsoft | 2026-06-09 |
| CVE-2026-11684 | Chromium: CVE-2026-11684 Insufficient policy enforcement in Network | UNKNOWN | — | 6%ile | Microsoft | 2026-06-09 |
| CVE-2026-11685 | Chromium: CVE-2026-11685 Insufficient data validation in MediaCapture | UNKNOWN | — | 7%ile | Microsoft | 2026-06-09 |
| CVE-2026-11686 | Chromium: CVE-2026-11686 Insufficient validation of untrusted input in Dawn | UNKNOWN | — | 6%ile | Microsoft | 2026-06-09 |
| CVE-2026-11687 | Chromium: CVE-2026-11687 Use after free in Dawn | UNKNOWN | — | 10%ile | Microsoft | 2026-06-09 |
| CVE-2026-11688 | Chromium: CVE-2026-11688 Object lifecycle issue in SVG | UNKNOWN | — | 17%ile | Microsoft | 2026-06-09 |
| CVE-2026-11689 | Chromium: CVE-2026-11689 Insufficient validation of untrusted input in Passwords | UNKNOWN | — | 12%ile | Microsoft | 2026-06-09 |
| CVE-2026-11690 | Chromium: CVE-2026-11690 Out of bounds read and write in Media | UNKNOWN | — | 12%ile | Microsoft | 2026-06-09 |
| CVE-2026-11691 | Chromium: CVE-2026-11691 Insufficient validation of untrusted input in New Tab Page | UNKNOWN | — | 6%ile | Microsoft | 2026-06-09 |
| CVE-2026-11692 | Chromium: CVE-2026-11692 Use after free in Read Anything | UNKNOWN | — | 8%ile | Microsoft | 2026-06-09 |
| CVE-2026-11693 | Chromium: CVE-2026-11693 Inappropriate implementation in Plugins | UNKNOWN | — | 8%ile | Microsoft | 2026-06-09 |
| CVE-2026-11694 | Chromium: CVE-2026-11694 Use after free in ServiceWorker | UNKNOWN | — | 12%ile | Microsoft | 2026-06-09 |
| CVE-2026-11695 | Chromium: CVE-2026-11695 Inappropriate implementation in Passwords | UNKNOWN | — | 7%ile | Microsoft | 2026-06-09 |
| CVE-2026-11696 | Chromium: CVE-2026-11696 Uninitialized Use in Video | UNKNOWN | — | 9%ile | Microsoft | 2026-06-09 |
| CVE-2026-11697 | Chromium: CVE-2026-11697 Insufficient validation of untrusted input in UI | UNKNOWN | — | 10%ile | Microsoft | 2026-06-09 |
| CVE-2026-11698 | Chromium: CVE-2026-11698 Use after free in Bluetooth | UNKNOWN | — | 10%ile | Microsoft | 2026-06-09 |
| CVE-2026-11699 | Chromium: CVE-2026-11699 Use after free in Bluetooth | UNKNOWN | — | 10%ile | Microsoft | 2026-06-09 |
| CVE-2026-11700 | Chromium: CVE-2026-11700 Use after free in Tracing | UNKNOWN | — | 8%ile | Microsoft | 2026-06-09 |
| CVE-2026-11701 | Chromium: CVE-2026-11701 Insufficient validation of untrusted input in Guest View | UNKNOWN | — | 7%ile | Microsoft | 2026-06-09 |
| CVE-2026-12007 | Chromium: CVE-2026-12007 Use after free Core | UNKNOWN | — | 21%ile | Microsoft | 2026-06-09 |
| CVE-2026-12008 | Chromium: CVE-2026-12008 Use after free DigitalCredentials | UNKNOWN | — | 16%ile | Microsoft | 2026-06-09 |
| CVE-2026-12009 | Chromium: CVE-2026-12009 Insufficient validation of untrusted input Accessibility | UNKNOWN | — | 16%ile | Microsoft | 2026-06-09 |
| CVE-2026-12010 | Chromium: CVE-2026-12010 Heap buffer overflow GPU | UNKNOWN | — | 18%ile | Microsoft | 2026-06-09 |
| CVE-2026-12011 | Chromium: CVE-2026-12011 Use after free WebMIDI | UNKNOWN | — | 16%ile | Microsoft | 2026-06-09 |
| CVE-2026-12012 | Chromium: CVE-2026-12012 Use after free Network | UNKNOWN | — | 13%ile | Microsoft | 2026-06-09 |
| CVE-2026-12013 | Chromium: CVE-2026-12013 Use after free Media | UNKNOWN | — | — | Microsoft | 2026-06-09 |
| CVE-2026-12014 | Chromium: CVE-2026-12014 Use after free Cast | UNKNOWN | — | 7%ile | Microsoft | 2026-06-09 |
| CVE-2026-12015 | Chromium: CVE-2026-12015 Use after free Autofill | UNKNOWN | — | 13%ile | Microsoft | 2026-06-09 |
| CVE-2026-12016 | Chromium: CVE-2026-12016 Insufficient validation of untrusted input DevTools | UNKNOWN | — | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-12017 | Chromium: CVE-2026-12017 Insufficient validation of untrusted input Extensions | UNKNOWN | — | 11%ile | Microsoft | 2026-06-09 |
| CVE-2026-12018 | Chromium: CVE-2026-12018 Inappropriate implementation Mojo | UNKNOWN | — | 5%ile | Microsoft | 2026-06-09 |
| CVE-2026-12019 | Chromium: CVE-2026-12019 Out of bounds write Codecs | UNKNOWN | — | 17%ile | Microsoft | 2026-06-09 |
| CVE-2026-12028 | Chromium: CVE-2026-12028 Use after free GPU | UNKNOWN | — | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-12030 | Chromium: CVE-2026-12031 Inappropriate implementation Views | UNKNOWN | — | 8%ile | Microsoft | 2026-06-09 |
| CVE-2026-12032 | Chromium: CVE-2026-12032 Inappropriate implementation Passwords | UNKNOWN | — | 5%ile | Microsoft | 2026-06-09 |
| CVE-2026-12437 | Chromium: CVE-2026-12437 Use after free in WebShare | UNKNOWN | — | 23%ile | Microsoft | 2026-06-09 |
| CVE-2026-12438 | Chromium: CVE-2026-12438 Inappropriate implementation in WebView | UNKNOWN | — | 11%ile | Microsoft | 2026-06-09 |
| CVE-2026-12439 | Chromium: CVE-2026-12439 Use after free in Digital Credentials | UNKNOWN | — | 26%ile | Microsoft | 2026-06-09 |
| CVE-2026-12440 | Chromium: CVE-2026-12440 Use after free in DigitalCredentials | UNKNOWN | — | 16%ile | Microsoft | 2026-06-09 |
| CVE-2026-12441 | Chromium: CVE-2026-12441 Use after free in File Input | UNKNOWN | — | 24%ile | Microsoft | 2026-06-09 |
| CVE-2026-12442 | Chromium: CVE-2026-12442 Use after free in Passwords | UNKNOWN | — | 34%ile | Microsoft | 2026-06-09 |
| CVE-2026-12443 | Chromium: CVE-2026-12443 Use after free in Web Authentication | UNKNOWN | — | 49%ile | Microsoft | 2026-06-09 |
| CVE-2026-12444 | Chromium: CVE-2026-12444 Out of bounds read in Chromoting | UNKNOWN | — | 4%ile | Microsoft | 2026-06-09 |
| CVE-2026-12445 | Chromium: CVE-2026-12445 Use after free in Extensions | UNKNOWN | — | 5%ile | Microsoft | 2026-06-09 |
| CVE-2026-12446 | Chromium: CVE-2026-12446 Insufficient data validation in Passwords | UNKNOWN | — | 9%ile | Microsoft | 2026-06-09 |
| CVE-2026-12447 | Chromium: CVE-2026-12447 Heap buffer overflow in WebRTC | UNKNOWN | — | 37%ile | Microsoft | 2026-06-09 |
| CVE-2026-12448 | Chromium: CVE-2026-12448 Inappropriate implementation in WebView | UNKNOWN | — | 17%ile | Microsoft | 2026-06-09 |
| CVE-2026-12449 | Chromium: CVE-2026-12449 Use after free in Chromoting | UNKNOWN | — | 1%ile | Microsoft | 2026-06-09 |
| CVE-2026-12451 | Chromium: CVE-2026-12451 Use after free in DigitalCredentials | UNKNOWN | — | 7%ile | Microsoft | 2026-06-09 |
| CVE-2026-12452 | Chromium: CVE-2026-12452 Use after free in Downloads | UNKNOWN | — | 17%ile | Microsoft | 2026-06-09 |
| CVE-2026-12453 | Chromium: CVE-2026-12453 Insufficient validation of untrusted input in Input | UNKNOWN | — | 8%ile | Microsoft | 2026-06-09 |
| CVE-2026-12454 | Chromium: CVE-2026-12454 Race in Safe Browsing | UNKNOWN | — | 4%ile | Microsoft | 2026-06-09 |
| CVE-2026-12455 | Chromium: CVE-2026-12455 Use after free in Tab Strip | UNKNOWN | — | 14%ile | Microsoft | 2026-06-09 |
| CVE-2026-12456 | Chromium: CVE-2026-12456 Insufficient validation of untrusted input in Extensions | UNKNOWN | — | 3%ile | Microsoft | 2026-06-09 |
| CVE-2026-12457 | Chromium: CVE-2026-12457 Insufficient data validation in Extensions | UNKNOWN | — | 3%ile | Microsoft | 2026-06-09 |
| CVE-2026-12458 | Chromium: CVE-2026-12458 Incorrect security UI in Passwords | UNKNOWN | — | 9%ile | Microsoft | 2026-06-09 |
| CVE-2026-12459 | Chromium: CVE-2026-12459 Inappropriate implementation in Serial | UNKNOWN | — | 8%ile | Microsoft | 2026-06-09 |
| CVE-2026-12460 | Chromium: CVE-2026-12460 Insufficient policy enforcement in File System Access | UNKNOWN | — | 4%ile | Microsoft | 2026-06-09 |
| CVE-2026-12461 | Chromium: CVE-2026-12461 Out of bounds read in WebRTC | UNKNOWN | — | 15%ile | Microsoft | 2026-06-09 |
| CVE-2026-12462 | Chromium: CVE-2026-12462 Use after free in Media | UNKNOWN | — | 19%ile | Microsoft | 2026-06-09 |
| CVE-2026-12463 | Chromium: CVE-2026-12463 Inappropriate implementation in Views | UNKNOWN | — | 3%ile | Microsoft | 2026-06-09 |
| CVE-2026-12464 | Chromium: CVE-2026-12464 Use after free in Browser | UNKNOWN | — | 13%ile | Microsoft | 2026-06-09 |
| CVE-2026-12465 | Chromium: CVE-2026-12465 Insufficient validation of untrusted input in Metrics | UNKNOWN | — | 16%ile | Microsoft | 2026-06-09 |
| CVE-2026-12466 | Chromium: CVE-2026-12466 Heap buffer overflow in WebRTC | UNKNOWN | — | 37%ile | Microsoft | 2026-06-09 |
| CVE-2026-12467 | Chromium: CVE-2026-12467 Use after free in Extensions | UNKNOWN | — | 13%ile | Microsoft | 2026-06-09 |
| CVE-2026-12468 | Chromium: CVE-2026-12468 Inappropriate implementation in Updater | UNKNOWN | — | 4%ile | Microsoft | 2026-06-09 |
| CVE-2026-12469 | Chromium: CVE-2026-12469 Uninitialized Use in GPU | UNKNOWN | — | 8%ile | Microsoft | 2026-06-09 |
| CVE-2026-13021 | Chromium: CVE-2026-13021 Inappropriate implementation in DeviceBoundSessionCredentials | UNKNOWN | — | 10%ile | Microsoft | 2026-06-09 |
| CVE-2026-13022 | Chromium: CVE-2026-13022 Inappropriate implementation in Autofill | UNKNOWN | — | 9%ile | Microsoft | 2026-06-09 |
| CVE-2026-13023 | Chromium: CVE-2026-13023 Uninitialized Use in GPU | UNKNOWN | — | 21%ile | Microsoft | 2026-06-09 |
| CVE-2026-13024 | Chromium: CVE-2026-13024 Insufficient validation of untrusted input in Navigation | UNKNOWN | — | 13%ile | Microsoft | 2026-06-09 |
| CVE-2026-13025 | Chromium: CVE-2026-13025 Insufficient validation of untrusted input in DevTools | UNKNOWN | — | 23%ile | Microsoft | 2026-06-09 |
| CVE-2026-13026 | Chromium: CVE-2026-13026 Use after free in Digital Credentials | UNKNOWN | — | 25%ile | Microsoft | 2026-06-09 |
| CVE-2026-13027 | Chromium: CVE-2026-13027 Use after free in FileSystem | UNKNOWN | — | 25%ile | Microsoft | 2026-06-09 |
| CVE-2026-13029 | Chromium: CVE-2026-13029 Use after free in Web Authentication | UNKNOWN | — | 16%ile | Microsoft | 2026-06-09 |
| CVE-2026-13031 | Chromium: CVE-2026-13031 Use after free in Blink | UNKNOWN | — | 32%ile | Microsoft | 2026-06-09 |
| CVE-2026-13033 | Chromium: CVE-2026-13033 Out of bounds read in Blink>InterestGroups | UNKNOWN | — | 32%ile | Microsoft | 2026-06-09 |
| CVE-2026-13034 | Chromium: CVE-2026-13034 Inappropriate implementation in Passwords | UNKNOWN | — | 10%ile | Microsoft | 2026-06-09 |
| CVE-2026-13035 | Chromium: CVE-2026-13035 Use after free in Bluetooth | UNKNOWN | — | 29%ile | Microsoft | 2026-06-09 |
| CVE-2026-13036 | Chromium: CVE-2026-13036 Use after free in Blink | UNKNOWN | — | 32%ile | Microsoft | 2026-06-09 |
| CVE-2026-13038 | Chromium: CVE-2026-13038 Use after free in Autofill | UNKNOWN | — | 32%ile | Microsoft | 2026-06-09 |
| CVE-2026-46643 | Snappy: Binary path is never shell-escaped due to an inverted is_executable check | UNKNOWN | — | 10%ile | Microsoft | 2026-06-09 |
| CVE-2026-48854 | Unbounded request body accumulation causes memory exhaustion in elixir-grpc/grpc | UNKNOWN | — | 39%ile | Microsoft | 2026-06-09 |
| CVE-2026-46683 | Snappy: SSRF and local file read via the xsl-style-sheet option | UNKNOWN | — | 16%ile | Microsoft | 2026-06-09 |
| CVE-2026-44705 | tmp: Path Traversal via unsanitized prefix/postfix enables directory escape | UNKNOWN | — | 38%ile | Microsoft | 2026-06-09 |
| CVE-2026-47241 | Net::IMAP: Denial of Service via incomplete raw argument validation | UNKNOWN | — | 32%ile | Microsoft | 2026-06-09 |
| CVE-2026-11979 | Stack-Based Buffer Overflow in libxml2 | UNKNOWN | — | 4%ile | Microsoft | 2026-06-09 |
| CVE-2026-39821 | Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna | CRITICAL | 10.0 | 79%ile | Microsoft | 2026-05-12 |
| CVE-2026-42960 | Possible cache poisoning via promiscuous records for the authority section | CRITICAL | 10.0 | 18%ile | Microsoft | 2026-05-12 |
| CVE-2026-23652 | Microsoft Power Pages Remote Code Execution Vulnerability | CRITICAL | 10.0 | 48%ile | Microsoft | 2026-05-12 |
| CVE-2026-40412 | Azure Orbital Spatio Remote Code Execution Vulnerability | CRITICAL | 10.0 | 45%ile | Microsoft | 2026-05-12 |
| CVE-2026-41104 | Microsoft Planetary Computer Pro Information Disclosure Vulnerability | CRITICAL | 10.0 | 60%ile | Microsoft | 2026-05-12 |
| CVE-2026-42822 | Azure Local Disconnected Operations (ALDO) Elevation of Privilege Vulnerability | CRITICAL | 10.0 | 42%ile | Microsoft | 2026-05-12 |
| CVE-2026-42826 | Azure DevOps Information Disclosure Vulnerability | CRITICAL | 10.0 | 58%ile | Microsoft | 2026-05-12 |
| CVE-2026-42901 | Microsoft Entra ID Elevation of Privilege Vulnerability | CRITICAL | 10.0 | 23%ile | Microsoft | 2026-05-12 |
| CVE-2026-47280 | Azure Resource Manager Elevation of Privilege Vulnerability | CRITICAL | 10.0 | 42%ile | Microsoft | 2026-05-12 |
| CVE-2026-46595 | Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh | CRITICAL | 10.0 | 46%ile | Microsoft | 2026-05-12 |
| CVE-2026-7374 | Kubevirt: kubevirt virt-handler: privilege escalation and node compromise via symlink following vulnerability | CRITICAL | 9.9 | 55%ile | Microsoft | 2026-05-12 |
| CVE-2026-33109 | Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability | CRITICAL | 9.9 | 54%ile | Microsoft | 2026-05-12 |
| CVE-2026-40411 | Azure Virtual Network Gateway Remote Code Execution Vulnerability | CRITICAL | 9.9 | 44%ile | Microsoft | 2026-05-12 |
| CVE-2026-42823 | Azure Logic Apps Elevation of Privilege Vulnerability | CRITICAL | 9.9 | 49%ile | Microsoft | 2026-05-12 |
| CVE-2026-42898 | Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability | CRITICAL | 9.9 | 68%ile | Microsoft | 2026-05-12 |
| CVE-2025-71305 | drm/display/dp_mst: Add protection against 0 vcpi | CRITICAL | 9.8 | 5%ile | Microsoft | 2026-05-12 |
| CVE-2026-31705 | ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment | CRITICAL | 9.8 | 34%ile | Microsoft | 2026-05-12 |
| CVE-2026-31718 | ksmbd: fix use-after-free in __ksmbd_close_fd() via durable scavenger | CRITICAL | 9.8 | 29%ile | Microsoft | 2026-05-12 |
| CVE-2026-33278 | Possible arbitrary code execution during DNSSEC validation | CRITICAL | 9.8 | 73%ile | Microsoft | 2026-05-12 |
| CVE-2026-45899 | ext4: drop extent cache when splitting extent fails | CRITICAL | 9.8 | 5%ile | Microsoft | 2026-05-12 |
| CVE-2026-41089 | Windows Netlogon Remote Code Execution Vulnerability | CRITICAL | 9.8 | 100%ile | Microsoft | 2026-05-12 |
| CVE-2026-41096 | Windows DNS Client Remote Code Execution Vulnerability | CRITICAL | 9.8 | 86%ile | Microsoft | 2026-05-12 |
| CVE-2026-33823 | Microsoft Team Events Portal Information Disclosure Vulnerability | CRITICAL | 9.6 | 54%ile | Microsoft | 2026-05-12 |
| CVE-2026-35428 | Azure Cloud Shell Spoofing Vulnerability | CRITICAL | 9.6 | 61%ile | Microsoft | 2026-05-12 |
| CVE-2026-41615 | Microsoft Authenticator Information Disclosure Vulnerability | CRITICAL | 9.6 | 47%ile | Microsoft | 2026-05-12 |
| CVE-2026-43870 | Apache Thrift: Node.js web_server.js multi-vulnerability | CRITICAL | 9.4 | 32%ile | Microsoft | 2026-05-12 |
| CVE-2026-40379 | Azure Entra ID Spoofing Vulnerability | CRITICAL | 9.3 | 60%ile | Microsoft | 2026-05-12 |
| CVE-2026-40402 | Windows Hyper-V Elevation of Privilege Vulnerability | CRITICAL | 9.3 | 26%ile | Microsoft | 2026-05-12 |
| CVE-2026-41090 | Microsoft Copilot Tampering Vulnerability | CRITICAL | 9.3 | 36%ile | Microsoft | 2026-05-12 |
| CVE-2026-39830 | Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh | CRITICAL | 9.1 | 52%ile | Microsoft | 2026-05-12 |
| CVE-2026-39831 | Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh | CRITICAL | 9.1 | 41%ile | Microsoft | 2026-05-12 |
| CVE-2026-39832 | Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent | CRITICAL | 9.1 | 52%ile | Microsoft | 2026-05-12 |
| CVE-2026-39833 | Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent | CRITICAL | 9.1 | 41%ile | Microsoft | 2026-05-12 |
| CVE-2026-39834 | Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh | CRITICAL | 9.1 | 49%ile | Microsoft | 2026-05-12 |
| CVE-2026-42496 | Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction dire | CRITICAL | 9.1 | 43%ile | Microsoft | 2026-05-12 |
| CVE-2026-42508 | Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts | CRITICAL | 9.1 | 94%ile | Microsoft | 2026-05-12 |
| CVE-2026-8450 | HTTP::Daemon versions before 6.17 for Perl allow OS command injection via send_file() | CRITICAL | 9.1 | 72%ile | Microsoft | 2026-05-12 |
| CVE-2026-33117 | Azure SDK for Java Security Feature Bypass Vulnerability | CRITICAL | 9.1 | 41%ile | Microsoft | 2026-05-12 |
| CVE-2026-33843 | Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability | CRITICAL | 9.1 | 41%ile | Microsoft | 2026-05-12 |
| CVE-2026-41103 | Microsoft SSO Plugin for Jira & Confluence Elevation of Privilege Vulnerability | CRITICAL | 9.1 | 93%ile | Microsoft | 2026-05-12 |
| CVE-2026-42833 | Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability | CRITICAL | 9.1 | 55%ile | Microsoft | 2026-05-12 |
| CVE-2026-33844 | Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability | CRITICAL | 9.0 | 62%ile | Microsoft | 2026-05-12 |
| CVE-2026-23918 | Apache HTTP Server: http2: double free and possible RCE on early reset | HIGH | 8.8 | 99%ile | Microsoft | 2026-05-12 |
| CVE-2026-31706 | ksmbd: validate num_aces and harden ACE walk in smb_inherit_dacl() | HIGH | 8.8 | 42%ile | Microsoft | 2026-05-12 |
| CVE-2026-31709 | smb: client: validate the whole DACL before rewriting it in cifsacl | HIGH | 8.8 | 28%ile | Microsoft | 2026-05-12 |
| CVE-2026-31717 | ksmbd: validate owner of durable handle on reconnect | HIGH | 8.8 | 38%ile | Microsoft | 2026-05-12 |
| CVE-2026-43048 | HID: core: Mitigate potential OOB by removing bogus memset() | HIGH | 8.8 | 25%ile | Microsoft | 2026-05-12 |
| CVE-2026-43249 | 9p/xen: protect xen_9pfs_front_free against concurrent calls | HIGH | 8.8 | 25%ile | Microsoft | 2026-05-12 |
| CVE-2026-6473 | PostgreSQL server undersizes allocations, via integer wraparound | HIGH | 8.8 | 63%ile | Microsoft | 2026-05-12 |
| CVE-2026-6475 | PostgreSQL pg_basebackup and pg_rewind can overwrite unrelated files of origin superuser choice | HIGH | 8.8 | 35%ile | Microsoft | 2026-05-12 |
| CVE-2026-6477 | PostgreSQL libpq lo_* functions let server superuser overwrite client stack memory | HIGH | 8.8 | 39%ile | Microsoft | 2026-05-12 |
| CVE-2026-6637 | PostgreSQL refint allows stack buffer overflow and SQL injection | HIGH | 8.8 | 31%ile | Microsoft | 2026-05-12 |
| CVE-2026-32207 | Azure Machine Learning Notebook Spoofing Vulnerability | HIGH | 8.8 | 48%ile | Microsoft | 2026-05-12 |
| CVE-2026-33110 | Microsoft SharePoint Server Remote Code Execution Vulnerability | HIGH | 8.8 | 80%ile | Microsoft | 2026-05-12 |
| CVE-2026-33112 | Microsoft SharePoint Server Remote Code Execution Vulnerability | HIGH | 8.8 | 98%ile | Microsoft | 2026-05-12 |
| CVE-2026-34329 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability | HIGH | 8.8 | 40%ile | Microsoft | 2026-05-12 |
| CVE-2026-35430 | Azure Privileged Identity Management (PIM) Elevation of Privilege Vulnerability | HIGH | 8.8 | 37%ile | Microsoft | 2026-05-12 |
| CVE-2026-35436 | Microsoft Office Click-To-Run Elevation of Privilege Vulnerability | HIGH | 8.8 | 12%ile | Microsoft | 2026-05-12 |
| CVE-2026-35439 | Microsoft SharePoint Server Remote Code Execution Vulnerability | HIGH | 8.8 | 81%ile | Microsoft | 2026-05-12 |
| CVE-2026-40357 | Microsoft SharePoint Server Remote Code Execution Vulnerability | HIGH | 8.8 | 77%ile | Microsoft | 2026-05-12 |
| CVE-2026-40365 | Microsoft SharePoint Server Remote Code Execution Vulnerability | HIGH | 8.8 | 62%ile | Microsoft | 2026-05-12 |
| CVE-2026-40370 | SQL Server Remote Code Execution Vulnerability | HIGH | 8.8 | 46%ile | Microsoft | 2026-05-12 |
| CVE-2026-40403 | Windows Graphics Component Remote Code Execution Vulnerability | HIGH | 8.8 | 37%ile | Microsoft | 2026-05-12 |
| CVE-2026-40420 | Microsoft Office Click-To-Run Elevation of Privilege Vulnerability | HIGH | 8.8 | 12%ile | Microsoft | 2026-05-12 |
| CVE-2026-41086 | Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability | HIGH | 8.8 | 37%ile | Microsoft | 2026-05-12 |
| CVE-2026-41094 | Microsoft Data Formulator Remote Code Execution Vulnerability | HIGH | 8.8 | 58%ile | Microsoft | 2026-05-12 |
| CVE-2026-41109 | GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability | HIGH | 8.8 | 58%ile | Microsoft | 2026-05-12 |
| CVE-2026-41613 | Visual Studio Code Elevation of Privilege Vulnerability | HIGH | 8.8 | 44%ile | Microsoft | 2026-05-12 |
| CVE-2026-45495 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | HIGH | 8.8 | 62%ile | Microsoft | 2026-05-12 |
| CVE-2026-45659 | Microsoft SharePoint Remote Code Execution Vulnerability | HIGH | 8.8 | 100%ile | Microsoft | 2026-05-12 |
| CVE-2026-43490 | ksmbd: validate inherited ACE SID length | HIGH | 8.8 | 38%ile | Microsoft | 2026-05-12 |
| CVE-2026-35435 | Azure AI Foundry Elevation of Privilege Vulnerability | HIGH | 8.6 | 67%ile | Microsoft | 2026-05-12 |
| CVE-2026-40358 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 8.4 | 31%ile | Microsoft | 2026-05-12 |
| CVE-2026-40361 | Microsoft Outlook and Word Remote Code Execution Vulnerability | HIGH | 8.4 | 49%ile | Microsoft | 2026-05-12 |
| CVE-2026-40363 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 8.4 | 32%ile | Microsoft | 2026-05-12 |
| CVE-2026-40364 | Microsoft Word Remote Code Execution Vulnerability | HIGH | 8.4 | 91%ile | Microsoft | 2026-05-12 |
| CVE-2026-40366 | Microsoft Word Remote Code Execution Vulnerability | HIGH | 8.4 | 32%ile | Microsoft | 2026-05-12 |
| CVE-2026-40367 | Microsoft Word Remote Code Execution Vulnerability | HIGH | 8.4 | 39%ile | Microsoft | 2026-05-12 |
| CVE-2026-43493 | crypto: pcrypt - Fix handling of MAY_BACKLOG requests | HIGH | 8.4 | 52%ile | Microsoft | 2026-05-12 |
| CVE-2026-4892 | CVE-2026-4892 | HIGH | 8.4 | 57%ile | Microsoft | 2026-05-12 |
| CVE-2026-31712 | ksmbd: require minimum ACE size in smb_check_perm_dacl() | HIGH | 8.3 | 25%ile | Microsoft | 2026-05-12 |
| CVE-2026-35438 | Windows Admin Center Elevation of Privilege Vulnerability | HIGH | 8.3 | 46%ile | Microsoft | 2026-05-12 |
| CVE-2026-42013 | Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name | HIGH | 8.2 | 37%ile | Microsoft | 2026-05-12 |
| CVE-2026-5260 | Gnutls: gnutls: information disclosure via heap overread in rsa key exchange | HIGH | 8.2 | 56%ile | Microsoft | 2026-05-12 |
| CVE-2026-33833 | Azure Machine Learning Notebook Spoofing Vulnerability | HIGH | 8.2 | 43%ile | Microsoft | 2026-05-12 |
| CVE-2026-34327 | Microsoft Partner Center Spoofing Vulnerability | HIGH | 8.2 | 51%ile | Microsoft | 2026-05-12 |
| CVE-2026-31708 | smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path | HIGH | 8.1 | 29%ile | Microsoft | 2026-05-12 |
| CVE-2026-31771 | Bluetooth: hci_event: move wake reason storage into validated event handlers | HIGH | 8.1 | 25%ile | Microsoft | 2026-05-12 |
| CVE-2026-42945 | NGINX ngx_http_rewrite_module vulnerability | HIGH | 8.1 | 99%ile | Microsoft | 2026-05-12 |
| CVE-2026-43618 | Rsync < 3.4.3 Integer Overflow Information Disclosure | HIGH | 8.1 | 56%ile | Microsoft | 2026-05-12 |
| CVE-2026-47783 | In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a | HIGH | 8.1 | 70%ile | Microsoft | 2026-05-12 |
| CVE-2026-47784 | In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because me | HIGH | 8.1 | 46%ile | Microsoft | 2026-05-12 |
| CVE-2026-6665 | PgBouncer buffer overflow in SCRAM | HIGH | 8.1 | 31%ile | Microsoft | 2026-05-12 |
| CVE-2026-8711 | NGINX JavaScript vulnerability | HIGH | 8.1 | 96%ile | Microsoft | 2026-05-12 |
| CVE-2026-9256 | NGINX ngx_http_rewrite_module vulnerability | HIGH | 8.1 | 96%ile | Microsoft | 2026-05-12 |
| CVE-2026-40415 | Windows TCP/IP Remote Code Execution Vulnerability | HIGH | 8.1 | 56%ile | Microsoft | 2026-05-12 |
| CVE-2026-41105 | Azure Monitor Action Group Notification System Elevation of Privilege Vulnerability | HIGH | 8.1 | 58%ile | Microsoft | 2026-05-12 |
| CVE-2026-42897 | Microsoft Exchange Server Spoofing Vulnerability | HIGH | 8.1 | 99%ile | Microsoft | 2026-05-12 |
| CVE-2026-45584 | Microsoft Defender Remote Code Execution Vulnerability | HIGH | 8.1 | 58%ile | Microsoft | 2026-05-12 |
| CVE-2026-34332 | Windows Kernel-Mode Driver Remote Code Execution Vulnerability | HIGH | 8.0 | 44%ile | Microsoft | 2026-05-12 |
| CVE-2026-40368 | Microsoft SharePoint Server Remote Code Execution Vulnerability | HIGH | 8.0 | 79%ile | Microsoft | 2026-05-12 |
| CVE-2026-47294 | Microsoft SharePoint Server Remote Code Execution Vulnerability | HIGH | 8.0 | 49%ile | Microsoft | 2026-05-12 |
| CVE-2026-46300 | net: skbuff: preserve shared-frag marker during coalescing | HIGH | 7.8 | 97%ile | Microsoft | 2026-05-12 |
| CVE-2026-31694 | fuse: reject oversized dirents in page cache | HIGH | 7.8 | 21%ile | Microsoft | 2026-05-12 |
| CVE-2026-31700 | net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd() | HIGH | 7.8 | 1%ile | Microsoft | 2026-05-12 |
| CVE-2026-31722 | usb: gadget: f_rndis: Fix net_device lifecycle with device_move | HIGH | 7.8 | 5%ile | Microsoft | 2026-05-12 |
| CVE-2026-31723 | usb: gadget: f_subset: Fix net_device lifecycle with device_move | HIGH | 7.8 | 5%ile | Microsoft | 2026-05-12 |
| CVE-2026-31724 | usb: gadget: f_eem: Fix net_device lifecycle with device_move | HIGH | 7.8 | 5%ile | Microsoft | 2026-05-12 |
| CVE-2026-31725 | usb: gadget: f_ecm: Fix net_device lifecycle with device_move | HIGH | 7.8 | 5%ile | Microsoft | 2026-05-12 |
| CVE-2026-40034 | gitoxide - Command Injection via Partial .gitmodules Override in gix-submodule | HIGH | 7.8 | 51%ile | Microsoft | 2026-05-12 |
| CVE-2026-41054 | Missing exit out of permission check in haveged could lead to root exploit | HIGH | 7.8 | 8%ile | Microsoft | 2026-05-12 |
| CVE-2026-43009 | bpf: Fix incorrect pruning due to atomic fetch precision tracking | HIGH | 7.8 | 6%ile | Microsoft | 2026-05-12 |
| CVE-2026-43019 | Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync | HIGH | 7.8 | 1%ile | Microsoft | 2026-05-12 |
| CVE-2026-43033 | crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption | HIGH | 7.8 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-43059 | Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers | HIGH | 7.8 | 6%ile | Microsoft | 2026-05-12 |
| CVE-2026-43125 | dlm: validate length in dlm_search_rsb_tree | HIGH | 7.8 | 45%ile | Microsoft | 2026-05-12 |
| CVE-2026-43258 | alpha: fix user-space corruption during memory compaction | HIGH | 7.8 | 7%ile | Microsoft | 2026-05-12 |
| CVE-2026-43284 | xfrm: esp: avoid in-place decrypt on shared skb frags | HIGH | 7.8 | 100%ile | Microsoft | 2026-05-12 |
| CVE-2026-43298 | drm/amdgpu: Skip vcn poison irq release on VF | HIGH | 7.8 | 5%ile | Microsoft | 2026-05-12 |
| CVE-2026-43321 | bpf: Properly mark live registers for indirect jumps | HIGH | 7.8 | 4%ile | Microsoft | 2026-05-12 |
| CVE-2026-43353 | i3c: mipi-i3c-hci: Fix race in DMA ring dequeue | HIGH | 7.8 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-43497 | fbdev: udlfb: add vm_ops to dlfb_ops_mmap to prevent use-after-free | HIGH | 7.8 | 1%ile | Microsoft | 2026-05-12 |
| CVE-2026-43499 | rtmutex: Use waiter::task instead of current in remove_waiter() | HIGH | 7.8 | 59%ile | Microsoft | 2026-05-12 |
| CVE-2026-43500 | rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present | HIGH | 7.8 | 100%ile | Microsoft | 2026-05-12 |
| CVE-2026-45958 | drm/exynos: vidi: fix to avoid directly dereferencing user pointer | HIGH | 7.8 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46150 | fanotify: fix false positive on permission events | HIGH | 7.8 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-46242 | eventpoll: fix ep_remove struct eventpoll / struct file UAF | HIGH | 7.8 | 91%ile | Microsoft | 2026-05-12 |
| CVE-2026-32204 | Azure Monitor Agent Elevation of Privilege Vulnerability | HIGH | 7.8 | 21%ile | Microsoft | 2026-05-12 |
| CVE-2026-33834 | Windows Event Logging Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 20%ile | Microsoft | 2026-05-12 |
| CVE-2026-33835 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 82%ile | Microsoft | 2026-05-12 |
| CVE-2026-33837 | Windows TCP/IP Local Elevation of Privilege Vulnerability | HIGH | 7.8 | 79%ile | Microsoft | 2026-05-12 |
| CVE-2026-33838 | Windows Message Queuing (MSMQ) Elevation of Privilege Vulnerability | HIGH | 7.8 | 34%ile | Microsoft | 2026-05-12 |
| CVE-2026-33840 | Win32k Elevation of Privilege Vulnerability | HIGH | 7.8 | 81%ile | Microsoft | 2026-05-12 |
| CVE-2026-33841 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-05-12 |
| CVE-2026-34330 | Win32k Elevation of Privilege Vulnerability | HIGH | 7.8 | 23%ile | Microsoft | 2026-05-12 |
| CVE-2026-34333 | Windows Win32k Elevation of Privilege Vulnerability | HIGH | 7.8 | 22%ile | Microsoft | 2026-05-12 |
| CVE-2026-34334 | Windows TCP/IP Elevation of Privilege Vulnerability | HIGH | 7.8 | 4%ile | Microsoft | 2026-05-12 |
| CVE-2026-34336 | Windows DWM Core Library Elevation of Privilege Vulnerability | HIGH | 7.8 | 16%ile | Microsoft | 2026-05-12 |
| CVE-2026-34337 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 6%ile | Microsoft | 2026-05-12 |
| CVE-2026-34338 | Windows Telephony Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 16%ile | Microsoft | 2026-05-12 |
| CVE-2026-34343 | Windows Application Identity (AppID) Subsystem Elevation of Privilege Vulnerability | HIGH | 7.8 | 26%ile | Microsoft | 2026-05-12 |
| CVE-2026-34344 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2026-05-12 |
| CVE-2026-34351 | Windows TCP/IP Elevation of Privilege Vulnerability | HIGH | 7.8 | 10%ile | Microsoft | 2026-05-12 |
| CVE-2026-35415 | Windows Storage Spaces Controller Elevation of Privilege Vulnerability | HIGH | 7.8 | 26%ile | Microsoft | 2026-05-12 |
| CVE-2026-35417 | Windows Win32k Elevation of Privilege Vulnerability | HIGH | 7.8 | 28%ile | Microsoft | 2026-05-12 |
| CVE-2026-35418 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 10%ile | Microsoft | 2026-05-12 |
| CVE-2026-35420 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.8 | 25%ile | Microsoft | 2026-05-12 |
| CVE-2026-35421 | Windows GDI Remote Code Execution Vulnerability | HIGH | 7.8 | 45%ile | Microsoft | 2026-05-12 |
| CVE-2026-40359 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 26%ile | Microsoft | 2026-05-12 |
| CVE-2026-40360 | Microsoft Excel Information Disclosure Vulnerability | HIGH | 7.8 | 35%ile | Microsoft | 2026-05-12 |
| CVE-2026-40362 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 26%ile | Microsoft | 2026-05-12 |
| CVE-2026-40369 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.8 | 92%ile | Microsoft | 2026-05-12 |
| CVE-2026-40377 | Microsoft Cryptographic Services Elevation of Privilege Vulnerability | HIGH | 7.8 | 23%ile | Microsoft | 2026-05-12 |
| CVE-2026-40381 | Azure Connected Machine Agent Elevation of Privilege Vulnerability | HIGH | 7.8 | 12%ile | Microsoft | 2026-05-12 |
| CVE-2026-40382 | Windows Telephony Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 16%ile | Microsoft | 2026-05-12 |
| CVE-2026-40397 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 20%ile | Microsoft | 2026-05-12 |
| CVE-2026-40398 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | HIGH | 7.8 | 86%ile | Microsoft | 2026-05-12 |
| CVE-2026-40399 | Windows TCP/IP Elevation of Privilege Vulnerability | HIGH | 7.8 | 26%ile | Microsoft | 2026-05-12 |
| CVE-2026-40407 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 23%ile | Microsoft | 2026-05-12 |
| CVE-2026-40408 | Windows WAN ARP Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 22%ile | Microsoft | 2026-05-12 |
| CVE-2026-40417 | Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability | HIGH | 7.8 | 20%ile | Microsoft | 2026-05-12 |
| CVE-2026-40418 | Microsoft Office Click-To-Run Elevation of Privilege Vulnerability | HIGH | 7.8 | 17%ile | Microsoft | 2026-05-12 |
| CVE-2026-40419 | Microsoft Office Click-To-Run Elevation of Privilege Vulnerability | HIGH | 7.8 | 23%ile | Microsoft | 2026-05-12 |
| CVE-2026-41088 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | HIGH | 7.8 | 25%ile | Microsoft | 2026-05-12 |
| CVE-2026-41091 | Microsoft Defender Elevation of Privilege Vulnerability | HIGH | 7.8 | 95%ile | Microsoft | 2026-05-12 |
| CVE-2026-41095 | Data Deduplication Elevation of Privilege Vulnerability | HIGH | 7.8 | 26%ile | Microsoft | 2026-05-12 |
| CVE-2026-41611 | Visual Studio Code Remote Code Execution Vulnerability | HIGH | 7.8 | 36%ile | Microsoft | 2026-05-12 |
| CVE-2026-42831 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 7.8 | 38%ile | Microsoft | 2026-05-12 |
| CVE-2026-42834 | Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability | HIGH | 7.8 | 35%ile | Microsoft | 2026-05-12 |
| CVE-2026-42896 | Windows DWM Core Library Elevation of Privilege Vulnerability | HIGH | 7.8 | 21%ile | Microsoft | 2026-05-12 |
| CVE-2026-31721 | usb: gadget: f_hid: move list and spinlock inits from bind to alloc | HIGH | 7.8 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-31702 | f2fs: fix use-after-free of sbi in f2fs_compress_write_end_io() | HIGH | 7.8 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-48864 | Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data | HIGH | 7.8 | 13%ile | Microsoft | 2026-05-12 |
| CVE-2026-46191 | fbcon: Avoid OOB font access if console rotation fails | HIGH | 7.7 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-9804 | Kubevirt: kubevirt: vmexport directory symlink escape enables exporter pod file read | HIGH | 7.7 | 44%ile | Microsoft | 2026-05-12 |
| CVE-2026-26147 | Azure Stack HCI Information Disclosure Vulnerability | HIGH | 7.7 | 48%ile | Microsoft | 2026-05-12 |
| CVE-2026-33821 | Microsoft Dynamics 365 Customer Insights Elevation of Privilege Vulnerability | HIGH | 7.7 | 52%ile | Microsoft | 2026-05-12 |
| CVE-2026-42832 | Microsoft Office Spoofing Vulnerability | HIGH | 7.7 | 13%ile | Microsoft | 2026-05-12 |
| CVE-2026-29169 | Apache HTTP Server: mod_dav_lock indirect lock crash | HIGH | 7.5 | 48%ile | Microsoft | 2026-05-12 |
| CVE-2026-3039 | BIND 9 server memory exhaustion during GSS-API TKEY negotiation | HIGH | 7.5 | 65%ile | Microsoft | 2026-05-12 |
| CVE-2026-31711 | smb: server: fix active_num_conn leak on transport allocation failure | HIGH | 7.5 | 46%ile | Microsoft | 2026-05-12 |
| CVE-2026-33811 | Crash when handling long CNAME response in net | HIGH | 7.5 | 59%ile | Microsoft | 2026-05-12 |
| CVE-2026-33814 | Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net | HIGH | 7.5 | 58%ile | Microsoft | 2026-05-12 |
| CVE-2026-33846 | Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly | HIGH | 7.5 | 70%ile | Microsoft | 2026-05-12 |
| CVE-2026-34059 | Apache HTTP Server: mod_proxy_ajp: Heap Over-Read and memory disclosure in ajp_parse_data() | HIGH | 7.5 | 34%ile | Microsoft | 2026-05-12 |
| CVE-2026-37457 | An off-by-one out-of-bounds write vulnerability in the bgp_flowspec_op_decode() function (bgpd/bgp_flowspec_util.c) of F | HIGH | 7.5 | 33%ile | Microsoft | 2026-05-12 |
| CVE-2026-37459 | An integer underflow in FRRouting (FRR) stable/10.0 to stable/10.6 allows attackers to cause a Denial of Service (DoS) v | HIGH | 7.5 | 31%ile | Microsoft | 2026-05-12 |
| CVE-2026-39820 | Quadratic string concatentation in consumeComment in net/mail | HIGH | 7.5 | 56%ile | Microsoft | 2026-05-12 |
| CVE-2026-39829 | Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh | HIGH | 7.5 | 40%ile | Microsoft | 2026-05-12 |
| CVE-2026-39836 | Panic in Dial and LookupPort when handling NUL byte on Windows in net | HIGH | 7.5 | 50%ile | Microsoft | 2026-05-12 |
| CVE-2026-41292 | Long list of incoming EDNS options degrades performance | HIGH | 7.5 | 55%ile | Microsoft | 2026-05-12 |
| CVE-2026-42009 | Gnutls: gnutls: denial of service via dtls packet reordering vulnerability | HIGH | 7.5 | 71%ile | Microsoft | 2026-05-12 |
| CVE-2026-42151 | Prometheus Azure AD remote write OAuth client secret exposed via config API | HIGH | 7.5 | 29%ile | Microsoft | 2026-05-12 |
| CVE-2026-42154 | Prometheus: remote read endpoint allows denial of service via crafted snappy payload | HIGH | 7.5 | 57%ile | Microsoft | 2026-05-12 |
| CVE-2026-42304 | Twisted: Denial of Service (DoS) in twisted.names via Crafted DNS Compression Pointer Chains | HIGH | 7.5 | 38%ile | Microsoft | 2026-05-12 |
| CVE-2026-42497 | Archive::Tar versions before 3.08 for Perl extract hardlinks to attacker controlled paths outside the extraction directo | HIGH | 7.5 | 40%ile | Microsoft | 2026-05-12 |
| CVE-2026-42499 | Quadratic string concatenation in consumePhrase in net/mail | HIGH | 7.5 | 56%ile | Microsoft | 2026-05-12 |
| CVE-2026-42501 | Malicious module proxy can bypass checksum database in cmd/go | HIGH | 7.5 | 14%ile | Microsoft | 2026-05-12 |
| CVE-2026-42944 | Heap overflow with multiple NSID, COOKIE, PADDING EDNS options | HIGH | 7.5 | 58%ile | Microsoft | 2026-05-12 |
| CVE-2026-42959 | Crash during DNSSEC validation of malicious content | HIGH | 7.5 | 57%ile | Microsoft | 2026-05-12 |
| CVE-2026-44673 | libyang: lyb_read_string() integer overflow → heap buffer overflow | HIGH | 7.5 | 50%ile | Microsoft | 2026-05-12 |
| CVE-2026-45850 | ipvs: skip ipv6 extension headers for csum checks | HIGH | 7.5 | 6%ile | Microsoft | 2026-05-12 |
| CVE-2026-46009 | PCI: endpoint: pci-epf-ntb: Remove duplicate resource teardown | HIGH | 7.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46054 | selinux: fix overlayfs mmap() and mprotect() access checks | HIGH | 7.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46597 | Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh | HIGH | 7.5 | 41%ile | Microsoft | 2026-05-12 |
| CVE-2026-4890 | CVE-2026-4890 | HIGH | 7.5 | 95%ile | Microsoft | 2026-05-12 |
| CVE-2026-48959 | IO::Uncompress::Unzip versions before 2.220 for Perl allow CPU exhaustion via per-byte read loop in fastForward | HIGH | 7.5 | 46%ile | Microsoft | 2026-05-12 |
| CVE-2026-5946 | Invalid handling of CLASS != IN | HIGH | 7.5 | 80%ile | Microsoft | 2026-05-12 |
| CVE-2026-5947 | SIG(0) validation during query flood may lead to undefined behavior | HIGH | 7.5 | 72%ile | Microsoft | 2026-05-12 |
| CVE-2026-6276 | stale custom cookie host causes cookie leak | HIGH | 7.5 | 22%ile | Microsoft | 2026-05-12 |
| CVE-2026-6479 | PostgreSQL SSL/GSS init causes denial of service, via uncontrolled recursion | HIGH | 7.5 | 48%ile | Microsoft | 2026-05-12 |
| CVE-2026-6664 | PgBouncer integer overflow in PgBouncer network packet parsing | HIGH | 7.5 | 53%ile | Microsoft | 2026-05-12 |
| CVE-2026-8177 | XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing trunc | HIGH | 7.5 | 51%ile | Microsoft | 2026-05-12 |
| CVE-2026-9010 | Boost <= 2.0.3 - Unauthenticated Blind SQL Injection via Multiple Parameters | HIGH | 7.5 | 30%ile | Microsoft | 2026-05-12 |
| CVE-2026-23663 | Microsoft Global Secure Access (GSA) Information Disclosure Vulnerability | HIGH | 7.5 | 46%ile | Microsoft | 2026-05-12 |
| CVE-2026-26129 | M365 Copilot Information Disclosure Vulnerability | HIGH | 7.5 | 66%ile | Microsoft | 2026-05-12 |
| CVE-2026-26164 | M365 Copilot Information Disclosure Vulnerability | HIGH | 7.5 | 57%ile | Microsoft | 2026-05-12 |
| CVE-2026-32161 | Windows Native WiFi Miniport Driver Remote Code Execution Vulnerability | HIGH | 7.5 | 22%ile | Microsoft | 2026-05-12 |
| CVE-2026-33111 | Copilot Chat (Microsoft Edge) Information Disclosure Vulnerability | HIGH | 7.5 | 66%ile | Microsoft | 2026-05-12 |
| CVE-2026-35424 | Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability | HIGH | 7.5 | 68%ile | Microsoft | 2026-05-12 |
| CVE-2026-40405 | Windows TCP/IP Denial of Service Vulnerability | HIGH | 7.5 | 65%ile | Microsoft | 2026-05-12 |
| CVE-2026-40406 | Windows TCP/IP Information Disclosure Vulnerability | HIGH | 7.5 | 61%ile | Microsoft | 2026-05-12 |
| CVE-2026-42899 | ASP.NET Core Denial of Service Vulnerability | HIGH | 7.5 | 84%ile | Microsoft | 2026-05-12 |
| CVE-2026-31704 | ksmbd: use check_add_overflow() to prevent u16 DACL size overflow | HIGH | 7.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-5773 | wrong reuse of SMB connection | HIGH | 7.5 | 50%ile | Microsoft | 2026-05-12 |
| CVE-2026-9538 | Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar heade | HIGH | 7.5 | 44%ile | Microsoft | 2026-05-12 |
| CVE-2026-3593 | Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementation | HIGH | 7.4 | 75%ile | Microsoft | 2026-05-12 |
| CVE-2026-48526 | PyJWT: Public-key JWK accepted as HMAC secret enables forged HS256 tokens when mixed families are allowed | HIGH | 7.4 | 37%ile | Microsoft | 2026-05-12 |
| CVE-2026-40413 | Windows TCP/IP Denial of Service Vulnerability | HIGH | 7.4 | 34%ile | Microsoft | 2026-05-12 |
| CVE-2026-40414 | Windows TCP/IP Denial of Service Vulnerability | HIGH | 7.4 | 45%ile | Microsoft | 2026-05-12 |
| CVE-2026-41107 | Microsoft Edge (Chromium-based) Information Disclosure Vulnerability | HIGH | 7.4 | 51%ile | Microsoft | 2026-05-12 |
| CVE-2026-42893 | Microsoft Outlook for iOS Tampering Vulnerability | HIGH | 7.4 | 34%ile | Microsoft | 2026-05-12 |
| CVE-2026-42011 | Gnutls: gnutls: security bypass due to incorrect name constraint handling | HIGH | 7.4 | 41%ile | Microsoft | 2026-05-12 |
| CVE-2026-2291 | CVE-2026-2291 | HIGH | 7.3 | 49%ile | Microsoft | 2026-05-12 |
| CVE-2026-29168 | Apache HTTP Server: mod_md unrestricted OCSP response | HIGH | 7.3 | 50%ile | Microsoft | 2026-05-12 |
| CVE-2026-45894 | iommu/vt-d: Clear Present bit before tearing down PASID entry | HIGH | 7.3 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-45932 | bpf: Fix tcx/netkit detach permissions when prog fd isn't given | HIGH | 7.3 | 6%ile | Microsoft | 2026-05-12 |
| CVE-2026-45993 | LoongArch: Add spectre boundry for syscall dispatch table | HIGH | 7.3 | 4%ile | Microsoft | 2026-05-12 |
| CVE-2026-46006 | drm/nouveau: fix u32 overflow in pushbuf reloc bounds check | HIGH | 7.3 | 4%ile | Microsoft | 2026-05-12 |
| CVE-2026-46033 | crypto: authencesn - reject short ahash digests during instance creation | HIGH | 7.3 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-46130 | dm-verity-fec: fix reading parity bytes split across blocks (take 3) | HIGH | 7.3 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46145 | RDMA/mana: Validate rx_hash_key_len | HIGH | 7.3 | 4%ile | Microsoft | 2026-05-12 |
| CVE-2026-48962 | IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled ou | HIGH | 7.3 | 38%ile | Microsoft | 2026-05-12 |
| CVE-2026-5172 | CVE-2026-5172 | HIGH | 7.3 | 86%ile | Microsoft | 2026-05-12 |
| CVE-2026-7598 | libssh2 userauth.c userauth_password integer overflow | HIGH | 7.3 | 40%ile | Microsoft | 2026-05-12 |
| CVE-2026-5089 | YAML::Syck versions before 1.38 for Perl has an out-of-bounds read | HIGH | 7.3 | 35%ile | Microsoft | 2026-05-12 |
| CVE-2026-32177 | .NET Elevation of Privilege Vulnerability | HIGH | 7.3 | 51%ile | Microsoft | 2026-05-12 |
| CVE-2026-35433 | .NET Elevation of Privilege Vulnerability | HIGH | 7.3 | 56%ile | Microsoft | 2026-05-12 |
| CVE-2026-43869 | Apache Thrift: TSSLTransportFactory.java hostname verification | HIGH | 7.3 | 50%ile | Microsoft | 2026-05-12 |
| CVE-2025-71289 | fs/ntfs3: handle attr_set_size() errors when truncating files | HIGH | 7.1 | 18%ile | Microsoft | 2026-05-12 |
| CVE-2026-31697 | crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed | HIGH | 7.1 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-31698 | crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed | HIGH | 7.1 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-31699 | crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed | HIGH | 7.1 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-31707 | ksmbd: validate response sizes in ipc_validate_msg() | HIGH | 7.1 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-42010 | Gnutls: gnutls: authentication bypass via nul character in username | HIGH | 7.1 | 64%ile | Microsoft | 2026-05-12 |
| CVE-2026-42012 | Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans | HIGH | 7.1 | 29%ile | Microsoft | 2026-05-12 |
| CVE-2026-43042 | mpls: add seqcount to protect the platform_label{,s} pair | HIGH | 7.1 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-43088 | net: af_key: zero aligned sockaddr tail in PF_KEY exports | HIGH | 7.1 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-43109 | x86: shadow stacks: proper error handling for mmap lock | HIGH | 7.1 | 1%ile | Microsoft | 2026-05-12 |
| CVE-2026-43116 | netfilter: ctnetlink: ensure safe access to master conntrack | HIGH | 7.1 | 1%ile | Microsoft | 2026-05-12 |
| CVE-2026-43153 | xfs: remove xfs_attr_leaf_hasname | HIGH | 7.1 | 7%ile | Microsoft | 2026-05-12 |
| CVE-2026-43195 | drm/amdgpu: validate user queue size constraints | HIGH | 7.1 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-43219 | net: cpsw_new: Fix potential unregister of netdev that has not been registered yet | HIGH | 7.1 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-43245 | ntfs: ->d_compare() must not block | HIGH | 7.1 | 38%ile | Microsoft | 2026-05-12 |
| CVE-2026-43248 | vhost: move vdpa group bound check to vhost_vdpa | HIGH | 7.1 | 6%ile | Microsoft | 2026-05-12 |
| CVE-2026-43250 | usb: chipidea: udc: fix DMA and SG cleanup in _ep_nuke() | HIGH | 7.1 | 6%ile | Microsoft | 2026-05-12 |
| CVE-2026-43274 | mailbox: mchp-ipc-sbi: fix out-of-bounds access in mchp_ipc_get_cluster_aggr_irq() | HIGH | 7.1 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-43318 | drm/amdgpu: fix sync handling in amdgpu_dma_buf_move_notify | HIGH | 7.1 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-45839 | bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() | HIGH | 7.1 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-45861 | gfs2: Fix slab-use-after-free in qd_put | HIGH | 7.1 | 8%ile | Microsoft | 2026-05-12 |
| CVE-2026-45912 | ext4: don't cache extent during splitting extent | HIGH | 7.1 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-45956 | drm/exynos: vidi: use priv->vidi_dev for ctx lookup in vidi_connection_ioctl() | HIGH | 7.1 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-45991 | udf: fix partition descriptor append bookkeeping | HIGH | 7.1 | 7%ile | Microsoft | 2026-05-12 |
| CVE-2026-46047 | net: qrtr: ns: Fix use-after-free in driver remove() | HIGH | 7.1 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46056 | Bluetooth: hci_event: fix potential UAF in SSP passkey handlers | HIGH | 7.1 | 21%ile | Microsoft | 2026-05-12 |
| CVE-2026-46062 | ntfs3: fix integer overflow in run_unpack() volume boundary check | HIGH | 7.1 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-46069 | wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() | HIGH | 7.1 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-46072 | ntfs3: add buffer boundary checks to run_unpack() | HIGH | 7.1 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46080 | ocfs2: split transactions in dio completion to avoid credit exhaustion | HIGH | 7.1 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-46084 | RDMA/mana_ib: Disable RX steering on RSS QP destroy | HIGH | 7.1 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46091 | media: rc: igorplugusb: heed coherency rules | HIGH | 7.1 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46094 | ext4: fix bounds check in check_xattrs() to prevent out-of-bounds access | HIGH | 7.1 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46099 | net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels | HIGH | 7.1 | 21%ile | Microsoft | 2026-05-12 |
| CVE-2026-46112 | RDMA/hns: Fix unlocked call to hns_roce_qp_remove() | HIGH | 7.1 | 1%ile | Microsoft | 2026-05-12 |
| CVE-2026-46122 | wifi: b43: enforce bounds check on firmware key index in b43_rx() | HIGH | 7.1 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-46146 | ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3() | HIGH | 7.1 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-46174 | x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache | HIGH | 7.1 | 4%ile | Microsoft | 2026-05-12 |
| CVE-2026-46177 | ipmi: Add limits to event and receive message requests | HIGH | 7.1 | 47%ile | Microsoft | 2026-05-12 |
| CVE-2026-46193 | xfrm: ah: account for ESN high bits in async callbacks | HIGH | 7.1 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-46197 | drm/amdkfd: validate SVM ioctl nattr against buffer size | HIGH | 7.1 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-46204 | drm/amdgpu/vcn4: Prevent OOB reads when parsing IB | HIGH | 7.1 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-46225 | spi: rspi: fix controller deregistration | HIGH | 7.1 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46226 | spi: fsl: fix controller deregistration | HIGH | 7.1 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46227 | sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL | HIGH | 7.1 | 1%ile | Microsoft | 2026-05-12 |
| CVE-2026-46229 | drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure | HIGH | 7.1 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46230 | drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg | HIGH | 7.1 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46231 | batman-adv: bla: put backbone reference on failed claim hash insert | HIGH | 7.1 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46233 | batman-adv: bla: only purge non-released claims | HIGH | 7.1 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-40401 | Windows TCP/IP Denial of Service Vulnerability | HIGH | 7.1 | 26%ile | Microsoft | 2026-05-12 |
| CVE-2026-41101 | Microsoft Word for Android Spoofing Vulnerability | HIGH | 7.1 | 22%ile | Microsoft | 2026-05-12 |
| CVE-2026-41102 | Microsoft PowerPoint for Android Spoofing Vulnerability | HIGH | 7.1 | 22%ile | Microsoft | 2026-05-12 |
| CVE-2026-43058 | media: vidtv: fix pass-by-value structs causing MSAN warnings | HIGH | 7.1 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-43228 | hfs: Replace BUG_ON with error handling for CNID count checks | HIGH | 7.1 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-29518 | Rsync < 3.4.3 TOCTOU Race Condition Allows Symlink-Based Arbitrary File Write | HIGH | 7.0 | 4%ile | Microsoft | 2026-05-12 |
| CVE-2026-31729 | usb: typec: ucsi: validate connector number in ucsi_notify_common() | HIGH | 7.0 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-31777 | ALSA: ctxfi: Check the error for index mapping | HIGH | 7.0 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-43037 | ip6_tunnel: clear skb2->cb[] in ip4ip6_err() | HIGH | 7.0 | 53%ile | Microsoft | 2026-05-12 |
| CVE-2026-43049 | HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure | HIGH | 7.0 | 4%ile | Microsoft | 2026-05-12 |
| CVE-2026-43052 | wifi: mac80211: check tdls flag in ieee80211_tdls_oper | HIGH | 7.0 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-43083 | net: ioam6: fix OOB and missing lock | HIGH | 7.0 | 49%ile | Microsoft | 2026-05-12 |
| CVE-2026-43101 | ipv6: ioam: fix potential NULL dereferences in __ioam6_fill_trace_data() | HIGH | 7.0 | 48%ile | Microsoft | 2026-05-12 |
| CVE-2026-43198 | tcp: fix potential race in tcp_v6_syn_recv_sock() | HIGH | 7.0 | 22%ile | Microsoft | 2026-05-12 |
| CVE-2026-43199 | net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query | HIGH | 7.0 | 36%ile | Microsoft | 2026-05-12 |
| CVE-2026-43213 | wifi: rtw89: pci: validate sequence number of TX release report | HIGH | 7.0 | 21%ile | Microsoft | 2026-05-12 |
| CVE-2026-43303 | mm/page_alloc: clear page->private in free_pages_prepare() | HIGH | 7.0 | 7%ile | Microsoft | 2026-05-12 |
| CVE-2026-43306 | bpf: crypto: Use the correct destructor kfunc type | HIGH | 7.0 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-43501 | ipv6: rpl: reserve mac_len headroom when recompressed SRH grows | HIGH | 7.0 | 54%ile | Microsoft | 2026-05-12 |
| CVE-2026-43503 | net: skbuff: propagate shared-frag marker through frag-transfer helpers | HIGH | 7.0 | 81%ile | Microsoft | 2026-05-12 |
| CVE-2026-45840 | openvswitch: cap upcall PID array size and pre-size vport replies | HIGH | 7.0 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-45859 | netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation | HIGH | 7.0 | 54%ile | Microsoft | 2026-05-12 |
| CVE-2026-45892 | ext4: drop extent cache after doing PARTIAL_VALID1 zeroout | HIGH | 7.0 | 5%ile | Microsoft | 2026-05-12 |
| CVE-2026-45934 | btrfs: fix EEXIST abort due to non-consecutive gaps in chunk allocation | HIGH | 7.0 | 5%ile | Microsoft | 2026-05-12 |
| CVE-2026-45940 | net: stmmac: fix oops when split header is enabled | HIGH | 7.0 | 8%ile | Microsoft | 2026-05-12 |
| CVE-2026-45942 | ext4: fix e4b bitmap inconsistency reports | HIGH | 7.0 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-45998 | rxrpc: Fix potential UAF after skb_unshare() failure | HIGH | 7.0 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-46017 | mm: fix deferred split queue races during migration | HIGH | 7.0 | 1%ile | Microsoft | 2026-05-12 |
| CVE-2026-46032 | KVM: nSVM: Triple fault if restore host CR3 fails on nested #VMEXIT | HIGH | 7.0 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-46043 | RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv | HIGH | 7.0 | 44%ile | Microsoft | 2026-05-12 |
| CVE-2026-46052 | ceph: only d_add() negative dentries when they are unhashed | HIGH | 7.0 | 43%ile | Microsoft | 2026-05-12 |
| CVE-2026-46053 | net: rds: fix MR cleanup on copy error | HIGH | 7.0 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46076 | KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 | HIGH | 7.0 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-46086 | net: bridge: use a stable FDB dst snapshot in RCU readers | HIGH | 7.0 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46090 | ALSA: aloop: Fix peer runtime UAF during format-change stop | HIGH | 7.0 | 1%ile | Microsoft | 2026-05-12 |
| CVE-2026-46114 | RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads | HIGH | 7.0 | 40%ile | Microsoft | 2026-05-12 |
| CVE-2026-46119 | libceph: Fix slab-out-of-bounds access in auth message processing | HIGH | 7.0 | 44%ile | Microsoft | 2026-05-12 |
| CVE-2026-33839 | Win32k Elevation of Privilege Vulnerability | HIGH | 7.0 | 9%ile | Microsoft | 2026-05-12 |
| CVE-2026-34331 | Win32k Elevation of Privilege Vulnerability | HIGH | 7.0 | 9%ile | Microsoft | 2026-05-12 |
| CVE-2026-34340 | Windows Projected File System Elevation of Privilege Vulnerability | HIGH | 7.0 | 11%ile | Microsoft | 2026-05-12 |
| CVE-2026-34341 | Windows Link-Layer Discovery Protocol (LLDP) Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-05-12 |
| CVE-2026-34342 | Windows Print Spooler Elevation of Privilege Vulnerability | HIGH | 7.0 | 22%ile | Microsoft | 2026-05-12 |
| CVE-2026-34345 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | HIGH | 7.0 | 10%ile | Microsoft | 2026-05-12 |
| CVE-2026-34347 | Windows Win32k Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2026-05-12 |
| CVE-2026-35416 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | HIGH | 7.0 | 76%ile | Microsoft | 2026-05-12 |
| CVE-2026-40410 | Windows SMB Client Elevation of Privilege Vulnerability | HIGH | 7.0 | 16%ile | Microsoft | 2026-05-12 |
| CVE-2026-42825 | Windows Telephony Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 13%ile | Microsoft | 2026-05-12 |
| CVE-2026-43176 | wifi: rtw89: pci: validate release report content before using for RTL8922DE | HIGH | 7.0 | 15%ile | Microsoft | 2026-05-12 |
| CVE-2026-43267 | wifi: rtw89: fix potential zero beacon interval in beacon tracking | HIGH | 7.0 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46121 | mm/damon/sysfs-schemes: protect memcg_path kfree() with damon_sysfs_lock | HIGH | 7.0 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-45585 | Windows BitLocker Security Feature Bypass Vulnerability | MEDIUM | 6.8 | 80%ile | Microsoft | 2026-05-12 |
| CVE-2026-21530 | Windows Rich Text Edit Elevation of Privilege Vulnerability | MEDIUM | 6.7 | 25%ile | Microsoft | 2026-05-12 |
| CVE-2026-32170 | Windows Rich Text Edit Elevation of Privilege Vulnerability | MEDIUM | 6.7 | 25%ile | Microsoft | 2026-05-12 |
| CVE-2026-41097 | Secure Boot Security Feature Bypass Vulnerability | MEDIUM | 6.7 | 73%ile | Microsoft | 2026-05-12 |
| CVE-2026-45130 | Vim: Heap Buffer Overflow in spell file loading | MEDIUM | 6.6 | 16%ile | Microsoft | 2026-05-12 |
| CVE-2026-45930 | net: mctp: ensure our nlmsg responses are initialised | MEDIUM | 6.6 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-46209 | drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() | MEDIUM | 6.6 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-46220 | drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission | MEDIUM | 6.6 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-24072 | Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr | MEDIUM | 6.5 | 51%ile | Microsoft | 2026-05-12 |
| CVE-2026-25680 | Invoking denial of service when parsing arbitrary HTML in golang.org/x/net/html | MEDIUM | 6.5 | 26%ile | Microsoft | 2026-05-12 |
| CVE-2026-33523 | Apache HTTP Server: multiple modules: HTTP response splitting forwarding malicious status line | MEDIUM | 6.5 | 38%ile | Microsoft | 2026-05-12 |
| CVE-2026-37458 | Missing input validation in the MP_REACH_NLRI component of FRRouting (FRR) stable/10.0 to stable/10.6 allows authenticat | MEDIUM | 6.5 | 16%ile | Microsoft | 2026-05-12 |
| CVE-2026-39827 | Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh | MEDIUM | 6.5 | 20%ile | Microsoft | 2026-05-12 |
| CVE-2026-40460 | NGINX ngx_quic_module vulnerability | MEDIUM | 6.5 | 31%ile | Microsoft | 2026-05-12 |
| CVE-2026-41401 | libyang - Heap Use-After-Free Write in XML Metadata Parsing | MEDIUM | 6.5 | 52%ile | Microsoft | 2026-05-12 |
| CVE-2026-42946 | NGINX ngx_http_scgi_module and ngx_http_uwsgi_module vulnerability | MEDIUM | 6.5 | 61%ile | Microsoft | 2026-05-12 |
| CVE-2026-43620 | Rsync < 3.4.3 Out-of-Bounds Array Read via recv_files() | MEDIUM | 6.5 | 37%ile | Microsoft | 2026-05-12 |
| CVE-2026-44283 | etcd: Read access via PrevKv in etcd transactions may bypass RBAC authorization checks | MEDIUM | 6.5 | 13%ile | Microsoft | 2026-05-12 |
| CVE-2026-5545 | wrong reuse of HTTP Negotiate connection | MEDIUM | 6.5 | 36%ile | Microsoft | 2026-05-12 |
| CVE-2026-6478 | PostgreSQL discloses MD5-hashed passwords via covert timing channel | MEDIUM | 6.5 | 46%ile | Microsoft | 2026-05-12 |
| CVE-2026-9149 | Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file | MEDIUM | 6.5 | 24%ile | Microsoft | 2026-05-12 |
| CVE-2026-9150 | Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums | MEDIUM | 6.5 | 35%ile | Microsoft | 2026-05-12 |
| CVE-2026-34350 | Windows Storport Miniport Driver Denial of Service Vulnerability | MEDIUM | 6.5 | 56%ile | Microsoft | 2026-05-12 |
| CVE-2026-35422 | Windows TCP/IP Driver Security Feature Bypass Vulnerability | MEDIUM | 6.5 | 49%ile | Microsoft | 2026-05-12 |
| CVE-2026-40374 | Microsoft Power Automate Desktop Information Disclosure Vulnerability | MEDIUM | 6.5 | 59%ile | Microsoft | 2026-05-12 |
| CVE-2026-42827 | M365 Copilot Information Disclosure Vulnerability | MEDIUM | 6.5 | 43%ile | Microsoft | 2026-05-12 |
| CVE-2026-42830 | Azure Monitor Agent Metrics Extension Elevation of Privilege Vulnerability | MEDIUM | 6.5 | 41%ile | Microsoft | 2026-05-12 |
| CVE-2026-42891 | Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability | MEDIUM | 6.5 | 21%ile | Microsoft | 2026-05-12 |
| CVE-2026-43495 | net: wwan: t7xx: validate port_count against message length in t7xx_port_enum_msg_handler | MEDIUM | 6.5 | 25%ile | Microsoft | 2026-05-12 |
| CVE-2026-39828 | Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh | MEDIUM | 6.3 | 31%ile | Microsoft | 2026-05-12 |
| CVE-2026-43619 | Rsync < 3.4.3 Symlink Race Condition via Path-Based Syscalls | MEDIUM | 6.3 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-41610 | Visual Studio Code Security Feature Bypass Vulnerability | MEDIUM | 6.3 | 49%ile | Microsoft | 2026-05-12 |
| CVE-2026-43894 | jq: Wild stack write via signed-integer overflow in decNumber D2U() macro | MEDIUM | 6.2 | 5%ile | Microsoft | 2026-05-12 |
| CVE-2026-43896 | jq: Stack Overflow in Recursive Object Merge | MEDIUM | 6.2 | 4%ile | Microsoft | 2026-05-12 |
| CVE-2026-40380 | Windows Volume Manager Extension Driver Remote Code Execution Vulnerability | MEDIUM | 6.2 | 40%ile | Microsoft | 2026-05-12 |
| CVE-2026-41614 | M365 Copilot for Desktop Spoofing Vulnerability | MEDIUM | 6.2 | 30%ile | Microsoft | 2026-05-12 |
| CVE-2026-23679 | libusb < 1.0.30 NULL Pointer Dereference in parse_interface() | MEDIUM | 6.2 | 8%ile | Microsoft | 2026-05-12 |
| CVE-2026-25681 | Invoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html | MEDIUM | 6.1 | 13%ile | Microsoft | 2026-05-12 |
| CVE-2026-27136 | Invoking duplicate attributes can cause XSS in golang.org/x/net/html | MEDIUM | 6.1 | 13%ile | Microsoft | 2026-05-12 |
| CVE-2026-39823 | Bypass of meta content URL escaping causes XSS in html/template | MEDIUM | 6.1 | 24%ile | Microsoft | 2026-05-12 |
| CVE-2026-39826 | Escaper bypass leads to XSS in html/template | MEDIUM | 6.1 | 31%ile | Microsoft | 2026-05-12 |
| CVE-2026-42502 | Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html | MEDIUM | 6.1 | 13%ile | Microsoft | 2026-05-12 |
| CVE-2026-42506 | Invoking incorrect handling of namespaced elements in foreign content in golang.org/x/net/html | MEDIUM | 6.1 | 15%ile | Microsoft | 2026-05-12 |
| CVE-2026-44708 | Mistune Math Plugin XSS Escape Bypass | MEDIUM | 6.1 | 14%ile | Microsoft | 2026-05-12 |
| CVE-2026-44897 | Mistune Heading ID Attribute Injection XSS | MEDIUM | 6.1 | 14%ile | Microsoft | 2026-05-12 |
| CVE-2026-44898 | Mistune TOC Anchor Injection XSS | MEDIUM | 6.1 | 14%ile | Microsoft | 2026-05-12 |
| CVE-2026-45989 | of: unittest: fix use-after-free in testdrv_probe() | MEDIUM | 6.1 | 6%ile | Microsoft | 2026-05-12 |
| CVE-2026-46116 | xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete | MEDIUM | 6.1 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-46149 | scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() | MEDIUM | 6.1 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-46160 | btrfs: fix missing last_unlink_trans update when removing a directory | MEDIUM | 6.1 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46199 | drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg | MEDIUM | 6.1 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-46218 | drm/amdgpu: Add bounds checking to ib_{get,set}_value | MEDIUM | 6.1 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-34956 | Openvswitch: open vswitch: denial of service via malformed ftp epasv command | MEDIUM | 5.9 | 35%ile | Microsoft | 2026-05-12 |
| CVE-2026-39817 | Invoking "go tool pack" does not sanitize output paths in cmd/go | MEDIUM | 5.9 | 6%ile | Microsoft | 2026-05-12 |
| CVE-2026-44608 | Use after free and crash under special conditions in RPZ code | MEDIUM | 5.9 | 17%ile | Microsoft | 2026-05-12 |
| CVE-2026-4873 | connection reuse ignores TLS requirement | MEDIUM | 5.9 | 26%ile | Microsoft | 2026-05-12 |
| CVE-2026-6253 | proxy credentials leak over redirect-to proxy | MEDIUM | 5.9 | 54%ile | Microsoft | 2026-05-12 |
| CVE-2026-6666 | PgBouncer crash in kill_pool_logins_server_error | MEDIUM | 5.9 | 31%ile | Microsoft | 2026-05-12 |
| CVE-2026-8376 | Perl versions through 5.43.10 have a heap buffer overflow when compiling regular expressions with a repeated fixed strin | MEDIUM | 5.7 | 42%ile | Microsoft | 2026-05-12 |
| CVE-2025-15649 | IO::Uncompress::Unzip versions before 2.215 for Perl propagate uncaught exception when parsing zip header with malformed | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2025-71272 | most: core: fix resource leak in most_register_interface error paths | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-05-12 |
| CVE-2025-71273 | wifi: rtw88: Use devm_kmemdup() in rtw_set_supported_band() | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-05-12 |
| CVE-2025-71285 | net: qrtr: Drop the MHI auto_queue feature for IPCR DL channels | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-05-12 |
| CVE-2025-71290 | misc: ti_fpc202: fix a potential memory leak in probe function | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2025-71293 | drm/amdgpu/ras: Move ras data alloc before bad page check | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2025-71294 | drm/amdgpu: fix NULL pointer issue buffer funcs | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2025-71299 | spi: cadence-quadspi: Parse DT for flashes with the rest of the DT parsing | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-31696 | rxrpc: Fix missing validation of ticket length in non-XDR key preparsing | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-31715 | f2fs: fix UAF caused by decrementing sbi->nr_pages[] in f2fs_write_end_io() | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-31767 | drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-05-12 |
| CVE-2026-41256 | jq: Embedded NUL truncates top-level jq programs loaded with -f | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-05-12 |
| CVE-2026-43010 | bpf: Reject sleepable kprobe_multi programs at attach time | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-43022 | Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-05-12 |
| CVE-2026-43029 | mptcp: fix soft lockup in mptcp_recvmsg() | MEDIUM | 5.5 | 26%ile | Microsoft | 2026-05-12 |
| CVE-2026-43036 | net: use skb_header_pointer() for TCPv4 GSO frag_off check | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-05-12 |
| CVE-2026-43053 | xfs: close crash window in attr dabtree inactivation | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-43107 | xfrm: account XFRMA_IF_ID in aevent size calculation | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-05-12 |
| CVE-2026-43115 | srcu: Use irq_work to start GP in tiny SRCU | MEDIUM | 5.5 | 4%ile | Microsoft | 2026-05-12 |
| CVE-2026-43118 | btrfs: fix zero size inode with non-zero size after log replay | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-05-12 |
| CVE-2026-43119 | Bluetooth: hci_sync: annotate data-races around hdev->req_status | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-43126 | ALSA: mixer: oss: Add card disconnect checkpoints | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-05-12 |
| CVE-2026-43127 | ntfs3: fix circular locking dependency in run_unpack_ex | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-43129 | ima: verify the previous kernel's IMA buffer lies in addressable RAM | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-43131 | drm/amd/pm: Fix null pointer dereference issue | MEDIUM | 5.5 | 1%ile | Microsoft | 2026-05-12 |
| CVE-2026-43137 | ASoC: SOF: Intel: hda: Fix NULL pointer dereference | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-43161 | iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-43165 | hwmon: (nct7363) Fix a resource leak in nct7363_present_pwm_fanin | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-43172 | wifi: iwlwifi: fix 22000 series SMEM parsing | MEDIUM | 5.5 | 26%ile | Microsoft | 2026-05-12 |
| CVE-2026-43185 | ksmbd: fix signededness bug in smb_direct_prepare_negotiation() | MEDIUM | 5.5 | 59%ile | Microsoft | 2026-05-12 |
| CVE-2026-43191 | drm/amd/display: Adjust PHY FSM transition to TX_EN-to-PLL_ON for TMDS on DCN35 | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-05-12 |
| CVE-2026-43197 | netconsole: avoid OOB reads, msg is not nul-terminated | MEDIUM | 5.5 | 48%ile | Microsoft | 2026-05-12 |
| CVE-2026-43201 | APEI/GHES: ARM processor Error: don't go past allocated memory | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-43204 | ASoC: qcom: q6asm: drop DSP responses for closed data streams | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-05-12 |
| CVE-2026-43216 | net: Drop the lock in skb_may_tx_timestamp() | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-43220 | iommu/amd: serialize sequence allocation under concurrent TLB invalidations | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-43234 | team: avoid NETDEV_CHANGEMTU event when unregistering slave | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-05-12 |
| CVE-2026-43237 | drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-43243 | drm/amd/display: Add signal type check for dcn401 get_phyd32clk_src | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-43244 | kcm: fix zero-frag skb in frag_list on partial sendmsg error | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-05-12 |
| CVE-2026-43292 | mm/vmalloc: prevent RCU stalls in kasan_release_vmalloc_node | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-43294 | drm: renesas: rz-du: mipi_dsi: fix kernel panic when rebooting for some panels | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-05-12 |
| CVE-2026-43299 | btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-43300 | drm/panel: Fix a possible null-pointer dereference in jdi_panel_dsi_remove() | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-43305 | drm/amd/display: Fix mismatched unlock for DMUB HW lock in HWSS fast path | MEDIUM | 5.5 | 0%ile | Microsoft | 2026-05-12 |
| CVE-2026-43308 | btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-43309 | md raid: fix hang when stopping arrays with metadata through dm-raid | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-43310 | media: verisilicon: Avoid G2 bus error while decoding H.264 and HEVC | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-43311 | soc/tegra: pmc: Fix unsafe generic_handle_irq() call | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-43319 | spi: spidev: fix lock inversion between spi_lock and buf_lock | MEDIUM | 5.5 | 1%ile | Microsoft | 2026-05-12 |
| CVE-2026-43331 | x86/kexec: Disable KCOV instrumentation after load_segments() | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-43338 | btrfs: reserve enough transaction items for qgroup ioctls | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-43344 | perf/x86/intel/uncore: Fix die ID init and look up bugs | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-43352 | i3c: mipi-i3c-hci: Correct RING_CTRL_ABORT handling in DMA dequeue | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-05-12 |
| CVE-2026-43414 | scsi: qla2xxx: Completely fix fcport double free | MEDIUM | 5.5 | 49%ile | Microsoft | 2026-05-12 |
| CVE-2026-43456 | bonding: fix type confusion in bond_setup_by_slave() | MEDIUM | 5.5 | 8%ile | Microsoft | 2026-05-12 |
| CVE-2026-43464 | net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ | MEDIUM | 5.5 | 46%ile | Microsoft | 2026-05-12 |
| CVE-2026-43465 | net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ | MEDIUM | 5.5 | 45%ile | Microsoft | 2026-05-12 |
| CVE-2026-43491 | net: qrtr: ns: Limit the maximum server registration per node | MEDIUM | 5.5 | 4%ile | Microsoft | 2026-05-12 |
| CVE-2026-43492 | lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-05-12 |
| CVE-2026-43494 | net/rds: reset op_nents when zerocopy page pin fails | MEDIUM | 5.5 | 35%ile | Microsoft | 2026-05-12 |
| CVE-2026-43496 | net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-43502 | net/rds: handle zerocopy send cleanup before the message is queued | MEDIUM | 5.5 | 26%ile | Microsoft | 2026-05-12 |
| CVE-2026-45834 | Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb() | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-45835 | Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-45836 | Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-45838 | bpf: fix end-of-list detection in cgroup_storage_get_next_key() | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-45841 | netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-45842 | slip: reject VJ receive packets on instances with no rstate array | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-45843 | slip: bound decode() reads against the compressed packet length | MEDIUM | 5.5 | 34%ile | Microsoft | 2026-05-12 |
| CVE-2026-45844 | netfilter: arp_tables: fix IEEE1394 ARP payload parsing | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-45845 | net/sched: taprio: fix NULL pointer dereference in class dump | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-45846 | bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst() | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-45855 | ata: libata-scsi: avoid Non-NCQ command starvation | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-05-12 |
| CVE-2026-45858 | ext4: don't zero the entire extent if EXT4_EXT_DATA_PARTIAL_VALID1 | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-05-12 |
| CVE-2026-45877 | HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients | MEDIUM | 5.5 | 8%ile | Microsoft | 2026-05-12 |
| CVE-2026-45897 | netfilter: nft_counter: serialize reset with spinlock | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-05-12 |
| CVE-2026-45901 | netfilter: nf_tables: revert commit_mutex usage in reset path | MEDIUM | 5.5 | 8%ile | Microsoft | 2026-05-12 |
| CVE-2026-45917 | ipvs: do not keep dest_dst if dev is going down | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-05-12 |
| CVE-2026-45943 | erofs: fix inline data read failure for ztailpacking pclusters | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-05-12 |
| CVE-2026-45944 | iommu/vt-d: Clear Present bit before tearing down context entry | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-45949 | hwrng: core - use RCU and work_struct to fix race condition | MEDIUM | 5.5 | 0%ile | Microsoft | 2026-05-12 |
| CVE-2026-45961 | gfs2: fix memory leaks in gfs2_fill_super error path | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-05-12 |
| CVE-2026-45963 | ASoC: nau8821: Cancel delayed work on component remove | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-45973 | RDMA/mlx5: Fix UMR hang in LAG error state unload | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-05-12 |
| CVE-2026-45987 | KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2 | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-45988 | rxrpc: Fix re-decryption of RESPONSE packets | MEDIUM | 5.5 | 40%ile | Microsoft | 2026-05-12 |
| CVE-2026-45994 | ibmasm: fix OOB reads in command_file_write due to missing size checks | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-45996 | spi: imx: fix use-after-free on unbind | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-45997 | scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-45999 | erofs: fix unsigned underflow in z_erofs_lz4_handle_overlap() | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-46000 | rxrpc: Fix conn-level packet handling to unshare RESPONSE packets | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-05-12 |
| CVE-2026-46002 | ext2: reject inodes with zero i_nlink and valid mode in ext2_iget() | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46003 | net: qrtr: ns: Limit the total number of nodes | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46005 | xfs: fix a resource leak in xfs_alloc_buftarg() | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46012 | rxrpc: Fix memory leaks in rxkad_verify_response() | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46014 | KVM: SVM: Add missing save/restore handling of LBR MSRs | MEDIUM | 5.5 | 1%ile | Microsoft | 2026-05-12 |
| CVE-2026-46015 | tcp: call sk_data_ready() after listener migration | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-46016 | remoteproc: xlnx: Only access buffer information if IPI is buffered | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46018 | ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES | MEDIUM | 5.5 | 8%ile | Microsoft | 2026-05-12 |
| CVE-2026-46019 | crypto: atmel-aes - Fix 3-page memory leak in atmel_aes_buff_cleanup | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-05-12 |
| CVE-2026-46022 | misc: ibmasm: fix OOB MMIO read in ibmasm_handle_mouse_interrupt() | MEDIUM | 5.5 | 4%ile | Microsoft | 2026-05-12 |
| CVE-2026-46024 | libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply() | MEDIUM | 5.5 | 42%ile | Microsoft | 2026-05-12 |
| CVE-2026-46026 | net: qrtr: ns: Limit the maximum number of lookups | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-46027 | net/smc: avoid early lgr access in smc_clc_wait_msg | MEDIUM | 5.5 | 43%ile | Microsoft | 2026-05-12 |
| CVE-2026-46031 | net: ks8851: Reinstate disabling of BHs around IRQ handler | MEDIUM | 5.5 | 31%ile | Microsoft | 2026-05-12 |
| CVE-2026-46037 | ipv4: icmp: validate reply type before using icmp_pointers | MEDIUM | 5.5 | 44%ile | Microsoft | 2026-05-12 |
| CVE-2026-46038 | net: qrtr: ns: Free the node during ctrl_cmd_bye() | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46040 | inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46046 | ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all() | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46048 | ALSA: caiaq: fix usb_dev refcount leak on probe failure | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46049 | ALSA: ctxfi: Add fallback to default RSR for S/PDIF | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46050 | md/raid10: fix deadlock with check operation and nowait requests | MEDIUM | 5.5 | 1%ile | Microsoft | 2026-05-12 |
| CVE-2026-46051 | md/raid5: fix soft lockup in retry_aligned_read() | MEDIUM | 5.5 | 1%ile | Microsoft | 2026-05-12 |
| CVE-2026-46058 | media: amphion: Fix race between m2m job_abort and device_run | MEDIUM | 5.5 | 1%ile | Microsoft | 2026-05-12 |
| CVE-2026-46059 | KVM: nSVM: Always use NextRIP as vmcb02's NextRIP after first L2 VMRUN | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46063 | x86/shstk: Prevent deadlock during shstk sigreturn | MEDIUM | 5.5 | 1%ile | Microsoft | 2026-05-12 |
| CVE-2026-46064 | ibmasm: fix heap over-read in ibmasm_send_i2o_message() | MEDIUM | 5.5 | 4%ile | Microsoft | 2026-05-12 |
| CVE-2026-46065 | fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-46066 | ceph: fix num_ops off-by-one when crypto allocation fails | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46068 | crypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctx | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46070 | md/raid5: validate payload size before accessing journal metadata | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46071 | KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12 | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46075 | crypto: atmel-sha204a - Fix potential UAF and memory leak in remove path | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46077 | crypto: atmel-tdes - fix DMA sync direction | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46078 | erofs: fix the out-of-bounds nameoff handling for trailing dirents | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-46079 | rbd: fix null-ptr-deref when device_add_disk() fails | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-46082 | KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0 | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46083 | spi: fix resource leaks on device setup failure | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46085 | rxrpc: Fix rxkad crypto unalignment handling | MEDIUM | 5.5 | 38%ile | Microsoft | 2026-05-12 |
| CVE-2026-46088 | ALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names() | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46089 | zram: do not forget to endio for partial discard requests | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-46092 | wifi: rtw88: check for PCI upstream bridge existence | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-46098 | net: caif: clear client service pointer on teardown | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46101 | netfilter: reject zero shift in nft_bitwise | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46102 | net: strparser: fix skb_head leak in strp_abort_strp() | MEDIUM | 5.5 | 47%ile | Microsoft | 2026-05-12 |
| CVE-2026-46103 | can: ucan: fix devres lifetime | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46106 | eventfs: Hold eventfs_mutex and SRCU when remount walks events | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46107 | dm-thin: fix metadata refcount underflow | MEDIUM | 5.5 | 1%ile | Microsoft | 2026-05-12 |
| CVE-2026-46108 | ipmi:si: Return state to normal if message allocation fails | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46109 | usb: ulpi: fix memory leak on ulpi_register() error paths | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46111 | Bluetooth: hci_conn: fix potential UAF in create_big_sync | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-05-12 |
| CVE-2026-46113 | KVM: x86: Fix shadow paging use-after-free due to unexpected GFN | MEDIUM | 5.5 | 9%ile | Microsoft | 2026-05-12 |
| CVE-2026-46115 | block: add pgmap check to biovec_phys_mergeable | MEDIUM | 5.5 | 42%ile | Microsoft | 2026-05-12 |
| CVE-2026-46120 | ip6_gre: Use cached t->net in ip6erspan_changelink(). | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46124 | isofs: validate block number from NFS file handle in isofs_export_iget | MEDIUM | 5.5 | 41%ile | Microsoft | 2026-05-12 |
| CVE-2026-46125 | wifi: mac80211: remove station if connection prep fails | MEDIUM | 5.5 | 23%ile | Microsoft | 2026-05-12 |
| CVE-2026-46127 | RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp() | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46128 | ipmi: Check event message buffer response for bad data | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-46129 | btrfs: fix double free in create_space_info() error path | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-46131 | KVM: x86: check for nEPT/nNPT in slow flush hypercalls | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46132 | net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-46133 | RDMA/rxe: Reject unknown opcodes before ICRC processing | MEDIUM | 5.5 | 47%ile | Microsoft | 2026-05-12 |
| CVE-2026-46135 | nvmet-tcp: fix race between ICReq handling and queue teardown | MEDIUM | 5.5 | 34%ile | Microsoft | 2026-05-12 |
| CVE-2026-46136 | wifi: mt76: mt7921: fix a potential clc buffer length underflow | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46137 | mptcp: pm: ADD_ADDR rtx: fix potential data-race | MEDIUM | 5.5 | 41%ile | Microsoft | 2026-05-12 |
| CVE-2026-46138 | Bluetooth: hci_event: Fix OOB read and infinite loop in hci_le_create_big_complete_evt | MEDIUM | 5.5 | 20%ile | Microsoft | 2026-05-12 |
| CVE-2026-46140 | Bluetooth: btmtk: validate WMT event SKB length before struct access | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-46142 | net: libwx: fix VF illegal register access | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46144 | RDMA/mana: Fix error unwind in mana_ib_create_qp_rss() | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46147 | KVM: arm64: Fix pin leak and publication ordering in __pkvm_init_vcpu() | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46151 | usb: usblp: fix heap leak in IEEE 1284 device ID via short response | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46152 | wifi: mac80211: drop stray 'static' from fast-RX rx_result | MEDIUM | 5.5 | 6%ile | Microsoft | 2026-05-12 |
| CVE-2026-46153 | 8021q: delete cleared egress QoS mappings | MEDIUM | 5.5 | 1%ile | Microsoft | 2026-05-12 |
| CVE-2026-46155 | smb/client: fix out-of-bounds read in smb2_compound_op() | MEDIUM | 5.5 | 41%ile | Microsoft | 2026-05-12 |
| CVE-2026-46156 | LoongArch: Fix potential ADE in loongson_gpu_fixup_dma_hang() | MEDIUM | 5.5 | 1%ile | Microsoft | 2026-05-12 |
| CVE-2026-46158 | mptcp: pm: ADD_ADDR rtx: always decrease sk refcount | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46159 | btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak | MEDIUM | 5.5 | 1%ile | Microsoft | 2026-05-12 |
| CVE-2026-46161 | md/raid10: fix divide-by-zero in setup_geo() with zero far_copies | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-46163 | wifi: b43legacy: enforce bounds check on firmware key index in RX path | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-46164 | btrfs: fix double free in create_space_info_sub_group() error path | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-46165 | openvswitch: vport: fix self-deadlock on release of tunnel ports | MEDIUM | 5.5 | 1%ile | Microsoft | 2026-05-12 |
| CVE-2026-46167 | usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-46168 | mptcp: fix scheduling with atomic in timestamp sockopt | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46170 | mptcp: pm: ADD_ADDR rtx: free sk if last | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46171 | riscv: kvm: fix vector context allocation leak | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46172 | ipv6: xfrm6: release dst on error in xfrm6_rcv_encap() | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-46173 | exit: prevent preemption of oopsing TASK_DEAD task | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-46175 | f2fs: fix fsck inconsistency caused by FGGC of node block | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46176 | RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() | MEDIUM | 5.5 | 4%ile | Microsoft | 2026-05-12 |
| CVE-2026-46178 | RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq() | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-46180 | wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-46181 | RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() | MEDIUM | 5.5 | 4%ile | Microsoft | 2026-05-12 |
| CVE-2026-46185 | smb/client: fix out-of-bounds read in symlink_data() | MEDIUM | 5.5 | 44%ile | Microsoft | 2026-05-12 |
| CVE-2026-46186 | Bluetooth: virtio_bt: validate rx pkt_type header length | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46187 | wifi: rsi: fix kthread lifetime race between self-exit and external-stop | MEDIUM | 5.5 | 1%ile | Microsoft | 2026-05-12 |
| CVE-2026-46189 | RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path | MEDIUM | 5.5 | 4%ile | Microsoft | 2026-05-12 |
| CVE-2026-46190 | mtd: spi-nor: debugfs: fix out-of-bounds read in spi_nor_params_show() | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-46195 | smb: client: validate dacloffset before building DACL pointers | MEDIUM | 5.5 | 52%ile | Microsoft | 2026-05-12 |
| CVE-2026-46196 | tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-46198 | batman-adv: fix integer overflow on buff_pos | MEDIUM | 5.5 | 21%ile | Microsoft | 2026-05-12 |
| CVE-2026-46200 | spi: mpc52xx: fix controller deregistration | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46205 | staging: media: atomisp: Disallow all private IOCTLs | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-46206 | batman-adv: reject new tp_meter sessions during teardown | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-46208 | batman-adv: stop tp_meter sessions during mesh teardown | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-46212 | batman-adv: bla: prevent use-after-free when deleting claims | MEDIUM | 5.5 | 20%ile | Microsoft | 2026-05-12 |
| CVE-2026-46214 | vsock/virtio: fix accept queue count leak on transport mismatch | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-46219 | spi: mpc52xx: fix use-after-free on unbind | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-46234 | vsock: fix buffer size clamping order | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-46236 | media: rc: xbox_remote: heed DMA restrictions | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46238 | batman-adv: stop caching unowned originator pointers in BAT IV | MEDIUM | 5.5 | 18%ile | Microsoft | 2026-05-12 |
| CVE-2026-46241 | spi: mpc52xx: fix use-after-free on registration failure | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46333 | ptrace: slightly saner 'get_dumpable()' logic | MEDIUM | 5.5 | 91%ile | Microsoft | 2026-05-12 |
| CVE-2026-32185 | Microsoft Teams Spoofing Vulnerability | MEDIUM | 5.5 | 40%ile | Microsoft | 2026-05-12 |
| CVE-2026-34339 | Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability | MEDIUM | 5.5 | 22%ile | Microsoft | 2026-05-12 |
| CVE-2026-35419 | Windows DWM Core Library Information Disclosure Vulnerability | MEDIUM | 5.5 | 31%ile | Microsoft | 2026-05-12 |
| CVE-2026-35440 | Microsoft Word Information Disclosure Vulnerability | MEDIUM | 5.5 | 39%ile | Microsoft | 2026-05-12 |
| CVE-2026-41612 | Visual Studio Code Information Disclosure Vulnerability | MEDIUM | 5.5 | 42%ile | Microsoft | 2026-05-12 |
| CVE-2026-46235 | media: saa7164: add ioremap return checks and cleanups | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46157 | ALSA: pcm: oss: Fix data race at accessing runtime.oss.trigger | MEDIUM | 5.5 | 1%ile | Microsoft | 2026-05-12 |
| CVE-2026-43416 | powerpc, perf: Check that current->mm is alive before getting user callchain | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46148 | spi: microchip-core-qspi: control built-in cs manually | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46179 | ASoC: SOF: Don't allow pointer operations on unconfigured streams | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46184 | sound: ua101: fix division by zero at probe | MEDIUM | 5.5 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-45571 | go-git: Crafted repositories may modify main and submodule .git directories | MEDIUM | 5.4 | 22%ile | Microsoft | 2026-05-12 |
| CVE-2026-6472 | PostgreSQL CREATE TYPE does not check multirange schema CREATE privilege | MEDIUM | 5.4 | 5%ile | Microsoft | 2026-05-12 |
| CVE-2026-35423 | Windows 11 Telnet Client Information Disclosure Vulnerability | MEDIUM | 5.4 | 55%ile | Microsoft | 2026-05-12 |
| CVE-2026-42838 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | MEDIUM | 5.4 | 15%ile | Microsoft | 2026-05-12 |
| CVE-2026-45494 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | MEDIUM | 5.4 | 23%ile | Microsoft | 2026-05-12 |
| CVE-2026-32792 | Packet of death with DNSCrypt | MEDIUM | 5.3 | 27%ile | Microsoft | 2026-05-12 |
| CVE-2026-33007 | Apache HTTP Server: mod_authn_socache crash | MEDIUM | 5.3 | 44%ile | Microsoft | 2026-05-12 |
| CVE-2026-33857 | Apache HTTP Server: Off-by-one OOB reads in AJP getter functions | MEDIUM | 5.3 | 34%ile | Microsoft | 2026-05-12 |
| CVE-2026-34032 | Apache HTTP Server: mod_proxy_ajp: Heap Buffer Over-Read Due to Missing Null-Termination Check (ajp_msg_get_string) | MEDIUM | 5.3 | 42%ile | Microsoft | 2026-05-12 |
| CVE-2026-3592 | Amplification vulnerabilities via self-pointed glue records | MEDIUM | 5.3 | 35%ile | Microsoft | 2026-05-12 |
| CVE-2026-39819 | Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go | MEDIUM | 5.3 | 8%ile | Microsoft | 2026-05-12 |
| CVE-2026-39825 | ReverseProxy forwards queries with more than urlmaxqueryparams parameters in net/http/httputil | MEDIUM | 5.3 | 33%ile | Microsoft | 2026-05-12 |
| CVE-2026-39835 | Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh | MEDIUM | 5.3 | 43%ile | Microsoft | 2026-05-12 |
| CVE-2026-42015 | Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling | MEDIUM | 5.3 | 54%ile | Microsoft | 2026-05-12 |
| CVE-2026-42534 | Jostle logic bypass degrades resolution performance | MEDIUM | 5.3 | 49%ile | Microsoft | 2026-05-12 |
| CVE-2026-42923 | Degradation of service with unbounded NSEC3 hash calculations | MEDIUM | 5.3 | 27%ile | Microsoft | 2026-05-12 |
| CVE-2026-44390 | Unbounded name compression in certain cases causes degradation of service | MEDIUM | 5.3 | 51%ile | Microsoft | 2026-05-12 |
| CVE-2026-46598 | Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent | MEDIUM | 5.3 | 36%ile | Microsoft | 2026-05-12 |
| CVE-2026-48525 | PyJWT: Unauthenticated DoS via unbounded Base64URL decoding of unused payload segment in b64=false detached JWS | MEDIUM | 5.3 | 31%ile | Microsoft | 2026-05-12 |
| CVE-2026-4891 | CVE-2026-4891 | MEDIUM | 5.3 | 94%ile | Microsoft | 2026-05-12 |
| CVE-2026-4893 | CVE-2026-4893 | MEDIUM | 5.3 | 78%ile | Microsoft | 2026-05-12 |
| CVE-2026-5950 | Unbounded resend loop in BIND 9 resolver | MEDIUM | 5.3 | 52%ile | Microsoft | 2026-05-12 |
| CVE-2026-6429 | netrc credential leak with reused proxy connection | MEDIUM | 5.3 | 44%ile | Microsoft | 2026-05-12 |
| CVE-2026-7009 | OCSP stapling bypass with Apple SecTrust | MEDIUM | 5.3 | 20%ile | Microsoft | 2026-05-12 |
| CVE-2026-7168 | cross-proxy Digest auth state leak | MEDIUM | 5.3 | 41%ile | Microsoft | 2026-05-12 |
| CVE-2026-8368 | LWP::UserAgent versions before 6.83 for Perl leak Authorization and Proxy-Authorization headers on cross-origin redirect | MEDIUM | 5.3 | 19%ile | Microsoft | 2026-05-12 |
| CVE-2026-8723 | qs.stringify crashes on null/undefined entries in comma-format arrays under encodeValuesOnly | MEDIUM | 5.3 | 34%ile | Microsoft | 2026-05-12 |
| CVE-2026-6402 | webpack-dev-server vulnerable to cross-origin source code exposure on non-HTTPS origins | MEDIUM | 5.3 | 22%ile | Microsoft | 2026-05-12 |
| CVE-2026-43868 | Apache Thrift: Rust implementation vulnerable to CVE-2020-13949 pattern | MEDIUM | 5.3 | 53%ile | Microsoft | 2026-05-12 |
| CVE-2026-33006 | Apache HTTP Server: mod_auth_digest timing attack | MEDIUM | 4.8 | 46%ile | Microsoft | 2026-05-12 |
| CVE-2026-40701 | NGINX ngx_http_ssl_module vulnerability | MEDIUM | 4.8 | 53%ile | Microsoft | 2026-05-12 |
| CVE-2026-42934 | NGINX ngx_http_charset_module vulnerability | MEDIUM | 4.8 | 54%ile | Microsoft | 2026-05-12 |
| CVE-2026-43617 | Rsync < 3.4.3 Authorization Bypass via Hostname Resolution | MEDIUM | 4.8 | 21%ile | Microsoft | 2026-05-12 |
| CVE-2026-44839 | RabbitMQ: Unsanitized vhost names allow for XSS in management UI | MEDIUM | 4.8 | 8%ile | Microsoft | 2026-05-12 |
| CVE-2026-6324 | Libsoup: libsoup: http request smuggling via unsigned to signed conversion error | MEDIUM | 4.8 | 59%ile | Microsoft | 2026-05-12 |
| CVE-2026-44899 | Mistune Image Directive CSS Injection Vulnerability | MEDIUM | 4.7 | 14%ile | Microsoft | 2026-05-12 |
| CVE-2026-46011 | media: mtk-jpeg: fix use-after-free in release path due to uncancelled work | MEDIUM | 4.7 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46110 | net: stmmac: Prevent NULL deref when RX memory exhausted | MEDIUM | 4.7 | 44%ile | Microsoft | 2026-05-12 |
| CVE-2026-46021 | thermal: core: Fix thermal zone governor cleanup issues | MEDIUM | 4.5 | 4%ile | Microsoft | 2026-05-12 |
| CVE-2026-43895 | jq: Embedded NUL in jq import paths causes local redaction-policy bypass and preserves sensitive fields in published art | MEDIUM | 4.4 | 5%ile | Microsoft | 2026-05-12 |
| CVE-2026-45986 | crypto: ccree - fix a memory leak in cc_mac_digest() | MEDIUM | 4.4 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-32209 | Windows Filtering Platform (WFP) Security Feature Bypass Vulnerability | MEDIUM | 4.4 | 10%ile | Microsoft | 2026-05-12 |
| CVE-2026-41100 | Microsoft 365 Copilot for Android Spoofing Vulnerability | MEDIUM | 4.4 | 16%ile | Microsoft | 2026-05-12 |
| CVE-2026-45736 | ws: Uninitialized memory disclosure | MEDIUM | 4.4 | 55%ile | Microsoft | 2026-05-12 |
| CVE-2026-10028 | Glib-networking: infinite loop in glib-networking gnutls backend allows remote denial of service via circular certificat | MEDIUM | 4.3 | 8%ile | Microsoft | 2026-05-12 |
| CVE-2026-6474 | PostgreSQL timeofday() can disclose portions of server memory | MEDIUM | 4.3 | 12%ile | Microsoft | 2026-05-12 |
| CVE-2026-6667 | PgBouncer missing authorization check in KILL_CLIENT admin command | MEDIUM | 4.3 | 21%ile | Microsoft | 2026-05-12 |
| CVE-2026-32175 | .NET Core Tampering Vulnerability | MEDIUM | 4.3 | 54%ile | Microsoft | 2026-05-12 |
| CVE-2026-35429 | Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability | MEDIUM | 4.3 | 43%ile | Microsoft | 2026-05-12 |
| CVE-2026-40416 | Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability | MEDIUM | 4.3 | 28%ile | Microsoft | 2026-05-12 |
| CVE-2026-40421 | Microsoft Word Information Disclosure Vulnerability | MEDIUM | 4.3 | 50%ile | Microsoft | 2026-05-12 |
| CVE-2026-48522 | PyJWKClient: missing scheme allowlist enables SSRF + token forgery via file://, ftp://, data: schemes | MEDIUM | 4.2 | 13%ile | Microsoft | 2026-05-12 |
| CVE-2026-46004 | ALSA: caiaq: Handle probe errors properly | MEDIUM | 4.0 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-45498 | Microsoft Defender Denial of Service Vulnerability | MEDIUM | 4.0 | 99%ile | Microsoft | 2026-05-12 |
| CVE-2026-47104 | libusb < 1.0.30 Out-of-Bounds Read in parse_iad_array() | MEDIUM | 4.0 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-46232 | HID: playstation: Clamp num_touch_reports | MEDIUM | 4.0 | 18%ile | Microsoft | 2026-05-12 |
| CVE-2026-46194 | f2fs: fix node_cnt race between extent node destroy and writeback | MEDIUM | 4.0 | — | Microsoft | 2026-05-12 |
| CVE-2026-46143 | ASoC: qcom: q6apm-lpass-dai: Fix multiple graph opens | MEDIUM | 4.0 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-46169 | hfsplus: fix uninit-value by validating catalog record size | MEDIUM | 4.0 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-40510 | OpenSC < 0.27.0-rc1 Stack Buffer Overflow via piv_process_history() in card-piv.c | LOW | 3.8 | 22%ile | Microsoft | 2026-05-12 |
| CVE-2026-40528 | OpenSC < 0.27.0 Buffer Overrun in do_key_value() via profile.c | LOW | 3.8 | 8%ile | Microsoft | 2026-05-12 |
| CVE-2026-43964 | Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash v | LOW | 3.7 | 44%ile | Microsoft | 2026-05-12 |
| CVE-2026-48524 | PyJWT: PyJWKClient unbounded JWKS endpoint requests via attacker-controlled kid values (DoS) | LOW | 3.7 | 34%ile | Microsoft | 2026-05-12 |
| CVE-2026-6638 | PostgreSQL REFRESH PUBLICATION allows SQL injection via table name | LOW | 3.7 | 8%ile | Microsoft | 2026-05-12 |
| CVE-2026-46483 | Vim: Command injection in tar#Vimuntar via missing shellescape {special} flag | LOW | 3.6 | 46%ile | Microsoft | 2026-05-12 |
| CVE-2026-45803 | gh: GitHub Actions log output in `gh run view` allows terminal escape sequence injection | LOW | 3.5 | 11%ile | Microsoft | 2026-05-12 |
| CVE-2026-46023 | dm mirror: fix integer overflow in create_dirty_log() | LOW | 3.4 | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-39824 | Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows | LOW | 3.3 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-45893 | apparmor: Fix & Optimize table creation from possibly unaligned memory | LOW | 3.3 | 5%ile | Microsoft | 2026-05-12 |
| CVE-2026-46123 | Bluetooth: virtio_bt: clamp rx length before skb_put | LOW | 3.3 | 4%ile | Microsoft | 2026-05-12 |
| CVE-2026-43969 | Cookie Request Header Injection via Unvalidated Encoder in cow_cookie:cookie/1 | LOW | 3.2 | 4%ile | Microsoft | 2026-05-12 |
| CVE-2026-45232 | Rsync < 3.4.3 Off-by-One Stack Write via HTTP Proxy | LOW | 3.1 | 27%ile | Microsoft | 2026-05-12 |
| CVE-2026-45186 | In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via | LOW | 2.9 | 41%ile | Microsoft | 2026-05-12 |
| CVE-2026-43073 | x86-64: rename misleadingly named '__copy_user_nocache()' function | LOW | 2.5 | 5%ile | Microsoft | 2026-05-12 |
| CVE-2026-46044 | ipmi:ssif: Clean up kthread on errors | LOW | 1.9 | 2%ile | Microsoft | 2026-05-12 |
| CVE-2025-14179 | SQL injection in pdo_firebird via NUL bytes in quoted strings | UNKNOWN | — | 38%ile | Microsoft | 2026-05-12 |
| CVE-2025-71302 | drm/panthor: fix for dma-fence safe access rules | UNKNOWN | — | 4%ile | Microsoft | 2026-05-12 |
| CVE-2026-23479 | redis-server use-after-free in unblock client flow may allow remote code execution | UNKNOWN | — | 85%ile | Microsoft | 2026-05-12 |
| CVE-2026-23631 | redis-server Lua use-after-free may allow remote code execution | UNKNOWN | — | 88%ile | Microsoft | 2026-05-12 |
| CVE-2026-25243 | redis-server RESTORE invalid memory access may allow remote code execution | UNKNOWN | — | 91%ile | Microsoft | 2026-05-12 |
| CVE-2026-25588 | RedisTimeSeries RESTORE invalid memory access may allow remote code execution | UNKNOWN | — | 70%ile | Microsoft | 2026-05-12 |
| CVE-2026-25589 | RedisBloom RESTORE invalid memory access may allow remote code execution | UNKNOWN | — | 77%ile | Microsoft | 2026-05-12 |
| CVE-2026-32934 | CoreDNS DNS-over-QUIC unbounded goroutine growth leads to denial of service | UNKNOWN | — | 41%ile | Microsoft | 2026-05-12 |
| CVE-2026-32936 | CoreDNS DoH GET path missing size validation causes CPU and memory amplification | UNKNOWN | — | 52%ile | Microsoft | 2026-05-12 |
| CVE-2026-33079 | Mistune ReDoS in LINK_TITLE_RE allows denial of service with crafted Markdown titles | UNKNOWN | — | 48%ile | Microsoft | 2026-05-12 |
| CVE-2026-33190 | CoreDNS TSIG authentication bypass on encrypted DNS transports | UNKNOWN | — | 31%ile | Microsoft | 2026-05-12 |
| CVE-2026-33489 | CoreDNS transfer plugin subzone ACL bypass via lexicographic zone comparison | UNKNOWN | — | 35%ile | Microsoft | 2026-05-12 |
| CVE-2026-35579 | CoreDNS TSIG authentication bypass on gRPC, QUIC, DoH, and DoH3 transports | UNKNOWN | — | 49%ile | Microsoft | 2026-05-12 |
| CVE-2026-40612 | jq: Stack overflow via unbounded recursion in jv_contains | UNKNOWN | — | 5%ile | Microsoft | 2026-05-12 |
| CVE-2026-40622 | Another 'ghost domain names' attack variant | UNKNOWN | — | 4%ile | Microsoft | 2026-05-12 |
| CVE-2026-41257 | jq: Signed-int overflow in `stack_reallocate` (jq VM stack) | UNKNOWN | — | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-41889 | pgx: SQL Injection via placeholder confusion with dollar quoted string literals | UNKNOWN | — | 29%ile | Microsoft | 2026-05-12 |
| CVE-2026-42250 | Off-by-One Leading to Out-of-Bounds Write in bzip2 | UNKNOWN | — | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-42789 | Non-CA certificate accepted as intermediate issuer in public_key path validation | UNKNOWN | — | 32%ile | Microsoft | 2026-05-12 |
| CVE-2026-42790 | nameConstraints DNS bypass via subject CommonName fallback in public_key hostname verification | UNKNOWN | — | 28%ile | Microsoft | 2026-05-12 |
| CVE-2026-43320 | drm/amd/display: Fix dsc eDP issue | UNKNOWN | — | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-43398 | drm/amdgpu: add upper bound check on user inputs in wait ioctl | UNKNOWN | — | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-43400 | drm/amdgpu: add upper bound check on user inputs in signal ioctl | UNKNOWN | — | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-43474 | fs: init flags_valid before calling vfs_fileattr_get | UNKNOWN | — | 1%ile | Microsoft | 2026-05-12 |
| CVE-2026-43968 | CR Injection in SSE Encoder Enables Event Splitting via cow_sse:event/1 | UNKNOWN | — | 18%ile | Microsoft | 2026-05-12 |
| CVE-2026-44431 | urllib3: Sensitive headers forwarded across origins in proxied low-level redirects | UNKNOWN | — | 26%ile | Microsoft | 2026-05-12 |
| CVE-2026-44656 | Vim: OS Command Injection via 'path' completion | UNKNOWN | — | 60%ile | Microsoft | 2026-05-12 |
| CVE-2026-44777 | jq: stack overflow in module loading on mutual `include` | UNKNOWN | — | 5%ile | Microsoft | 2026-05-12 |
| CVE-2026-44896 | Mistune: XSS via unescaped figclass/figwidth in Figure directive | UNKNOWN | — | 10%ile | Microsoft | 2026-05-12 |
| CVE-2026-45570 | go-git: Improper single-quote escaping in go-git SSH transport | UNKNOWN | — | 30%ile | Microsoft | 2026-05-12 |
| CVE-2026-5222 | Cargo can be coerced to share credentials between registries | UNKNOWN | — | 41%ile | Microsoft | 2026-05-12 |
| CVE-2026-5223 | Crates in third party registries can override the cached source of other crates | UNKNOWN | — | 22%ile | Microsoft | 2026-05-12 |
| CVE-2026-6722 | Use-After-Free in SOAP using Apache map | UNKNOWN | — | 60%ile | Microsoft | 2026-05-12 |
| CVE-2026-6735 | XSS within PHP-FPM status endpoint | UNKNOWN | — | 9%ile | Microsoft | 2026-05-12 |
| CVE-2026-7210 | The expat and elementtree parsers use insufficient entropy for XML hash-flooding protection | UNKNOWN | — | 52%ile | Microsoft | 2026-05-12 |
| CVE-2026-7258 | Out-of-bounds read in urldecode() on NetBSD | UNKNOWN | — | 30%ile | Microsoft | 2026-05-12 |
| CVE-2026-7259 | Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() | UNKNOWN | — | 8%ile | Microsoft | 2026-05-12 |
| CVE-2026-7261 | SoapServer session-persisted object use-after-free via SOAP header fault | UNKNOWN | — | 23%ile | Microsoft | 2026-05-12 |
| CVE-2026-7262 | NULL pointer dereference in SOAP apache:Map decoder with missing <value> | UNKNOWN | — | 56%ile | Microsoft | 2026-05-12 |
| CVE-2026-7568 | Signed integer overflow in metaphone() | UNKNOWN | — | 40%ile | Microsoft | 2026-05-12 |
| CVE-2026-7790 | Unbounded chunk-size hex digits in cowlib cause quadratic CPU and memory DoS | UNKNOWN | — | 37%ile | Microsoft | 2026-05-12 |
| CVE-2026-8328 | FTP PASV SSRF, ftpcp() does not use actual peer address, trusts server-supplied PASV host address | UNKNOWN | — | 40%ile | Microsoft | 2026-05-12 |
| CVE-2026-8466 | Unbounded buffer accumulation in multipart header parsing causes denial of service in cowboy | UNKNOWN | — | 32%ile | Microsoft | 2026-05-12 |
| CVE-2025-54518 | AMD: CVE-2025-54518 CPU OP Cache Corruption | UNKNOWN | — | 21%ile | Microsoft | 2026-05-12 |
| CVE-2026-10000 | Chromium: CVE-2026-10000 Use after free in Passwords | UNKNOWN | — | 8%ile | Microsoft | 2026-05-12 |
| CVE-2026-10001 | Chromium: CVE-2026-10001 Use after free in PerformanceManager | UNKNOWN | — | 7%ile | Microsoft | 2026-05-12 |
| CVE-2026-10002 | Chromium: CVE-2026-10002 Use after free in PDFium | UNKNOWN | — | 8%ile | Microsoft | 2026-05-12 |
| CVE-2026-10003 | Chromium: CVE-2026-10003 Use after free in Views | UNKNOWN | — | 13%ile | Microsoft | 2026-05-12 |
| CVE-2026-10004 | Chromium: CVE-2026-10004 Insufficient validation of untrusted input in Passwords | UNKNOWN | — | 6%ile | Microsoft | 2026-05-12 |
| CVE-2026-10005 | Chromium: CVE-2026-10005 Use after free in WebAppInstalls | UNKNOWN | — | 18%ile | Microsoft | 2026-05-12 |
| CVE-2026-10006 | Chromium: CVE-2026-10006 Race in WebAudio | UNKNOWN | — | 14%ile | Microsoft | 2026-05-12 |
| CVE-2026-10007 | Chromium: CVE-2026-10007 Use after free in SVG | UNKNOWN | — | 17%ile | Microsoft | 2026-05-12 |
| CVE-2026-10009 | Chromium: CVE-2026-10009 Integer overflow in Skia | UNKNOWN | — | 14%ile | Microsoft | 2026-05-12 |
| CVE-2026-10011 | Chromium: CVE-2026-10011 Inappropriate implementation in Skia | UNKNOWN | — | 7%ile | Microsoft | 2026-05-12 |
| CVE-2026-10012 | Chromium: CVE-2026-10012 Use after free in Skia | UNKNOWN | — | 8%ile | Microsoft | 2026-05-12 |
| CVE-2026-10013 | Chromium: CVE-2026-10013 Use after free in WebCodecs | UNKNOWN | — | 25%ile | Microsoft | 2026-05-12 |
| CVE-2026-10015 | Chromium: CVE-2026-10015 Integer overflow in WTF | UNKNOWN | — | 17%ile | Microsoft | 2026-05-12 |
| CVE-2026-10016 | Chromium: CVE-2026-10016 Use after free in DOM | UNKNOWN | — | 17%ile | Microsoft | 2026-05-12 |
| CVE-2026-10017 | Chromium: CVE-2026-10017 Out of bounds read in Headless | UNKNOWN | — | 8%ile | Microsoft | 2026-05-12 |
| CVE-2026-10018 | Chromium: CVE-2026-10018 Integer overflow in ANGLE | UNKNOWN | — | 10%ile | Microsoft | 2026-05-12 |
| CVE-2026-10019 | Chromium: CVE-2026-10019 Integer overflow in ANGLE | UNKNOWN | — | 10%ile | Microsoft | 2026-05-12 |
| CVE-2026-10020 | Chromium: CVE-2026-10020 Insufficient validation of untrusted input in Skia | UNKNOWN | — | 10%ile | Microsoft | 2026-05-12 |
| CVE-2026-10021 | Chromium: CVE-2026-10021 Insufficient validation of untrusted input in USB | UNKNOWN | — | 14%ile | Microsoft | 2026-05-12 |
| CVE-2026-10022 | Chromium: CVE-2026-10022 Type Confusion in V8 | UNKNOWN | — | 4%ile | Microsoft | 2026-05-12 |
| CVE-2026-43970 | Decompression Bomb in cow_spdy:inflate/2 Allows Memory Exhaustion via Crafted SPDY Frame | UNKNOWN | — | 44%ile | Microsoft | 2026-05-12 |
| CVE-2026-44307 | Mako: Path traversal via backslash URI on Windows in TemplateLookup | UNKNOWN | — | 55%ile | Microsoft | 2026-05-12 |
| CVE-2026-45492 | Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability | UNKNOWN | — | 23%ile | Microsoft | 2026-05-12 |
| CVE-2026-7896 | Chromium: CVE-2026-7896 Integer overflow in Blink | UNKNOWN | — | 21%ile | Microsoft | 2026-05-12 |
| CVE-2026-7897 | Chromium: CVE-2026-7897 Use after free in Mobile | UNKNOWN | — | 24%ile | Microsoft | 2026-05-12 |
| CVE-2026-7898 | Chromium: CVE-2026-7898 Use after free in Chromoting | UNKNOWN | — | 24%ile | Microsoft | 2026-05-12 |
| CVE-2026-7899 | Chromium: CVE-2026-7899 Out of bounds read and write in V8 | UNKNOWN | — | 23%ile | Microsoft | 2026-05-12 |
| CVE-2026-7900 | Chromium: CVE-2026-7900 Heap buffer overflow in ANGLE | UNKNOWN | — | 15%ile | Microsoft | 2026-05-12 |
| CVE-2026-7901 | Chromium: CVE-2026-7901 Use after free in ANGLE | UNKNOWN | — | 19%ile | Microsoft | 2026-05-12 |
| CVE-2026-7902 | Chromium: CVE-2026-7902 Out of bounds memory access in V8 | UNKNOWN | — | 28%ile | Microsoft | 2026-05-12 |
| CVE-2026-7903 | Chromium: CVE-2026-7903 Integer overflow in ANGLE | UNKNOWN | — | 13%ile | Microsoft | 2026-05-12 |
| CVE-2026-7904 | Chromium: CVE-2026-7904 Out of bounds read in Fonts | UNKNOWN | — | 9%ile | Microsoft | 2026-05-12 |
| CVE-2026-7905 | Chromium: CVE-2026-7905 Insufficient validation of untrusted input in Media | UNKNOWN | — | 12%ile | Microsoft | 2026-05-12 |
| CVE-2026-7906 | Chromium: CVE-2026-7906 Use after free in SVG | UNKNOWN | — | 19%ile | Microsoft | 2026-05-12 |
| CVE-2026-7907 | Chromium: CVE-2026-7907 Use after free in DOM | UNKNOWN | — | 19%ile | Microsoft | 2026-05-12 |
| CVE-2026-7908 | Chromium: CVE-2026-7908 Use after free in Fullscreen | UNKNOWN | — | 13%ile | Microsoft | 2026-05-12 |
| CVE-2026-7909 | Chromium: CVE-2026-7909 Inappropriate implementation in ServiceWorker | UNKNOWN | — | 8%ile | Microsoft | 2026-05-12 |
| CVE-2026-7910 | Chromium: CVE-2026-7910 Use after free in Views | UNKNOWN | — | 13%ile | Microsoft | 2026-05-12 |
| CVE-2026-7911 | Chromium: CVE-2026-7911 Use after free in Aura | UNKNOWN | — | 11%ile | Microsoft | 2026-05-12 |
| CVE-2026-7912 | Chromium: CVE-2026-7912 Integer overflow in GPU | UNKNOWN | — | 4%ile | Microsoft | 2026-05-12 |
| CVE-2026-7913 | Chromium: CVE-2026-7913 Insufficient policy enforcement in DevTools | UNKNOWN | — | 1%ile | Microsoft | 2026-05-12 |
| CVE-2026-7914 | Chromium: CVE-2026-7914 Type Confusion in Accessibility | UNKNOWN | — | 13%ile | Microsoft | 2026-05-12 |
| CVE-2026-7915 | Chromium: CVE-2026-7915 Insufficient data validation in DevTools | UNKNOWN | — | 16%ile | Microsoft | 2026-05-12 |
| CVE-2026-7916 | Chromium: CVE-2026-7916 Insufficient data validation in InterestGroups | UNKNOWN | — | 12%ile | Microsoft | 2026-05-12 |
| CVE-2026-7917 | Chromium: CVE-2026-7917 Use after free in Fullscreen | UNKNOWN | — | 11%ile | Microsoft | 2026-05-12 |
| CVE-2026-7918 | Chromium: CVE-2026-7918 Use after free in GPU | UNKNOWN | — | 11%ile | Microsoft | 2026-05-12 |
| CVE-2026-7919 | Chromium: CVE-2026-7919 Use after free in Aura | UNKNOWN | — | 11%ile | Microsoft | 2026-05-12 |
| CVE-2026-7920 | Chromium: CVE-2026-7920 Use after free in Skia | UNKNOWN | — | 12%ile | Microsoft | 2026-05-12 |
| CVE-2026-7921 | Chromium: CVE-2026-7921 Use after free in Passwords | UNKNOWN | — | 19%ile | Microsoft | 2026-05-12 |
| CVE-2026-7922 | Chromium: CVE-2026-7922 Use after free in ServiceWorker | UNKNOWN | — | 11%ile | Microsoft | 2026-05-12 |
| CVE-2026-7923 | Chromium: CVE-2026-7923 Out of bounds write in Skia | UNKNOWN | — | 12%ile | Microsoft | 2026-05-12 |
| CVE-2026-7924 | Chromium: CVE-2026-7924 Uninitialized Use in Dawn | UNKNOWN | — | 15%ile | Microsoft | 2026-05-12 |
| CVE-2026-7925 | Chromium: CVE-2026-7925 Use after free in Chromoting | UNKNOWN | — | 1%ile | Microsoft | 2026-05-12 |
| CVE-2026-7926 | Chromium: CVE-2026-7926 Use after free in PresentationAPI | UNKNOWN | — | 19%ile | Microsoft | 2026-05-12 |
| CVE-2026-7927 | Chromium: CVE-2026-7927 Type Confusion in Runtime | UNKNOWN | — | 22%ile | Microsoft | 2026-05-12 |
| CVE-2026-7928 | Chromium: CVE-2026-7928 Use after free in WebRTC | UNKNOWN | — | 27%ile | Microsoft | 2026-05-12 |
| CVE-2026-7929 | Chromium: CVE-2026-7929 Use after free in MediaRecording | UNKNOWN | — | 16%ile | Microsoft | 2026-05-12 |
| CVE-2026-7930 | Chromium: CVE-2026-7930 Insufficient validation of untrusted input in Cookies | UNKNOWN | — | — | Microsoft | 2026-05-12 |
| CVE-2026-7931 | Chromium: CVE-2026-7931 Insufficient validation of untrusted input in iOS | UNKNOWN | — | 9%ile | Microsoft | 2026-05-12 |
| CVE-2026-7932 | Chromium: CVE-2026-7932 Insufficient policy enforcement in Downloads | UNKNOWN | — | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-7933 | Chromium: CVE-2026-7933 Out of bounds read in WebCodecs | UNKNOWN | — | 7%ile | Microsoft | 2026-05-12 |
| CVE-2026-7934 | Chromium: CVE-2026-7934 Insufficient validation of untrusted input in Popup Blocker | UNKNOWN | — | 6%ile | Microsoft | 2026-05-12 |
| CVE-2026-7935 | Chromium: CVE-2026-7935 Inappropriate implementation in Speech | UNKNOWN | — | 9%ile | Microsoft | 2026-05-12 |
| CVE-2026-7936 | Chromium: CVE-2026-7936 Object lifecycle issue in V8 | UNKNOWN | — | — | Microsoft | 2026-05-12 |
| CVE-2026-7937 | Chromium: CVE-2026-7937 Insufficient policy enforcement in DevTools | UNKNOWN | — | 4%ile | Microsoft | 2026-05-12 |
| CVE-2026-7938 | Chromium: CVE-2026-7938 Use after free in CSS | UNKNOWN | — | 19%ile | Microsoft | 2026-05-12 |
| CVE-2026-7939 | Chromium: CVE-2026-7939 Inappropriate implementation in SanitizerAPI | UNKNOWN | — | 6%ile | Microsoft | 2026-05-12 |
| CVE-2026-7940 | Chromium: CVE-2026-7940 Use after free in V8 | UNKNOWN | — | 9%ile | Microsoft | 2026-05-12 |
| CVE-2026-7941 | Chromium: CVE-2026-7941 Insufficient validation of untrusted input in Mobile | UNKNOWN | — | 1%ile | Microsoft | 2026-05-12 |
| CVE-2026-7942 | Chromium: CVE-2026-7942 Integer overflow in ANGLE | UNKNOWN | — | 10%ile | Microsoft | 2026-05-12 |
| CVE-2026-7943 | Chromium: CVE-2026-7943 Insufficient validation of untrusted input in ANGLE | UNKNOWN | — | 7%ile | Microsoft | 2026-05-12 |
| CVE-2026-7944 | Chromium: CVE-2026-7944 Insufficient validation of untrusted input in Persistent Cache | UNKNOWN | — | 10%ile | Microsoft | 2026-05-12 |
| CVE-2026-7945 | Chromium: CVE-2026-7945 Insufficient validation of untrusted input in COOP | UNKNOWN | — | 10%ile | Microsoft | 2026-05-12 |
| CVE-2026-7946 | Chromium: CVE-2026-7946 Insufficient policy enforcement in WebUI | UNKNOWN | — | 10%ile | Microsoft | 2026-05-12 |
| CVE-2026-7947 | Chromium: CVE-2026-7947 Insufficient validation of untrusted input in Network | UNKNOWN | — | 8%ile | Microsoft | 2026-05-12 |
| CVE-2026-7948 | Chromium: CVE-2026-7948 Race in Chromoting | UNKNOWN | — | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-7949 | Chromium: CVE-2026-7949 Out of bounds read in Skia | UNKNOWN | — | 8%ile | Microsoft | 2026-05-12 |
| CVE-2026-7950 | Chromium: CVE-2026-7950 Out of bounds read and write in GFX | UNKNOWN | — | 6%ile | Microsoft | 2026-05-12 |
| CVE-2026-7951 | Chromium: CVE-2026-7951 Out of bounds write in WebRTC | UNKNOWN | — | 32%ile | Microsoft | 2026-05-12 |
| CVE-2026-7952 | Chromium: CVE-2026-7952 Insufficient policy enforcement in Extensions | UNKNOWN | — | 7%ile | Microsoft | 2026-05-12 |
| CVE-2026-7953 | Chromium: CVE-2026-7953 Insufficient validation of untrusted input in Omnibox | UNKNOWN | — | 6%ile | Microsoft | 2026-05-12 |
| CVE-2026-7954 | Chromium: CVE-2026-7954 Race in Shared Storage | UNKNOWN | — | 5%ile | Microsoft | 2026-05-12 |
| CVE-2026-7955 | Chromium: CVE-2026-7955 Uninitialized Use in GPU | UNKNOWN | — | 15%ile | Microsoft | 2026-05-12 |
| CVE-2026-7956 | Chromium: CVE-2026-7956 Use after free in Navigation | UNKNOWN | — | 13%ile | Microsoft | 2026-05-12 |
| CVE-2026-7957 | Chromium: CVE-2026-7957 Out of bounds write in Media | UNKNOWN | — | 22%ile | Microsoft | 2026-05-12 |
| CVE-2026-7958 | Chromium: CVE-2026-7958 Inappropriate implementation in ServiceWorker | UNKNOWN | — | 4%ile | Microsoft | 2026-05-12 |
| CVE-2026-7959 | Chromium: CVE-2026-7959 Inappropriate implementation in Navigation | UNKNOWN | — | 9%ile | Microsoft | 2026-05-12 |
| CVE-2026-7960 | Chromium: CVE-2026-7960 Race in Speech | UNKNOWN | — | 7%ile | Microsoft | 2026-05-12 |
| CVE-2026-7961 | Chromium: CVE-2026-7961 Insufficient validation of untrusted input in Permissions | UNKNOWN | — | 6%ile | Microsoft | 2026-05-12 |
| CVE-2026-7962 | Chromium: CVE-2026-7962 Insufficient policy enforcement in DirectSockets | UNKNOWN | — | 6%ile | Microsoft | 2026-05-12 |
| CVE-2026-7963 | Chromium: CVE-2026-7963 Inappropriate implementation in ServiceWorker | UNKNOWN | — | 13%ile | Microsoft | 2026-05-12 |
| CVE-2026-7964 | Chromium: CVE-2026-7964 Insufficient validation of untrusted input in FileSystem | UNKNOWN | — | 7%ile | Microsoft | 2026-05-12 |
| CVE-2026-7965 | Chromium: CVE-2026-7965 Insufficient validation of untrusted input in DevTools | UNKNOWN | — | 11%ile | Microsoft | 2026-05-12 |
| CVE-2026-7966 | Chromium: CVE-2026-7966 Insufficient validation of untrusted input in SiteIsolation | UNKNOWN | — | 12%ile | Microsoft | 2026-05-12 |
| CVE-2026-7967 | Chromium: CVE-2026-7967 Insufficient validation of untrusted input in Navigation | UNKNOWN | — | 15%ile | Microsoft | 2026-05-12 |
| CVE-2026-7968 | Chromium: CVE-2026-7968 Insufficient validation of untrusted input in CORS | UNKNOWN | — | 12%ile | Microsoft | 2026-05-12 |
| CVE-2026-7969 | Chromium: CVE-2026-7969 Integer overflow in Network | UNKNOWN | — | 13%ile | Microsoft | 2026-05-12 |
| CVE-2026-7970 | Chromium: CVE-2026-7970 Use after free in TopChrome | UNKNOWN | — | 11%ile | Microsoft | 2026-05-12 |
| CVE-2026-7971 | Chromium: CVE-2026-7971 Inappropriate implementation in ORB | UNKNOWN | — | 7%ile | Microsoft | 2026-05-12 |
| CVE-2026-7972 | Chromium: CVE-2026-7972 Uninitialized Use in GPU | UNKNOWN | — | 15%ile | Microsoft | 2026-05-12 |
| CVE-2026-7973 | Chromium: CVE-2026-7973 Integer overflow in Dawn | UNKNOWN | — | 13%ile | Microsoft | 2026-05-12 |
| CVE-2026-7974 | Chromium: CVE-2026-7974 Use after free in Blink | UNKNOWN | — | 19%ile | Microsoft | 2026-05-12 |
| CVE-2026-7975 | Chromium: CVE-2026-7975 Use after free in DevTools | UNKNOWN | — | 11%ile | Microsoft | 2026-05-12 |
| CVE-2026-7976 | Chromium: CVE-2026-7976 Use after free in Views | UNKNOWN | — | 8%ile | Microsoft | 2026-05-12 |
| CVE-2026-7977 | Chromium: CVE-2026-7977 Inappropriate implementation in Canvas | UNKNOWN | — | 5%ile | Microsoft | 2026-05-12 |
| CVE-2026-7978 | Chromium: CVE-2026-7978 Inappropriate implementation in Companion | UNKNOWN | — | 15%ile | Microsoft | 2026-05-12 |
| CVE-2026-7979 | Chromium: CVE-2026-7979 Inappropriate implementation in Media | UNKNOWN | — | 5%ile | Microsoft | 2026-05-12 |
| CVE-2026-7980 | Chromium: CVE-2026-7980 Use after free in WebAudio | UNKNOWN | — | 27%ile | Microsoft | 2026-05-12 |
| CVE-2026-7981 | Chromium: CVE-2026-7981 Out of bounds read in Codecs | UNKNOWN | — | 10%ile | Microsoft | 2026-05-12 |
| CVE-2026-7982 | Chromium: CVE-2026-7982 Uninitialized Use in WebCodecs | UNKNOWN | — | 15%ile | Microsoft | 2026-05-12 |
| CVE-2026-7983 | Chromium: CVE-2026-7983 Out of bounds read in Dawn | UNKNOWN | — | 9%ile | Microsoft | 2026-05-12 |
| CVE-2026-7984 | Chromium: CVE-2026-7984 Use after free in ReadingMode | UNKNOWN | — | 19%ile | Microsoft | 2026-05-12 |
| CVE-2026-7985 | Chromium: CVE-2026-7985 Use after free in GPU | UNKNOWN | — | 11%ile | Microsoft | 2026-05-12 |
| CVE-2026-7986 | Chromium: CVE-2026-7986 Insufficient policy enforcement in Autofill | UNKNOWN | — | 5%ile | Microsoft | 2026-05-12 |
| CVE-2026-7987 | Chromium: CVE-2026-7987 Use after free in WebRTC | UNKNOWN | — | 27%ile | Microsoft | 2026-05-12 |
| CVE-2026-7988 | Chromium: CVE-2026-7988 Type Confusion in WebRTC | UNKNOWN | — | 24%ile | Microsoft | 2026-05-12 |
| CVE-2026-7989 | Chromium: CVE-2026-7989 Insufficient data validation in DataTransfer | UNKNOWN | — | 6%ile | Microsoft | 2026-05-12 |
| CVE-2026-7990 | Chromium: CVE-2026-7990 Insufficient validation of untrusted input in Updater | UNKNOWN | — | 1%ile | Microsoft | 2026-05-12 |
| CVE-2026-7991 | Chromium: CVE-2026-7991 Use after free in UI | UNKNOWN | — | 13%ile | Microsoft | 2026-05-12 |
| CVE-2026-7992 | Chromium: CVE-2026-7992 Insufficient validation of untrusted input in UI | UNKNOWN | — | 13%ile | Microsoft | 2026-05-12 |
| CVE-2026-7993 | Chromium: CVE-2026-7993 Insufficient validation of untrusted input in Payments | UNKNOWN | — | 8%ile | Microsoft | 2026-05-12 |
| CVE-2026-7994 | Chromium: CVE-2026-7994 Inappropriate implementation in Chromoting | UNKNOWN | — | 1%ile | Microsoft | 2026-05-12 |
| CVE-2026-7995 | Chromium: CVE-2026-7995 Out of bounds read in AdFilter | UNKNOWN | — | 13%ile | Microsoft | 2026-05-12 |
| CVE-2026-7996 | Chromium: CVE-2026-7996 Insufficient validation of untrusted input in SSL | UNKNOWN | — | 7%ile | Microsoft | 2026-05-12 |
| CVE-2026-7997 | Chromium: CVE-2026-7997 Insufficient validation of untrusted input in Updater | UNKNOWN | — | 0%ile | Microsoft | 2026-05-12 |
| CVE-2026-7998 | Chromium: CVE-2026-7998 Insufficient validation of untrusted input in Dialog | UNKNOWN | — | 9%ile | Microsoft | 2026-05-12 |
| CVE-2026-7999 | Chromium: CVE-2026-7999 Inappropriate implementation in V8 | UNKNOWN | — | 6%ile | Microsoft | 2026-05-12 |
| CVE-2026-8000 | Chromium: CVE-2026-8000 Insufficient validation of untrusted input in ChromeDriver | UNKNOWN | — | 16%ile | Microsoft | 2026-05-12 |
| CVE-2026-8001 | Chromium: CVE-2026-8001 Use after free in Printing | UNKNOWN | — | 7%ile | Microsoft | 2026-05-12 |
| CVE-2026-8002 | Chromium: CVE-2026-8002 Use after free in Audio | UNKNOWN | — | 15%ile | Microsoft | 2026-05-12 |
| CVE-2026-8003 | Chromium: CVE-2026-8003 Insufficient validation of untrusted input in TabGroups | UNKNOWN | — | 4%ile | Microsoft | 2026-05-12 |
| CVE-2026-8004 | Chromium: CVE-2026-8004 Insufficient policy enforcement in DevTools | UNKNOWN | — | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-8005 | Chromium: CVE-2026-8005 Insufficient validation of untrusted input in Cast | UNKNOWN | — | 1%ile | Microsoft | 2026-05-12 |
| CVE-2026-8006 | Chromium: CVE-2026-8006 Insufficient policy enforcement in DevTools | UNKNOWN | — | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-8007 | Chromium: CVE-2026-8007 Insufficient validation of untrusted input in Cast | UNKNOWN | — | 9%ile | Microsoft | 2026-05-12 |
| CVE-2026-8008 | Chromium: CVE-2026-8008 Inappropriate implementation in DevTools | UNKNOWN | — | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-8009 | Chromium: CVE-2026-8009 Inappropriate implementation in Cast | UNKNOWN | — | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-8010 | Chromium: CVE-2026-8010 Insufficient validation of untrusted input in SiteIsolation | UNKNOWN | — | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-8011 | Chromium: CVE-2026-8011 Insufficient policy enforcement in Search | UNKNOWN | — | 6%ile | Microsoft | 2026-05-12 |
| CVE-2026-8012 | Chromium: CVE-2026-8012 Inappropriate implementation in MHTML | UNKNOWN | — | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-8013 | Chromium: CVE-2026-8013 Insufficient validation of untrusted input in FedCM | UNKNOWN | — | 6%ile | Microsoft | 2026-05-12 |
| CVE-2026-8014 | Chromium: CVE-2026-8014 Inappropriate implementation in Preload | UNKNOWN | — | 6%ile | Microsoft | 2026-05-12 |
| CVE-2026-8015 | Chromium: CVE-2026-8015 Inappropriate implementation in Media | UNKNOWN | — | 5%ile | Microsoft | 2026-05-12 |
| CVE-2026-8016 | Chromium: CVE-2026-8016 Use after free in WebRTC | UNKNOWN | — | 24%ile | Microsoft | 2026-05-12 |
| CVE-2026-8017 | Chromium: CVE-2026-8017 Side-channel information leakage in Media | UNKNOWN | — | 4%ile | Microsoft | 2026-05-12 |
| CVE-2026-8018 | Chromium: CVE-2026-8018 Insufficient policy enforcement in DevTools | UNKNOWN | — | 17%ile | Microsoft | 2026-05-12 |
| CVE-2026-8019 | Chromium: CVE-2026-8019 Insufficient policy enforcement in WebApp | UNKNOWN | — | 5%ile | Microsoft | 2026-05-12 |
| CVE-2026-8020 | Chromium: CVE-2026-8020 Uninitialized Use in GPU | UNKNOWN | — | 11%ile | Microsoft | 2026-05-12 |
| CVE-2026-8021 | Chromium: CVE-2026-8021 Script injection in UI | UNKNOWN | — | 5%ile | Microsoft | 2026-05-12 |
| CVE-2026-8022 | Chromium: CVE-2026-8022 Inappropriate implementation in MHTML | UNKNOWN | — | 4%ile | Microsoft | 2026-05-12 |
| CVE-2026-8509 | Chromium: CVE-2026-8509 Heap buffer overflow in WebML | UNKNOWN | — | 34%ile | Microsoft | 2026-05-12 |
| CVE-2026-8510 | Chromium: CVE-2026-8510 Integer overflow in Skia | UNKNOWN | — | 96%ile | Microsoft | 2026-05-12 |
| CVE-2026-8511 | Chromium: CVE-2026-8511 Use after free in UI | UNKNOWN | — | 14%ile | Microsoft | 2026-05-12 |
| CVE-2026-8512 | Chromium: CVE-2026-8512 Use after free in FileSystem | UNKNOWN | — | 17%ile | Microsoft | 2026-05-12 |
| CVE-2026-8513 | Chromium: CVE-2026-8513 Use after free in Input | UNKNOWN | — | 11%ile | Microsoft | 2026-05-12 |
| CVE-2026-8514 | Chromium: CVE-2026-8514 Use after free in Aura | UNKNOWN | — | 11%ile | Microsoft | 2026-05-12 |
| CVE-2026-8515 | Chromium: CVE-2026-8515 Use after free in HID | UNKNOWN | — | 11%ile | Microsoft | 2026-05-12 |
| CVE-2026-8516 | Chromium: CVE-2026-8516 Insufficient validation of untrusted input in DataTransfer | UNKNOWN | — | 12%ile | Microsoft | 2026-05-12 |
| CVE-2026-8517 | Chromium: CVE-2026-8517 Object lifecycle issue in WebShare | UNKNOWN | — | 43%ile | Microsoft | 2026-05-12 |
| CVE-2026-8518 | Chromium: CVE-2026-8518 Use after free in Blink | UNKNOWN | — | 21%ile | Microsoft | 2026-05-12 |
| CVE-2026-8519 | Chromium: CVE-2026-8519 Integer overflow in ANGLE | UNKNOWN | — | 14%ile | Microsoft | 2026-05-12 |
| CVE-2026-8520 | Chromium: CVE-2026-8520 Race in Payments | UNKNOWN | — | 6%ile | Microsoft | 2026-05-12 |
| CVE-2026-8521 | Chromium: CVE-2026-8521 Use after free in Tab Groups | UNKNOWN | — | 5%ile | Microsoft | 2026-05-12 |
| CVE-2026-8522 | Chromium: CVE-2026-8522 Use after free in Downloads | UNKNOWN | — | 21%ile | Microsoft | 2026-05-12 |
| CVE-2026-8523 | Chromium: CVE-2026-8523 Use after free in Mojo | UNKNOWN | — | 11%ile | Microsoft | 2026-05-12 |
| CVE-2026-8524 | Chromium: CVE-2026-8524 Out of bounds write in WebAudio | UNKNOWN | — | 32%ile | Microsoft | 2026-05-12 |
| CVE-2026-8525 | Chromium: CVE-2026-8525 Heap buffer overflow in ANGLE | UNKNOWN | — | 14%ile | Microsoft | 2026-05-12 |
| CVE-2026-8526 | Chromium: CVE-2026-8526 Out of bounds write in WebRTC | UNKNOWN | — | 32%ile | Microsoft | 2026-05-12 |
| CVE-2026-8527 | Chromium: CVE-2026-8527 Insufficient validation of untrusted input in Downloads | UNKNOWN | — | 22%ile | Microsoft | 2026-05-12 |
| CVE-2026-8528 | Chromium: CVE-2026-8528 Insufficient validation of untrusted input in SiteIsolation | UNKNOWN | — | 9%ile | Microsoft | 2026-05-12 |
| CVE-2026-8529 | Chromium: CVE-2026-8529 Heap buffer overflow in Codecs | UNKNOWN | — | 23%ile | Microsoft | 2026-05-12 |
| CVE-2026-8530 | Chromium: CVE-2026-8530 Use after free in Network | UNKNOWN | — | 19%ile | Microsoft | 2026-05-12 |
| CVE-2026-8531 | Chromium: CVE-2026-8531 Heap buffer overflow in WebML | UNKNOWN | — | 18%ile | Microsoft | 2026-05-12 |
| CVE-2026-8532 | Chromium: CVE-2026-8532 Integer overflow in XML | UNKNOWN | — | 21%ile | Microsoft | 2026-05-12 |
| CVE-2026-8533 | Chromium: CVE-2026-8533 Use after free in Accessibility | UNKNOWN | — | 11%ile | Microsoft | 2026-05-12 |
| CVE-2026-8534 | Chromium: CVE-2026-8534 Integer overflow in GPU | UNKNOWN | — | 11%ile | Microsoft | 2026-05-12 |
| CVE-2026-8535 | Chromium: CVE-2026-8535 Out of bounds read in Media | UNKNOWN | — | 9%ile | Microsoft | 2026-05-12 |
| CVE-2026-8536 | Chromium: CVE-2026-8536 Insufficient validation of untrusted input in ReadingMode | UNKNOWN | — | 8%ile | Microsoft | 2026-05-12 |
| CVE-2026-8537 | Chromium: CVE-2026-8537 Insufficient policy enforcement in ViewTransitions | UNKNOWN | — | 8%ile | Microsoft | 2026-05-12 |
| CVE-2026-8538 | Chromium: CVE-2026-8538 Insufficient validation of untrusted input in GPU | UNKNOWN | — | 9%ile | Microsoft | 2026-05-12 |
| CVE-2026-8539 | Chromium: CVE-2026-8539 Script injection in SanitizerAPI | UNKNOWN | — | 5%ile | Microsoft | 2026-05-12 |
| CVE-2026-8540 | Chromium: CVE-2026-8540 Type Confusion in V8 | UNKNOWN | — | 23%ile | Microsoft | 2026-05-12 |
| CVE-2026-8541 | Chromium: CVE-2026-8541 Out of bounds read in UI | UNKNOWN | — | 10%ile | Microsoft | 2026-05-12 |
| CVE-2026-8542 | Chromium: CVE-2026-8542 Use after free in Core | UNKNOWN | — | 11%ile | Microsoft | 2026-05-12 |
| CVE-2026-8543 | Chromium: CVE-2026-8543 Out of bounds read in FileSystem | UNKNOWN | — | 17%ile | Microsoft | 2026-05-12 |
| CVE-2026-8544 | Chromium: CVE-2026-8544 Use after free in Media | UNKNOWN | — | 21%ile | Microsoft | 2026-05-12 |
| CVE-2026-8545 | Chromium: CVE-2026-8545 Object corruption in Compositing | UNKNOWN | — | 5%ile | Microsoft | 2026-05-12 |
| CVE-2026-8546 | Chromium: CVE-2026-8546 Out of bounds read in GPU | UNKNOWN | — | 10%ile | Microsoft | 2026-05-12 |
| CVE-2026-8547 | Chromium: CVE-2026-8547 Insufficient policy enforcement in Passwords | UNKNOWN | — | 17%ile | Microsoft | 2026-05-12 |
| CVE-2026-8548 | Chromium: CVE-2026-8548 Out of bounds write in Media | UNKNOWN | — | 11%ile | Microsoft | 2026-05-12 |
| CVE-2026-8549 | Chromium: CVE-2026-8549 Use after free in Media | UNKNOWN | — | 21%ile | Microsoft | 2026-05-12 |
| CVE-2026-8550 | Chromium: CVE-2026-8550 Use after free in Google Lens | UNKNOWN | — | 14%ile | Microsoft | 2026-05-12 |
| CVE-2026-8551 | Chromium: CVE-2026-8551 Use after free in Downloads | UNKNOWN | — | 21%ile | Microsoft | 2026-05-12 |
| CVE-2026-8552 | Chromium: CVE-2026-8552 Heap buffer overflow in GPU | UNKNOWN | — | 9%ile | Microsoft | 2026-05-12 |
| CVE-2026-8553 | Chromium: CVE-2026-8553 Use after free in GPU | UNKNOWN | — | 5%ile | Microsoft | 2026-05-12 |
| CVE-2026-8554 | Chromium: CVE-2026-8554 Type Confusion in ANGLE | UNKNOWN | — | 7%ile | Microsoft | 2026-05-12 |
| CVE-2026-8555 | Chromium: CVE-2026-8555 Use after free in GTK | UNKNOWN | — | 21%ile | Microsoft | 2026-05-12 |
| CVE-2026-8556 | Chromium: CVE-2026-8556 Inappropriate implementation in ANGLE | UNKNOWN | — | 10%ile | Microsoft | 2026-05-12 |
| CVE-2026-8557 | Chromium: CVE-2026-8557 Use after free in Accessibility | UNKNOWN | — | 11%ile | Microsoft | 2026-05-12 |
| CVE-2026-8558 | Chromium: CVE-2026-8558 Out of bounds write in Fonts | UNKNOWN | — | 24%ile | Microsoft | 2026-05-12 |
| CVE-2026-8559 | Chromium: CVE-2026-8559 Integer overflow in Internationalization | UNKNOWN | — | 7%ile | Microsoft | 2026-05-12 |
| CVE-2026-8560 | Chromium: CVE-2026-8560 Heap buffer overflow in SwiftShader | UNKNOWN | — | 16%ile | Microsoft | 2026-05-12 |
| CVE-2026-8561 | Chromium: CVE-2026-8561 Incorrect security UI in Fullscreen | UNKNOWN | — | 8%ile | Microsoft | 2026-05-12 |
| CVE-2026-8562 | Chromium: CVE-2026-8562 Side-channel information leakage in Navigation | UNKNOWN | — | 8%ile | Microsoft | 2026-05-12 |
| CVE-2026-8563 | Chromium: CVE-2026-8563 Insufficient policy enforcement in IFrame Sandbox | UNKNOWN | — | 8%ile | Microsoft | 2026-05-12 |
| CVE-2026-8564 | Chromium: CVE-2026-8564 Incorrect security UI in Downloads | UNKNOWN | — | 5%ile | Microsoft | 2026-05-12 |
| CVE-2026-8565 | Chromium: CVE-2026-8565 Inappropriate implementation in Downloads | UNKNOWN | — | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-8566 | Chromium: CVE-2026-8566 Insufficient policy enforcement in Payments | UNKNOWN | — | 8%ile | Microsoft | 2026-05-12 |
| CVE-2026-8567 | Chromium: CVE-2026-8567 Integer overflow in ANGLE | UNKNOWN | — | 8%ile | Microsoft | 2026-05-12 |
| CVE-2026-8568 | Chromium: CVE-2026-8568 Insufficient policy enforcement in AI | UNKNOWN | — | — | Microsoft | 2026-05-12 |
| CVE-2026-8569 | Chromium: CVE-2026-8569 Out of bounds write in Codecs | UNKNOWN | — | 16%ile | Microsoft | 2026-05-12 |
| CVE-2026-8570 | Chromium: CVE-2026-8570 Type Confusion in V8 | UNKNOWN | — | 16%ile | Microsoft | 2026-05-12 |
| CVE-2026-8571 | Chromium: CVE-2026-8571 Insufficient policy enforcement in GPU | UNKNOWN | — | 12%ile | Microsoft | 2026-05-12 |
| CVE-2026-8572 | Chromium: CVE-2026-8572 Insufficient policy enforcement in Network | UNKNOWN | — | 5%ile | Microsoft | 2026-05-12 |
| CVE-2026-8573 | Chromium: CVE-2026-8573 Integer overflow in Codecs | UNKNOWN | — | 14%ile | Microsoft | 2026-05-12 |
| CVE-2026-8574 | Chromium: CVE-2026-8574 Use after free in Core | UNKNOWN | — | 8%ile | Microsoft | 2026-05-12 |
| CVE-2026-8575 | Chromium: CVE-2026-8575 Use after free in UI | UNKNOWN | — | 7%ile | Microsoft | 2026-05-12 |
| CVE-2026-8576 | Chromium: CVE-2026-8576 Inappropriate implementation in CORS | UNKNOWN | — | 5%ile | Microsoft | 2026-05-12 |
| CVE-2026-8577 | Chromium: CVE-2026-8577 Integer overflow in Fonts | UNKNOWN | — | 17%ile | Microsoft | 2026-05-12 |
| CVE-2026-8578 | Chromium: CVE-2026-8578 Out of bounds read in GPU | UNKNOWN | — | 5%ile | Microsoft | 2026-05-12 |
| CVE-2026-8579 | Chromium: CVE-2026-8579 Insufficient validation of untrusted input in Skia | UNKNOWN | — | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-8580 | Chromium: CVE-2026-8580 Use after free in Mojo | UNKNOWN | — | 11%ile | Microsoft | 2026-05-12 |
| CVE-2026-8581 | Chromium: CVE-2026-8581 Use after free in GPU | UNKNOWN | — | 18%ile | Microsoft | 2026-05-12 |
| CVE-2026-8582 | Chromium: CVE-2026-8582 Object lifecycle issue in Dawn | UNKNOWN | — | 9%ile | Microsoft | 2026-05-12 |
| CVE-2026-8583 | Chromium: CVE-2026-8583 Insufficient policy enforcement in WebXR | UNKNOWN | — | 8%ile | Microsoft | 2026-05-12 |
| CVE-2026-8584 | Chromium: CVE-2026-8584 Inappropriate implementation in Views | UNKNOWN | — | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-8585 | Chromium: CVE-2026-8585 Inappropriate implementation in Media | UNKNOWN | — | 7%ile | Microsoft | 2026-05-12 |
| CVE-2026-8586 | Chromium: CVE-2026-8586 Inappropriate implementation in Chromoting | UNKNOWN | — | 1%ile | Microsoft | 2026-05-12 |
| CVE-2026-8587 | Chromium: CVE-2026-8587 Use after free in Extensions | UNKNOWN | — | 7%ile | Microsoft | 2026-05-12 |
| CVE-2026-9110 | Chromium: CVE-2026-9110 Inappropriate implementation in UI | UNKNOWN | — | 27%ile | Microsoft | 2026-05-12 |
| CVE-2026-9111 | Chromium: CVE-2026-9111 Use after free in WebRTC | UNKNOWN | — | 56%ile | Microsoft | 2026-05-12 |
| CVE-2026-9112 | Chromium: CVE-2026-9112 Use after free in GPU | UNKNOWN | — | 34%ile | Microsoft | 2026-05-12 |
| CVE-2026-9113 | Chromium: CVE-2026-9113 Out of bounds read in GPU | UNKNOWN | — | 12%ile | Microsoft | 2026-05-12 |
| CVE-2026-9114 | Chromium: CVE-2026-9114 Use after free in QUIC | UNKNOWN | — | 30%ile | Microsoft | 2026-05-12 |
| CVE-2026-9115 | Chromium: CVE-2026-9115 Insufficient policy enforcement in Service Worker | UNKNOWN | — | 13%ile | Microsoft | 2026-05-12 |
| CVE-2026-9116 | Chromium: CVE-2026-9116 Insufficient policy enforcement in ServiceWorker | UNKNOWN | — | 12%ile | Microsoft | 2026-05-12 |
| CVE-2026-9117 | Chromium: CVE-2026-9117 Type Confusion in GFX | UNKNOWN | — | 18%ile | Microsoft | 2026-05-12 |
| CVE-2026-9118 | Chromium: CVE-2026-9118 Use after free in XR | UNKNOWN | — | 34%ile | Microsoft | 2026-05-12 |
| CVE-2026-9119 | Chromium: CVE-2026-9119 Heap buffer overflow in WebRTC | UNKNOWN | — | 45%ile | Microsoft | 2026-05-12 |
| CVE-2026-9120 | Chromium: CVE-2026-9120 Use after free in WebRTC | UNKNOWN | — | 43%ile | Microsoft | 2026-05-12 |
| CVE-2026-9121 | Chromium: CVE-2026-9126 Use after free in DOM | UNKNOWN | — | 26%ile | Microsoft | 2026-05-12 |
| CVE-2026-9122 | Chromium: CVE-2026-9121 Out of bounds read in GPU | UNKNOWN | — | 19%ile | Microsoft | 2026-05-12 |
| CVE-2026-9123 | Chromium: CVE-2026-9122 Out of bounds read in GPU | UNKNOWN | — | 8%ile | Microsoft | 2026-05-12 |
| CVE-2026-9124 | Chromium: CVE-2026-9123 Heap buffer overflow in Chromecast | UNKNOWN | — | 18%ile | Microsoft | 2026-05-12 |
| CVE-2026-9126 | Chromium: CVE-2026-9124 Insufficient validation of untrusted input in Input | UNKNOWN | — | 34%ile | Microsoft | 2026-05-12 |
| CVE-2026-9873 | Chromium: CVE-2026-9873 Use after free in Network | UNKNOWN | — | 23%ile | Microsoft | 2026-05-12 |
| CVE-2026-9874 | Chromium: CVE-2026-9874 Use after free in Dawn | UNKNOWN | — | 14%ile | Microsoft | 2026-05-12 |
| CVE-2026-9875 | Chromium: CVE-2026-9875 Out of bounds read in WebGL | UNKNOWN | — | 16%ile | Microsoft | 2026-05-12 |
| CVE-2026-9876 | Chromium: CVE-2026-9876 Use after free in WebGL | UNKNOWN | — | 16%ile | Microsoft | 2026-05-12 |
| CVE-2026-9877 | Chromium: CVE-2026-9877 Use after free in ANGLE | UNKNOWN | — | 14%ile | Microsoft | 2026-05-12 |
| CVE-2026-9878 | Chromium: CVE-2026-9878 Use after free in ANGLE | UNKNOWN | — | 26%ile | Microsoft | 2026-05-12 |
| CVE-2026-9879 | Chromium: CVE-2026-9879 Out of bounds write in ANGLE | UNKNOWN | — | 24%ile | Microsoft | 2026-05-12 |
| CVE-2026-9880 | Chromium: CVE-2026-9880 Insufficient validation of untrusted input in WebGL | UNKNOWN | — | 14%ile | Microsoft | 2026-05-12 |
| CVE-2026-9881 | Chromium: CVE-2026-9881 Use after free in Bluetooth | UNKNOWN | — | 10%ile | Microsoft | 2026-05-12 |
| CVE-2026-9882 | Chromium: CVE-2026-9882 Integer overflow in ANGLE | UNKNOWN | — | 14%ile | Microsoft | 2026-05-12 |
| CVE-2026-9883 | Chromium: CVE-2026-9883 Use after free in Base | UNKNOWN | — | 22%ile | Microsoft | 2026-05-12 |
| CVE-2026-9884 | Chromium: CVE-2026-9884 Use after free in Browser | UNKNOWN | — | 31%ile | Microsoft | 2026-05-12 |
| CVE-2026-9885 | Chromium: CVE-2026-9885 Insufficient validation of untrusted input in UI | UNKNOWN | — | 14%ile | Microsoft | 2026-05-12 |
| CVE-2026-9886 | Chromium: CVE-2026-9886 Use after free in Base | UNKNOWN | — | 16%ile | Microsoft | 2026-05-12 |
| CVE-2026-9887 | Chromium: CVE-2026-9887 Use after free in Proxy | UNKNOWN | — | 12%ile | Microsoft | 2026-05-12 |
| CVE-2026-9888 | Chromium: CVE-2026-9888 Use after free in WebView | UNKNOWN | — | 12%ile | Microsoft | 2026-05-12 |
| CVE-2026-9889 | Chromium: CVE-2026-9889 Out of bounds read and write in Dawn | UNKNOWN | — | 12%ile | Microsoft | 2026-05-12 |
| CVE-2026-9890 | Chromium: CVE-2026-9890 Use after free in XR | UNKNOWN | — | 12%ile | Microsoft | 2026-05-12 |
| CVE-2026-9891 | Chromium: CVE-2026-9891 Use after free in Extensions | UNKNOWN | — | 16%ile | Microsoft | 2026-05-12 |
| CVE-2026-9892 | Chromium: CVE-2026-9892 Inappropriate implementation in Skia | UNKNOWN | — | 11%ile | Microsoft | 2026-05-12 |
| CVE-2026-9893 | Chromium: CVE-2026-9893 Use after free in Skia | UNKNOWN | — | 38%ile | Microsoft | 2026-05-12 |
| CVE-2026-9894 | Chromium: CVE-2026-9894 Use after free in GPU | UNKNOWN | — | 12%ile | Microsoft | 2026-05-12 |
| CVE-2026-9895 | Chromium: CVE-2026-9895 Out of bounds read in GPU | UNKNOWN | — | 12%ile | Microsoft | 2026-05-12 |
| CVE-2026-9896 | Chromium: CVE-2026-9896 Out of bounds write in V8 | UNKNOWN | — | 22%ile | Microsoft | 2026-05-12 |
| CVE-2026-9897 | Chromium: CVE-2026-9897 Use after free in DOM | UNKNOWN | — | 22%ile | Microsoft | 2026-05-12 |
| CVE-2026-9898 | Chromium: CVE-2026-9898 Insufficient validation of untrusted input in GPU | UNKNOWN | — | 14%ile | Microsoft | 2026-05-12 |
| CVE-2026-9899 | Chromium: CVE-2026-9899 Use after free in ANGLE | UNKNOWN | — | 13%ile | Microsoft | 2026-05-12 |
| CVE-2026-9900 | Chromium: CVE-2026-9900 Out of bounds write in ANGLE | UNKNOWN | — | 13%ile | Microsoft | 2026-05-12 |
| CVE-2026-9901 | Chromium: CVE-2026-9901 Use after free in ANGLE | UNKNOWN | — | 19%ile | Microsoft | 2026-05-12 |
| CVE-2026-9902 | Chromium: CVE-2026-9902 Use after free in Accessibility | UNKNOWN | — | 12%ile | Microsoft | 2026-05-12 |
| CVE-2026-9903 | Chromium: CVE-2026-9903 Insufficient validation of untrusted input in Site Isolation | UNKNOWN | — | 5%ile | Microsoft | 2026-05-12 |
| CVE-2026-9904 | Chromium: CVE-2026-9904 Use after free in ANGLE | UNKNOWN | — | 13%ile | Microsoft | 2026-05-12 |
| CVE-2026-9905 | Chromium: CVE-2026-9905 Use after free in Accessibility | UNKNOWN | — | 12%ile | Microsoft | 2026-05-12 |
| CVE-2026-9906 | Chromium: CVE-2026-9906 Out of bounds write in GPU | UNKNOWN | — | 12%ile | Microsoft | 2026-05-12 |
| CVE-2026-9907 | Chromium: CVE-2026-9907 Out of bounds read in Dawn | UNKNOWN | — | 11%ile | Microsoft | 2026-05-12 |
| CVE-2026-9908 | Chromium: CVE-2026-9908 Out of bounds read in ANGLE | UNKNOWN | — | 16%ile | Microsoft | 2026-05-12 |
| CVE-2026-9909 | Chromium: CVE-2026-9909 Integer overflow in Skia | UNKNOWN | — | 19%ile | Microsoft | 2026-05-12 |
| CVE-2026-9910 | Chromium: CVE-2026-9910 Out of bounds memory access in ANGLE | UNKNOWN | — | 28%ile | Microsoft | 2026-05-12 |
| CVE-2026-9911 | Chromium: CVE-2026-9911 Integer overflow in ANGLE | UNKNOWN | — | 13%ile | Microsoft | 2026-05-12 |
| CVE-2026-9912 | Chromium: CVE-2026-9912 Inappropriate implementation in GPU | UNKNOWN | — | 16%ile | Microsoft | 2026-05-12 |
| CVE-2026-9913 | Chromium: CVE-2026-9913 Inappropriate implementation in ANGLE | UNKNOWN | — | 16%ile | Microsoft | 2026-05-12 |
| CVE-2026-9914 | Chromium: CVE-2026-9914 Insufficient validation of untrusted input in ANGLE | UNKNOWN | — | 16%ile | Microsoft | 2026-05-12 |
| CVE-2026-9915 | Chromium: CVE-2026-9915 Heap buffer overflow in ANGLE | UNKNOWN | — | 18%ile | Microsoft | 2026-05-12 |
| CVE-2026-9916 | Chromium: CVE-2026-9916 Out of bounds write in ANGLE | UNKNOWN | — | 14%ile | Microsoft | 2026-05-12 |
| CVE-2026-9917 | Chromium: CVE-2026-9917 Uninitialized Use in WebGL | UNKNOWN | — | 19%ile | Microsoft | 2026-05-12 |
| CVE-2026-9918 | Chromium: CVE-2026-9918 Inappropriate implementation in Tint | UNKNOWN | — | 16%ile | Microsoft | 2026-05-12 |
| CVE-2026-9919 | Chromium: CVE-2026-9919 Out of bounds read in WebGL | UNKNOWN | — | 12%ile | Microsoft | 2026-05-12 |
| CVE-2026-9920 | Chromium: CVE-2026-9920 Uninitialized Use in GPU | UNKNOWN | — | 11%ile | Microsoft | 2026-05-12 |
| CVE-2026-9921 | Chromium: CVE-2026-9921 Uninitialized Use in WebGL | UNKNOWN | — | 15%ile | Microsoft | 2026-05-12 |
| CVE-2026-9922 | Chromium: CVE-2026-9922 Use after free in GPU | UNKNOWN | — | 17%ile | Microsoft | 2026-05-12 |
| CVE-2026-9923 | Chromium: CVE-2026-9923 Use after free in Skia | UNKNOWN | — | 19%ile | Microsoft | 2026-05-12 |
| CVE-2026-9924 | Chromium: CVE-2026-9924 Heap buffer overflow in ANGLE | UNKNOWN | — | 16%ile | Microsoft | 2026-05-12 |
| CVE-2026-9925 | Chromium: CVE-2026-9925 Use after free in ANGLE | UNKNOWN | — | 14%ile | Microsoft | 2026-05-12 |
| CVE-2026-9926 | Chromium: CVE-2026-9926 Heap buffer overflow in ANGLE | UNKNOWN | — | 18%ile | Microsoft | 2026-05-12 |
| CVE-2026-9927 | Chromium: CVE-2026-9927 Use after free in ANGLE | UNKNOWN | — | 25%ile | Microsoft | 2026-05-12 |
| CVE-2026-9928 | Chromium: CVE-2026-9928 Out of bounds read in ANGLE | UNKNOWN | — | 23%ile | Microsoft | 2026-05-12 |
| CVE-2026-9929 | Chromium: CVE-2026-9929 Inappropriate implementation in WebGL | UNKNOWN | — | 11%ile | Microsoft | 2026-05-12 |
| CVE-2026-9930 | Chromium: CVE-2026-9930 Out of bounds write in Dawn | UNKNOWN | — | 9%ile | Microsoft | 2026-05-12 |
| CVE-2026-9931 | Chromium: CVE-2026-9931 Use after free in GPU | UNKNOWN | — | 13%ile | Microsoft | 2026-05-12 |
| CVE-2026-9932 | Chromium: CVE-2026-9932 Use after free in ANGLE | UNKNOWN | — | 13%ile | Microsoft | 2026-05-12 |
| CVE-2026-9933 | Chromium: CVE-2026-9933 Use after free in Input | UNKNOWN | — | 13%ile | Microsoft | 2026-05-12 |
| CVE-2026-9934 | Chromium: CVE-2026-9934 Use after free in Aura | UNKNOWN | — | 17%ile | Microsoft | 2026-05-12 |
| CVE-2026-9935 | Chromium: CVE-2026-9935 Uninitialized Use in ANGLE | UNKNOWN | — | 16%ile | Microsoft | 2026-05-12 |
| CVE-2026-9936 | Chromium: CVE-2026-9936 Use after free in GFX | UNKNOWN | — | 13%ile | Microsoft | 2026-05-12 |
| CVE-2026-9937 | Chromium: CVE-2026-9937 Use after free in UI | UNKNOWN | — | 13%ile | Microsoft | 2026-05-12 |
| CVE-2026-9938 | Chromium: CVE-2026-9938 Inappropriate implementation in V8 | UNKNOWN | — | 25%ile | Microsoft | 2026-05-12 |
| CVE-2026-9939 | Chromium: CVE-2026-9939 Heap buffer overflow in WebCodecs | UNKNOWN | — | 36%ile | Microsoft | 2026-05-12 |
| CVE-2026-9940 | Chromium: CVE-2026-9940 Heap buffer overflow in ANGLE | UNKNOWN | — | 20%ile | Microsoft | 2026-05-12 |
| CVE-2026-9941 | Chromium: CVE-2026-9941 Use after free in ANGLE | UNKNOWN | — | 25%ile | Microsoft | 2026-05-12 |
| CVE-2026-9942 | Chromium: CVE-2026-9942 Uninitialized Use in ANGLE | UNKNOWN | — | 11%ile | Microsoft | 2026-05-12 |
| CVE-2026-9943 | Chromium: CVE-2026-9943 Out of bounds read in WebGL | UNKNOWN | — | 11%ile | Microsoft | 2026-05-12 |
| CVE-2026-9944 | Chromium: CVE-2026-9944 Uninitialized Use in ANGLE | UNKNOWN | — | 11%ile | Microsoft | 2026-05-12 |
| CVE-2026-9945 | Chromium: CVE-2026-9945 Use after free in Media | UNKNOWN | — | 23%ile | Microsoft | 2026-05-12 |
| CVE-2026-9946 | Chromium: CVE-2026-9946 Use after free in ANGLE | UNKNOWN | — | 12%ile | Microsoft | 2026-05-12 |
| CVE-2026-9947 | Chromium: CVE-2026-9947 Use after free in XML | UNKNOWN | — | 23%ile | Microsoft | 2026-05-12 |
| CVE-2026-9948 | Chromium: CVE-2026-9948 Use after free in Views | UNKNOWN | — | 13%ile | Microsoft | 2026-05-12 |
| CVE-2026-9949 | Chromium: CVE-2026-9949 Use after free in Core | UNKNOWN | — | 13%ile | Microsoft | 2026-05-12 |
| CVE-2026-9950 | Chromium: CVE-2026-9950 Insufficient validation of untrusted input in iOS | UNKNOWN | — | 10%ile | Microsoft | 2026-05-12 |
| CVE-2026-9951 | Chromium: CVE-2026-9951 Use after free in UI | UNKNOWN | — | 13%ile | Microsoft | 2026-05-12 |
| CVE-2026-9952 | Chromium: CVE-2026-9952 Use after free in WebAudio | UNKNOWN | — | 32%ile | Microsoft | 2026-05-12 |
| CVE-2026-9953 | Chromium: CVE-2026-9953 Out of bounds read in ANGLE | UNKNOWN | — | 18%ile | Microsoft | 2026-05-12 |
| CVE-2026-9954 | Chromium: CVE-2026-9954 Use after free in TabStrip | UNKNOWN | — | 12%ile | Microsoft | 2026-05-12 |
| CVE-2026-9955 | Chromium: CVE-2026-9955 Inappropriate implementation in iOS | UNKNOWN | — | 9%ile | Microsoft | 2026-05-12 |
| CVE-2026-9956 | Chromium: CVE-2026-9956 Use after free in iOS | UNKNOWN | — | 17%ile | Microsoft | 2026-05-12 |
| CVE-2026-9957 | Chromium: CVE-2026-9957 Use after free in PDF | UNKNOWN | — | 20%ile | Microsoft | 2026-05-12 |
| CVE-2026-9958 | Chromium: CVE-2026-9958 Use after free in PDFium | UNKNOWN | — | 13%ile | Microsoft | 2026-05-12 |
| CVE-2026-9959 | Chromium: CVE-2026-9959 Race in WebRTC | UNKNOWN | — | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-9960 | Chromium: CVE-2026-9960 Integer overflow in PDFium | UNKNOWN | — | 14%ile | Microsoft | 2026-05-12 |
| CVE-2026-9961 | Chromium: CVE-2026-9961 Use after free in SurfaceCapture | UNKNOWN | — | 16%ile | Microsoft | 2026-05-12 |
| CVE-2026-9962 | Chromium: CVE-2026-9962 Use after free in WebRTC | UNKNOWN | — | 29%ile | Microsoft | 2026-05-12 |
| CVE-2026-9963 | Chromium: CVE-2026-9963 Uninitialized Use in iOS | UNKNOWN | — | 20%ile | Microsoft | 2026-05-12 |
| CVE-2026-9964 | Chromium: CVE-2026-9964 Use after free in Bluetooth | UNKNOWN | — | 14%ile | Microsoft | 2026-05-12 |
| CVE-2026-9965 | Chromium: CVE-2026-9965 Out of bounds write in ANGLE | UNKNOWN | — | 17%ile | Microsoft | 2026-05-12 |
| CVE-2026-9966 | Chromium: CVE-2026-9966 Integer overflow in XML | UNKNOWN | — | 12%ile | Microsoft | 2026-05-12 |
| CVE-2026-9967 | Chromium: CVE-2026-9967 Out of bounds write in GPU | UNKNOWN | — | 16%ile | Microsoft | 2026-05-12 |
| CVE-2026-9968 | Chromium: CVE-2026-9968 Integer overflow in V8 | UNKNOWN | — | 21%ile | Microsoft | 2026-05-12 |
| CVE-2026-9969 | Chromium: CVE-2026-9969 Insufficient validation of untrusted input in ANGLE | UNKNOWN | — | 24%ile | Microsoft | 2026-05-12 |
| CVE-2026-9970 | Chromium: CVE-2026-9970 Use after free in WebGL | UNKNOWN | — | 12%ile | Microsoft | 2026-05-12 |
| CVE-2026-9971 | Chromium: CVE-2026-9971 Inappropriate implementation in iOS | UNKNOWN | — | 5%ile | Microsoft | 2026-05-12 |
| CVE-2026-9972 | Chromium: CVE-2026-9972 Uninitialized Use in Gamepad | UNKNOWN | — | 13%ile | Microsoft | 2026-05-12 |
| CVE-2026-9973 | Chromium: CVE-2026-9973 Out of bounds write in V8 | UNKNOWN | — | 24%ile | Microsoft | 2026-05-12 |
| CVE-2026-9974 | Chromium: CVE-2026-9974 Out of bounds write in GPU | UNKNOWN | — | 11%ile | Microsoft | 2026-05-12 |
| CVE-2026-9975 | Chromium: CVE-2026-9975 Out of bounds read and write in ANGLE | UNKNOWN | — | 13%ile | Microsoft | 2026-05-12 |
| CVE-2026-9976 | Chromium: CVE-2026-9976 Inappropriate implementation in USB | UNKNOWN | — | 22%ile | Microsoft | 2026-05-12 |
| CVE-2026-9977 | Chromium: CVE-2026-9977 Insufficient validation of untrusted input in WebShare | UNKNOWN | — | 8%ile | Microsoft | 2026-05-12 |
| CVE-2026-9978 | Chromium: CVE-2026-9978 Use after free in Glic | UNKNOWN | — | 14%ile | Microsoft | 2026-05-12 |
| CVE-2026-9979 | Chromium: CVE-2026-9979 Insufficient validation of untrusted input in Input | UNKNOWN | — | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-9980 | Chromium: CVE-2026-9980 Insufficient validation of untrusted input in Printing | UNKNOWN | — | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-9981 | Chromium: CVE-2026-9981 Inappropriate implementation in Skia | UNKNOWN | — | 10%ile | Microsoft | 2026-05-12 |
| CVE-2026-9982 | Chromium: CVE-2026-9982 Insufficient validation of untrusted input in ANGLE | UNKNOWN | — | 9%ile | Microsoft | 2026-05-12 |
| CVE-2026-9983 | Chromium: CVE-2026-9983 Type Confusion in Skia | UNKNOWN | — | 19%ile | Microsoft | 2026-05-12 |
| CVE-2026-9984 | Chromium: CVE-2026-9984 Use after free in UI | UNKNOWN | — | 14%ile | Microsoft | 2026-05-12 |
| CVE-2026-9985 | Chromium: CVE-2026-9985 Insufficient validation of untrusted input in Media | UNKNOWN | — | 8%ile | Microsoft | 2026-05-12 |
| CVE-2026-9986 | Chromium: CVE-2026-9986 Insufficient validation of untrusted input in OptimizationGuide | UNKNOWN | — | 4%ile | Microsoft | 2026-05-12 |
| CVE-2026-9988 | Chromium: CVE-2026-9988 Use after free in WebRTC | UNKNOWN | — | 7%ile | Microsoft | 2026-05-12 |
| CVE-2026-9989 | Chromium: CVE-2026-9989 Inappropriate implementation in Media | UNKNOWN | — | 1%ile | Microsoft | 2026-05-12 |
| CVE-2026-9990 | Chromium: CVE-2026-9990 Use after free in WebAppInstalls | UNKNOWN | — | 7%ile | Microsoft | 2026-05-12 |
| CVE-2026-9991 | Chromium: CVE-2026-9991 Inappropriate implementation in Media | UNKNOWN | — | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-9992 | Chromium: CVE-2026-9992 Use after free in Network | UNKNOWN | — | 14%ile | Microsoft | 2026-05-12 |
| CVE-2026-9993 | Chromium: CVE-2026-9993 Use after free in Views | UNKNOWN | — | 6%ile | Microsoft | 2026-05-12 |
| CVE-2026-9994 | Chromium: CVE-2026-9994 Use after free in Core | UNKNOWN | — | 8%ile | Microsoft | 2026-05-12 |
| CVE-2026-9995 | Chromium: CVE-2026-9995 Use after free in WebXR | UNKNOWN | — | 22%ile | Microsoft | 2026-05-12 |
| CVE-2026-9996 | Chromium: CVE-2026-9996 Out of bounds read in WebRTC | UNKNOWN | — | 9%ile | Microsoft | 2026-05-12 |
| CVE-2026-9997 | Chromium: CVE-2026-9997 Use after free in Input | UNKNOWN | — | 7%ile | Microsoft | 2026-05-12 |
| CVE-2026-9998 | Chromium: CVE-2026-9998 Integer overflow in Skia | UNKNOWN | — | 8%ile | Microsoft | 2026-05-12 |
| CVE-2026-9999 | Chromium: CVE-2026-9999 Inappropriate implementation in ANGLE | UNKNOWN | — | 16%ile | Microsoft | 2026-05-12 |
| CVE-2026-31769 | gpib: fix use-after-free in IO ioctl handlers | UNKNOWN | — | 3%ile | Microsoft | 2026-05-12 |
| CVE-2026-43021 | Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails | UNKNOWN | — | 1%ile | Microsoft | 2026-05-12 |
| CVE-2026-43045 | mshv: Fix error handling in mshv_region_pin | UNKNOWN | — | 1%ile | Microsoft | 2026-05-12 |
| CVE-2026-41673 | xmldom: Denial of service via uncontrolled recursion in XML serialization | UNKNOWN | — | 51%ile | Microsoft | 2026-05-12 |
| CVE-2026-43443 | ASoC: amd: acp-mach-common: Add missing error check for clock acquisition | UNKNOWN | — | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-43421 | usb: gadget: f_ncm: Fix net_device lifecycle with device_move | UNKNOWN | — | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-42256 | net-imap: Denial of service via high iteration count for `SCRAM-*` authentication | UNKNOWN | — | 23%ile | Microsoft | 2026-05-12 |
| CVE-2026-42246 | net-imap vulnerable to STARTTLS stripping via invalid response timing | UNKNOWN | — | 24%ile | Microsoft | 2026-05-12 |
| CVE-2026-6210 | Type confusion and heap-buffer-overflow in Qt SVG marker handling causing application crash | UNKNOWN | — | 20%ile | Microsoft | 2026-05-12 |
| CVE-2026-44662 | rust-openssl: Heap buffer overflow when encrypting with AES key-wrap-with-padding | UNKNOWN | — | 7%ile | Microsoft | 2026-05-12 |
| CVE-2025-14575 | Uncontrolled Search Path Element in Qt Network OpenSSL TLS backend allows rogue CA certificate loading | UNKNOWN | — | 0%ile | Microsoft | 2026-05-12 |
| CVE-2026-44844 | eml_parser: Recursion DoS via nested message/rfc822 attachments | UNKNOWN | — | 34%ile | Microsoft | 2026-05-12 |
| CVE-2026-41672 | xmldom: XML node injection through unvalidated comment serialization | UNKNOWN | — | 40%ile | Microsoft | 2026-05-12 |
| CVE-2026-41674 | xmldom: XML injection through unvalidated DocumentType serialization | UNKNOWN | — | 47%ile | Microsoft | 2026-05-12 |
| CVE-2026-41675 | xmldom: XML node injection through unvalidated processing instruction serialization | UNKNOWN | — | 41%ile | Microsoft | 2026-05-12 |
| CVE-2026-43317 | most: core: fix leak on early registration failure | UNKNOWN | — | 2%ile | Microsoft | 2026-05-12 |
| CVE-2026-42257 | net-imap: Command Injection via "raw" arguments to multiple commands | UNKNOWN | — | 37%ile | Microsoft | 2026-05-12 |
| CVE-2026-42258 | net-imap: Command Injection via unvalidated Symbol inputs | UNKNOWN | — | 56%ile | Microsoft | 2026-05-12 |
| CVE-2026-8295 | Integer overflow in simdjson | UNKNOWN | — | 20%ile | Microsoft | 2026-05-12 |
| CVE-2026-41184 | ServiceAccount token disclosure via install-cni container logs | UNKNOWN | — | 43%ile | Microsoft | 2026-05-12 |
| CVE-2025-65041 | Microsoft Partner Center Elevation of Privilege Vulnerability | CRITICAL | 10.0 | 56%ile | Microsoft | 2025-12-09 |
| CVE-2025-65037 | Azure Container Apps Remote Code Execution Vulnerability | CRITICAL | 10.0 | 62%ile | Microsoft | 2025-12-09 |
| CVE-2025-64663 | Custom Question Answering Elevation of Privilege Vulnerability | CRITICAL | 9.9 | 54%ile | Microsoft | 2025-12-09 |
| CVE-2025-40242 | gfs2: Fix unlikely race in gdlm_put_lock | CRITICAL | 9.8 | 4%ile | Microsoft | 2025-12-09 |
| CVE-2025-40251 | devlink: rate: Unset parent pointer in devl_rate_nodes_destroy | CRITICAL | 9.8 | 5%ile | Microsoft | 2025-12-09 |
| CVE-2025-40262 | Input: imx_sc_key - fix memory corruption on unload | CRITICAL | 9.8 | 4%ile | Microsoft | 2025-12-09 |
| CVE-2025-68615 | Net-SNMP snmptrapd crash | CRITICAL | 9.8 | 99%ile | Microsoft | 2025-12-09 |
| CVE-2025-40244 | hfsplus: fix KMSAN uninit-value issue in __hfsplus_ext_cache_extent() | CRITICAL | 9.8 | 4%ile | Microsoft | 2025-12-09 |
| CVE-2025-34468 | libcoap Stack-Based Buffer Overflow in Address Resolution DoS or Potential RCE | CRITICAL | 9.8 | 55%ile | Microsoft | 2025-12-09 |
| CVE-2025-68206 | netfilter: nft_ct: add seqadj extension for natted connections | CRITICAL | 9.1 | 54%ile | Microsoft | 2025-12-09 |
| CVE-2025-68196 | drm/amd/display: Cache streams targeting link when performing LT automation | HIGH | 8.8 | 8%ile | Microsoft | 2025-12-09 |
| CVE-2025-62456 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | HIGH | 8.8 | 66%ile | Microsoft | 2025-12-09 |
| CVE-2025-62549 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | HIGH | 8.8 | 71%ile | Microsoft | 2025-12-09 |
| CVE-2025-62550 | Azure Monitor Agent Remote Code Execution Vulnerability | HIGH | 8.8 | 55%ile | Microsoft | 2025-12-09 |
| CVE-2025-64672 | Microsoft SharePoint Server Spoofing Vulnerability | HIGH | 8.8 | 63%ile | Microsoft | 2025-12-09 |
| CVE-2025-64678 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | HIGH | 8.8 | 64%ile | Microsoft | 2025-12-09 |
| CVE-2025-40240 | sctp: avoid NULL dereference when chunk data buffer is missing | HIGH | 8.6 | 49%ile | Microsoft | 2025-12-09 |
| CVE-2025-40362 | ceph: fix multifs mds auth caps issue | HIGH | 8.4 | 6%ile | Microsoft | 2025-12-09 |
| CVE-2025-62554 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 8.4 | 38%ile | Microsoft | 2025-12-09 |
| CVE-2025-62557 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 8.4 | 37%ile | Microsoft | 2025-12-09 |
| CVE-2025-64671 | GitHub Copilot for Jetbrains Remote Code Execution Vulnerability | HIGH | 8.4 | 30%ile | Microsoft | 2025-12-09 |
| CVE-2025-58098 | Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... | HIGH | 8.3 | 73%ile | Microsoft | 2025-12-09 |
| CVE-2025-64675 | Azure Cosmos DB Spoofing Vulnerability | HIGH | 8.3 | 54%ile | Microsoft | 2025-12-09 |
| CVE-2025-14523 | Libsoup: libsoup: duplicate host header handling causes host-parsing discrepancy (first- vs last-value wins) | HIGH | 8.2 | 46%ile | Microsoft | 2025-12-09 |
| CVE-2025-2296 | Un-verified kernel bypass Secure Boot mechanism in direct boot mode | HIGH | 8.2 | 56%ile | Microsoft | 2025-12-09 |
| CVE-2025-64677 | Office Out-of-Box Experience Spoofing Vulnerability | HIGH | 8.2 | 42%ile | Microsoft | 2025-12-09 |
| CVE-2023-54207 | HID: uclogic: Correct devm device reference for hidinput input_dev name | HIGH | 7.8 | 5%ile | Microsoft | 2025-12-09 |
| CVE-2025-40272 | mm/secretmem: fix use-after-free race in fault handler | HIGH | 7.8 | 4%ile | Microsoft | 2025-12-09 |
| CVE-2025-40319 | bpf: Sync pending IRQ work before freeing ring buffer | HIGH | 7.8 | 4%ile | Microsoft | 2025-12-09 |
| CVE-2025-68188 | tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() | HIGH | 7.8 | 13%ile | Microsoft | 2025-12-09 |
| CVE-2025-68190 | drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked() | HIGH | 7.8 | 10%ile | Microsoft | 2025-12-09 |
| CVE-2025-68227 | mptcp: Fix proto fallback detection with BPF | HIGH | 7.8 | 12%ile | Microsoft | 2025-12-09 |
| CVE-2025-68237 | mtdchar: fix integer overflow in read/write ioctls | HIGH | 7.8 | 8%ile | Microsoft | 2025-12-09 |
| CVE-2025-68285 | libceph: fix potential use-after-free in have_mon_and_osd_map() | HIGH | 7.8 | 48%ile | Microsoft | 2025-12-09 |
| CVE-2025-68303 | platform/x86: intel: punit_ipc: fix memory corruption | HIGH | 7.8 | 4%ile | Microsoft | 2025-12-09 |
| CVE-2025-68315 | f2fs: fix to detect potential corrupted nid in free_nid_list | HIGH | 7.8 | 37%ile | Microsoft | 2025-12-09 |
| CVE-2025-68973 | In GnuPG through 2.4.8, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leadi | HIGH | 7.8 | 4%ile | Microsoft | 2025-12-09 |
| CVE-2025-66476 | Vim for Windows Uncontrolled Search Path Element Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2025-12-09 |
| CVE-2025-40223 | most: usb: Fix use-after-free in hdm_disconnect | HIGH | 7.8 | 10%ile | Microsoft | 2025-12-09 |
| CVE-2025-40314 | usb: cdns3: gadget: Use-after-free during failed initialization and exit of cdnsp gadget | HIGH | 7.8 | 9%ile | Microsoft | 2025-12-09 |
| CVE-2025-68290 | most: usb: fix double free on late probe failure | HIGH | 7.8 | 10%ile | Microsoft | 2025-12-09 |
| CVE-2025-68346 | ALSA: dice: fix buffer overflow in detect_stream_formats() | HIGH | 7.8 | 14%ile | Microsoft | 2025-12-09 |
| CVE-2025-68311 | tty: serial: ip22zilog: Use platform device for probing | HIGH | 7.8 | 13%ile | Microsoft | 2025-12-09 |
| CVE-2025-48637 | In multiple functions of mem_protect.c, there is a possible out of bounds write due to an integer overflow. This could l | HIGH | 7.8 | 1%ile | Microsoft | 2025-12-09 |
| CVE-2025-62454 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 83%ile | Microsoft | 2025-12-09 |
| CVE-2025-62457 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 34%ile | Microsoft | 2025-12-09 |
| CVE-2025-62458 | Win32k Elevation of Privilege Vulnerability | HIGH | 7.8 | 51%ile | Microsoft | 2025-12-09 |
| CVE-2025-62466 | Windows Client-Side Caching Elevation of Privilege Vulnerability | HIGH | 7.8 | 34%ile | Microsoft | 2025-12-09 |
| CVE-2025-62470 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 43%ile | Microsoft | 2025-12-09 |
| CVE-2025-62472 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | HIGH | 7.8 | 82%ile | Microsoft | 2025-12-09 |
| CVE-2025-62561 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 44%ile | Microsoft | 2025-12-09 |
| CVE-2025-62562 | Microsoft Outlook Remote Code Execution Vulnerability | HIGH | 7.8 | 57%ile | Microsoft | 2025-12-09 |
| CVE-2025-62563 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 49%ile | Microsoft | 2025-12-09 |
| CVE-2025-62564 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 44%ile | Microsoft | 2025-12-09 |
| CVE-2025-62571 | Windows Installer Elevation of Privilege Vulnerability | HIGH | 7.8 | 34%ile | Microsoft | 2025-12-09 |
| CVE-2025-62572 | Application Information Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 34%ile | Microsoft | 2025-12-09 |
| CVE-2025-64673 | Windows Storage VSP Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 30%ile | Microsoft | 2025-12-09 |
| CVE-2025-59516 | Windows Storage VSP Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 84%ile | Microsoft | 2025-12-09 |
| CVE-2025-59517 | Windows Storage VSP Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 84%ile | Microsoft | 2025-12-09 |
| CVE-2025-62455 | Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability | HIGH | 7.8 | 41%ile | Microsoft | 2025-12-09 |
| CVE-2025-62461 | Windows Projected File System Elevation of Privilege Vulnerability | HIGH | 7.8 | 34%ile | Microsoft | 2025-12-09 |
| CVE-2025-62462 | Windows Projected File System Elevation of Privilege Vulnerability | HIGH | 7.8 | 34%ile | Microsoft | 2025-12-09 |
| CVE-2025-62464 | Windows Projected File System Elevation of Privilege Vulnerability | HIGH | 7.8 | 34%ile | Microsoft | 2025-12-09 |
| CVE-2025-55233 | Windows Projected File System Elevation of Privilege Vulnerability | HIGH | 7.8 | 34%ile | Microsoft | 2025-12-09 |
| CVE-2025-62467 | Windows Projected File System Elevation of Privilege Vulnerability | HIGH | 7.8 | 34%ile | Microsoft | 2025-12-09 |
| CVE-2025-62474 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | HIGH | 7.8 | 30%ile | Microsoft | 2025-12-09 |
| CVE-2025-62552 | Microsoft Access Remote Code Execution Vulnerability | HIGH | 7.8 | 48%ile | Microsoft | 2025-12-09 |
| CVE-2025-62553 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 52%ile | Microsoft | 2025-12-09 |
| CVE-2025-62556 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 46%ile | Microsoft | 2025-12-09 |
| CVE-2025-62558 | Microsoft Word Remote Code Execution Vulnerability | HIGH | 7.8 | 50%ile | Microsoft | 2025-12-09 |
| CVE-2025-62559 | Microsoft Word Remote Code Execution Vulnerability | HIGH | 7.8 | 50%ile | Microsoft | 2025-12-09 |
| CVE-2025-62560 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 44%ile | Microsoft | 2025-12-09 |
| CVE-2025-64661 | Windows Shell Elevation of Privilege Vulnerability | HIGH | 7.8 | 16%ile | Microsoft | 2025-12-09 |
| CVE-2025-64679 | Windows DWM Core Library Elevation of Privilege Vulnerability | HIGH | 7.8 | 39%ile | Microsoft | 2025-12-09 |
| CVE-2025-64680 | Windows DWM Core Library Elevation of Privilege Vulnerability | HIGH | 7.8 | 31%ile | Microsoft | 2025-12-09 |
| CVE-2025-54100 | PowerShell Remote Code Execution Vulnerability | HIGH | 7.8 | 83%ile | Microsoft | 2025-12-09 |
| CVE-2025-62221 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 85%ile | Microsoft | 2025-12-09 |
| CVE-2025-64669 | Windows Admin Center Elevation of Privilege Vulnerability | HIGH | 7.8 | 41%ile | Microsoft | 2025-12-09 |
| CVE-2025-12819 | Untrusted search path in auth_query connection in PgBouncer | HIGH | 7.5 | 30%ile | Microsoft | 2025-12-09 |
| CVE-2025-55753 | Apache HTTP Server: mod_md (ACME), unintended retry intervals | HIGH | 7.5 | 39%ile | Microsoft | 2025-12-09 |
| CVE-2025-59775 | Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF | HIGH | 7.5 | 57%ile | Microsoft | 2025-12-09 |
| CVE-2025-61729 | Excessive resource consumption when printing error string for host certificate validation in crypto/x509 | HIGH | 7.5 | 42%ile | Microsoft | 2025-12-09 |
| CVE-2025-68156 | Expr has Denial of Service via Unbounded Recursion in Builtin Functions | HIGH | 7.5 | 36%ile | Microsoft | 2025-12-09 |
| CVE-2025-68265 | nvme: fix admin request_queue lifetime | HIGH | 7.5 | 5%ile | Microsoft | 2025-12-09 |
| CVE-2025-68255 | staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing | HIGH | 7.5 | 31%ile | Microsoft | 2025-12-09 |
| CVE-2025-68256 | staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser | HIGH | 7.5 | 20%ile | Microsoft | 2025-12-09 |
| CVE-2025-15284 | arrayLimit bypass in bracket notation allows DoS via memory exhaustion | HIGH | 7.5 | 39%ile | Microsoft | 2025-12-09 |
| CVE-2025-64658 | Windows File Explorer Elevation of Privilege Vulnerability | HIGH | 7.5 | 24%ile | Microsoft | 2025-12-09 |
| CVE-2025-64666 | Microsoft Exchange Server Elevation of Privilege Vulnerability | HIGH | 7.5 | 63%ile | Microsoft | 2025-12-09 |
| CVE-2025-40277 | drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE | HIGH | 7.3 | 15%ile | Microsoft | 2025-12-09 |
| CVE-2025-40345 | usb: storage: sddr55: Reject out-of-bound new_pba | HIGH | 7.3 | 10%ile | Microsoft | 2025-12-09 |
| CVE-2025-68261 | ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() | HIGH | 7.3 | 46%ile | Microsoft | 2025-12-09 |
| CVE-2025-62565 | Windows File Explorer Elevation of Privilege Vulnerability | HIGH | 7.3 | 47%ile | Microsoft | 2025-12-09 |
| CVE-2025-64676 | Microsoft Purview eDiscovery Remote Code Execution Vulnerability | HIGH | 7.2 | 63%ile | Microsoft | 2025-12-09 |
| CVE-2025-40266 | KVM: arm64: Check the untrusted offset in FF-A memory share | HIGH | 7.1 | 4%ile | Microsoft | 2025-12-09 |
| CVE-2025-40283 | Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF | HIGH | 7.1 | 4%ile | Microsoft | 2025-12-09 |
| CVE-2025-40301 | Bluetooth: hci_event: validate skb length for unknown CC opcode | HIGH | 7.1 | 19%ile | Microsoft | 2025-12-09 |
| CVE-2025-40322 | fbdev: bitblit: bound-check glyph index in bit_putcs* | HIGH | 7.1 | 4%ile | Microsoft | 2025-12-09 |
| CVE-2025-66293 | LIBPNG has an out-of-bounds read in png_image_read_composite | HIGH | 7.1 | 29%ile | Microsoft | 2025-12-09 |
| CVE-2025-68174 | amd/amdkfd: enhance kfd process check in switch partition | HIGH | 7.1 | 8%ile | Microsoft | 2025-12-09 |
| CVE-2025-68231 | mm/mempool: fix poisoning order>0 pages with HIGHMEM | HIGH | 7.1 | 8%ile | Microsoft | 2025-12-09 |
| CVE-2025-68235 | nouveau/firmware: Add missing kfree() of nvkm_falcon_fw::boot | HIGH | 7.1 | 8%ile | Microsoft | 2025-12-09 |
| CVE-2025-68254 | staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing | HIGH | 7.1 | 20%ile | Microsoft | 2025-12-09 |
| CVE-2025-68283 | libceph: replace BUG_ON with bounds check for map->max_osd | HIGH | 7.1 | 45%ile | Microsoft | 2025-12-09 |
| CVE-2025-68301 | net: atlantic: fix fragment overflow handling in RX path | HIGH | 7.1 | 40%ile | Microsoft | 2025-12-09 |
| CVE-2025-68331 | usb: uas: fix urb unmapping issue when the uas device is remove during ongoing data transfer | HIGH | 7.1 | 11%ile | Microsoft | 2025-12-09 |
| CVE-2025-40233 | ocfs2: clear extent cache after moving/defragmenting extents | HIGH | 7.1 | 5%ile | Microsoft | 2025-12-09 |
| CVE-2025-68266 | bfs: Reconstruct file type when loading from disk | HIGH | 7.1 | 12%ile | Microsoft | 2025-12-09 |
| CVE-2023-53749 | x86: fix clear_user_rep_good() exception handling annotation | HIGH | 7.1 | — | Microsoft | 2025-12-09 |
| CVE-2025-40312 | jfs: Verify inode mode when loading from disk | HIGH | 7.1 | 10%ile | Microsoft | 2025-12-09 |
| CVE-2025-68224 | scsi: core: Fix a regression triggered by scsi_host_busy() | HIGH | 7.1 | — | Microsoft | 2025-12-09 |
| CVE-2025-62570 | Windows Camera Frame Server Monitor Information Disclosure Vulnerability | HIGH | 7.1 | 35%ile | Microsoft | 2025-12-09 |
| CVE-2025-13699 | MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability | HIGH | 7.0 | 44%ile | Microsoft | 2025-12-09 |
| CVE-2025-40258 | mptcp: fix race condition in mptcp_schedule_work() | HIGH | 7.0 | 40%ile | Microsoft | 2025-12-09 |
| CVE-2025-40273 | NFSD: free copynotify stateid in nfs4_free_ol_stateid() | HIGH | 7.0 | 37%ile | Microsoft | 2025-12-09 |
| CVE-2025-40280 | tipc: Fix use-after-free in tipc_mon_reinit_self(). | HIGH | 7.0 | 4%ile | Microsoft | 2025-12-09 |
| CVE-2025-40281 | sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto | HIGH | 7.0 | 12%ile | Microsoft | 2025-12-09 |
| CVE-2025-40292 | virtio-net: fix received length check in big packets | HIGH | 7.0 | 6%ile | Microsoft | 2025-12-09 |
| CVE-2025-40297 | net: bridge: fix use-after-free due to MST port state bypass | HIGH | 7.0 | 5%ile | Microsoft | 2025-12-09 |
| CVE-2025-40305 | 9p/trans_fd: p9_fd_request: kick rx thread if EPOLLIN | HIGH | 7.0 | 7%ile | Microsoft | 2025-12-09 |
| CVE-2025-40328 | smb: client: fix potential UAF in smb2_close_cached_fid() | HIGH | 7.0 | 40%ile | Microsoft | 2025-12-09 |
| CVE-2025-40329 | drm/sched: Fix deadlock in drm_sched_entity_kill_jobs_cb | HIGH | 7.0 | 13%ile | Microsoft | 2025-12-09 |
| CVE-2025-40331 | sctp: Prevent TOCTOU out-of-bounds write | HIGH | 7.0 | 8%ile | Microsoft | 2025-12-09 |
| CVE-2025-40340 | drm/xe: Fix oops in xe_gem_fault when running core_hotunplug test. | HIGH | 7.0 | 12%ile | Microsoft | 2025-12-09 |
| CVE-2025-40342 | nvme-fc: use lock accessing port_state and rport state | HIGH | 7.0 | 30%ile | Microsoft | 2025-12-09 |
| CVE-2025-40343 | nvmet-fc: avoid scheduling association deletion twice | HIGH | 7.0 | 51%ile | Microsoft | 2025-12-09 |
| CVE-2025-68284 | libceph: prevent potential out-of-bounds writes in handle_auth_session_key() | HIGH | 7.0 | 48%ile | Microsoft | 2025-12-09 |
| CVE-2025-68297 | ceph: fix crash in process_v2_sparse_read() for encrypted directories | HIGH | 7.0 | 11%ile | Microsoft | 2025-12-09 |
| CVE-2025-68304 | Bluetooth: hci_core: lookup hci_conn on RX path on protocol side | HIGH | 7.0 | 14%ile | Microsoft | 2025-12-09 |
| CVE-2025-68307 | can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs | HIGH | 7.0 | 9%ile | Microsoft | 2025-12-09 |
| CVE-2025-68340 | team: Move team device type change at the end of team_port_add | HIGH | 7.0 | 4%ile | Microsoft | 2025-12-09 |
| CVE-2025-68729 | wifi: ath12k: Fix MSDU buffer types handling in RX error path | HIGH | 7.0 | 12%ile | Microsoft | 2025-12-09 |
| CVE-2025-40336 | drm/gpusvm: fix hmm_pfn_to_map_order() usage | HIGH | 7.0 | 6%ile | Microsoft | 2025-12-09 |
| CVE-2025-40338 | ASoC: Intel: avs: Do not share the name pointer between components | HIGH | 7.0 | 15%ile | Microsoft | 2025-12-09 |
| CVE-2025-68287 | usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths | HIGH | 7.0 | 14%ile | Microsoft | 2025-12-09 |
| CVE-2025-68367 | macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse | HIGH | 7.0 | 10%ile | Microsoft | 2025-12-09 |
| CVE-2025-68380 | wifi: ath11k: fix peer HE MCS assignment | HIGH | 7.0 | 10%ile | Microsoft | 2025-12-09 |
| CVE-2025-62469 | Microsoft Brokering File System Elevation of Privilege Vulnerability | HIGH | 7.0 | 16%ile | Microsoft | 2025-12-09 |
| CVE-2025-62573 | DirectX Graphics Kernel Elevation of Privilege Vulnerability | HIGH | 7.0 | 16%ile | Microsoft | 2025-12-09 |
| CVE-2025-62555 | Microsoft Word Remote Code Execution Vulnerability | HIGH | 7.0 | 44%ile | Microsoft | 2025-12-09 |
| CVE-2025-62569 | Microsoft Brokering File System Elevation of Privilege Vulnerability | HIGH | 7.0 | 26%ile | Microsoft | 2025-12-09 |
| CVE-2025-37731 | Elasticsearch Improper Authentication | MEDIUM | 6.8 | 9%ile | Microsoft | 2025-12-09 |
| CVE-2025-40354 | drm/amd/display: increase max link count and fix link->enc NULL pointer access | MEDIUM | 6.8 | 4%ile | Microsoft | 2025-12-09 |
| CVE-2025-40261 | nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() | MEDIUM | 6.6 | 47%ile | Microsoft | 2025-12-09 |
| CVE-2025-68365 | fs/ntfs3: Initialize allocated memory before use | MEDIUM | 6.6 | 36%ile | Microsoft | 2025-12-09 |
| CVE-2025-40243 | hfs: fix KMSAN uninit-value issue in hfs_find_set_zero_bits() | MEDIUM | 6.6 | 4%ile | Microsoft | 2025-12-09 |
| CVE-2025-14178 | Heap buffer overflow in array_merge() | MEDIUM | 6.5 | 40%ile | Microsoft | 2025-12-09 |
| CVE-2025-14512 | Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow | MEDIUM | 6.5 | 48%ile | Microsoft | 2025-12-09 |
| CVE-2025-40321 | wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode | MEDIUM | 6.5 | 10%ile | Microsoft | 2025-12-09 |
| CVE-2025-61727 | Improper application of excluded DNS name constraints when verifying wildcard names in crypto/x509 | MEDIUM | 6.5 | 21%ile | Microsoft | 2025-12-09 |
| CVE-2025-65082 | Apache HTTP Server: CGI environment variable override | MEDIUM | 6.5 | 57%ile | Microsoft | 2025-12-09 |
| CVE-2025-68384 | Elasticsearch Allocation of Resources Without Limits or Throttling | MEDIUM | 6.5 | 25%ile | Microsoft | 2025-12-09 |
| CVE-2025-62473 | Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability | MEDIUM | 6.5 | 65%ile | Microsoft | 2025-12-09 |
| CVE-2025-64670 | Windows DirectX Information Disclosure Vulnerability | MEDIUM | 6.5 | 63%ile | Microsoft | 2025-12-09 |
| CVE-2025-62463 | DirectX Graphics Kernel Denial of Service Vulnerability | MEDIUM | 6.5 | 40%ile | Microsoft | 2025-12-09 |
| CVE-2025-62465 | DirectX Graphics Kernel Denial of Service Vulnerability | MEDIUM | 6.5 | 40%ile | Microsoft | 2025-12-09 |
| CVE-2025-68376 | coresight: ETR: Fix ETR buffer use-after-free issue | MEDIUM | 6.4 | 12%ile | Microsoft | 2025-12-09 |
| CVE-2025-40248 | vsock: Ignore signal/timeout on connect() if already established | MEDIUM | 6.3 | 5%ile | Microsoft | 2025-12-09 |
| CVE-2025-40257 | mptcp: fix a race in mptcp_pm_del_add_timer() | MEDIUM | 6.3 | 40%ile | Microsoft | 2025-12-09 |
| CVE-2025-68146 | filelock has TOCTOU race condition that allows symlink attacks during lock file creation | MEDIUM | 6.3 | 10%ile | Microsoft | 2025-12-09 |
| CVE-2025-68263 | ksmbd: ipc: fix use-after-free in ipc_msg_send_request | MEDIUM | 6.3 | 39%ile | Microsoft | 2025-12-09 |
| CVE-2025-40259 | scsi: sg: Do not sleep in atomic context | MEDIUM | 6.2 | 10%ile | Microsoft | 2025-12-09 |
| CVE-2025-68175 | media: nxp: imx8-isi: Fix streaming cleanup on release | MEDIUM | 6.2 | 8%ile | Microsoft | 2025-12-09 |
| CVE-2025-68223 | drm/radeon: delete radeon_fence_process in is_signaled, no deadlock | MEDIUM | 6.2 | 2%ile | Microsoft | 2025-12-09 |
| CVE-2025-68236 | scsi: ufs: ufs-qcom: Fix UFS OCP issue during UFS power down (PC=3) | MEDIUM | 6.2 | 12%ile | Microsoft | 2025-12-09 |
| CVE-2025-68239 | binfmt_misc: restore write access before closing files opened by open_exec() | MEDIUM | 6.2 | 9%ile | Microsoft | 2025-12-09 |
| CVE-2025-68259 | KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced | MEDIUM | 6.2 | 9%ile | Microsoft | 2025-12-09 |
| CVE-2025-68233 | drm/tegra: Add call to put_pid() | MEDIUM | 6.2 | 8%ile | Microsoft | 2025-12-09 |
| CVE-2025-68204 | pmdomain: arm: scmi: Fix genpd leak on provider registration failure | MEDIUM | 6.2 | 11%ile | Microsoft | 2025-12-09 |
| CVE-2025-68220 | net: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on error | MEDIUM | 6.2 | 11%ile | Microsoft | 2025-12-09 |
| CVE-2025-68222 | pinctrl: s32cc: fix uninitialized memory in s32_pinctrl_desc | MEDIUM | 6.2 | 11%ile | Microsoft | 2025-12-09 |
| CVE-2025-68281 | ASoC: SDCA: bug fix while parsing mipi-sdca-control-cn-list | MEDIUM | 6.2 | 7%ile | Microsoft | 2025-12-09 |
| CVE-2025-68217 | Input: pegasus-notetaker - fix potential out-of-bounds access | MEDIUM | 6.2 | 12%ile | Microsoft | 2025-12-09 |
| CVE-2025-14104 | Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames | MEDIUM | 6.1 | 10%ile | Microsoft | 2025-12-09 |
| CVE-2025-40252 | net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() | MEDIUM | 6.1 | 49%ile | Microsoft | 2025-12-09 |
| CVE-2025-40355 | sysfs: check visibility before changing group attribute ownership | MEDIUM | 6.1 | 13%ile | Microsoft | 2025-12-09 |
| CVE-2025-68736 | landlock: Fix handling of disconnected directories | MEDIUM | 6.1 | 4%ile | Microsoft | 2025-12-09 |
| CVE-2025-68328 | firmware: stratix10-svc: fix bug in saving controller data | MEDIUM | 6.1 | 9%ile | Microsoft | 2025-12-09 |
| CVE-2025-14180 | NULL Pointer Dereference in PDO quoting | MEDIUM | 5.9 | 53%ile | Microsoft | 2025-12-09 |
| CVE-2025-62408 | c-ares has a Use After Free vulnerability when connection is cleaned up after error | MEDIUM | 5.9 | 37%ile | Microsoft | 2025-12-09 |
| CVE-2025-65637 | A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer() to log a single-line pa | MEDIUM | 5.9 | 50%ile | Microsoft | 2025-12-09 |
| CVE-2025-68219 | cifs: fix memory leak in smb3_fs_context_parse_param error path | MEDIUM | 5.9 | 10%ile | Microsoft | 2025-12-09 |
| CVE-2025-68230 | drm/amdgpu: fix gpu page fault after hibernation on PF passthrough | MEDIUM | 5.9 | 12%ile | Microsoft | 2025-12-09 |
| CVE-2025-68972 | In GnuPG through 2.4.8, if a signed message has \f at the end of a plaintext line, an adversary can construct a modified | MEDIUM | 5.9 | 1%ile | Microsoft | 2025-12-09 |
| CVE-2025-13281 | Portworx Half-Blind SSRF in kube-controller-manager | MEDIUM | 5.8 | 33%ile | Microsoft | 2025-12-09 |
| CVE-2025-68342 | can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data | MEDIUM | 5.8 | 8%ile | Microsoft | 2025-12-09 |
| CVE-2025-14087 | Glib: glib: buffer underflow in gvariant parser leads to heap corruption | MEDIUM | 5.6 | 58%ile | Microsoft | 2025-12-09 |
| CVE-2025-13837 | Out-of-memory when loading Plist | MEDIUM | 5.5 | 15%ile | Microsoft | 2025-12-09 |
| CVE-2025-40215 | xfrm: delete x->tunnel as we delete x | MEDIUM | 5.5 | 4%ile | Microsoft | 2025-12-09 |
| CVE-2025-40219 | PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV | MEDIUM | 5.5 | 13%ile | Microsoft | 2025-12-09 |
| CVE-2025-40220 | fuse: fix livelock in synchronous file put from fuseblk workers | MEDIUM | 5.5 | 9%ile | Microsoft | 2025-12-09 |
| CVE-2025-40247 | drm/msm: Fix pgtable prealloc error path | MEDIUM | 5.5 | 8%ile | Microsoft | 2025-12-09 |
| CVE-2025-40250 | net/mlx5: Clean up only new IRQ glue on request_irq() failure | MEDIUM | 5.5 | 5%ile | Microsoft | 2025-12-09 |
| CVE-2025-40253 | s390/ctcm: Fix double-kfree | MEDIUM | 5.5 | 23%ile | Microsoft | 2025-12-09 |
| CVE-2025-40254 | net: openvswitch: remove never-working support for setting nsh fields | MEDIUM | 5.5 | 15%ile | Microsoft | 2025-12-09 |
| CVE-2025-40263 | Input: cros_ec_keyb - fix an invalid memory access | MEDIUM | 5.5 | 9%ile | Microsoft | 2025-12-09 |
| CVE-2025-40264 | be2net: pass wrb_params in case of OS2BMC | MEDIUM | 5.5 | 12%ile | Microsoft | 2025-12-09 |
| CVE-2025-40268 | cifs: client: fix memory leak in smb3_fs_context_parse_param | MEDIUM | 5.5 | 8%ile | Microsoft | 2025-12-09 |
| CVE-2025-40275 | ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd | MEDIUM | 5.5 | 9%ile | Microsoft | 2025-12-09 |
| CVE-2025-40279 | net: sched: act_connmark: initialize struct tc_ife to fix kernel leak | MEDIUM | 5.5 | 9%ile | Microsoft | 2025-12-09 |
| CVE-2025-40282 | Bluetooth: 6lowpan: reset link-local header on ipv6 recv path | MEDIUM | 5.5 | 20%ile | Microsoft | 2025-12-09 |
| CVE-2025-40284 | Bluetooth: MGMT: cancel mesh send timer when hdev removed | MEDIUM | 5.5 | 3%ile | Microsoft | 2025-12-09 |
| CVE-2025-40289 | drm/amdgpu: hide VRAM sysfs attributes on GPUs without VRAM | MEDIUM | 5.5 | 12%ile | Microsoft | 2025-12-09 |
| CVE-2025-40294 | Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() | MEDIUM | 5.5 | 10%ile | Microsoft | 2025-12-09 |
| CVE-2025-40303 | btrfs: ensure no dirty metadata is written back for an fs with errors | MEDIUM | 5.5 | 3%ile | Microsoft | 2025-12-09 |
| CVE-2025-40304 | fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds | MEDIUM | 5.5 | 4%ile | Microsoft | 2025-12-09 |
| CVE-2025-40308 | Bluetooth: bcsp: receive data only if registered | MEDIUM | 5.5 | 9%ile | Microsoft | 2025-12-09 |
| CVE-2025-40310 | amd/amdkfd: resolve a race in amdgpu_amdkfd_device_fini_sw | MEDIUM | 5.5 | 8%ile | Microsoft | 2025-12-09 |
| CVE-2025-40311 | accel/habanalabs: support mapping cb with vmalloc-backed coherent memory | MEDIUM | 5.5 | 8%ile | Microsoft | 2025-12-09 |
| CVE-2025-40323 | fbcon: Set fb_display[i]->mode to NULL when the mode is released | MEDIUM | 5.5 | 3%ile | Microsoft | 2025-12-09 |
| CVE-2025-40324 | NFSD: Fix crash in nfsd4_read_release() | MEDIUM | 5.5 | 40%ile | Microsoft | 2025-12-09 |
| CVE-2025-40332 | drm/amdkfd: Fix mmap write lock not release | MEDIUM | 5.5 | 12%ile | Microsoft | 2025-12-09 |
| CVE-2025-40333 | f2fs: fix infinite loop in __insert_extent_tree() | MEDIUM | 5.5 | 13%ile | Microsoft | 2025-12-09 |
| CVE-2025-40335 | drm/amdgpu: validate userq input args | MEDIUM | 5.5 | 11%ile | Microsoft | 2025-12-09 |
| CVE-2025-40337 | net: stmmac: Correctly handle Rx checksum offload errors | MEDIUM | 5.5 | 42%ile | Microsoft | 2025-12-09 |
| CVE-2025-40339 | drm/amdgpu: fix nullptr err of vm_handle_moved | MEDIUM | 5.5 | 13%ile | Microsoft | 2025-12-09 |
| CVE-2025-40341 | futex: Don't leak robust_list pointer on exec race | MEDIUM | 5.5 | 14%ile | Microsoft | 2025-12-09 |
| CVE-2025-59529 | simple protocol server ignores accepts unlimited connections and logs failures without limit | MEDIUM | 5.5 | 13%ile | Microsoft | 2025-12-09 |
| CVE-2025-68198 | crash: fix crashkernel resource shrink | MEDIUM | 5.5 | 10%ile | Microsoft | 2025-12-09 |
| CVE-2025-68201 | drm/amdgpu: remove two invalid BUG_ON()s | MEDIUM | 5.5 | 13%ile | Microsoft | 2025-12-09 |
| CVE-2025-68203 | drm/amdgpu: fix lock warning in amdgpu_userq_fence_driver_process | MEDIUM | 5.5 | — | Microsoft | 2025-12-09 |
| CVE-2025-68209 | mlx5: Fix default values in create CQ | MEDIUM | 5.5 | 13%ile | Microsoft | 2025-12-09 |
| CVE-2025-68211 | ksm: use range-walk function to jump over holes in scan_get_next_rmap_item | MEDIUM | 5.5 | 4%ile | Microsoft | 2025-12-09 |
| CVE-2025-68229 | scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() | MEDIUM | 5.5 | 10%ile | Microsoft | 2025-12-09 |
| CVE-2025-68251 | erofs: avoid infinite loops due to corrupted subpage compact indexes | MEDIUM | 5.5 | 12%ile | Microsoft | 2025-12-09 |
| CVE-2025-68257 | comedi: check device's attached status in compat ioctls | MEDIUM | 5.5 | 10%ile | Microsoft | 2025-12-09 |
| CVE-2025-68258 | comedi: multiq3: sanitize config options in multiq3_attach() | MEDIUM | 5.5 | 10%ile | Microsoft | 2025-12-09 |
| CVE-2025-68264 | ext4: refresh inline data size before write operations | MEDIUM | 5.5 | 13%ile | Microsoft | 2025-12-09 |
| CVE-2025-68282 | usb: gadget: udc: fix use-after-free in usb_gadget_state_work | MEDIUM | 5.5 | 10%ile | Microsoft | 2025-12-09 |
| CVE-2025-68286 | drm/amd/display: Check NULL before accessing | MEDIUM | 5.5 | 5%ile | Microsoft | 2025-12-09 |
| CVE-2025-68288 | usb: storage: Fix memory leak in USB bulk transport | MEDIUM | 5.5 | 10%ile | Microsoft | 2025-12-09 |
| CVE-2025-68291 | mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fastclose(). | MEDIUM | 5.5 | 12%ile | Microsoft | 2025-12-09 |
| CVE-2025-68295 | smb: client: fix memory leak in cifs_construct_tcon() | MEDIUM | 5.5 | 11%ile | Microsoft | 2025-12-09 |
| CVE-2025-68296 | drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup | MEDIUM | 5.5 | 10%ile | Microsoft | 2025-12-09 |
| CVE-2025-68302 | net: sxgbe: fix potential NULL dereference in sxgbe_rx() | MEDIUM | 5.5 | 40%ile | Microsoft | 2025-12-09 |
| CVE-2025-68308 | can: kvaser_usb: leaf: Fix potential infinite loop in command parsers | MEDIUM | 5.5 | 9%ile | Microsoft | 2025-12-09 |
| CVE-2025-68309 | PCI/AER: Fix NULL pointer access by aer_info | MEDIUM | 5.5 | 7%ile | Microsoft | 2025-12-09 |
| CVE-2025-68313 | x86/CPU/AMD: Add RDSEED fix for Zen5 | MEDIUM | 5.5 | 3%ile | Microsoft | 2025-12-09 |
| CVE-2025-68317 | io_uring/zctx: check chained notif contexts | MEDIUM | 5.5 | 4%ile | Microsoft | 2025-12-09 |
| CVE-2025-68322 | parisc: Avoid crash due to unaligned access in unwinder | MEDIUM | 5.5 | 8%ile | Microsoft | 2025-12-09 |
| CVE-2025-68324 | scsi: imm: Fix use-after-free bug caused by unfinished delayed work | MEDIUM | 5.5 | 14%ile | Microsoft | 2025-12-09 |
| CVE-2025-68332 | comedi: c6xdigio: Fix invalid PNP driver unregistration | MEDIUM | 5.5 | 10%ile | Microsoft | 2025-12-09 |
| CVE-2025-68334 | platform/x86/amd/pmc: Add support for Van Gogh SoC | MEDIUM | 5.5 | 8%ile | Microsoft | 2025-12-09 |
| CVE-2025-68335 | comedi: pcl818: fix null-ptr-deref in pcl818_ai_cancel() | MEDIUM | 5.5 | 9%ile | Microsoft | 2025-12-09 |
| CVE-2025-68336 | locking/spinlock/debug: Fix data-race in do_raw_write_lock | MEDIUM | 5.5 | 40%ile | Microsoft | 2025-12-09 |
| CVE-2025-68337 | jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted | MEDIUM | 5.5 | 46%ile | Microsoft | 2025-12-09 |
| CVE-2025-68338 | net: dsa: microchip: Don't free uninitialized ksz_irq | MEDIUM | 5.5 | 8%ile | Microsoft | 2025-12-09 |
| CVE-2025-68343 | can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header | MEDIUM | 5.5 | 8%ile | Microsoft | 2025-12-09 |
| CVE-2025-68344 | ALSA: wavefront: Fix integer overflow in sample size validation | MEDIUM | 5.5 | 12%ile | Microsoft | 2025-12-09 |
| CVE-2025-68345 | ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() | MEDIUM | 5.5 | 14%ile | Microsoft | 2025-12-09 |
| CVE-2025-68347 | ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events | MEDIUM | 5.5 | 7%ile | Microsoft | 2025-12-09 |
| CVE-2025-68354 | regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex | MEDIUM | 5.5 | 12%ile | Microsoft | 2025-12-09 |
| CVE-2025-68356 | gfs2: Prevent recursive memory reclaim | MEDIUM | 5.5 | 13%ile | Microsoft | 2025-12-09 |
| CVE-2025-68357 | iomap: allocate s_dio_done_wq for async reads as well | MEDIUM | 5.5 | 14%ile | Microsoft | 2025-12-09 |
| CVE-2025-68358 | btrfs: fix racy bitfield write in btrfs_clear_space_info_full() | MEDIUM | 5.5 | 8%ile | Microsoft | 2025-12-09 |
| CVE-2025-68362 | wifi: rtl818x: rtl8187: Fix potential buffer underflow in rtl8187_rx_cb() | MEDIUM | 5.5 | 12%ile | Microsoft | 2025-12-09 |
| CVE-2025-68363 | bpf: Check skb->transport_header is set in bpf_skb_check_mtu | MEDIUM | 5.5 | 12%ile | Microsoft | 2025-12-09 |
| CVE-2025-68364 | ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent() | MEDIUM | 5.5 | 13%ile | Microsoft | 2025-12-09 |
| CVE-2025-68366 | nbd: defer config unlock in nbd_genl_connect | MEDIUM | 5.5 | 10%ile | Microsoft | 2025-12-09 |
| CVE-2025-68371 | scsi: smartpqi: Fix device resources accessed after device removal | MEDIUM | 5.5 | 10%ile | Microsoft | 2025-12-09 |
| CVE-2025-68372 | nbd: defer config put in recv_work | MEDIUM | 5.5 | 10%ile | Microsoft | 2025-12-09 |
| CVE-2025-68374 | md: fix rcu protection in md_wakeup_thread | MEDIUM | 5.5 | 12%ile | Microsoft | 2025-12-09 |
| CVE-2025-68378 | bpf: Fix stackmap overflow check in __bpf_get_stackid() | MEDIUM | 5.5 | 13%ile | Microsoft | 2025-12-09 |
| CVE-2025-68724 | crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id | MEDIUM | 5.5 | 3%ile | Microsoft | 2025-12-09 |
| CVE-2025-68725 | bpf: Do not let BPF test infra emit invalid GSO types to stack | MEDIUM | 5.5 | 8%ile | Microsoft | 2025-12-09 |
| CVE-2025-68732 | gpu: host1x: Fix race in syncpt alloc/free | MEDIUM | 5.5 | 9%ile | Microsoft | 2025-12-09 |
| CVE-2025-68733 | smack: fix bug: unprivileged task can create labels | MEDIUM | 5.5 | 10%ile | Microsoft | 2025-12-09 |
| CVE-2025-68740 | ima: Handle error code returned by ima_filter_rule_match() | MEDIUM | 5.5 | 11%ile | Microsoft | 2025-12-09 |
| CVE-2025-68741 | scsi: qla2xxx: Fix improper freeing of purex item | MEDIUM | 5.5 | 37%ile | Microsoft | 2025-12-09 |
| CVE-2025-68742 | bpf: Fix invalid prog->stats access when update_effective_progs fails | MEDIUM | 5.5 | 12%ile | Microsoft | 2025-12-09 |
| CVE-2025-68744 | bpf: Free special fields when update [lru_,]percpu_hash maps | MEDIUM | 5.5 | 8%ile | Microsoft | 2025-12-09 |
| CVE-2025-68745 | scsi: qla2xxx: Clear cmds after chip reset | MEDIUM | 5.5 | 43%ile | Microsoft | 2025-12-09 |
| CVE-2025-68746 | spi: tegra210-quad: Fix timeout handling | MEDIUM | 5.5 | 4%ile | Microsoft | 2025-12-09 |
| CVE-2025-40245 | nios2: ensure that memblock.current_limit is set when setting pfn limits | MEDIUM | 5.5 | 4%ile | Microsoft | 2025-12-09 |
| CVE-2025-40287 | exfat: fix improper check of dentry.stream.valid_size | MEDIUM | 5.5 | 8%ile | Microsoft | 2025-12-09 |
| CVE-2025-40285 | smb/server: fix possible refcount leak in smb2_sess_setup() | MEDIUM | 5.5 | 35%ile | Microsoft | 2025-12-09 |
| CVE-2025-40307 | exfat: validate cluster allocation bits of the allocation bitmap | MEDIUM | 5.5 | 4%ile | Microsoft | 2025-12-09 |
| CVE-2025-40334 | drm/amdgpu: validate userq buffer virtual address and size | MEDIUM | 5.5 | 6%ile | Microsoft | 2025-12-09 |
| CVE-2025-68330 | iio: accel: bmc150: Fix irq assumption regression | MEDIUM | 5.5 | 9%ile | Microsoft | 2025-12-09 |
| CVE-2025-40217 | pidfs: validate extensible ioctls | MEDIUM | 5.5 | 7%ile | Microsoft | 2025-12-09 |
| CVE-2025-40278 | net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak | MEDIUM | 5.5 | 12%ile | Microsoft | 2025-12-09 |
| CVE-2025-40286 | smb/server: fix possible memory leak in smb2_read() | MEDIUM | 5.5 | 8%ile | Microsoft | 2025-12-09 |
| CVE-2025-40309 | Bluetooth: SCO: Fix UAF on sco_conn_free | MEDIUM | 5.5 | 16%ile | Microsoft | 2025-12-09 |
| CVE-2025-40293 | iommufd: Don't overflow during division for dirty tracking | MEDIUM | 5.5 | 10%ile | Microsoft | 2025-12-09 |
| CVE-2025-40306 | orangefs: fix xattr related buffer overflow... | MEDIUM | 5.5 | 5%ile | Microsoft | 2025-12-09 |
| CVE-2025-40315 | usb: gadget: f_fs: Fix epfile null pointer access after ep enable. | MEDIUM | 5.5 | 10%ile | Microsoft | 2025-12-09 |
| CVE-2025-40317 | regmap: slimbus: fix bus_context pointer in regmap init calls | MEDIUM | 5.5 | 4%ile | Microsoft | 2025-12-09 |
| CVE-2025-40313 | ntfs3: pretend $Extend records as regular files | MEDIUM | 5.5 | 9%ile | Microsoft | 2025-12-09 |
| CVE-2025-68318 | clk: thead: th1520-ap: set all AXI clocks to CLK_IS_CRITICAL | MEDIUM | 5.5 | 11%ile | Microsoft | 2025-12-09 |
| CVE-2025-68289 | usb: gadget: f_eem: Fix memory leak in eem_unwrap | MEDIUM | 5.5 | 10%ile | Microsoft | 2025-12-09 |
| CVE-2025-68333 | sched_ext: Fix possible deadlock in the deferred_irq_workfn() | MEDIUM | 5.5 | 1%ile | Microsoft | 2025-12-09 |
| CVE-2023-54161 | af_unix: Fix null-ptr-deref in unix_stream_sendpage(). | MEDIUM | 5.5 | — | Microsoft | 2025-12-09 |
| CVE-2023-54082 | af_unix: Fix null-ptr-deref in unix_stream_sendpage(). | MEDIUM | 5.5 | — | Microsoft | 2025-12-09 |
| CVE-2023-54061 | x86: fix clear_user_rep_good() exception handling annotation | MEDIUM | 5.5 | — | Microsoft | 2025-12-09 |
| CVE-2025-62468 | Windows Defender Firewall Service Information Disclosure Vulnerability | MEDIUM | 5.5 | 44%ile | Microsoft | 2025-12-09 |
| CVE-2025-66200 | Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo | MEDIUM | 5.4 | 51%ile | Microsoft | 2025-12-09 |
| CVE-2025-10543 | In Eclipse Paho Go MQTT v3.1 library (paho.mqtt.golang) versions <=1.5.0 UTF-8 encoded strings, passed into the library, | MEDIUM | 5.3 | 16%ile | Microsoft | 2025-12-09 |
| CVE-2025-12084 | Quadratic complexity in node ID cache clearing | MEDIUM | 5.3 | 56%ile | Microsoft | 2025-12-09 |
| CVE-2025-67897 | In Sequoia before 2.1.0, aes_key_unwrap panics if passed a ciphertext that is too short. A remote attacker can take adva | MEDIUM | 5.3 | 29%ile | Microsoft | 2025-12-09 |
| CVE-2025-64667 | Microsoft Exchange Server Spoofing Vulnerability | MEDIUM | 5.3 | 56%ile | Microsoft | 2025-12-09 |
| CVE-2025-62567 | Windows Hyper-V Denial of Service Vulnerability | MEDIUM | 5.3 | 64%ile | Microsoft | 2025-12-09 |
| CVE-2025-68390 | Elasticsearch Allocation of Resources Without Limits or Throttling | MEDIUM | 4.9 | 32%ile | Microsoft | 2025-12-09 |
| CVE-2025-67873 | Capstone doesn't check Skipdata length, leading to cs_insn.bytes heap buffer overflow | MEDIUM | 4.8 | 14%ile | Microsoft | 2025-12-09 |
| CVE-2025-68114 | Capstone doesn't check vsnprintf return in SStream_concat, allows stack buffer underflow and overflow | MEDIUM | 4.8 | 10%ile | Microsoft | 2025-12-09 |
| CVE-2025-40288 | drm/amdgpu: Fix NULL pointer dereference in VRAM logic for APU devices | MEDIUM | 4.7 | 8%ile | Microsoft | 2025-12-09 |
| CVE-2025-68214 | timers: Fix NULL function pointer race in timer_shutdown_sync() | MEDIUM | 4.7 | 2%ile | Microsoft | 2025-12-09 |
| CVE-2025-68327 | usb: renesas_usbhs: Fix synchronous external abort on unbind | MEDIUM | 4.7 | 9%ile | Microsoft | 2025-12-09 |
| CVE-2025-68339 | atm/fore200e: Fix possible data race in fore200e_open() | MEDIUM | 4.7 | 9%ile | Microsoft | 2025-12-09 |
| CVE-2025-68349 | NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid | MEDIUM | 4.7 | 54%ile | Microsoft | 2025-12-09 |
| CVE-2025-68728 | ntfs3: fix uninit memory after failed mi_read in mi_format_new | MEDIUM | 4.7 | 9%ile | Microsoft | 2025-12-09 |
| CVE-2025-69277 | libsodium before ad3004e, in atypical use cases involving certain custom cryptography or untrusted data to crypto_core_e | MEDIUM | 4.5 | 8%ile | Microsoft | 2025-12-09 |
| CVE-2025-68379 | RDMA/rxe: Fix null deref on srq->rq.queue after resize failure | MEDIUM | 4.4 | 4%ile | Microsoft | 2025-12-09 |
| CVE-2025-40269 | ALSA: usb-audio: Fix potential overflow of PCM transfer buffer | MEDIUM | 4.3 | 7%ile | Microsoft | 2025-12-09 |
| CVE-2025-62223 | Microsoft Edge (Chromium-based) for Mac Spoofing Vulnerability | MEDIUM | 4.3 | 38%ile | Microsoft | 2025-12-09 |
| CVE-2025-40218 | mm/damon/vaddr: do not repeat pte_offset_map_lock() until success | MEDIUM | 4.1 | 8%ile | Microsoft | 2025-12-09 |
| CVE-2025-40353 | arm64: mte: Do not warn if the page is already tagged in copy_highpage() | MEDIUM | 4.0 | 10%ile | Microsoft | 2025-12-09 |
| CVE-2025-14177 | Information Leak of Memory in getimagesize | LOW | 3.7 | 43%ile | Microsoft | 2025-12-09 |
| CVE-2025-68727 | ntfs3: Fix uninit buffer allocated by __getname() | LOW | 3.3 | 9%ile | Microsoft | 2025-12-09 |
| CVE-2025-65046 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | LOW | 3.1 | 20%ile | Microsoft | 2025-12-09 |
| CVE-2025-11961 | OOBR and OOBW in pcap_ether_aton() in libpcap | LOW | 1.9 | 2%ile | Microsoft | 2025-12-09 |
| CVE-2025-11964 | OOBW in utf_16le_to_utf_8_truncated() in libpcap | LOW | 1.9 | 2%ile | Microsoft | 2025-12-09 |
| CVE-2025-12385 | Improper validation of <img> tag size in Text component parser | UNKNOWN | — | 24%ile | Microsoft | 2025-12-09 |
| CVE-2025-13836 | Excessive read buffering DoS in http.client | UNKNOWN | — | 78%ile | Microsoft | 2025-12-09 |
| CVE-2025-13912 | Potential non-constant time compiled code with Clang LLVM | UNKNOWN | — | 4%ile | Microsoft | 2025-12-09 |
| CVE-2025-61594 | URI Credential Leakage Bypass over CVE-2025-27221 | UNKNOWN | — | 47%ile | Microsoft | 2025-12-09 |
| CVE-2025-66418 | urllib3 allows an unbounded number of links in the decompression chain | UNKNOWN | — | 52%ile | Microsoft | 2025-12-09 |
| CVE-2025-66471 | urllib3 Streaming API improperly handles highly compressed data | UNKNOWN | — | 52%ile | Microsoft | 2025-12-09 |
| CVE-2025-68476 | KEDA has Arbitrary File Read via Insufficient Path Validation in HashiCorp Vault Service Account Credential | UNKNOWN | — | 50%ile | Microsoft | 2025-12-09 |
| CVE-2025-34297 | KissFFT Integer Overflow Heap Buffer Overflow via kiss_fft_alloc | UNKNOWN | — | 7%ile | Microsoft | 2025-12-09 |
| CVE-2025-68193 | drm/xe/guc: Add devm release action to safely tear down CT | UNKNOWN | — | 13%ile | Microsoft | 2025-12-09 |
| CVE-2025-68161 | Apache Log4j Core: Missing TLS hostname verification in Socket appender | UNKNOWN | — | 56%ile | Microsoft | 2025-12-09 |
| CVE-2025-14373 | Chromium: CVE-2025-14373 Inappropriate implementation in Toolbar | UNKNOWN | — | 20%ile | Microsoft | 2025-12-09 |
| CVE-2025-13640 | Chromium: CVE-2025-13640 Inappropriate implementation in Passwords | UNKNOWN | — | 8%ile | Microsoft | 2025-12-09 |
| CVE-2025-13639 | Chromium: CVE-2025-13639 Inappropriate implementation in WebRTC | UNKNOWN | — | 24%ile | Microsoft | 2025-12-09 |
| CVE-2025-13638 | Chromium: CVE-2025-13638 Use after free in Media Stream | UNKNOWN | — | 25%ile | Microsoft | 2025-12-09 |
| CVE-2025-13637 | Chromium: CVE-2025-13637 Inappropriate implementation in Downloads | UNKNOWN | — | 16%ile | Microsoft | 2025-12-09 |
| CVE-2025-13636 | Chromium: CVE-2025-13636 Inappropriate implementation in Split View | UNKNOWN | — | 15%ile | Microsoft | 2025-12-09 |
| CVE-2025-13635 | Chromium: CVE-2025-13635 Inappropriate implementation in Downloads | UNKNOWN | — | 8%ile | Microsoft | 2025-12-09 |
| CVE-2025-13720 | Chromium: CVE-2025-13720 Bad cast in Loader | UNKNOWN | — | 26%ile | Microsoft | 2025-12-09 |
| CVE-2025-13721 | Chromium: CVE-2025-13721 Race in v8 | UNKNOWN | — | 18%ile | Microsoft | 2025-12-09 |
| CVE-2025-13634 | Chromium: CVE-2025-13634 Inappropriate implementation in Downloads | UNKNOWN | — | 6%ile | Microsoft | 2025-12-09 |
| CVE-2025-13633 | Chromium: CVE-2025-13633 Use after free in Digital Credentials | UNKNOWN | — | 43%ile | Microsoft | 2025-12-09 |
| CVE-2025-13632 | Chromium: CVE-2025-13632 Inappropriate implementation in DevTools | UNKNOWN | — | 16%ile | Microsoft | 2025-12-09 |
| CVE-2025-13631 | Chromium: CVE-2025-13631 Inappropriate implementation in Google Updater | UNKNOWN | — | 36%ile | Microsoft | 2025-12-09 |
| CVE-2025-13630 | Chromium: CVE-2025-13630 Type Confusion in V8 | UNKNOWN | — | 40%ile | Microsoft | 2025-12-09 |
| CVE-2025-14174 | Chromium: CVE-2025-14174 Out of bounds memory access in ANGLE | UNKNOWN | — | 99%ile | Microsoft | 2025-12-09 |
| CVE-2025-14766 | Chromium: CVE-2025-14766 Use after free in WebGPU | UNKNOWN | — | 88%ile | Microsoft | 2025-12-09 |
| CVE-2025-14372 | Chromium: CVE-2025-14372 Use after free in Password Manager | UNKNOWN | — | 16%ile | Microsoft | 2025-12-09 |
| CVE-2025-14765 | Chromium: CVE-2025-14765 Out of bounds read and write in V8 | UNKNOWN | — | 87%ile | Microsoft | 2025-12-09 |
| CVE-2025-49752 | Azure Bastion Elevation of Privilege Vulnerability | CRITICAL | 10.0 | 60%ile | Microsoft | 2025-11-11 |
| CVE-2025-12727 | Chromium: CVE-2025-12727 Inappropriate implementation in V8 | CRITICAL | 9.8 | 20%ile | Microsoft | 2025-11-11 |
| CVE-2025-59245 | Microsoft SharePoint Online Elevation of Privilege Vulnerability | CRITICAL | 9.8 | 66%ile | Microsoft | 2025-11-11 |
| CVE-2025-60724 | Windows GDI+ Remote Code Execution Vulnerability | CRITICAL | 9.8 | 94%ile | Microsoft | 2025-11-11 |
| CVE-2025-64657 | Azure Application Gateway Elevation of Privilege Vulnerability | CRITICAL | 9.8 | 52%ile | Microsoft | 2025-11-11 |
| CVE-2025-40172 | accel/qaic: Treat remaining == 0 as error in find_and_map_user_pages() | CRITICAL | 9.8 | 4%ile | Microsoft | 2025-11-11 |
| CVE-2025-40165 | media: nxp: imx8-isi: m2m: Fix streaming cleanup on release | CRITICAL | 9.8 | 4%ile | Microsoft | 2025-11-11 |
| CVE-2025-60876 | BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/que | CRITICAL | 9.4 | 24%ile | Microsoft | 2025-11-11 |
| CVE-2025-64656 | Azure Application Gateway Elevation of Privilege Vulnerability | CRITICAL | 9.4 | 52%ile | Microsoft | 2025-11-11 |
| CVE-2025-12970 | CVE-2025-12970 | HIGH | 8.8 | 65%ile | Microsoft | 2025-11-11 |
| CVE-2025-13226 | Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corru | HIGH | 8.8 | 17%ile | Microsoft | 2025-11-11 |
| CVE-2025-2486 | UEFI Shell accessible in AAVMF with Secure Boot enabled on Ubuntu | HIGH | 8.8 | 3%ile | Microsoft | 2025-11-11 |
| CVE-2025-59499 | Microsoft SQL Server Elevation of Privilege Vulnerability | HIGH | 8.8 | 68%ile | Microsoft | 2025-11-11 |
| CVE-2025-62220 | Windows Subsystem for Linux GUI Remote Code Execution Vulnerability | HIGH | 8.8 | 54%ile | Microsoft | 2025-11-11 |
| CVE-2025-62222 | Agentic AI and Visual Studio Code Remote Code Execution Vulnerability | HIGH | 8.8 | 57%ile | Microsoft | 2025-11-11 |
| CVE-2025-64655 | Dynamics OmniChannel SDK Storage Containers Elevation of Privilege Vulnerability | HIGH | 8.8 | 44%ile | Microsoft | 2025-11-11 |
| CVE-2025-62210 | Dynamics 365 Field Service (online) Spoofing Vulnerability | HIGH | 8.7 | 51%ile | Microsoft | 2025-11-11 |
| CVE-2025-62211 | Dynamics 365 Field Service (online) Spoofing Vulnerability | HIGH | 8.7 | 51%ile | Microsoft | 2025-11-11 |
| CVE-2025-12816 | CVE-2025-12816 | HIGH | 8.6 | 48%ile | Microsoft | 2025-11-11 |
| CVE-2025-13227 | Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corru | HIGH | 8.6 | 17%ile | Microsoft | 2025-11-11 |
| CVE-2025-13230 | Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corru | HIGH | 8.6 | 17%ile | Microsoft | 2025-11-11 |
| CVE-2025-62207 | Azure Monitor Elevation of Privilege Vulnerability | HIGH | 8.6 | 55%ile | Microsoft | 2025-11-11 |
| CVE-2025-40135 | ipv6: use RCU in ip6_xmit() | HIGH | 8.4 | 54%ile | Microsoft | 2025-11-11 |
| CVE-2025-40139 | smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set(). | HIGH | 8.4 | 6%ile | Microsoft | 2025-11-11 |
| CVE-2025-40176 | tls: wait for pending async decryptions if tls_strp_msg_hold fails | HIGH | 8.4 | 42%ile | Microsoft | 2025-11-11 |
| CVE-2025-12977 | CVE-2025-12977 | HIGH | 8.3 | 55%ile | Microsoft | 2025-11-11 |
| CVE-2025-62459 | Microsoft Defender Portal Spoofing Vulnerability | HIGH | 8.3 | 26%ile | Microsoft | 2025-11-11 |
| CVE-2025-11931 | Integer Underflow Leads to Out-of-Bounds Access in XChaCha20-Poly1305 Decrypt | HIGH | 8.2 | 28%ile | Microsoft | 2025-11-11 |
| CVE-2025-40170 | net: use dst_dev_rcu() in sk_setup_caps() | HIGH | 8.1 | 9%ile | Microsoft | 2025-11-11 |
| CVE-2025-30398 | Nuance PowerScribe 360 Information Disclosure Vulnerability | HIGH | 8.1 | 58%ile | Microsoft | 2025-11-11 |
| CVE-2025-60715 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | HIGH | 8.0 | 58%ile | Microsoft | 2025-11-11 |
| CVE-2025-62204 | Microsoft SharePoint Remote Code Execution Vulnerability | HIGH | 8.0 | 83%ile | Microsoft | 2025-11-11 |
| CVE-2025-62452 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | HIGH | 8.0 | 58%ile | Microsoft | 2025-11-11 |
| CVE-2025-64660 | GitHub Copilot and Visual Studio Code Remote Code Execution Vulnerability | HIGH | 8.0 | 49%ile | Microsoft | 2025-11-11 |
| CVE-2025-40149 | tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). | HIGH | 7.8 | 7%ile | Microsoft | 2025-11-11 |
| CVE-2025-40198 | ext4: avoid potential buffer over-read in parse_apply_sb_mount_options() | HIGH | 7.8 | 6%ile | Microsoft | 2025-11-11 |
| CVE-2025-40205 | btrfs: avoid potential out-of-bounds in btrfs_encode_fh() | HIGH | 7.8 | 4%ile | Microsoft | 2025-11-11 |
| CVE-2025-40211 | ACPI: video: Fix use-after-free in acpi_video_switch_brightness() | HIGH | 7.8 | 11%ile | Microsoft | 2025-11-11 |
| CVE-2025-59505 | Windows Smart Card Reader Elevation of Privilege Vulnerability | HIGH | 7.8 | 37%ile | Microsoft | 2025-11-11 |
| CVE-2025-59511 | Windows WLAN Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 34%ile | Microsoft | 2025-11-11 |
| CVE-2025-59512 | Customer Experience Improvement Program (CEIP) Elevation of Privilege Vulnerability | HIGH | 7.8 | 88%ile | Microsoft | 2025-11-11 |
| CVE-2025-59514 | Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2025-11-11 |
| CVE-2025-60703 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | HIGH | 7.8 | 37%ile | Microsoft | 2025-11-11 |
| CVE-2025-60705 | Windows Client-Side Caching Elevation of Privilege Vulnerability | HIGH | 7.8 | 85%ile | Microsoft | 2025-11-11 |
| CVE-2025-60707 | Multimedia Class Scheduler Service (MMCSS) Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 45%ile | Microsoft | 2025-11-11 |
| CVE-2025-60709 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 45%ile | Microsoft | 2025-11-11 |
| CVE-2025-60710 | Host Process for Windows Tasks Elevation of Privilege Vulnerability | HIGH | 7.8 | 92%ile | Microsoft | 2025-11-11 |
| CVE-2025-60713 | Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability | HIGH | 7.8 | 37%ile | Microsoft | 2025-11-11 |
| CVE-2025-60714 | Windows OLE Remote Code Execution Vulnerability | HIGH | 7.8 | 50%ile | Microsoft | 2025-11-11 |
| CVE-2025-60718 | Windows Administrator Protection Elevation of Privilege Vulnerability | HIGH | 7.8 | 38%ile | Microsoft | 2025-11-11 |
| CVE-2025-60720 | Windows Transport Driver Interface (TDI) Translation Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 37%ile | Microsoft | 2025-11-11 |
| CVE-2025-60721 | Windows Administrator Protection Elevation of Privilege Vulnerability | HIGH | 7.8 | 32%ile | Microsoft | 2025-11-11 |
| CVE-2025-60727 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 52%ile | Microsoft | 2025-11-11 |
| CVE-2025-62199 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 7.8 | 57%ile | Microsoft | 2025-11-11 |
| CVE-2025-62200 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 44%ile | Microsoft | 2025-11-11 |
| CVE-2025-62201 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 44%ile | Microsoft | 2025-11-11 |
| CVE-2025-62203 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 46%ile | Microsoft | 2025-11-11 |
| CVE-2025-62205 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 7.8 | 39%ile | Microsoft | 2025-11-11 |
| CVE-2025-62216 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 7.8 | 39%ile | Microsoft | 2025-11-11 |
| CVE-2025-13601 | Glib: integer overflow in in g_escape_uri_string() | HIGH | 7.7 | 28%ile | Microsoft | 2025-11-11 |
| CVE-2025-12638 | Path Traversal Vulnerability in keras-team/keras via Tar Archive Extraction in keras.utils.get_file() | HIGH | 7.6 | 54%ile | Microsoft | 2025-11-11 |
| CVE-2024-47866 | RGW DoS attack with empty HTTP header in S3 object copy | HIGH | 7.5 | 41%ile | Microsoft | 2025-11-11 |
| CVE-2025-11230 | Denial of service vulnerability in HAProxy mjson library | HIGH | 7.5 | 55%ile | Microsoft | 2025-11-11 |
| CVE-2025-12863 | Libxml2: namespace use-after-free in xmlsettreedoc() function of libxml2 | HIGH | 7.5 | — | Microsoft | 2025-11-11 |
| CVE-2025-47913 | Potential denial of service in golang.org/x/crypto/ssh/agent | HIGH | 7.5 | 52%ile | Microsoft | 2025-11-11 |
| CVE-2025-59777 | NULL pointer dereference vulnerability exists in GNU libmicrohttpd v1.0.2 and earlier. The vulnerability was fixed in co | HIGH | 7.5 | 42%ile | Microsoft | 2025-11-11 |
| CVE-2025-62689 | NULL pointer dereference vulnerability exists in GNU libmicrohttpd v1.0.2 and earlier. The vulnerability was fixed in co | HIGH | 7.5 | 42%ile | Microsoft | 2025-11-11 |
| CVE-2025-60704 | Windows Kerberos Elevation of Privilege Vulnerability | HIGH | 7.5 | 47%ile | Microsoft | 2025-11-11 |
| CVE-2025-11935 | Forward Secrecy Violation in WolfSSL TLS 1.3 | HIGH | 7.5 | 14%ile | Microsoft | 2025-11-11 |
| CVE-2024-25621 | containerd affected by a local privilege escalation via wide permissions on CRI directory | HIGH | 7.3 | 6%ile | Microsoft | 2025-11-11 |
| CVE-2025-52881 | runc: LSM labels can be bypassed with malicious config using dummy procfs files | HIGH | 7.3 | 57%ile | Microsoft | 2025-11-11 |
| CVE-2025-59504 | Azure Monitor Agent Remote Code Execution Vulnerability | HIGH | 7.3 | 29%ile | Microsoft | 2025-11-11 |
| CVE-2025-40158 | ipv6: use RCU in ip6_output() | HIGH | 7.1 | 46%ile | Microsoft | 2025-11-11 |
| CVE-2025-40190 | ext4: guard against EA inode refcount underflow in xattr update | HIGH | 7.1 | 7%ile | Microsoft | 2025-11-11 |
| CVE-2025-40201 | kernel/sys.c: fix the racy usage of task_lock(tsk->group_leader) in sys_prlimit64() paths | HIGH | 7.1 | 4%ile | Microsoft | 2025-11-11 |
| CVE-2025-40204 | sctp: Fix MAC comparison to be constant-time | HIGH | 7.1 | 40%ile | Microsoft | 2025-11-11 |
| CVE-2025-64720 | LIBPNG is vulnerable to a buffer overflow in `png_image_read_composite` via incorrect palette premultiplication | HIGH | 7.1 | 39%ile | Microsoft | 2025-11-11 |
| CVE-2025-65018 | LIBPNG is vulnerable to a heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read` | HIGH | 7.1 | 20%ile | Microsoft | 2025-11-11 |
| CVE-2025-60726 | Microsoft Excel Information Disclosure Vulnerability | HIGH | 7.1 | 50%ile | Microsoft | 2025-11-11 |
| CVE-2025-62202 | Microsoft Excel Information Disclosure Vulnerability | HIGH | 7.1 | 47%ile | Microsoft | 2025-11-11 |
| CVE-2025-59506 | DirectX Graphics Kernel Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2025-11-11 |
| CVE-2025-59507 | Windows Speech Runtime Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2025-11-11 |
| CVE-2025-59508 | Windows Speech Recognition Elevation of Privilege Vulnerability | HIGH | 7.0 | 18%ile | Microsoft | 2025-11-11 |
| CVE-2025-59515 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 29%ile | Microsoft | 2025-11-11 |
| CVE-2025-60716 | DirectX Graphics Kernel Elevation of Privilege Vulnerability | HIGH | 7.0 | 33%ile | Microsoft | 2025-11-11 |
| CVE-2025-60717 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 29%ile | Microsoft | 2025-11-11 |
| CVE-2025-60719 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | HIGH | 7.0 | 80%ile | Microsoft | 2025-11-11 |
| CVE-2025-62213 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | HIGH | 7.0 | 78%ile | Microsoft | 2025-11-11 |
| CVE-2025-62215 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.0 | 91%ile | Microsoft | 2025-11-11 |
| CVE-2025-62217 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | HIGH | 7.0 | 19%ile | Microsoft | 2025-11-11 |
| CVE-2025-62218 | Microsoft Wireless Provisioning System Elevation of Privilege Vulnerability | HIGH | 7.0 | 17%ile | Microsoft | 2025-11-11 |
| CVE-2025-62219 | Microsoft Wireless Provisioning System Elevation of Privilege Vulnerability | HIGH | 7.0 | 17%ile | Microsoft | 2025-11-11 |
| CVE-2025-10966 | missing SFTP host verification with wolfSSH | MEDIUM | 6.8 | 37%ile | Microsoft | 2025-11-11 |
| CVE-2025-62449 | Microsoft Visual Studio Code CoPilot Chat Security Feature Bypass Vulnerability | MEDIUM | 6.8 | 41%ile | Microsoft | 2025-11-11 |
| CVE-2025-47179 | Configuration Manager Elevation of Privilege Vulnerability | MEDIUM | 6.7 | 31%ile | Microsoft | 2025-11-11 |
| CVE-2025-62214 | Visual Studio Remote Code Execution Vulnerability | MEDIUM | 6.7 | 66%ile | Microsoft | 2025-11-11 |
| CVE-2025-12969 | CVE-2025-12969 | MEDIUM | 6.5 | 50%ile | Microsoft | 2025-11-11 |
| CVE-2025-64433 | KubeVirt Arbitrary Container File Read | MEDIUM | 6.5 | 44%ile | Microsoft | 2025-11-11 |
| CVE-2025-60708 | Storvsp.sys Driver Denial of Service Vulnerability | MEDIUM | 6.5 | 42%ile | Microsoft | 2025-11-11 |
| CVE-2025-60722 | Microsoft OneDrive for Android Elevation of Privilege Vulnerability | MEDIUM | 6.5 | 59%ile | Microsoft | 2025-11-11 |
| CVE-2025-62206 | Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability | MEDIUM | 6.5 | 62%ile | Microsoft | 2025-11-11 |
| CVE-2025-11933 | DoS Vulnerability in wolfSSL TLS 1.3 CKS Extension | MEDIUM | 6.5 | 39%ile | Microsoft | 2025-11-11 |
| CVE-2025-40168 | smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). | MEDIUM | 6.3 | 36%ile | Microsoft | 2025-11-11 |
| CVE-2025-40180 | mailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop | MEDIUM | 6.3 | 16%ile | Microsoft | 2025-11-11 |
| CVE-2025-60723 | DirectX Graphics Kernel Denial of Service Vulnerability | MEDIUM | 6.3 | 58%ile | Microsoft | 2025-11-11 |
| CVE-2025-40146 | blk-mq: fix potential deadlock while nr_requests grown | MEDIUM | 6.2 | 15%ile | Microsoft | 2025-11-11 |
| CVE-2025-40173 | net/ip6_tunnel: Prevent perpetual tunnel growth | MEDIUM | 6.2 | 4%ile | Microsoft | 2025-11-11 |
| CVE-2025-40213 | Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete | MEDIUM | 6.1 | 9%ile | Microsoft | 2025-11-11 |
| CVE-2025-64505 | LIBPNG is vulnerable to a heap buffer overflow in `png_do_quantize` via malformed palette index | MEDIUM | 6.1 | 10%ile | Microsoft | 2025-11-11 |
| CVE-2025-64506 | LIBPNG is vulnerable to a heap buffer over-read in `png_write_image_8bit` with grayscale+alpha or RGB/RGBA images | MEDIUM | 6.1 | 4%ile | Microsoft | 2025-11-11 |
| CVE-2025-61915 | OpenPrinting CUPS vulnerable to stack based out-of-bound write | MEDIUM | 6.0 | 43%ile | Microsoft | 2025-11-11 |
| CVE-2025-12818 | PostgreSQL libpq undersizes allocations, via integer wraparound | MEDIUM | 5.9 | 30%ile | Microsoft | 2025-11-11 |
| CVE-2025-12748 | Libvirt: denial of service in xml parsing | MEDIUM | 5.5 | 13%ile | Microsoft | 2025-11-11 |
| CVE-2025-13193 | Libvirt: information disclosure via world-readable vm snapshots | MEDIUM | 5.5 | 2%ile | Microsoft | 2025-11-11 |
| CVE-2025-40107 | can: hi311x: fix null pointer dereference when resuming from sleep before interface was enabled | MEDIUM | 5.5 | 10%ile | Microsoft | 2025-11-11 |
| CVE-2025-40164 | usbnet: Fix using smp_processor_id() in preemptible code warnings | MEDIUM | 5.5 | 9%ile | Microsoft | 2025-11-11 |
| CVE-2025-40167 | ext4: detect invalid INLINE_DATA + EXTENTS flag combination | MEDIUM | 5.5 | 6%ile | Microsoft | 2025-11-11 |
| CVE-2025-40178 | pid: Add a judgment for ns null in pid_nr_ns | MEDIUM | 5.5 | 13%ile | Microsoft | 2025-11-11 |
| CVE-2025-40179 | ext4: verify orphan file size is not too big | MEDIUM | 5.5 | 13%ile | Microsoft | 2025-11-11 |
| CVE-2025-40187 | net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() | MEDIUM | 5.5 | 51%ile | Microsoft | 2025-11-11 |
| CVE-2025-40192 | Revert "ipmi: fix msg stack when IPMI is disconnected" | MEDIUM | 5.5 | 10%ile | Microsoft | 2025-11-11 |
| CVE-2025-40193 | xtensa: simdisk: add input size check in proc_write_simdisk | MEDIUM | 5.5 | 10%ile | Microsoft | 2025-11-11 |
| CVE-2025-40194 | cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request() | MEDIUM | 5.5 | 11%ile | Microsoft | 2025-11-11 |
| CVE-2025-40195 | mount: handle NULL values in mnt_ns_release() | MEDIUM | 5.5 | 9%ile | Microsoft | 2025-11-11 |
| CVE-2025-40197 | media: mc: Clear minor number before put device | MEDIUM | 5.5 | 11%ile | Microsoft | 2025-11-11 |
| CVE-2025-40200 | Squashfs: reject negative file sizes in squashfs_read_inode() | MEDIUM | 5.5 | 11%ile | Microsoft | 2025-11-11 |
| CVE-2025-40202 | ipmi: Rework user message limit handling | MEDIUM | 5.5 | 4%ile | Microsoft | 2025-11-11 |
| CVE-2025-40206 | netfilter: nft_objref: validate objref and objrefmap expressions | MEDIUM | 5.5 | 4%ile | Microsoft | 2025-11-11 |
| CVE-2025-40207 | media: v4l2-subdev: Fix alloc failure check in v4l2_subdev_call_state_try() | MEDIUM | 5.5 | 10%ile | Microsoft | 2025-11-11 |
| CVE-2025-40210 | Revert "NFSD: Remove the cap on number of operations per NFSv4 COMPOUND" | MEDIUM | 5.5 | 30%ile | Microsoft | 2025-11-11 |
| CVE-2025-60753 | An issue was discovered in libarchive bsdtar before version 3.8.1 in function apply_substitution in file tar/subst.c whe | MEDIUM | 5.5 | 11%ile | Microsoft | 2025-11-11 |
| CVE-2025-59240 | Microsoft Excel Information Disclosure Vulnerability | MEDIUM | 5.5 | 50%ile | Microsoft | 2025-11-11 |
| CVE-2025-59509 | Windows Speech Recognition Information Disclosure Vulnerability | MEDIUM | 5.5 | 48%ile | Microsoft | 2025-11-11 |
| CVE-2025-59510 | Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability | MEDIUM | 5.5 | 45%ile | Microsoft | 2025-11-11 |
| CVE-2025-59513 | Windows Bluetooth RFCOM Protocol Driver Information Disclosure Vulnerability | MEDIUM | 5.5 | 43%ile | Microsoft | 2025-11-11 |
| CVE-2025-60706 | Windows Hyper-V Information Disclosure Vulnerability | MEDIUM | 5.5 | 43%ile | Microsoft | 2025-11-11 |
| CVE-2025-62208 | Windows License Manager Information Disclosure Vulnerability | MEDIUM | 5.5 | 46%ile | Microsoft | 2025-11-11 |
| CVE-2025-62209 | Windows License Manager Information Disclosure Vulnerability | MEDIUM | 5.5 | 46%ile | Microsoft | 2025-11-11 |
| CVE-2025-40188 | pwm: berlin: Fix wrong register in suspend/resume | MEDIUM | 5.5 | 13%ile | Microsoft | 2025-11-11 |
| CVE-2025-40136 | crypto: hisilicon/qm - request reserved interrupt for virtual function | MEDIUM | 5.5 | 16%ile | Microsoft | 2025-11-11 |
| CVE-2025-10158 | Rsync: Out of bounds array access via negative index | MEDIUM | 5.4 | 29%ile | Microsoft | 2025-11-11 |
| CVE-2025-12875 | mruby array.c ary_fill_exec out-of-bounds write | MEDIUM | 5.3 | 7%ile | Microsoft | 2025-11-11 |
| CVE-2025-64435 | KubeVirt VMI Denial-of-Service (DoS) Using Pod Impersonation | MEDIUM | 5.3 | 35%ile | Microsoft | 2025-11-11 |
| CVE-2025-64436 | KubeVirt Excessive Role Permissions Could Enable Unauthorized VMI Migrations Between Nodes | MEDIUM | 5.3 | 20%ile | Microsoft | 2025-11-11 |
| CVE-2025-13120 | mruby array.c sort_cmp use after free | MEDIUM | 5.3 | 5%ile | Microsoft | 2025-11-11 |
| CVE-2025-11936 | Potential DoS Vulnerability through Multiple KeyShareEntry with Same Group in TLS 1.3 ClientHello | MEDIUM | 5.3 | 40%ile | Microsoft | 2025-11-11 |
| CVE-2025-58436 | OpenPrinting CUPS slow client can halt cupsd, leading to a possible DoS attack | MEDIUM | 5.1 | 16%ile | Microsoft | 2025-11-11 |
| CVE-2025-64713 | WebAssembly Micro Runtime frame_offset_bottom array bounds overflow in fast Interpreter mode when handling GET_GLOBAL(I3 | MEDIUM | 5.1 | 29%ile | Microsoft | 2025-11-11 |
| CVE-2025-64437 | KubeVirt Isolation Detection Flaw Allows Arbitrary File Permission Changes | MEDIUM | 5.0 | 14%ile | Microsoft | 2025-11-11 |
| CVE-2025-62453 | GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability | MEDIUM | 5.0 | 38%ile | Microsoft | 2025-11-11 |
| CVE-2025-54770 | Grub2: use-after-free in net_set_vlan | MEDIUM | 4.9 | 5%ile | Microsoft | 2025-11-11 |
| CVE-2025-54771 | Grub2: use-after-free in grub_file_close() | MEDIUM | 4.9 | 4%ile | Microsoft | 2025-11-11 |
| CVE-2025-61662 | Grub2: missing unregister call for gettext command may lead to use-after-free | MEDIUM | 4.9 | 12%ile | Microsoft | 2025-11-11 |
| CVE-2025-61663 | Grub2: missing unregister call for normal commands may lead to use-after-free | MEDIUM | 4.9 | 3%ile | Microsoft | 2025-11-11 |
| CVE-2025-61664 | Grub2: missing unregister call for normal_exit command may lead to use-after-free | MEDIUM | 4.9 | 4%ile | Microsoft | 2025-11-11 |
| CVE-2025-61661 | Grub2: grub2: out-of-bounds write via malicious usb device | MEDIUM | 4.8 | 11%ile | Microsoft | 2025-11-11 |
| CVE-2025-40111 | drm/vmwgfx: Fix Use-after-free in validation | MEDIUM | 4.7 | 4%ile | Microsoft | 2025-11-11 |
| CVE-2025-64432 | KubeVirt Affected by an Authentication Bypass in Kubernetes Aggregation Layer | MEDIUM | 4.7 | 4%ile | Microsoft | 2025-11-11 |
| CVE-2025-64434 | KubeVirt Improper TLS Certificate Management Handling Allows API Identity Spoofing | MEDIUM | 4.7 | 10%ile | Microsoft | 2025-11-11 |
| CVE-2025-64704 | WebAssembly Micro Runtime vulnerable to a segmentation fault in v128.store instruction | MEDIUM | 4.7 | 10%ile | Microsoft | 2025-11-11 |
| CVE-2025-60728 | Microsoft Excel Information Disclosure Vulnerability | MEDIUM | 4.3 | 56%ile | Microsoft | 2025-11-11 |
| CVE-2025-11932 | Timing Side-Channel in PSK Binder Verification | MEDIUM | 4.3 | 20%ile | Microsoft | 2025-11-11 |
| CVE-2025-40109 | crypto: rng - Ensure set_ent is always present | MEDIUM | 4.2 | 13%ile | Microsoft | 2025-11-11 |
| CVE-2025-40110 | drm/vmwgfx: Fix a null-ptr access in the cursor snooper | MEDIUM | 4.1 | 11%ile | Microsoft | 2025-11-11 |
| CVE-2025-12817 | PostgreSQL CREATE STATISTICS does not check for schema CREATE privilege | LOW | 3.1 | 16%ile | Microsoft | 2025-11-11 |
| CVE-2025-66382 | In libexpat through 2.7.3, a crafted file with an approximate size of 2 MiB can lead to dozens of seconds of processing | LOW | 2.9 | 12%ile | Microsoft | 2025-11-11 |
| CVE-2025-11934 | Improper Validation of Signature Algorithm Used in TLS 1.3 CertificateVerify | LOW | 2.7 | 6%ile | Microsoft | 2025-11-11 |
| CVE-2025-31133 | runc container escape via "masked path" abuse due to mount race conditions | UNKNOWN | — | 69%ile | Microsoft | 2025-11-11 |
| CVE-2025-52565 | container escape due to /dev/console mount and related races | UNKNOWN | — | 57%ile | Microsoft | 2025-11-11 |
| CVE-2025-64324 | KubeVirt Vulnerable to Arbitrary Host File Read and Write | UNKNOWN | — | 15%ile | Microsoft | 2025-11-11 |
| CVE-2025-64329 | containerd CRI server: Host memory exhaustion through Attach goroutine leak | UNKNOWN | — | 6%ile | Microsoft | 2025-11-11 |
| CVE-2025-66030 | node-forge ASN.1 OID Integer Truncation | UNKNOWN | — | 26%ile | Microsoft | 2025-11-11 |
| CVE-2025-66031 | node-forge ASN.1 Unbounded Recursion | UNKNOWN | — | 39%ile | Microsoft | 2025-11-11 |
| CVE-2025-12725 | Chromium: CVE-2025-12725 Out of bounds write in WebGPU | UNKNOWN | — | 20%ile | Microsoft | 2025-11-11 |
| CVE-2025-12726 | Chromium: CVE-2025-12726 Inappropriate implementation in Views. | UNKNOWN | — | 15%ile | Microsoft | 2025-11-11 |
| CVE-2025-12728 | Chromium: CVE-2025-12728 Inappropriate implementation in Omnibox | UNKNOWN | — | 11%ile | Microsoft | 2025-11-11 |
| CVE-2025-12729 | Chromium: CVE-2025-12729 Inappropriate implementation in Omnibox | UNKNOWN | — | 8%ile | Microsoft | 2025-11-11 |
| CVE-2025-13042 | Chromium: CVE-2025-13042 Inappropriate implementation in V8 | UNKNOWN | — | 18%ile | Microsoft | 2025-11-11 |
| CVE-2025-13223 | Chromium: CVE-2025-13223 Type Confusion in V8 | UNKNOWN | — | 92%ile | Microsoft | 2025-11-11 |
| CVE-2025-13224 | Chromium: CVE-2025-13224 Type Confusion in V8 | UNKNOWN | — | 42%ile | Microsoft | 2025-11-11 |
| CVE-2025-12888 | Constant Time Issue with Xtensa-based ESP32 and X22519 | UNKNOWN | — | 24%ile | Microsoft | 2025-11-11 |
| CVE-2011-10034 | IRAI AUTOMGEN <= 8.0.0.7 Use-After-Free Remote DoS | UNKNOWN | — | 50%ile | Microsoft | 2025-11-11 |
| CVE-2025-12889 | TLS 1.2 Client Can Downgrade Digest Used | UNKNOWN | — | 3%ile | Microsoft | 2025-11-11 |
| CVE-2025-66221 | Werkzeug safe_join() allows Windows special device names | UNKNOWN | — | 46%ile | Microsoft | 2025-11-11 |
| CVE-2025-53767 | Azure OpenAI Elevation of Privilege Vulnerability | CRITICAL | 10.0 | 66%ile | Microsoft | 2025-08-12 |
| CVE-2025-38561 | ksmbd: fix Preauh_HashValue race condition | CRITICAL | 9.8 | 39%ile | Microsoft | 2025-08-12 |
| CVE-2025-38615 | fs/ntfs3: cancle set bad inode after removing name fails | CRITICAL | 9.8 | 7%ile | Microsoft | 2025-08-12 |
| CVE-2025-53763 | Azure Databricks Elevation of Privilege Vulnerability | CRITICAL | 9.8 | 52%ile | Microsoft | 2025-08-12 |
| CVE-2025-50165 | Windows Graphics Component Remote Code Execution Vulnerability | CRITICAL | 9.8 | 96%ile | Microsoft | 2025-08-12 |
| CVE-2025-53766 | GDI+ Remote Code Execution Vulnerability | CRITICAL | 9.8 | 95%ile | Microsoft | 2025-08-12 |
| CVE-2025-53795 | Microsoft PC Manager Elevation of Privilege Vulnerability | CRITICAL | 9.1 | 49%ile | Microsoft | 2025-08-12 |
| CVE-2025-50171 | Remote Desktop Spoofing Vulnerability | CRITICAL | 9.1 | 64%ile | Microsoft | 2025-08-12 |
| CVE-2025-53792 | Azure Portal Elevation of Privilege Vulnerability | CRITICAL | 9.1 | 58%ile | Microsoft | 2025-08-12 |
| CVE-2025-54351 | In iperf before 3.19.1, net.c has a buffer overflow when --skip-rx-copy is used (for MSG_TRUNC in recv). | HIGH | 8.9 | 38%ile | Microsoft | 2025-08-12 |
| CVE-2025-8714 | PostgreSQL pg_dump lets superuser of origin server execute arbitrary code in psql client | HIGH | 8.8 | 55%ile | Microsoft | 2025-08-12 |
| CVE-2025-8715 | PostgreSQL pg_dump newline in object name executes arbitrary code in psql client and in restore target server | HIGH | 8.8 | 37%ile | Microsoft | 2025-08-12 |
| CVE-2025-49758 | Microsoft SQL Server Elevation of Privilege Vulnerability | HIGH | 8.8 | 63%ile | Microsoft | 2025-08-12 |
| CVE-2025-53727 | Microsoft SQL Server Elevation of Privilege Vulnerability | HIGH | 8.8 | 70%ile | Microsoft | 2025-08-12 |
| CVE-2025-24999 | Microsoft SQL Server Elevation of Privilege Vulnerability | HIGH | 8.8 | 78%ile | Microsoft | 2025-08-12 |
| CVE-2025-53772 | Web Deploy Remote Code Execution Vulnerability | HIGH | 8.8 | 98%ile | Microsoft | 2025-08-12 |
| CVE-2025-49757 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | HIGH | 8.8 | 64%ile | Microsoft | 2025-08-12 |
| CVE-2025-49759 | Microsoft SQL Server Elevation of Privilege Vulnerability | HIGH | 8.8 | 68%ile | Microsoft | 2025-08-12 |
| CVE-2025-50163 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | HIGH | 8.8 | 62%ile | Microsoft | 2025-08-12 |
| CVE-2025-53131 | Windows Media Remote Code Execution Vulnerability | HIGH | 8.8 | 62%ile | Microsoft | 2025-08-12 |
| CVE-2025-53143 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability | HIGH | 8.8 | 95%ile | Microsoft | 2025-08-12 |
| CVE-2025-53144 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability | HIGH | 8.8 | 95%ile | Microsoft | 2025-08-12 |
| CVE-2025-53145 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability | HIGH | 8.8 | 95%ile | Microsoft | 2025-08-12 |
| CVE-2025-47954 | Microsoft SQL Server Elevation of Privilege Vulnerability | HIGH | 8.8 | 76%ile | Microsoft | 2025-08-12 |
| CVE-2025-53778 | Windows NTLM Elevation of Privilege Vulnerability | HIGH | 8.8 | 99%ile | Microsoft | 2025-08-12 |
| CVE-2025-49712 | Microsoft SharePoint Remote Code Execution Vulnerability | HIGH | 8.8 | 98%ile | Microsoft | 2025-08-12 |
| CVE-2025-53731 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 8.4 | 47%ile | Microsoft | 2025-08-12 |
| CVE-2025-53733 | Microsoft Word Remote Code Execution Vulnerability | HIGH | 8.4 | 46%ile | Microsoft | 2025-08-12 |
| CVE-2025-53740 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 8.4 | 47%ile | Microsoft | 2025-08-12 |
| CVE-2025-53784 | Microsoft Word Remote Code Execution Vulnerability | HIGH | 8.4 | 43%ile | Microsoft | 2025-08-12 |
| CVE-2025-38499 | clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns | HIGH | 8.2 | 7%ile | Microsoft | 2025-08-12 |
| CVE-2025-53787 | Microsoft 365 Copilot BizChat Information Disclosure Vulnerability | HIGH | 8.2 | 54%ile | Microsoft | 2025-08-12 |
| CVE-2025-50177 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability | HIGH | 8.1 | 92%ile | Microsoft | 2025-08-12 |
| CVE-2025-38556 | HID: core: Harden s32ton() against conversion to 0 bits | HIGH | 8.0 | 6%ile | Microsoft | 2025-08-12 |
| CVE-2025-53786 | Microsoft Exchange Server Hybrid Deployment Elevation of Privilege Vulnerability | HIGH | 8.0 | 94%ile | Microsoft | 2025-08-12 |
| CVE-2025-50160 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | HIGH | 8.0 | 61%ile | Microsoft | 2025-08-12 |
| CVE-2025-50162 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | HIGH | 8.0 | 61%ile | Microsoft | 2025-08-12 |
| CVE-2025-50164 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | HIGH | 8.0 | 61%ile | Microsoft | 2025-08-12 |
| CVE-2025-53720 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | HIGH | 8.0 | 62%ile | Microsoft | 2025-08-12 |
| CVE-2025-49707 | Azure Virtual Machines Spoofing Vulnerability | HIGH | 7.9 | 39%ile | Microsoft | 2025-08-12 |
| CVE-2024-58240 | tls: separate no-async decryption request handling from async | HIGH | 7.8 | 28%ile | Microsoft | 2025-08-12 |
| CVE-2025-38500 | xfrm: interface: fix use-after-free after changing collect_md xfrm interface | HIGH | 7.8 | 6%ile | Microsoft | 2025-08-12 |
| CVE-2025-38527 | smb: client: fix use-after-free in cifs_oplock_break | HIGH | 7.8 | 37%ile | Microsoft | 2025-08-12 |
| CVE-2025-38563 | perf/core: Prevent VMA split of buffer mappings | HIGH | 7.8 | 35%ile | Microsoft | 2025-08-12 |
| CVE-2025-38565 | perf/core: Exit early on perf_mmap() fail | HIGH | 7.8 | 9%ile | Microsoft | 2025-08-12 |
| CVE-2025-38568 | net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing | HIGH | 7.8 | 7%ile | Microsoft | 2025-08-12 |
| CVE-2025-38572 | ipv6: reject malicious packets in ipv6_gso_segment() | HIGH | 7.8 | 9%ile | Microsoft | 2025-08-12 |
| CVE-2025-38574 | pptp: ensure minimal skb length in pptp_xmit() | HIGH | 7.8 | 32%ile | Microsoft | 2025-08-12 |
| CVE-2025-38584 | padata: Fix pd UAF once and for all | HIGH | 7.8 | 8%ile | Microsoft | 2025-08-12 |
| CVE-2025-38585 | staging: media: atomisp: Fix stack buffer overflow in gmin_get_var_int() | HIGH | 7.8 | 12%ile | Microsoft | 2025-08-12 |
| CVE-2025-38609 | PM / devfreq: Check governor before using governor->name | HIGH | 7.8 | 6%ile | Microsoft | 2025-08-12 |
| CVE-2025-38618 | vsock: Do not allow binding to VMADDR_PORT_ANY | HIGH | 7.8 | 7%ile | Microsoft | 2025-08-12 |
| CVE-2025-38656 | wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start() | HIGH | 7.8 | 11%ile | Microsoft | 2025-08-12 |
| CVE-2025-38666 | net: appletalk: Fix use-after-free in AARP proxy probe | HIGH | 7.8 | 7%ile | Microsoft | 2025-08-12 |
| CVE-2025-38676 | iommu/amd: Avoid stack buffer overflow from kernel cmdline | HIGH | 7.8 | 36%ile | Microsoft | 2025-08-12 |
| CVE-2025-8747 | Keras safe_mode bypass allows arbitrary code execution when loading a malicious model. | HIGH | 7.8 | 2%ile | Microsoft | 2025-08-12 |
| CVE-2025-38535 | phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode | HIGH | 7.8 | 7%ile | Microsoft | 2025-08-12 |
| CVE-2025-38538 | dmaengine: nbpfaxi: Fix memory corruption in probe() | HIGH | 7.8 | 7%ile | Microsoft | 2025-08-12 |
| CVE-2025-38533 | net: libwx: fix the using of Rx buffer DMA | HIGH | 7.8 | 24%ile | Microsoft | 2025-08-12 |
| CVE-2025-38555 | usb: gadget : fix use-after-free in composite_dev_cleanup() | HIGH | 7.8 | 8%ile | Microsoft | 2025-08-12 |
| CVE-2025-38579 | f2fs: fix KMSAN uninit-value in extent_info usage | HIGH | 7.8 | 7%ile | Microsoft | 2025-08-12 |
| CVE-2025-38582 | RDMA/hns: Fix double destruction of rsv_qp | HIGH | 7.8 | 12%ile | Microsoft | 2025-08-12 |
| CVE-2025-38595 | xen: fix UAF in dmabuf_exp_from_pages() | HIGH | 7.8 | 12%ile | Microsoft | 2025-08-12 |
| CVE-2025-53729 | Microsoft Azure File Sync Elevation of Privilege Vulnerability | HIGH | 7.8 | 24%ile | Microsoft | 2025-08-12 |
| CVE-2025-53730 | Microsoft Office Visio Remote Code Execution Vulnerability | HIGH | 7.8 | 39%ile | Microsoft | 2025-08-12 |
| CVE-2025-53741 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 45%ile | Microsoft | 2025-08-12 |
| CVE-2025-53759 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 45%ile | Microsoft | 2025-08-12 |
| CVE-2025-53761 | Microsoft PowerPoint Remote Code Execution Vulnerability | HIGH | 7.8 | 45%ile | Microsoft | 2025-08-12 |
| CVE-2025-53773 | GitHub Copilot and Visual Studio Remote Code Execution Vulnerability | HIGH | 7.8 | 89%ile | Microsoft | 2025-08-12 |
| CVE-2025-55230 | Windows MBT Transport Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 30%ile | Microsoft | 2025-08-12 |
| CVE-2025-49761 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.8 | 38%ile | Microsoft | 2025-08-12 |
| CVE-2025-50153 | Desktop Window Manager Elevation of Privilege Vulnerability | HIGH | 7.8 | 38%ile | Microsoft | 2025-08-12 |
| CVE-2025-50168 | Win32k Elevation of Privilege Vulnerability | HIGH | 7.8 | 56%ile | Microsoft | 2025-08-12 |
| CVE-2025-50170 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 34%ile | Microsoft | 2025-08-12 |
| CVE-2025-50173 | Windows Installer Elevation of Privilege Vulnerability | HIGH | 7.8 | 46%ile | Microsoft | 2025-08-12 |
| CVE-2025-50176 | DirectX Graphics Kernel Remote Code Execution Vulnerability | HIGH | 7.8 | 45%ile | Microsoft | 2025-08-12 |
| CVE-2025-53132 | Win32k Elevation of Privilege Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2025-08-12 |
| CVE-2025-53133 | Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2025-08-12 |
| CVE-2025-53141 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | HIGH | 7.8 | 38%ile | Microsoft | 2025-08-12 |
| CVE-2025-53149 | Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 56%ile | Microsoft | 2025-08-12 |
| CVE-2025-53151 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.8 | 38%ile | Microsoft | 2025-08-12 |
| CVE-2025-53152 | Desktop Windows Manager Remote Code Execution Vulnerability | HIGH | 7.8 | 39%ile | Microsoft | 2025-08-12 |
| CVE-2025-53154 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | HIGH | 7.8 | 38%ile | Microsoft | 2025-08-12 |
| CVE-2025-53155 | Windows Hyper-V Elevation of Privilege Vulnerability | HIGH | 7.8 | 42%ile | Microsoft | 2025-08-12 |
| CVE-2025-53723 | Windows Hyper-V Elevation of Privilege Vulnerability | HIGH | 7.8 | 42%ile | Microsoft | 2025-08-12 |
| CVE-2025-53724 | Windows Push Notifications Apps Elevation of Privilege Vulnerability | HIGH | 7.8 | 39%ile | Microsoft | 2025-08-12 |
| CVE-2025-53725 | Windows Push Notifications Apps Elevation of Privilege Vulnerability | HIGH | 7.8 | 38%ile | Microsoft | 2025-08-12 |
| CVE-2025-53726 | Windows Push Notifications Apps Elevation of Privilege Vulnerability | HIGH | 7.8 | 39%ile | Microsoft | 2025-08-12 |
| CVE-2025-53732 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 7.8 | 42%ile | Microsoft | 2025-08-12 |
| CVE-2025-53734 | Microsoft Office Visio Remote Code Execution Vulnerability | HIGH | 7.8 | 39%ile | Microsoft | 2025-08-12 |
| CVE-2025-53735 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 47%ile | Microsoft | 2025-08-12 |
| CVE-2025-53737 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 45%ile | Microsoft | 2025-08-12 |
| CVE-2025-53738 | Microsoft Word Remote Code Execution Vulnerability | HIGH | 7.8 | 45%ile | Microsoft | 2025-08-12 |
| CVE-2025-53739 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 47%ile | Microsoft | 2025-08-12 |
| CVE-2025-50155 | Windows Push Notifications Apps Elevation of Privilege Vulnerability | HIGH | 7.8 | 38%ile | Microsoft | 2025-08-12 |
| CVE-2025-53789 | Windows StateRepository API Server file Elevation of Privilege Vulnerability | HIGH | 7.8 | 29%ile | Microsoft | 2025-08-12 |
| CVE-2025-9288 | Missing type checks leading to hash rewind and passing on crafted data | HIGH | 7.7 | 54%ile | Microsoft | 2025-08-12 |
| CVE-2025-53781 | Azure Virtual Machines Information Disclosure Vulnerability | HIGH | 7.7 | 69%ile | Microsoft | 2025-08-12 |
| CVE-2025-52194 | A buffer overflow vulnerability exists in libsndfile version 1.2.2 and potentially earlier versions when processing malf | HIGH | 7.5 | 51%ile | Microsoft | 2025-08-12 |
| CVE-2025-33051 | Microsoft Exchange Server Information Disclosure Vulnerability | HIGH | 7.5 | 72%ile | Microsoft | 2025-08-12 |
| CVE-2025-50169 | Windows SMB Remote Code Execution Vulnerability | HIGH | 7.5 | 53%ile | Microsoft | 2025-08-12 |
| CVE-2025-53722 | Windows Remote Desktop Services Denial of Service Vulnerability | HIGH | 7.5 | 98%ile | Microsoft | 2025-08-12 |
| CVE-2025-53783 | Microsoft Teams Remote Code Execution Vulnerability | HIGH | 7.5 | 60%ile | Microsoft | 2025-08-12 |
| CVE-2025-53793 | Azure Stack Hub Information Disclosure Vulnerability | HIGH | 7.5 | 72%ile | Microsoft | 2025-08-12 |
| CVE-2025-55231 | Windows Storage-based Management Service Remote Code Execution Vulnerability | HIGH | 7.5 | 43%ile | Microsoft | 2025-08-12 |
| CVE-2025-38578 | f2fs: fix to avoid UAF in f2fs_sync_inode_meta() | HIGH | 7.3 | 8%ile | Microsoft | 2025-08-12 |
| CVE-2025-50159 | Remote Access Point-to-Point Protocol (PPP) EAP-TLS Elevation of Privilege Vulnerability | HIGH | 7.3 | 48%ile | Microsoft | 2025-08-12 |
| CVE-2025-50161 | Win32k Elevation of Privilege Vulnerability | HIGH | 7.3 | 49%ile | Microsoft | 2025-08-12 |
| CVE-2025-53779 | Windows Kerberos Elevation of Privilege Vulnerability | HIGH | 7.2 | 86%ile | Microsoft | 2025-08-12 |
| CVE-2025-38502 | bpf: Fix oob access in cgroup local storage | HIGH | 7.1 | 7%ile | Microsoft | 2025-08-12 |
| CVE-2025-38608 | bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls | HIGH | 7.1 | 36%ile | Microsoft | 2025-08-12 |
| CVE-2025-38660 | [ceph] parse_longname(): strrchr() expects NUL-terminated string | HIGH | 7.1 | 35%ile | Microsoft | 2025-08-12 |
| CVE-2025-38532 | net: libwx: properly reset Rx ring descriptor | HIGH | 7.1 | 6%ile | Microsoft | 2025-08-12 |
| CVE-2025-38543 | drm/tegra: nvdec: Fix dma_alloc_coherent error check | HIGH | 7.1 | 5%ile | Microsoft | 2025-08-12 |
| CVE-2025-53760 | Microsoft SharePoint Elevation of Privilege Vulnerability | HIGH | 7.1 | 97%ile | Microsoft | 2025-08-12 |
| CVE-2025-3770 | SMM IDT Privilege Escalation Vulnerability | HIGH | 7.0 | 6%ile | Microsoft | 2025-08-12 |
| CVE-2025-38617 | net/packet: fix a race in packet_set_ring() and packet_notifier() | HIGH | 7.0 | 34%ile | Microsoft | 2025-08-12 |
| CVE-2025-38665 | can: netlink: can_changelink(): fix NULL pointer deref of struct can_priv::do_set_mode | HIGH | 7.0 | 5%ile | Microsoft | 2025-08-12 |
| CVE-2025-38668 | regulator: core: fix NULL dereference on unbind due to stale coupling data | HIGH | 7.0 | 6%ile | Microsoft | 2025-08-12 |
| CVE-2025-47907 | Incorrect results returned from Rows.Scan in database/sql | HIGH | 7.0 | 35%ile | Microsoft | 2025-08-12 |
| CVE-2025-38605 | wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type() | HIGH | 7.0 | 9%ile | Microsoft | 2025-08-12 |
| CVE-2025-49762 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | HIGH | 7.0 | 20%ile | Microsoft | 2025-08-12 |
| CVE-2025-50158 | Windows NTFS Information Disclosure Vulnerability | HIGH | 7.0 | 33%ile | Microsoft | 2025-08-12 |
| CVE-2025-50167 | Windows Hyper-V Elevation of Privilege Vulnerability | HIGH | 7.0 | 32%ile | Microsoft | 2025-08-12 |
| CVE-2025-53134 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | HIGH | 7.0 | 25%ile | Microsoft | 2025-08-12 |
| CVE-2025-53135 | DirectX Graphics Kernel Elevation of Privilege Vulnerability | HIGH | 7.0 | 19%ile | Microsoft | 2025-08-12 |
| CVE-2025-53137 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | HIGH | 7.0 | 33%ile | Microsoft | 2025-08-12 |
| CVE-2025-53140 | Windows Kernel Transaction Manager Elevation of Privilege Vulnerability | HIGH | 7.0 | 29%ile | Microsoft | 2025-08-12 |
| CVE-2025-53142 | Microsoft Brokering File System Elevation of Privilege Vulnerability | HIGH | 7.0 | 30%ile | Microsoft | 2025-08-12 |
| CVE-2025-53147 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | HIGH | 7.0 | 39%ile | Microsoft | 2025-08-12 |
| CVE-2025-53718 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | HIGH | 7.0 | 30%ile | Microsoft | 2025-08-12 |
| CVE-2025-53721 | Windows Connected Devices Platform Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 29%ile | Microsoft | 2025-08-12 |
| CVE-2025-53788 | Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability | HIGH | 7.0 | 15%ile | Microsoft | 2025-08-12 |
| CVE-2025-49751 | Windows Hyper-V Denial of Service Vulnerability | MEDIUM | 6.8 | 45%ile | Microsoft | 2025-08-12 |
| CVE-2025-53736 | Microsoft Word Information Disclosure Vulnerability | MEDIUM | 6.8 | 43%ile | Microsoft | 2025-08-12 |
| CVE-2025-49743 | Windows Graphics Component Elevation of Privilege Vulnerability | MEDIUM | 6.7 | 45%ile | Microsoft | 2025-08-12 |
| CVE-2025-48807 | Windows Hyper-V Remote Code Execution Vulnerability | MEDIUM | 6.7 | 48%ile | Microsoft | 2025-08-12 |
| CVE-2025-38577 | f2fs: fix to avoid panic in f2fs_evict_inode | MEDIUM | 6.6 | 8%ile | Microsoft | 2025-08-12 |
| CVE-2025-38501 | ksmbd: limit repeated connections from clients with the same IP | MEDIUM | 6.5 | 82%ile | Microsoft | 2025-08-12 |
| CVE-2025-38646 | wifi: rtw89: avoid NULL dereference when RX problematic packet on unsupported 6 GHz band | MEDIUM | 6.5 | 6%ile | Microsoft | 2025-08-12 |
| CVE-2025-54349 | In iperf before 3.19.1, iperf_auth.c has an off-by-one error and resultant heap-based buffer overflow. | MEDIUM | 6.5 | 38%ile | Microsoft | 2025-08-12 |
| CVE-2025-55198 | Helm May Panic Due To Incorrect YAML Content | MEDIUM | 6.5 | 27%ile | Microsoft | 2025-08-12 |
| CVE-2025-55199 | Helm Charts with Specific JSON Schema Values Can Cause Memory Exhaustion | MEDIUM | 6.5 | 27%ile | Microsoft | 2025-08-12 |
| CVE-2025-25005 | Microsoft Exchange Server Tampering Vulnerability | MEDIUM | 6.5 | 73%ile | Microsoft | 2025-08-12 |
| CVE-2025-50154 | Microsoft Windows File Explorer Spoofing Vulnerability | MEDIUM | 6.5 | 98%ile | Microsoft | 2025-08-12 |
| CVE-2025-50166 | Windows Distributed Transaction Coordinator (MSDTC) Information Disclosure Vulnerability | MEDIUM | 6.5 | 73%ile | Microsoft | 2025-08-12 |
| CVE-2025-50172 | DirectX Graphics Kernel Denial of Service Vulnerability | MEDIUM | 6.5 | 75%ile | Microsoft | 2025-08-12 |
| CVE-2025-53716 | Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability | MEDIUM | 6.5 | 75%ile | Microsoft | 2025-08-12 |
| CVE-2025-53728 | Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability | MEDIUM | 6.5 | 70%ile | Microsoft | 2025-08-12 |
| CVE-2025-53774 | Microsoft 365 Copilot BizChat Information Disclosure Vulnerability | MEDIUM | 6.5 | 50%ile | Microsoft | 2025-08-12 |
| CVE-2025-54389 | AIDE improper output neutralization vulnerability | MEDIUM | 6.2 | 16%ile | Microsoft | 2025-08-12 |
| CVE-2025-54409 | AIDE null pointer dereference when reading incorrectly encoded xattr attributes from database (local DoS) | MEDIUM | 6.2 | 16%ile | Microsoft | 2025-08-12 |
| CVE-2025-38539 | tracing: Add down_write(trace_event_sem) when adding trace event | MEDIUM | 6.1 | 7%ile | Microsoft | 2025-08-12 |
| CVE-2025-38566 | sunrpc: fix handling of server side tls alerts | MEDIUM | 5.8 | 50%ile | Microsoft | 2025-08-12 |
| CVE-2025-38512 | wifi: prevent A-MSDU attacks in mesh networks | MEDIUM | 5.7 | 14%ile | Microsoft | 2025-08-12 |
| CVE-2025-50156 | Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability | MEDIUM | 5.7 | 69%ile | Microsoft | 2025-08-12 |
| CVE-2025-53138 | Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability | MEDIUM | 5.7 | 69%ile | Microsoft | 2025-08-12 |
| CVE-2025-53148 | Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability | MEDIUM | 5.7 | 69%ile | Microsoft | 2025-08-12 |
| CVE-2025-53153 | Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability | MEDIUM | 5.7 | 69%ile | Microsoft | 2025-08-12 |
| CVE-2025-53719 | Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability | MEDIUM | 5.7 | 71%ile | Microsoft | 2025-08-12 |
| CVE-2025-50157 | Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability | MEDIUM | 5.7 | 69%ile | Microsoft | 2025-08-12 |
| CVE-2025-53859 | NGINX ngx_mail_smtp_module vulnerability | MEDIUM | 5.6 | 36%ile | Microsoft | 2025-08-12 |
| CVE-2022-50233 | Bluetooth: eir: Fix using strlen with hdev->{dev_name,short_name} | MEDIUM | 5.5 | 4%ile | Microsoft | 2025-08-12 |
| CVE-2025-38510 | kasan: remove kasan_find_vm_area() to prevent possible deadlock | MEDIUM | 5.5 | 5%ile | Microsoft | 2025-08-12 |
| CVE-2025-38513 | wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev() | MEDIUM | 5.5 | 6%ile | Microsoft | 2025-08-12 |
| CVE-2025-38514 | rxrpc: Fix oops due to non-existence of prealloc backlog struct | MEDIUM | 5.5 | 31%ile | Microsoft | 2025-08-12 |
| CVE-2025-38515 | drm/sched: Increment job count before swapping tail spsc queue | MEDIUM | 5.5 | 5%ile | Microsoft | 2025-08-12 |
| CVE-2025-38516 | pinctrl: qcom: msm: mark certain pins as invalid for interrupts | MEDIUM | 5.5 | 6%ile | Microsoft | 2025-08-12 |
| CVE-2025-38520 | drm/amdkfd: Don't call mmput from MMU notifier callback | MEDIUM | 5.5 | 2%ile | Microsoft | 2025-08-12 |
| CVE-2025-38526 | ice: add NULL check in eswitch lag check | MEDIUM | 5.5 | 32%ile | Microsoft | 2025-08-12 |
| CVE-2025-38528 | bpf: Reject %p% format string in bprintf-like helpers | MEDIUM | 5.5 | 6%ile | Microsoft | 2025-08-12 |
| CVE-2025-38529 | comedi: aio_iiro_16: Fix bit shift out of bounds | MEDIUM | 5.5 | 8%ile | Microsoft | 2025-08-12 |
| CVE-2025-38530 | comedi: pcl812: Fix bit shift out of bounds | MEDIUM | 5.5 | 8%ile | Microsoft | 2025-08-12 |
| CVE-2025-38531 | iio: common: st_sensors: Fix use of uninitialize device structs | MEDIUM | 5.5 | 6%ile | Microsoft | 2025-08-12 |
| CVE-2025-38537 | net: phy: Don't register LEDs for genphy | MEDIUM | 5.5 | 4%ile | Microsoft | 2025-08-12 |
| CVE-2025-38540 | HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras | MEDIUM | 5.5 | 6%ile | Microsoft | 2025-08-12 |
| CVE-2025-38542 | net: appletalk: Fix device refcount leak in atrtr_create() | MEDIUM | 5.5 | 7%ile | Microsoft | 2025-08-12 |
| CVE-2025-38544 | rxrpc: Fix bug due to prealloc collision | MEDIUM | 5.5 | 4%ile | Microsoft | 2025-08-12 |
| CVE-2025-38546 | atm: clip: Fix memory leak of struct clip_vcc. | MEDIUM | 5.5 | 6%ile | Microsoft | 2025-08-12 |
| CVE-2025-38548 | hwmon: (corsair-cpro) Validate the size of the received input buffer | MEDIUM | 5.5 | 7%ile | Microsoft | 2025-08-12 |
| CVE-2025-38550 | ipv6: mcast: Delay put pmc->idev in mld_del_delrec() | MEDIUM | 5.5 | 6%ile | Microsoft | 2025-08-12 |
| CVE-2025-38552 | mptcp: plug races between subflow fail and subflow creation | MEDIUM | 5.5 | 26%ile | Microsoft | 2025-08-12 |
| CVE-2025-38553 | net/sched: Restrict conditions for adding duplicating netems to qdisc tree | MEDIUM | 5.5 | — | Microsoft | 2025-08-12 |
| CVE-2025-38560 | x86/sev: Evict cache lines during SNP memory validation | MEDIUM | 5.5 | 7%ile | Microsoft | 2025-08-12 |
| CVE-2025-38562 | ksmbd: fix null pointer dereference error in generate_encryptionkey | MEDIUM | 5.5 | 96%ile | Microsoft | 2025-08-12 |
| CVE-2025-38569 | benet: fix BUG when creating VFs | MEDIUM | 5.5 | 8%ile | Microsoft | 2025-08-12 |
| CVE-2025-38571 | sunrpc: fix client side handling of tls alerts | MEDIUM | 5.5 | 28%ile | Microsoft | 2025-08-12 |
| CVE-2025-38576 | powerpc/eeh: Make EEH driver device hotplug safe | MEDIUM | 5.5 | 6%ile | Microsoft | 2025-08-12 |
| CVE-2025-38581 | crypto: ccp - Fix crash when rebind ccp device for ccp.ko | MEDIUM | 5.5 | 8%ile | Microsoft | 2025-08-12 |
| CVE-2025-38583 | clk: xilinx: vcu: unregister pll_post only if registered correctly | MEDIUM | 5.5 | 6%ile | Microsoft | 2025-08-12 |
| CVE-2025-38591 | bpf: Reject narrower access to pointer ctx fields | MEDIUM | 5.5 | 11%ile | Microsoft | 2025-08-12 |
| CVE-2025-38601 | wifi: ath11k: clear initialized flag for deinit-ed srng lists | MEDIUM | 5.5 | 16%ile | Microsoft | 2025-08-12 |
| CVE-2025-38602 | iwlwifi: Add missing check for alloc_ordered_workqueue | MEDIUM | 5.5 | 6%ile | Microsoft | 2025-08-12 |
| CVE-2025-38604 | wifi: rtl818x: Kill URBs before clearing tx status queue | MEDIUM | 5.5 | 7%ile | Microsoft | 2025-08-12 |
| CVE-2025-38610 | powercap: dtpm_cpu: Fix NULL pointer dereference in get_pd_power_uw() | MEDIUM | 5.5 | 6%ile | Microsoft | 2025-08-12 |
| CVE-2025-38612 | staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc() | MEDIUM | 5.5 | 8%ile | Microsoft | 2025-08-12 |
| CVE-2025-38614 | eventpoll: Fix semi-unbounded recursion | MEDIUM | 5.5 | 8%ile | Microsoft | 2025-08-12 |
| CVE-2025-38616 | tls: handle data disappearing from under the TLS ULP | MEDIUM | 5.5 | 11%ile | Microsoft | 2025-08-12 |
| CVE-2025-38622 | net: drop UFO packets in udp_rcv_segment() | MEDIUM | 5.5 | 8%ile | Microsoft | 2025-08-12 |
| CVE-2025-38623 | PCI: pnv_php: Fix surprise plug detection and recovery | MEDIUM | 5.5 | 6%ile | Microsoft | 2025-08-12 |
| CVE-2025-38624 | PCI: pnv_php: Clean up allocated IRQs on unplug | MEDIUM | 5.5 | 6%ile | Microsoft | 2025-08-12 |
| CVE-2025-38625 | vfio/pds: Fix missing detach_ioas op | MEDIUM | 5.5 | 6%ile | Microsoft | 2025-08-12 |
| CVE-2025-38626 | f2fs: fix to trigger foreground gc during f2fs_map_blocks() in lfs mode | MEDIUM | 5.5 | 6%ile | Microsoft | 2025-08-12 |
| CVE-2025-38627 | f2fs: compress: fix UAF of f2fs_inode_info in f2fs_free_dic | MEDIUM | 5.5 | 7%ile | Microsoft | 2025-08-12 |
| CVE-2025-38630 | fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref | MEDIUM | 5.5 | 7%ile | Microsoft | 2025-08-12 |
| CVE-2025-38634 | power: supply: cpcap-charger: Fix null check for power_supply_get_by_name | MEDIUM | 5.5 | 6%ile | Microsoft | 2025-08-12 |
| CVE-2025-38635 | clk: davinci: Add NULL check in davinci_lpsc_clk_register() | MEDIUM | 5.5 | 8%ile | Microsoft | 2025-08-12 |
| CVE-2025-38636 | rv: Use strings in da monitors tracepoints | MEDIUM | 5.5 | 11%ile | Microsoft | 2025-08-12 |
| CVE-2025-38639 | netfilter: xt_nfacct: don't assume acct name is null-terminated | MEDIUM | 5.5 | 8%ile | Microsoft | 2025-08-12 |
| CVE-2025-38640 | bpf: Disable migration in nf_hook_run_bpf(). | MEDIUM | 5.5 | 7%ile | Microsoft | 2025-08-12 |
| CVE-2025-38643 | wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() | MEDIUM | 5.5 | 8%ile | Microsoft | 2025-08-12 |
| CVE-2025-38644 | wifi: mac80211: reject TDLS operations when station is not associated | MEDIUM | 5.5 | 6%ile | Microsoft | 2025-08-12 |
| CVE-2025-38645 | net/mlx5: Check device memory pointer before usage | MEDIUM | 5.5 | 6%ile | Microsoft | 2025-08-12 |
| CVE-2025-38648 | spi: stm32: Check for cfg availability in stm32_spi_probe | MEDIUM | 5.5 | 6%ile | Microsoft | 2025-08-12 |
| CVE-2025-38650 | hfsplus: remove mutex_lock check in hfsplus_free_extents | MEDIUM | 5.5 | 3%ile | Microsoft | 2025-08-12 |
| CVE-2025-38652 | f2fs: fix to avoid out-of-boundary access in devs.path | MEDIUM | 5.5 | 8%ile | Microsoft | 2025-08-12 |
| CVE-2025-38653 | proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al | MEDIUM | 5.5 | 7%ile | Microsoft | 2025-08-12 |
| CVE-2025-38659 | gfs2: No more self recovery | MEDIUM | 5.5 | 6%ile | Microsoft | 2025-08-12 |
| CVE-2025-38663 | nilfs2: reject invalid file types when reading inodes | MEDIUM | 5.5 | 8%ile | Microsoft | 2025-08-12 |
| CVE-2025-38664 | ice: Fix a null pointer dereference in ice_copy_and_init_pkg() | MEDIUM | 5.5 | 8%ile | Microsoft | 2025-08-12 |
| CVE-2025-38670 | arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack() | MEDIUM | 5.5 | 6%ile | Microsoft | 2025-08-12 |
| CVE-2025-38671 | i2c: qup: jump out of the loop in case of timeout | MEDIUM | 5.5 | 6%ile | Microsoft | 2025-08-12 |
| CVE-2025-9165 | LibTIFF tiffcmp tiffcmp.c InitCCITTFax3 memory leak | MEDIUM | 5.5 | 14%ile | Microsoft | 2025-08-12 |
| CVE-2025-38525 | rxrpc: Fix irq-disabled in local_bh_enable() | MEDIUM | 5.5 | 32%ile | Microsoft | 2025-08-12 |
| CVE-2025-38611 | vmci: Prevent the dispatching of uninitialized payloads | MEDIUM | 5.5 | — | Microsoft | 2025-08-12 |
| CVE-2025-38507 | HID: nintendo: avoid bluetooth suspend/resume stalls | MEDIUM | 5.5 | 10%ile | Microsoft | 2025-08-12 |
| CVE-2025-38597 | drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port | MEDIUM | 5.5 | 10%ile | Microsoft | 2025-08-12 |
| CVE-2025-53136 | NT OS Kernel Information Disclosure Vulnerability | MEDIUM | 5.5 | 62%ile | Microsoft | 2025-08-12 |
| CVE-2025-53156 | Windows Storage Port Driver Information Disclosure Vulnerability | MEDIUM | 5.5 | 54%ile | Microsoft | 2025-08-12 |
| CVE-2025-53769 | Windows Security App Spoofing Vulnerability | MEDIUM | 5.5 | 34%ile | Microsoft | 2025-08-12 |
| CVE-2025-49745 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability | MEDIUM | 5.4 | 48%ile | Microsoft | 2025-08-12 |
| CVE-2025-58058 | github.com/ulikunitz/xz leaks memory when decoding a corrupted multiple LZMA archives | MEDIUM | 5.3 | 38%ile | Microsoft | 2025-08-12 |
| CVE-2025-8837 | JasPer JPEG2000 File jpc_dec.c jpc_dec_dump use after free | MEDIUM | 5.3 | 18%ile | Microsoft | 2025-08-12 |
| CVE-2025-8842 | NASM Netwide Assember preproc.c do_directive use after free | MEDIUM | 5.3 | 16%ile | Microsoft | 2025-08-12 |
| CVE-2025-8843 | NASM Netwide Assember outmacho.c macho_no_dead_strip heap-based overflow | MEDIUM | 5.3 | 22%ile | Microsoft | 2025-08-12 |
| CVE-2025-8845 | NASM Netwide Assember nasm.c assemble_file stack-based overflow | MEDIUM | 5.3 | 23%ile | Microsoft | 2025-08-12 |
| CVE-2025-8846 | NASM Netwide Assember parser.c parse_line stack-based overflow | MEDIUM | 5.3 | 23%ile | Microsoft | 2025-08-12 |
| CVE-2025-8851 | LibTIFF tiffcrop tiffcrop.c readSeparateStripsetoBuffer stack-based overflow | MEDIUM | 5.3 | 10%ile | Microsoft | 2025-08-12 |
| CVE-2025-9390 | vim xxd xxd.c main buffer overflow | MEDIUM | 5.3 | 21%ile | Microsoft | 2025-08-12 |
| CVE-2025-25006 | Microsoft Exchange Server Spoofing Vulnerability | MEDIUM | 5.3 | 60%ile | Microsoft | 2025-08-12 |
| CVE-2025-25007 | Microsoft Exchange Server Spoofing Vulnerability | MEDIUM | 5.3 | 60%ile | Microsoft | 2025-08-12 |
| CVE-2025-55229 | Windows Certificate Spoofing Vulnerability | MEDIUM | 5.3 | 43%ile | Microsoft | 2025-08-12 |
| CVE-2025-38677 | f2fs: fix to avoid out-of-boundary access in dnode page | MEDIUM | 5.1 | 7%ile | Microsoft | 2025-08-12 |
| CVE-2025-38503 | btrfs: fix assertion when building free space tree | MEDIUM | 5.0 | 5%ile | Microsoft | 2025-08-12 |
| CVE-2025-38524 | rxrpc: Fix recv-recv race of completed call | MEDIUM | 4.7 | 22%ile | Microsoft | 2025-08-12 |
| CVE-2025-38590 | net/mlx5e: Remove skb secpath if xfrm state is not found | MEDIUM | 4.7 | 35%ile | Microsoft | 2025-08-12 |
| CVE-2025-38593 | Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()' | MEDIUM | 4.7 | 7%ile | Microsoft | 2025-08-12 |
| CVE-2025-38675 | xfrm: state: initialize state_ptrs earlier in xfrm_state_find | MEDIUM | 4.7 | 2%ile | Microsoft | 2025-08-12 |
| CVE-2025-4877 | Libssh: write beyond bounds in binary to base64 conversion functions | MEDIUM | 4.5 | 10%ile | Microsoft | 2025-08-12 |
| CVE-2025-53765 | Azure Stack Hub Information Disclosure Vulnerability | MEDIUM | 4.4 | 42%ile | Microsoft | 2025-08-12 |
| CVE-2025-49755 | Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability | MEDIUM | 4.3 | 45%ile | Microsoft | 2025-08-12 |
| CVE-2025-49736 | Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability | MEDIUM | 4.3 | 47%ile | Microsoft | 2025-08-12 |
| CVE-2025-54350 | In iperf before 3.19.1, iperf_auth.c has a Base64Decode assertion failure and application exit upon a malformed authenti | LOW | 3.7 | 40%ile | Microsoft | 2025-08-12 |
| CVE-2025-8732 | libxml2 xmlcatalog xmlParseSGMLCatalog recursion | LOW | 3.3 | 15%ile | Microsoft | 2025-08-12 |
| CVE-2025-8835 | JasPer Image Color Space Conversion jas_image.c jas_image_chclrspc null pointer dereference | LOW | 3.3 | 15%ile | Microsoft | 2025-08-12 |
| CVE-2025-8836 | JasPer JPEG2000 Encoder jpc_enc.c jpc_floorlog2 assertion | LOW | 3.3 | 14%ile | Microsoft | 2025-08-12 |
| CVE-2025-8844 | NASM Netwide Assember preproc.c parse_smacro_template null pointer dereference | LOW | 3.3 | 22%ile | Microsoft | 2025-08-12 |
| CVE-2025-8961 | LibTIFF tiffcrop tiffcrop.c main memory corruption | LOW | 3.3 | 12%ile | Microsoft | 2025-08-12 |
| CVE-2025-9301 | cmake cmForEachCommand.cxx ReplayItems assertion | LOW | 3.3 | 5%ile | Microsoft | 2025-08-12 |
| CVE-2025-9403 | jqlang jq JSON jq_test.c run_jq_tests assertion | LOW | 3.3 | 13%ile | Microsoft | 2025-08-12 |
| CVE-2025-8713 | PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table | LOW | 3.1 | 15%ile | Microsoft | 2025-08-12 |
| CVE-2023-26819 | cJSON 1.7.15 might allow a denial of service via a crafted JSON document such as {"a": true, "b": [ null,999999999999999 | LOW | 2.9 | 14%ile | Microsoft | 2025-08-12 |
| CVE-2025-50422 | Cairo through 1.18.4, as used in Poppler through 25.08.0, has an "unscaled->face == NULL" assertion failure for _cairo_f | LOW | 2.9 | 15%ile | Microsoft | 2025-08-12 |
| CVE-2024-13978 | LibTIFF fax2ps tiff2pdf.c t2p_read_tiff_init null pointer dereference | LOW | 2.5 | 14%ile | Microsoft | 2025-08-12 |
| CVE-2025-8534 | libtiff tiff2ps tiff2ps.c PS_Lvl2page null pointer dereference | LOW | 2.5 | 11%ile | Microsoft | 2025-08-12 |
| CVE-2015-3310 | Buffer overflow in the rc_mksid function in plugins/radius/util.c in Paul's PPP Package (ppp) 2.4.6 and earlier, when th | UNKNOWN | — | 93%ile | Microsoft | 2025-08-12 |
| CVE-2022-4743 | A potential memory leak issue was discovered in SDL2 in GLES_CreateTexture() function in SDL_render_gles.c. The vulnerab | UNKNOWN | — | 71%ile | Microsoft | 2025-08-12 |
| CVE-2023-37464 | Incorrect Authentication Tag length usage in AES GCM decryption in OpenIDC/cjose | UNKNOWN | — | 54%ile | Microsoft | 2025-08-12 |
| CVE-2025-55159 | slab allows out-of-bounds access in `get_disjoint_mut` due to incorrect bounds check | UNKNOWN | — | 8%ile | Microsoft | 2025-08-12 |
| CVE-2025-58160 | Tracing logging user input may result in poisoning logs with ANSI escape sequences | UNKNOWN | — | 28%ile | Microsoft | 2025-08-12 |
| CVE-2025-8733 | GNU Bison obprintf.c __obstack_vprintf_internal assertion | UNKNOWN | — | — | Microsoft | 2025-08-12 |
| CVE-2025-8734 | GNU Bison scan-code.c code_free double free | UNKNOWN | — | — | Microsoft | 2025-08-12 |
| CVE-2025-9132 | Chromium: CVE-2025-9132 Out of bounds write in V8 | UNKNOWN | — | 88%ile | Microsoft | 2025-08-12 |
| CVE-2025-8582 | Chromium: CVE-2025-8582 Insufficient validation of untrusted input in DOM | UNKNOWN | — | 16%ile | Microsoft | 2025-08-12 |
| CVE-2025-8581 | Chromium: CVE-2025-8581 Inappropriate implementation in Extensions | UNKNOWN | — | 22%ile | Microsoft | 2025-08-12 |
| CVE-2025-8580 | Chromium: CVE-2025-8580 Inappropriate implementation in Filesystems | UNKNOWN | — | 17%ile | Microsoft | 2025-08-12 |
| CVE-2025-8578 | Chromium: CVE-2025-8578 Use after free in Cast | UNKNOWN | — | 28%ile | Microsoft | 2025-08-12 |
| CVE-2025-8576 | Chromium: CVE-2025-8576 Use after free in Extensions | UNKNOWN | — | 27%ile | Microsoft | 2025-08-12 |
| CVE-2025-8882 | Chromium: CVE-2025-8882 Use after free in Aura | UNKNOWN | — | 18%ile | Microsoft | 2025-08-12 |
| CVE-2025-8881 | Chromium: CVE-2025-8881 Inappropriate implementation in File Picker | UNKNOWN | — | 16%ile | Microsoft | 2025-08-12 |
| CVE-2025-8901 | Chromium: CVE-2025-8901 Out of bounds write in ANGLE | UNKNOWN | — | 26%ile | Microsoft | 2025-08-12 |
| CVE-2025-8880 | Chromium: CVE-2025-8880 Race in V8 | UNKNOWN | — | 19%ile | Microsoft | 2025-08-12 |
| CVE-2025-8879 | Chromium: CVE-2025-8879 Heap buffer overflow in libaom | UNKNOWN | — | 21%ile | Microsoft | 2025-08-12 |
| CVE-2025-8583 | Chromium: CVE-2025-8583 Inappropriate implementation in Permissions | UNKNOWN | — | 15%ile | Microsoft | 2025-08-12 |
| CVE-2025-8579 | Chromium: CVE-2025-8579 Inappropriate implementation in Gemini Live in Chrome | UNKNOWN | — | 17%ile | Microsoft | 2025-08-12 |
| CVE-2025-8577 | Chromium: CVE-2025-8577 Inappropriate implementation in Picture In Picture | UNKNOWN | — | 17%ile | Microsoft | 2025-08-12 |
| CVE-2025-9478 | Chromium: CVE-2025-9478 Use after free in ANGLE | UNKNOWN | — | 94%ile | Microsoft | 2025-08-12 |
| CVE-2025-29813 | Azure DevOps Elevation of Privilege Vulnerability | CRITICAL | 10.0 | 78%ile | Microsoft | 2025-05-13 |
| CVE-2025-29972 | Azure Storage Resource Provider Spoofing Vulnerability | CRITICAL | 9.9 | 89%ile | Microsoft | 2025-05-13 |
| CVE-2025-29827 | Azure Automation Elevation of Privilege Vulnerability | CRITICAL | 9.9 | 77%ile | Microsoft | 2025-05-13 |
| CVE-2025-37879 | 9p/net: fix improper handling of bogus negative read/write replies | CRITICAL | 9.8 | 54%ile | Microsoft | 2025-05-13 |
| CVE-2025-30387 | Document Intelligence Studio On-Prem Elevation of Privilege Vulnerability | CRITICAL | 9.8 | 69%ile | Microsoft | 2025-05-13 |
| CVE-2025-47733 | Microsoft Power Apps Information Disclosure Vulnerability | CRITICAL | 9.1 | 81%ile | Microsoft | 2025-05-13 |
| CVE-2025-37849 | KVM: arm64: Tear down vGIC on failed vCPU creation | HIGH | 8.8 | 20%ile | Microsoft | 2025-05-13 |
| CVE-2025-44904 | hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5VM_memcpyvv function. | HIGH | 8.8 | 40%ile | Microsoft | 2025-05-13 |
| CVE-2025-47273 | setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write | HIGH | 8.8 | 76%ile | Microsoft | 2025-05-13 |
| CVE-2025-47181 | Microsoft Edge (Chromium-based) Update Elevation of Privilege Vulnerability | HIGH | 8.8 | 49%ile | Microsoft | 2025-05-13 |
| CVE-2025-29964 | Windows Media Remote Code Execution Vulnerability | HIGH | 8.8 | 66%ile | Microsoft | 2025-05-13 |
| CVE-2025-29966 | Remote Desktop Client Remote Code Execution Vulnerability | HIGH | 8.8 | 73%ile | Microsoft | 2025-05-13 |
| CVE-2025-29967 | Remote Desktop Client Remote Code Execution Vulnerability | HIGH | 8.8 | 71%ile | Microsoft | 2025-05-13 |
| CVE-2025-29840 | Windows Media Remote Code Execution Vulnerability | HIGH | 8.8 | 64%ile | Microsoft | 2025-05-13 |
| CVE-2025-29962 | Windows Media Remote Code Execution Vulnerability | HIGH | 8.8 | 97%ile | Microsoft | 2025-05-13 |
| CVE-2025-29963 | Windows Media Remote Code Execution Vulnerability | HIGH | 8.8 | 66%ile | Microsoft | 2025-05-13 |
| CVE-2025-47732 | Microsoft Dataverse Remote Code Execution Vulnerability | HIGH | 8.7 | 90%ile | Microsoft | 2025-05-13 |
| CVE-2025-23150 | ext4: fix off-by-one error in do_split | HIGH | 8.4 | 14%ile | Microsoft | 2025-05-13 |
| CVE-2025-4802 | Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker c | HIGH | 8.4 | 48%ile | Microsoft | 2025-05-13 |
| CVE-2025-30377 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 8.4 | 52%ile | Microsoft | 2025-05-13 |
| CVE-2025-30386 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 8.4 | 52%ile | Microsoft | 2025-05-13 |
| CVE-2025-32704 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 8.4 | 39%ile | Microsoft | 2025-05-13 |
| CVE-2025-33072 | Microsoft msagsfeedback.azurewebsites.net Information Disclosure Vulnerability | HIGH | 8.1 | 79%ile | Microsoft | 2025-05-13 |
| CVE-2025-26646 | .NET, Visual Studio, and Build Tools for Visual Studio Spoofing Vulnerability | HIGH | 8.0 | 70%ile | Microsoft | 2025-05-13 |
| CVE-2025-37750 | smb: client: fix UAF in decryption with multichannel | HIGH | 7.8 | 43%ile | Microsoft | 2025-05-13 |
| CVE-2025-37786 | net: dsa: free routing table on probe failure | HIGH | 7.8 | 9%ile | Microsoft | 2025-05-13 |
| CVE-2025-37789 | net: openvswitch: fix nested key length validation in the set() action | HIGH | 7.8 | 13%ile | Microsoft | 2025-05-13 |
| CVE-2025-37798 | codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() | HIGH | 7.8 | 14%ile | Microsoft | 2025-05-13 |
| CVE-2025-37801 | spi: spi-imx: Add check for spi_imx_setupxfer() | HIGH | 7.8 | 12%ile | Microsoft | 2025-05-13 |
| CVE-2025-37803 | udmabuf: fix a buf size overflow issue during udmabuf creation | HIGH | 7.8 | 16%ile | Microsoft | 2025-05-13 |
| CVE-2025-37822 | riscv: uprobes: Add missing fence.i after building the XOL buffer | HIGH | 7.8 | 20%ile | Microsoft | 2025-05-13 |
| CVE-2025-37840 | mtd: rawnand: brcmnand: fix PM resume warning | HIGH | 7.8 | 26%ile | Microsoft | 2025-05-13 |
| CVE-2025-37882 | usb: xhci: Fix isochronous Ring Underrun/Overrun event handling | HIGH | 7.8 | 23%ile | Microsoft | 2025-05-13 |
| CVE-2025-37890 | net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc | HIGH | 7.8 | 13%ile | Microsoft | 2025-05-13 |
| CVE-2025-37916 | pds_core: remove write-after-free of client_id | HIGH | 7.8 | 14%ile | Microsoft | 2025-05-13 |
| CVE-2025-37923 | tracing: Fix oob write in trace_seq_to_buffer() | HIGH | 7.8 | 16%ile | Microsoft | 2025-05-13 |
| CVE-2025-37938 | tracing: Verify event formats that have "%*p.." | HIGH | 7.8 | 11%ile | Microsoft | 2025-05-13 |
| CVE-2025-37944 | wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process | HIGH | 7.8 | 18%ile | Microsoft | 2025-05-13 |
| CVE-2025-37947 | ksmbd: prevent out-of-bounds stream writes by validating *pos | HIGH | 7.8 | 51%ile | Microsoft | 2025-05-13 |
| CVE-2025-37926 | ksmbd: fix use-after-free in ksmbd_session_rpc_open | HIGH | 7.8 | 47%ile | Microsoft | 2025-05-13 |
| CVE-2025-37899 | ksmbd: fix use-after-free in session logoff | HIGH | 7.8 | 59%ile | Microsoft | 2025-05-13 |
| CVE-2025-37928 | dm-bufio: don't schedule in atomic context | HIGH | 7.8 | 54%ile | Microsoft | 2025-05-13 |
| CVE-2023-53072 | mptcp: use the workqueue to destroy unaccepted sockets | HIGH | 7.8 | 10%ile | Microsoft | 2025-05-13 |
| CVE-2025-29970 | Microsoft Brokering File System Elevation of Privilege Vulnerability | HIGH | 7.8 | 45%ile | Microsoft | 2025-05-13 |
| CVE-2025-29975 | Microsoft PC Manager Elevation of Privilege Vulnerability | HIGH | 7.8 | 45%ile | Microsoft | 2025-05-13 |
| CVE-2025-29976 | Microsoft SharePoint Server Elevation of Privilege Vulnerability | HIGH | 7.8 | 51%ile | Microsoft | 2025-05-13 |
| CVE-2025-29977 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 51%ile | Microsoft | 2025-05-13 |
| CVE-2025-29978 | Microsoft PowerPoint Remote Code Execution Vulnerability | HIGH | 7.8 | 46%ile | Microsoft | 2025-05-13 |
| CVE-2025-29979 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 52%ile | Microsoft | 2025-05-13 |
| CVE-2025-30375 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 49%ile | Microsoft | 2025-05-13 |
| CVE-2025-30376 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 49%ile | Microsoft | 2025-05-13 |
| CVE-2025-30379 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 47%ile | Microsoft | 2025-05-13 |
| CVE-2025-30381 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 47%ile | Microsoft | 2025-05-13 |
| CVE-2025-30382 | Microsoft SharePoint Server Remote Code Execution Vulnerability | HIGH | 7.8 | 85%ile | Microsoft | 2025-05-13 |
| CVE-2025-30383 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 47%ile | Microsoft | 2025-05-13 |
| CVE-2025-30393 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 40%ile | Microsoft | 2025-05-13 |
| CVE-2025-30400 | Microsoft DWM Core Library Elevation of Privilege Vulnerability | HIGH | 7.8 | 80%ile | Microsoft | 2025-05-13 |
| CVE-2025-32701 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 73%ile | Microsoft | 2025-05-13 |
| CVE-2025-32706 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 84%ile | Microsoft | 2025-05-13 |
| CVE-2025-32709 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | HIGH | 7.8 | 79%ile | Microsoft | 2025-05-13 |
| CVE-2025-30385 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 45%ile | Microsoft | 2025-05-13 |
| CVE-2025-30388 | Windows Graphics Component Remote Code Execution Vulnerability | HIGH | 7.8 | 91%ile | Microsoft | 2025-05-13 |
| CVE-2025-32702 | Visual Studio Remote Code Execution Vulnerability | HIGH | 7.8 | 50%ile | Microsoft | 2025-05-13 |
| CVE-2025-32705 | Microsoft Outlook Remote Code Execution Vulnerability | HIGH | 7.8 | 44%ile | Microsoft | 2025-05-13 |
| CVE-2025-32707 | NTFS Elevation of Privilege Vulnerability | HIGH | 7.8 | 46%ile | Microsoft | 2025-05-13 |
| CVE-2025-47161 | Microsoft Defender for Endpoint Elevation of Privilege Vulnerability | HIGH | 7.8 | 58%ile | Microsoft | 2025-05-13 |
| CVE-2025-24063 | Kernel Streaming Service Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 54%ile | Microsoft | 2025-05-13 |
| CVE-2025-29833 | Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability | HIGH | 7.7 | 40%ile | Microsoft | 2025-05-13 |
| CVE-2024-47619 | tranport: TLS host name wildcard matching too lax | HIGH | 7.5 | 31%ile | Microsoft | 2025-05-13 |
| CVE-2025-23166 | The C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user-supplied inputs when executi | HIGH | 7.5 | 57%ile | Microsoft | 2025-05-13 |
| CVE-2025-40775 | DNS message with invalid TSIG causes an assertion failure | HIGH | 7.5 | 97%ile | Microsoft | 2025-05-13 |
| CVE-2025-47291 | containerd CRI plugin: Incorrect cgroup hierarchy assignment for containers running in usernamespaced Kubernetes pods. | HIGH | 7.5 | 22%ile | Microsoft | 2025-05-13 |
| CVE-2025-48060 | AddressSanitizer: stack-buffer-overflow in jq_fuzz_execute (jv_string_vfmt) | HIGH | 7.5 | 46%ile | Microsoft | 2025-05-13 |
| CVE-2025-4948 | Libsoup: integer underflow in soup_multipart_new_from_message() leading to denial of service in libsoup | HIGH | 7.5 | 57%ile | Microsoft | 2025-05-13 |
| CVE-2025-0649 | Stack Exhaustion In Tensorflow Serving | HIGH | 7.5 | 9%ile | Microsoft | 2025-05-13 |
| CVE-2025-29969 | MS-EVEN RPC Remote Code Execution Vulnerability | HIGH | 7.5 | 67%ile | Microsoft | 2025-05-13 |
| CVE-2025-29971 | Web Threat Defense (WTD.sys) Denial of Service Vulnerability | HIGH | 7.5 | 99%ile | Microsoft | 2025-05-13 |
| CVE-2025-26677 | Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability | HIGH | 7.5 | 78%ile | Microsoft | 2025-05-13 |
| CVE-2025-29831 | Windows Remote Desktop Services Remote Code Execution Vulnerability | HIGH | 7.5 | 63%ile | Microsoft | 2025-05-13 |
| CVE-2025-29842 | UrlMon Security Feature Bypass Vulnerability | HIGH | 7.5 | 38%ile | Microsoft | 2025-05-13 |
| CVE-2025-30397 | Scripting Engine Memory Corruption Vulnerability | HIGH | 7.5 | 98%ile | Microsoft | 2025-05-13 |
| CVE-2025-30384 | Microsoft SharePoint Server Remote Code Execution Vulnerability | HIGH | 7.4 | 72%ile | Microsoft | 2025-05-13 |
| CVE-2025-29838 | Windows ExecutionContext Driver Elevation of Privilege Vulnerability | HIGH | 7.4 | 34%ile | Microsoft | 2025-05-13 |
| CVE-2025-44905 | hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5Z__filter_scaleoffset function. | HIGH | 7.3 | 41%ile | Microsoft | 2025-05-13 |
| CVE-2025-29826 | Microsoft Dataverse Elevation of Privilege Vulnerability | HIGH | 7.3 | 59%ile | Microsoft | 2025-05-13 |
| CVE-2025-37738 | ext4: ignore xattrs past end | HIGH | 7.1 | 12%ile | Microsoft | 2025-05-13 |
| CVE-2025-37800 | driver core: fix potential NULL pointer dereference in dev_uevent() | HIGH | 7.1 | 11%ile | Microsoft | 2025-05-13 |
| CVE-2025-21264 | Visual Studio Code Security Feature Bypass Vulnerability | HIGH | 7.1 | 56%ile | Microsoft | 2025-05-13 |
| CVE-2025-37780 | isofs: Prevent the use of too small fid | HIGH | 7.0 | 12%ile | Microsoft | 2025-05-13 |
| CVE-2025-37797 | net_sched: hfsc: Fix a UAF vulnerability in class handling | HIGH | 7.0 | 13%ile | Microsoft | 2025-05-13 |
| CVE-2025-37807 | bpf: Fix kmemleak warning for percpu hashmap | HIGH | 7.0 | 16%ile | Microsoft | 2025-05-13 |
| CVE-2025-37831 | cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate() | HIGH | 7.0 | 9%ile | Microsoft | 2025-05-13 |
| CVE-2025-37892 | mtd: inftlcore: Add error check for inftl_read_oob() | HIGH | 7.0 | 11%ile | Microsoft | 2025-05-13 |
| CVE-2025-37897 | wifi: plfxlc: Remove erroneous assert in plfxlc_mac_release | HIGH | 7.0 | 10%ile | Microsoft | 2025-05-13 |
| CVE-2025-37903 | drm/amd/display: Fix slab-use-after-free in hdcp | HIGH | 7.0 | 11%ile | Microsoft | 2025-05-13 |
| CVE-2025-37911 | bnxt_en: Fix out-of-bound memcpy() during ethtool -w | HIGH | 7.0 | 15%ile | Microsoft | 2025-05-13 |
| CVE-2025-37914 | net_sched: ets: Fix double list add in class with netem as child qdisc | HIGH | 7.0 | 14%ile | Microsoft | 2025-05-13 |
| CVE-2025-37921 | vxlan: vnifilter: Fix unlocked deletion of default FDB entry | HIGH | 7.0 | 15%ile | Microsoft | 2025-05-13 |
| CVE-2025-37936 | perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value. | HIGH | 7.0 | 12%ile | Microsoft | 2025-05-13 |
| CVE-2025-37940 | ftrace: Add cond_resched() to ftrace_graph_set_hash() | HIGH | 7.0 | 5%ile | Microsoft | 2025-05-13 |
| CVE-2025-37948 | arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs | HIGH | 7.0 | 10%ile | Microsoft | 2025-05-13 |
| CVE-2025-37954 | smb: client: Avoid race in open_cached_dir with lease breaks | HIGH | 7.0 | 31%ile | Microsoft | 2025-05-13 |
| CVE-2025-37958 | mm/huge_memory: fix dereferencing invalid pmd migration entry | HIGH | 7.0 | 14%ile | Microsoft | 2025-05-13 |
| CVE-2025-37960 | memblock: Accept allocated memory before use in memblock_double_array() | HIGH | 7.0 | 8%ile | Microsoft | 2025-05-13 |
| CVE-2025-37963 | arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users | HIGH | 7.0 | 10%ile | Microsoft | 2025-05-13 |
| CVE-2025-37969 | iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo | HIGH | 7.0 | 8%ile | Microsoft | 2025-05-13 |
| CVE-2025-37982 | wifi: wl1251: fix memory leak in wl1251_tx_work | HIGH | 7.0 | 9%ile | Microsoft | 2025-05-13 |
| CVE-2025-37988 | fix a couple of races in MNT_TREE_BENEATH handling by do_move_mount() | HIGH | 7.0 | 4%ile | Microsoft | 2025-05-13 |
| CVE-2025-37995 | module: ensure that kobject_put() is safe for module type kobjects | HIGH | 7.0 | 13%ile | Microsoft | 2025-05-13 |
| CVE-2025-37997 | netfilter: ipset: fix region locking in hash types | HIGH | 7.0 | 8%ile | Microsoft | 2025-05-13 |
| CVE-2025-5222 | Icu: stack buffer overflow in the srbroot::addtag function | HIGH | 7.0 | 38%ile | Microsoft | 2025-05-13 |
| CVE-2025-37968 | iio: light: opt3001: fix deadlock due to concurrent flag access | HIGH | 7.0 | 5%ile | Microsoft | 2025-05-13 |
| CVE-2025-37987 | pds_core: Prevent possible adminq overflow/stuck condition | HIGH | 7.0 | 9%ile | Microsoft | 2025-05-13 |
| CVE-2025-37977 | scsi: ufs: exynos: Disable iocc if dma-coherent property isn't set | HIGH | 7.0 | 17%ile | Microsoft | 2025-05-13 |
| CVE-2025-37976 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | HIGH | 7.0 | — | Microsoft | 2025-05-13 |
| CVE-2025-29973 | Microsoft Azure File Sync Elevation of Privilege Vulnerability | HIGH | 7.0 | 24%ile | Microsoft | 2025-05-13 |
| CVE-2025-30378 | Microsoft SharePoint Server Remote Code Execution Vulnerability | HIGH | 7.0 | 73%ile | Microsoft | 2025-05-13 |
| CVE-2025-27468 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability | HIGH | 7.0 | 17%ile | Microsoft | 2025-05-13 |
| CVE-2025-29841 | Universal Print Management Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 34%ile | Microsoft | 2025-05-13 |
| CVE-2025-37922 | book3s64/radix : Align section vmemmap start address to PAGE_SIZE | MEDIUM | 6.7 | 11%ile | Microsoft | 2025-05-13 |
| CVE-2025-37973 | wifi: cfg80211: fix out-of-bounds access during multi-link element defragmentation | MEDIUM | 6.7 | 15%ile | Microsoft | 2025-05-13 |
| CVE-2025-26684 | Microsoft Defender Elevation of Privilege Vulnerability | MEDIUM | 6.7 | 38%ile | Microsoft | 2025-05-13 |
| CVE-2025-27488 | Microsoft Windows Hardware Lab Kit (HLK) Elevation of Privilege Vulnerability | MEDIUM | 6.7 | 34%ile | Microsoft | 2025-05-13 |
| CVE-2025-46836 | net-tools Stack-based Buffer Overflow vulnerability | MEDIUM | 6.6 | 10%ile | Microsoft | 2025-05-13 |
| CVE-2025-23167 | A flaw in Node.js 20's HTTP parser allows improper termination of HTTP/1 headers using `\r\n\rX` instead of the required | MEDIUM | 6.5 | 43%ile | Microsoft | 2025-05-13 |
| CVE-2025-37961 | ipvs: fix uninit-value for saddr in do_output_route4 | MEDIUM | 6.5 | 9%ile | Microsoft | 2025-05-13 |
| CVE-2025-4373 | Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar | MEDIUM | 6.5 | 50%ile | Microsoft | 2025-05-13 |
| CVE-2025-4575 | The x509 application adds trusted use instead of rejected use | MEDIUM | 6.5 | 32%ile | Microsoft | 2025-05-13 |
| CVE-2025-47268 | ping in iputils before 20250602 allows a denial of service | MEDIUM | 6.5 | 78%ile | Microsoft | 2025-05-13 |
| CVE-2025-4947 | QUIC certificate check skip with wolfSSL | MEDIUM | 6.5 | 23%ile | Microsoft | 2025-05-13 |
| CVE-2025-4969 | Libsoup: off-by-one out-of-bounds read in find_boundary() in soup-multipart.c | MEDIUM | 6.5 | 60%ile | Microsoft | 2025-05-13 |
| CVE-2024-52979 | Elasticsearch Uncontrolled Resource Consumption vulnerability | MEDIUM | 6.5 | 52%ile | Microsoft | 2025-05-13 |
| CVE-2025-46332 | Information Disclosure via Flags override link | MEDIUM | 6.5 | 27%ile | Microsoft | 2025-05-13 |
| CVE-2025-37984 | crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() | MEDIUM | 6.5 | 9%ile | Microsoft | 2025-05-13 |
| CVE-2025-29825 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | MEDIUM | 6.5 | 59%ile | Microsoft | 2025-05-13 |
| CVE-2025-29959 | Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability | MEDIUM | 6.5 | 75%ile | Microsoft | 2025-05-13 |
| CVE-2025-29960 | Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability | MEDIUM | 6.5 | 75%ile | Microsoft | 2025-05-13 |
| CVE-2025-29968 | Active Directory Certificate Services (AD CS) Denial of Service Vulnerability | MEDIUM | 6.5 | 81%ile | Microsoft | 2025-05-13 |
| CVE-2025-26685 | Microsoft Defender for Identity Spoofing Vulnerability | MEDIUM | 6.5 | 55%ile | Microsoft | 2025-05-13 |
| CVE-2025-29830 | Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability | MEDIUM | 6.5 | 72%ile | Microsoft | 2025-05-13 |
| CVE-2025-29832 | Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability | MEDIUM | 6.5 | 72%ile | Microsoft | 2025-05-13 |
| CVE-2025-29835 | Windows Remote Access Connection Manager Information Disclosure Vulnerability | MEDIUM | 6.5 | 72%ile | Microsoft | 2025-05-13 |
| CVE-2025-29836 | Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability | MEDIUM | 6.5 | 73%ile | Microsoft | 2025-05-13 |
| CVE-2025-29958 | Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability | MEDIUM | 6.5 | 73%ile | Microsoft | 2025-05-13 |
| CVE-2025-29961 | Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability | MEDIUM | 6.5 | 73%ile | Microsoft | 2025-05-13 |
| CVE-2025-37861 | scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue | MEDIUM | 6.3 | 26%ile | Microsoft | 2025-05-13 |
| CVE-2025-37913 | net_sched: qfq: Fix double list add in class with netem as child qdisc | MEDIUM | 6.3 | 15%ile | Microsoft | 2025-05-13 |
| CVE-2025-37915 | net_sched: drr: Fix double list add in class with netem as child qdisc | MEDIUM | 6.3 | 13%ile | Microsoft | 2025-05-13 |
| CVE-2025-29955 | Windows Hyper-V Denial of Service Vulnerability | MEDIUM | 6.2 | 49%ile | Microsoft | 2025-05-13 |
| CVE-2025-29957 | Windows Deployment Services Denial of Service Vulnerability | MEDIUM | 6.2 | 50%ile | Microsoft | 2025-05-13 |
| CVE-2025-22247 | Insecure file handling vulnerability | MEDIUM | 6.1 | 19%ile | Microsoft | 2025-05-13 |
| CVE-2025-23141 | KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses | MEDIUM | 6.1 | 12%ile | Microsoft | 2025-05-13 |
| CVE-2025-37749 | net: ppp: Add bound checking for skb data on ppp_sync_txmung | MEDIUM | 6.1 | 35%ile | Microsoft | 2025-05-13 |
| CVE-2025-37757 | tipc: fix memory leak in tipc_link_xmit | MEDIUM | 6.1 | 39%ile | Microsoft | 2025-05-13 |
| CVE-2025-40909 | Perl threads have a working directory race condition where file operations may target unintended paths | MEDIUM | 5.9 | 43%ile | Microsoft | 2025-05-13 |
| CVE-2025-4207 | PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation | MEDIUM | 5.9 | 55%ile | Microsoft | 2025-05-13 |
| CVE-2025-4382 | Grub2: grub allow access to encrypted device through cli once root device is unlocked via tpm | MEDIUM | 5.9 | 29%ile | Microsoft | 2025-05-13 |
| CVE-2025-30394 | Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability | MEDIUM | 5.9 | 98%ile | Microsoft | 2025-05-13 |
| CVE-2025-29954 | Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability | MEDIUM | 5.9 | 74%ile | Microsoft | 2025-05-13 |
| CVE-2025-29974 | Windows Kernel Information Disclosure Vulnerability | MEDIUM | 5.7 | 55%ile | Microsoft | 2025-05-13 |
| CVE-2025-37933 | octeon_ep: Fix host hang issue during device reboot | MEDIUM | 5.6 | 11%ile | Microsoft | 2025-05-13 |
| CVE-2022-49764 | bpf: Prevent bpf program recursion for raw tracepoint probes | MEDIUM | 5.5 | 8%ile | Microsoft | 2025-05-13 |
| CVE-2022-49766 | netlink: Bounds-check struct nlmsgerr creation | MEDIUM | 5.5 | 6%ile | Microsoft | 2025-05-13 |
| CVE-2022-49803 | netdevsim: Fix memory leak of nsim_dev->fa_cookie | MEDIUM | 5.5 | 10%ile | Microsoft | 2025-05-13 |
| CVE-2022-49829 | drm/scheduler: fix fence ref counting | MEDIUM | 5.5 | 6%ile | Microsoft | 2025-05-13 |
| CVE-2022-49833 | btrfs: zoned: clone zoned device info when cloning a device | MEDIUM | 5.5 | 6%ile | Microsoft | 2025-05-13 |
| CVE-2022-49901 | blk-mq: Fix kmemleak in blk_mq_init_allocated_queue | MEDIUM | 5.5 | 6%ile | Microsoft | 2025-05-13 |
| CVE-2022-49932 | KVM: VMX: Do _all_ initialization before exposing /dev/kvm to userspace | MEDIUM | 5.5 | 12%ile | Microsoft | 2025-05-13 |
| CVE-2023-53042 | drm/amd/display: Do not set DRR on pipe Commit | MEDIUM | 5.5 | 10%ile | Microsoft | 2025-05-13 |
| CVE-2023-53064 | iavf: fix hang on reboot with ice | MEDIUM | 5.5 | 10%ile | Microsoft | 2025-05-13 |
| CVE-2023-53068 | net: usb: lan78xx: Limit packet length to skb->len | MEDIUM | 5.5 | 10%ile | Microsoft | 2025-05-13 |
| CVE-2023-53074 | drm/amdgpu: fix ttm_bo calltrace warning in psp_hw_fini | MEDIUM | 5.5 | 10%ile | Microsoft | 2025-05-13 |
| CVE-2023-53093 | tracing: Do not let histogram values have some modifiers | MEDIUM | 5.5 | 10%ile | Microsoft | 2025-05-13 |
| CVE-2023-53105 | net/mlx5e: Fix cleanup null-ptr deref on encap lock | MEDIUM | 5.5 | 10%ile | Microsoft | 2025-05-13 |
| CVE-2024-58098 | bpf: track changes_pkt_data property for global functions | MEDIUM | 5.5 | 9%ile | Microsoft | 2025-05-13 |
| CVE-2024-58100 | bpf: check changes_pkt_data property for extension programs | MEDIUM | 5.5 | 9%ile | Microsoft | 2025-05-13 |
| CVE-2024-58237 | bpf: consider that tail calls invalidate packet pointers | MEDIUM | 5.5 | 9%ile | Microsoft | 2025-05-13 |
| CVE-2025-23140 | misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error | MEDIUM | 5.5 | 13%ile | Microsoft | 2025-05-13 |
| CVE-2025-23142 | sctp: detect and prevent references to a freed transport in sendmsg | MEDIUM | 5.5 | 13%ile | Microsoft | 2025-05-13 |
| CVE-2025-23143 | net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod. | MEDIUM | 5.5 | 13%ile | Microsoft | 2025-05-13 |
| CVE-2025-23144 | backlight: led_bl: Hold led_access lock when calling led_sysfs_disable() | MEDIUM | 5.5 | 13%ile | Microsoft | 2025-05-13 |
| CVE-2025-23145 | mptcp: fix NULL pointer in can_accept_new_subflow | MEDIUM | 5.5 | 48%ile | Microsoft | 2025-05-13 |
| CVE-2025-23146 | mfd: ene-kb3930: Fix a potential NULL pointer dereference | MEDIUM | 5.5 | 12%ile | Microsoft | 2025-05-13 |
| CVE-2025-23147 | i3c: Add NULL pointer check in i3c_master_queue_ibi() | MEDIUM | 5.5 | 12%ile | Microsoft | 2025-05-13 |
| CVE-2025-23148 | soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe() | MEDIUM | 5.5 | 12%ile | Microsoft | 2025-05-13 |
| CVE-2025-23155 | net: stmmac: Fix accessing freed irq affinity_hint | MEDIUM | 5.5 | 11%ile | Microsoft | 2025-05-13 |
| CVE-2025-23156 | media: venus: hfi_parser: refactor hfi packet parsing logic | MEDIUM | 5.5 | 13%ile | Microsoft | 2025-05-13 |
| CVE-2025-23157 | media: venus: hfi_parser: add check to avoid out of bound access | MEDIUM | 5.5 | 13%ile | Microsoft | 2025-05-13 |
| CVE-2025-23158 | media: venus: hfi: add check to handle incorrect queue size | MEDIUM | 5.5 | 13%ile | Microsoft | 2025-05-13 |
| CVE-2025-23159 | media: venus: hfi: add a check to handle OOB in sfr region | MEDIUM | 5.5 | 14%ile | Microsoft | 2025-05-13 |
| CVE-2025-23163 | net: vlan: don't propagate flags on open | MEDIUM | 5.5 | 5%ile | Microsoft | 2025-05-13 |
| CVE-2025-37739 | f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks() | MEDIUM | 5.5 | 10%ile | Microsoft | 2025-05-13 |
| CVE-2025-37740 | jfs: add sanity check for agwidth in dbMount | MEDIUM | 5.5 | 10%ile | Microsoft | 2025-05-13 |
| CVE-2025-37741 | jfs: Prevent copying of nlink with value 0 from disk inode | MEDIUM | 5.5 | 6%ile | Microsoft | 2025-05-13 |
| CVE-2025-37742 | jfs: Fix uninit-value access of imap allocated in the diMount() function | MEDIUM | 5.5 | 9%ile | Microsoft | 2025-05-13 |
| CVE-2025-37744 | wifi: ath12k: fix memory leak in ath12k_pci_remove() | MEDIUM | 5.5 | 5%ile | Microsoft | 2025-05-13 |
| CVE-2025-37745 | PM: hibernate: Avoid deadlock in hibernate_compressor_param_set() | MEDIUM | 5.5 | 4%ile | Microsoft | 2025-05-13 |
| CVE-2025-37747 | perf: Fix hang while freeing sigtrap event | MEDIUM | 5.5 | 16%ile | Microsoft | 2025-05-13 |
| CVE-2025-37754 | drm/i915/huc: Fix fence not released on early probe errors | MEDIUM | 5.5 | 12%ile | Microsoft | 2025-05-13 |
| CVE-2025-37755 | net: libwx: handle page_pool_dev_alloc_pages error | MEDIUM | 5.5 | 32%ile | Microsoft | 2025-05-13 |
| CVE-2025-37765 | drm/nouveau: prime: fix ttm_bo_delayed_delete oops | MEDIUM | 5.5 | 13%ile | Microsoft | 2025-05-13 |
| CVE-2025-37766 | drm/amd/pm: Prevent division by zero | MEDIUM | 5.5 | 12%ile | Microsoft | 2025-05-13 |
| CVE-2025-37767 | drm/amd/pm: Prevent division by zero | MEDIUM | 5.5 | 10%ile | Microsoft | 2025-05-13 |
| CVE-2025-37768 | drm/amd/pm: Prevent division by zero | MEDIUM | 5.5 | 11%ile | Microsoft | 2025-05-13 |
| CVE-2025-37769 | drm/amd/pm/smu11: Prevent division by zero | MEDIUM | 5.5 | 10%ile | Microsoft | 2025-05-13 |
| CVE-2025-37770 | drm/amd/pm: Prevent division by zero | MEDIUM | 5.5 | 11%ile | Microsoft | 2025-05-13 |
| CVE-2025-37771 | drm/amd/pm: Prevent division by zero | MEDIUM | 5.5 | 10%ile | Microsoft | 2025-05-13 |
| CVE-2025-37772 | RDMA/cma: Fix workqueue crash in cma_netevent_work_handler | MEDIUM | 5.5 | 10%ile | Microsoft | 2025-05-13 |
| CVE-2025-37773 | virtiofs: add filesystem context source name check | MEDIUM | 5.5 | 10%ile | Microsoft | 2025-05-13 |
| CVE-2025-37775 | ksmbd: fix the warning from __kernel_write_iter | MEDIUM | 5.5 | 8%ile | Microsoft | 2025-05-13 |
| CVE-2025-37776 | ksmbd: fix use-after-free in smb_break_all_levII_oplock() | MEDIUM | 5.5 | 30%ile | Microsoft | 2025-05-13 |
| CVE-2025-37777 | ksmbd: fix use-after-free in __smb2_lease_break_noti() | MEDIUM | 5.5 | 32%ile | Microsoft | 2025-05-13 |
| CVE-2025-37778 | ksmbd: Fix dangling pointer in krb_authenticate | MEDIUM | 5.5 | 67%ile | Microsoft | 2025-05-13 |
| CVE-2025-37781 | i2c: cros-ec-tunnel: defer probe if parent EC is not present | MEDIUM | 5.5 | 11%ile | Microsoft | 2025-05-13 |
| CVE-2025-37782 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | MEDIUM | 5.5 | — | Microsoft | 2025-05-13 |
| CVE-2025-37787 | net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered | MEDIUM | 5.5 | 9%ile | Microsoft | 2025-05-13 |
| CVE-2025-37790 | net: mctp: Set SOCK_RCU_FREE | MEDIUM | 5.5 | 15%ile | Microsoft | 2025-05-13 |
| CVE-2025-37792 | Bluetooth: btrtl: Prevent potential NULL dereference | MEDIUM | 5.5 | 10%ile | Microsoft | 2025-05-13 |
| CVE-2025-37794 | wifi: mac80211: Purge vif txq in ieee80211_do_stop() | MEDIUM | 5.5 | 10%ile | Microsoft | 2025-05-13 |
| CVE-2025-37796 | wifi: at76c50x: fix use after free access in at76_disconnect | MEDIUM | 5.5 | 10%ile | Microsoft | 2025-05-13 |
| CVE-2025-37804 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | MEDIUM | 5.5 | — | Microsoft | 2025-05-13 |
| CVE-2025-37805 | sound/virtio: Fix cancel_sync warnings on uninitialized work_structs | MEDIUM | 5.5 | 10%ile | Microsoft | 2025-05-13 |
| CVE-2025-37808 | crypto: null - Use spin lock instead of mutex | MEDIUM | 5.5 | 12%ile | Microsoft | 2025-05-13 |
| CVE-2025-37810 | usb: dwc3: gadget: check that event count does not exceed event buffer length | MEDIUM | 5.5 | 16%ile | Microsoft | 2025-05-13 |
| CVE-2025-37812 | usb: cdns3: Fix deadlock when using NCM gadget | MEDIUM | 5.5 | 5%ile | Microsoft | 2025-05-13 |
| CVE-2025-37817 | mcb: fix a double free bug in chameleon_parse_gdd() | MEDIUM | 5.5 | 12%ile | Microsoft | 2025-05-13 |
| CVE-2025-37818 | LoongArch: Return NULL from huge_pte_offset() for invalid PMD | MEDIUM | 5.5 | 8%ile | Microsoft | 2025-05-13 |
| CVE-2025-37819 | irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() | MEDIUM | 5.5 | 13%ile | Microsoft | 2025-05-13 |
| CVE-2025-37820 | xen-netfront: handle NULL returned by xdp_convert_buff_to_frame() | MEDIUM | 5.5 | 34%ile | Microsoft | 2025-05-13 |
| CVE-2025-37823 | net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too | MEDIUM | 5.5 | 14%ile | Microsoft | 2025-05-13 |
| CVE-2025-37824 | tipc: fix NULL pointer dereference in tipc_mon_reinit_self() | MEDIUM | 5.5 | 11%ile | Microsoft | 2025-05-13 |
| CVE-2025-37826 | scsi: ufs: core: Add NULL check in ufshcd_mcq_compl_pending_transfer() | MEDIUM | 5.5 | 8%ile | Microsoft | 2025-05-13 |
| CVE-2025-37828 | scsi: ufs: mcq: Add NULL check in ufshcd_mcq_abort() | MEDIUM | 5.5 | 8%ile | Microsoft | 2025-05-13 |
| CVE-2025-37829 | cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate() | MEDIUM | 5.5 | 11%ile | Microsoft | 2025-05-13 |
| CVE-2025-37830 | cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate() | MEDIUM | 5.5 | 9%ile | Microsoft | 2025-05-13 |
| CVE-2025-37834 | mm/vmscan: don't try to reclaim hwpoison folio | MEDIUM | 5.5 | 8%ile | Microsoft | 2025-05-13 |
| CVE-2025-37836 | PCI: Fix reference leak in pci_register_host_bridge() | MEDIUM | 5.5 | 24%ile | Microsoft | 2025-05-13 |
| CVE-2025-37839 | jbd2: remove wrong sb->s_sequence check | MEDIUM | 5.5 | 27%ile | Microsoft | 2025-05-13 |
| CVE-2025-37841 | pm: cpupower: bench: Prevent NULL dereference on malloc failure | MEDIUM | 5.5 | 23%ile | Microsoft | 2025-05-13 |
| CVE-2025-37842 | spi: fsl-qspi: use devm function instead of driver remove | MEDIUM | 5.5 | 21%ile | Microsoft | 2025-05-13 |
| CVE-2025-37844 | cifs: avoid NULL pointer dereference in dbg call | MEDIUM | 5.5 | 23%ile | Microsoft | 2025-05-13 |
| CVE-2025-37851 | fbdev: omapfb: Add 'plane' value check | MEDIUM | 5.5 | 23%ile | Microsoft | 2025-05-13 |
| CVE-2025-37852 | drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create() | MEDIUM | 5.5 | 21%ile | Microsoft | 2025-05-13 |
| CVE-2025-37853 | drm/amdkfd: debugfs hang_hws skip GPU with MES | MEDIUM | 5.5 | 21%ile | Microsoft | 2025-05-13 |
| CVE-2025-37854 | drm/amdkfd: Fix mode1 reset crash issue | MEDIUM | 5.5 | 18%ile | Microsoft | 2025-05-13 |
| CVE-2025-37856 | btrfs: harden block_group::bg_list against list_del() races | MEDIUM | 5.5 | 24%ile | Microsoft | 2025-05-13 |
| CVE-2025-37857 | scsi: st: Fix array overflow in st_setup() | MEDIUM | 5.5 | 24%ile | Microsoft | 2025-05-13 |
| CVE-2025-37859 | page_pool: avoid infinite loop to schedule delayed worker | MEDIUM | 5.5 | 24%ile | Microsoft | 2025-05-13 |
| CVE-2025-37862 | HID: pidff: Fix null pointer dereference in pidff_find_fields | MEDIUM | 5.5 | 24%ile | Microsoft | 2025-05-13 |
| CVE-2025-37864 | net: dsa: clean up FDB, MDB, VLAN entries on unbind | MEDIUM | 5.5 | 23%ile | Microsoft | 2025-05-13 |
| CVE-2025-37865 | net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported | MEDIUM | 5.5 | 21%ile | Microsoft | 2025-05-13 |
| CVE-2025-37867 | RDMA/core: Silence oversized kvmalloc() warning | MEDIUM | 5.5 | 23%ile | Microsoft | 2025-05-13 |
| CVE-2025-37874 | net: ngbe: fix memory leak in ngbe_probe() error path | MEDIUM | 5.5 | 25%ile | Microsoft | 2025-05-13 |
| CVE-2025-37875 | igc: fix PTM cycle trigger logic | MEDIUM | 5.5 | 21%ile | Microsoft | 2025-05-13 |
| CVE-2025-37877 | iommu: Clear iommu-dma ops on cleanup | MEDIUM | 5.5 | 20%ile | Microsoft | 2025-05-13 |
| CVE-2025-37878 | perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init | MEDIUM | 5.5 | 20%ile | Microsoft | 2025-05-13 |
| CVE-2025-37883 | s390/sclp: Add check for get_zeroed_page() | MEDIUM | 5.5 | 21%ile | Microsoft | 2025-05-13 |
| CVE-2025-37884 | bpf: Fix deadlock between rcu_tasks_trace and event_mutex. | MEDIUM | 5.5 | 12%ile | Microsoft | 2025-05-13 |
| CVE-2025-37885 | KVM: x86: Reset IRTE to host control if *new* route isn't postable | MEDIUM | 5.5 | 24%ile | Microsoft | 2025-05-13 |
| CVE-2025-37886 | pds_core: make wait_context part of q_info | MEDIUM | 5.5 | 23%ile | Microsoft | 2025-05-13 |
| CVE-2025-37887 | pds_core: handle unsupported PDS_CORE_CMD_FW_CONTROL result | MEDIUM | 5.5 | 21%ile | Microsoft | 2025-05-13 |
| CVE-2025-37891 | ALSA: ump: Fix buffer overflow at UMP SysEx message conversion | MEDIUM | 5.5 | 16%ile | Microsoft | 2025-05-13 |
| CVE-2025-37901 | irqchip/qcom-mpm: Prevent crash when trying to handle non-wake GPIOs | MEDIUM | 5.5 | 12%ile | Microsoft | 2025-05-13 |
| CVE-2025-37909 | net: lan743x: Fix memleak issue when GSO enabled | MEDIUM | 5.5 | 14%ile | Microsoft | 2025-05-13 |
| CVE-2025-37920 | xsk: Fix race condition in AF_XDP generic RX path | MEDIUM | 5.5 | 5%ile | Microsoft | 2025-05-13 |
| CVE-2025-37924 | ksmbd: fix use-after-free in kerberos authentication | MEDIUM | 5.5 | 98%ile | Microsoft | 2025-05-13 |
| CVE-2025-37927 | iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid | MEDIUM | 5.5 | 22%ile | Microsoft | 2025-05-13 |
| CVE-2025-37931 | btrfs: adjust subpage bit start based on sectorsize | MEDIUM | 5.5 | 12%ile | Microsoft | 2025-05-13 |
| CVE-2025-37932 | sch_htb: make htb_qlen_notify() idempotent | MEDIUM | 5.5 | 15%ile | Microsoft | 2025-05-13 |
| CVE-2025-37942 | HID: pidff: Make sure to fetch pool before checking SIMULTANEOUS_MAX | MEDIUM | 5.5 | — | Microsoft | 2025-05-13 |
| CVE-2025-37945 | net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY | MEDIUM | 5.5 | 12%ile | Microsoft | 2025-05-13 |
| CVE-2025-37952 | ksmbd: Fix UAF in __close_file_table_ids | MEDIUM | 5.5 | 31%ile | Microsoft | 2025-05-13 |
| CVE-2025-37956 | ksmbd: prevent rename with empty string | MEDIUM | 5.5 | 32%ile | Microsoft | 2025-05-13 |
| CVE-2025-37957 | KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception | MEDIUM | 5.5 | 9%ile | Microsoft | 2025-05-13 |
| CVE-2025-37959 | bpf: Scrub packet on bpf_redirect_peer | MEDIUM | 5.5 | 32%ile | Microsoft | 2025-05-13 |
| CVE-2025-37972 | Input: mtk-pmic-keys - fix possible null pointer dereference | MEDIUM | 5.5 | 9%ile | Microsoft | 2025-05-13 |
| CVE-2025-37979 | ASoC: qcom: Fix sc7280 lpass potential buffer overflow | MEDIUM | 5.5 | 13%ile | Microsoft | 2025-05-13 |
| CVE-2025-37980 | block: fix resource leak in blk_register_queue() error path | MEDIUM | 5.5 | 9%ile | Microsoft | 2025-05-13 |
| CVE-2025-37989 | net: phy: leds: fix memory leak | MEDIUM | 5.5 | 10%ile | Microsoft | 2025-05-13 |
| CVE-2025-37992 | net_sched: Flush gso_skb list too during ->change() | MEDIUM | 5.5 | 12%ile | Microsoft | 2025-05-13 |
| CVE-2025-37743 | wifi: ath12k: Avoid memory leak while enabling statistics | MEDIUM | 5.5 | 15%ile | Microsoft | 2025-05-13 |
| CVE-2025-37759 | ublk: fix handling recovery & reissue in ublk_abort_queue() | MEDIUM | 5.5 | 15%ile | Microsoft | 2025-05-13 |
| CVE-2025-37855 | drm/amd/display: Guard Possible Null Pointer Dereference | MEDIUM | 5.5 | 15%ile | Microsoft | 2025-05-13 |
| CVE-2025-37870 | drm/amd/display: prevent hang on link training fail | MEDIUM | 5.5 | 24%ile | Microsoft | 2025-05-13 |
| CVE-2025-37880 | um: work around sched_yield not yielding in time-travel mode | MEDIUM | 5.5 | 8%ile | Microsoft | 2025-05-13 |
| CVE-2025-37806 | fs/ntfs3: Keep write operations atomic | MEDIUM | 5.5 | 15%ile | Microsoft | 2025-05-13 |
| CVE-2025-37833 | net/niu: Niu requires MSIX ENTRY_DATA fields touch before entry reads | MEDIUM | 5.5 | 9%ile | Microsoft | 2025-05-13 |
| CVE-2022-49810 | netfs: Fix missing xas_retry() calls in xarray iteration | MEDIUM | 5.5 | 6%ile | Microsoft | 2025-05-13 |
| CVE-2025-43853 | iwasm vulnerable to filesystem sandbox escape with symlink when using uvwasi feature | MEDIUM | 5.5 | 22%ile | Microsoft | 2025-05-13 |
| CVE-2025-37802 | ksmbd: fix WARNING "do not call blocking ops when !TASK_RUNNING" | MEDIUM | 5.5 | 30%ile | Microsoft | 2025-05-13 |
| CVE-2022-49858 | octeontx2-pf: Fix SQE threshold checking | MEDIUM | 5.5 | 8%ile | Microsoft | 2025-05-13 |
| CVE-2025-32703 | Visual Studio Information Disclosure Vulnerability | MEDIUM | 5.5 | 43%ile | Microsoft | 2025-05-13 |
| CVE-2025-29829 | Windows Trusted Runtime Interface Driver Information Disclosure Vulnerability | MEDIUM | 5.5 | 48%ile | Microsoft | 2025-05-13 |
| CVE-2025-29837 | Windows Installer Information Disclosure Vulnerability | MEDIUM | 5.5 | 54%ile | Microsoft | 2025-05-13 |
| CVE-2025-29956 | Windows SMB Information Disclosure Vulnerability | MEDIUM | 5.4 | 66%ile | Microsoft | 2025-05-13 |
| CVE-2025-4432 | Ring: some aes functions may panic when overflow checking is enabled in ring | MEDIUM | 5.3 | 64%ile | Microsoft | 2025-05-13 |
| CVE-2025-5244 | GNU Binutils ld elflink.c elf_gc_sweep memory corruption | MEDIUM | 5.3 | 22%ile | Microsoft | 2025-05-13 |
| CVE-2025-5245 | GNU Binutils objdump debug.c debug_type_samep memory corruption | MEDIUM | 5.3 | 23%ile | Microsoft | 2025-05-13 |
| CVE-2024-22653 | yasm commit 9defefae was discovered to contain a NULL pointer dereference via the yasm_section_bcs_append function at se | MEDIUM | 4.8 | 19%ile | Microsoft | 2025-05-13 |
| CVE-2025-4574 | Crossbeam-channel: crossbeam-channel vulnerable to double free on drop | MEDIUM | 4.8 | 47%ile | Microsoft | 2025-05-13 |
| CVE-2025-5025 | No QUIC certificate pinning with wolfSSL | MEDIUM | 4.8 | 23%ile | Microsoft | 2025-05-13 |
| CVE-2025-27151 | redis-check-aof may lead to stack overflow and potential RCE | MEDIUM | 4.7 | 64%ile | Microsoft | 2025-05-13 |
| CVE-2025-37881 | usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev() | MEDIUM | 4.7 | 24%ile | Microsoft | 2025-05-13 |
| CVE-2025-37907 | accel/ivpu: Fix locking order in ivpu_job_submit | MEDIUM | 4.7 | 4%ile | Microsoft | 2025-05-13 |
| CVE-2025-37918 | Bluetooth: btusb: avoid NULL pointer dereference in skb_dequeue() | MEDIUM | 4.7 | 16%ile | Microsoft | 2025-05-13 |
| CVE-2025-37970 | iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo | MEDIUM | 4.7 | 8%ile | Microsoft | 2025-05-13 |
| CVE-2025-37985 | USB: wdm: close race between wdm_open and wdm_wwan_port_stop | MEDIUM | 4.7 | 3%ile | Microsoft | 2025-05-13 |
| CVE-2025-37990 | wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage() | MEDIUM | 4.7 | 15%ile | Microsoft | 2025-05-13 |
| CVE-2025-4598 | Systemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the result | MEDIUM | 4.7 | 70%ile | Microsoft | 2025-05-13 |
| CVE-2025-37983 | qibfs: fix _another_ leak | MEDIUM | 4.7 | 9%ile | Microsoft | 2025-05-13 |
| CVE-2025-5054 | Race Condition in Canonical Apport | MEDIUM | 4.7 | 56%ile | Microsoft | 2025-05-13 |
| CVE-2025-37998 | openvswitch: Fix unsafe attribute parsing in output_userspace() | MEDIUM | 4.5 | 19%ile | Microsoft | 2025-05-13 |
| CVE-2025-37758 | ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe() | MEDIUM | 4.4 | 10%ile | Microsoft | 2025-05-13 |
| CVE-2025-37793 | ASoC: Intel: avs: Fix null-ptr-deref in avs_component_probe() | MEDIUM | 4.4 | 8%ile | Microsoft | 2025-05-13 |
| CVE-2025-5278 | Coreutils: heap buffer under-read in gnu coreutils sort via key specification | MEDIUM | 4.4 | 24%ile | Microsoft | 2025-05-13 |
| CVE-2024-23337 | jq has signed integer overflow in jv.c:jvp_array_write | MEDIUM | 4.3 | 40%ile | Microsoft | 2025-05-13 |
| CVE-2025-4476 | Libsoup: null pointer dereference in libsoup may lead to denial of service | MEDIUM | 4.3 | 34%ile | Microsoft | 2025-05-13 |
| CVE-2023-53037 | scsi: mpi3mr: Bad drive in topology results kernel crash | MEDIUM | 4.1 | 11%ile | Microsoft | 2025-05-13 |
| CVE-2025-29839 | Windows Multiple UNC Provider Driver Information Disclosure Vulnerability | MEDIUM | 4.0 | 45%ile | Microsoft | 2025-05-13 |
| CVE-2025-23165 | In Node.js, the `ReadFileUtf8` internal binding leaks memory due to a corrupted pointer in `uv_fs_s.file`: a UTF-16 path | LOW | 3.7 | 46%ile | Microsoft | 2025-05-13 |
| CVE-2025-46712 | Erlang/OTP SSH Has Strict KEX Violations | LOW | 3.7 | 46%ile | Microsoft | 2025-05-13 |
| CVE-2025-23161 | PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type | LOW | 3.3 | 4%ile | Microsoft | 2025-05-13 |
| CVE-2025-37756 | net: tls: explicitly disallow disconnect | LOW | 3.3 | 23%ile | Microsoft | 2025-05-13 |
| CVE-2025-37788 | cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path | LOW | 3.3 | 10%ile | Microsoft | 2025-05-13 |
| CVE-2025-4287 | PyTorch nccl.py torch.cuda.nccl.reduce denial of service | LOW | 3.3 | 9%ile | Microsoft | 2025-05-13 |
| CVE-2025-47279 | undici Denial of Service attack via bad certificate data | LOW | 3.1 | 27%ile | Microsoft | 2025-05-13 |
| CVE-2023-53154 | parse_string in cJSON before 1.7.18 has a heap-based buffer over-read via {"1":1, with no trailing newline if cJSON_Pars | LOW | 2.9 | 20%ile | Microsoft | 2025-05-13 |
| CVE-2025-37930 | drm/nouveau: Fix WARN_ON in nouveau_fence_context_kill() | LOW | 2.5 | 14%ile | Microsoft | 2025-05-13 |
| CVE-2025-37905 | firmware: arm_scmi: Balance device refcount when destroying devices | LOW | 2.3 | 11%ile | Microsoft | 2025-05-13 |
| CVE-2025-37795 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | UNKNOWN | — | — | Microsoft | 2025-05-13 |
| CVE-2025-37858 | fs/jfs: Prevent integer overflow in AG size calculation | UNKNOWN | — | 24%ile | Microsoft | 2025-05-13 |
| CVE-2025-37943 | wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi | UNKNOWN | — | 18%ile | Microsoft | 2025-05-13 |
| CVE-2025-37951 | drm/v3d: Add job to pending list if the reset was skipped | UNKNOWN | — | 9%ile | Microsoft | 2025-05-13 |
| CVE-2025-37967 | usb: typec: ucsi: displayport: Fix deadlock | UNKNOWN | — | 5%ile | Microsoft | 2025-05-13 |
| CVE-2025-37994 | usb: typec: ucsi: displayport: Fix NULL pointer access | UNKNOWN | — | 13%ile | Microsoft | 2025-05-13 |
| CVE-2025-4516 | Use-after-free in "unicode_escape" decoder with error handler | UNKNOWN | — | 13%ile | Microsoft | 2025-05-13 |
| CVE-2025-46569 | OPA server Data API HTTP path injection of Rego | UNKNOWN | — | 46%ile | Microsoft | 2025-05-13 |
| CVE-2025-48938 | Prevent GitHub CLI and extensions from executing arbitrary commands from compromised GitHub Enterprise Server | UNKNOWN | — | 47%ile | Microsoft | 2025-05-13 |
| CVE-2025-37753 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | UNKNOWN | — | — | Microsoft | 2025-05-13 |
| CVE-2025-4050 | Chromium: CVE-2025-4050 Out of bounds memory access in DevTools | UNKNOWN | — | 38%ile | Microsoft | 2025-05-13 |
| CVE-2025-4096 | Chromium: CVE-2025-4096 Heap buffer overflow in HTML | UNKNOWN | — | 39%ile | Microsoft | 2025-05-13 |
| CVE-2025-5066 | Chromium: CVE-2025-5066 Inappropriate implementation in Messages | UNKNOWN | — | 35%ile | Microsoft | 2025-05-13 |
| CVE-2025-5067 | Chromium: CVE-2025-5067 Inappropriate implementation in Tab Strip | UNKNOWN | — | 30%ile | Microsoft | 2025-05-13 |
| CVE-2025-5283 | Chromium: CVE-2025-5283 Use after free in libvpx | UNKNOWN | — | 51%ile | Microsoft | 2025-05-13 |
| CVE-2025-5281 | Chromium: CVE-2025-5281 Inappropriate implementation in BFCache | UNKNOWN | — | 15%ile | Microsoft | 2025-05-13 |
| CVE-2025-5065 | Chromium: CVE-2025-5065 Inappropriate implementation in FileSystemAccess API | UNKNOWN | — | 35%ile | Microsoft | 2025-05-13 |
| CVE-2025-5064 | Chromium: CVE-2025-5064 Inappropriate implementation in Background Fetch API | UNKNOWN | — | 25%ile | Microsoft | 2025-05-13 |
| CVE-2025-5280 | Chromium: CVE-2025-5280 Out of bounds write in V8 | UNKNOWN | — | 86%ile | Microsoft | 2025-05-13 |
| CVE-2025-5063 | Chromium: CVE-2025-5063 Use after free in Compositing | UNKNOWN | — | 89%ile | Microsoft | 2025-05-13 |
| CVE-2025-4372 | Chromium: CVE-2025-4372 Use after free in WebAudio | UNKNOWN | — | 41%ile | Microsoft | 2025-05-13 |
| CVE-2025-4609 | Chromium: CVE-2025-4609 Incorrect handle provided in unspecified circumstances in Mojo | UNKNOWN | — | 33%ile | Microsoft | 2025-05-13 |
| CVE-2025-4664 | Chromium: CVE-2025-4664 Insufficient policy enforcement in Loader | UNKNOWN | — | 93%ile | Microsoft | 2025-05-13 |
| CVE-2025-4051 | Chromium: CVE-2025-4051 Insufficient data validation in DevTools | UNKNOWN | — | 20%ile | Microsoft | 2025-05-13 |
| CVE-2025-4052 | Chromium: CVE-2025-4052 Inappropriate implementation in DevTools | UNKNOWN | — | 46%ile | Microsoft | 2025-05-13 |
| CVE-2025-32433 | Erlang/OTP SSH Vulnerable to Pre-Authentication RCE | CRITICAL | 10.0 | 100%ile | Microsoft | 2025-04-08 |
| CVE-2025-30390 | Azure ML Compute Elevation of Privilege Vulnerability | CRITICAL | 9.9 | 62%ile | Microsoft | 2025-04-08 |
| CVE-2022-48716 | ASoC: codecs: wcd938x: fix incorrect used of portid | CRITICAL | 9.8 | 40%ile | Microsoft | 2025-04-08 |
| CVE-2025-32434 | PyTorch: `torch.load` with `weights_only=True` leads to remote code execution | CRITICAL | 9.8 | 84%ile | Microsoft | 2025-04-08 |
| CVE-2025-29087 | In SQLite 3.44.0 through 3.49.0 before 3.49.1, the concat_ws() SQL function can cause memory to be written beyond the en | CRITICAL | 9.8 | 45%ile | Microsoft | 2025-04-08 |
| CVE-2025-3277 | An integer overflow can be triggered in SQLite’s `concat_ws()` function. The resulting, truncated integer is then used t | CRITICAL | 9.8 | 69%ile | Microsoft | 2025-04-08 |
| CVE-2025-30392 | Azure AI Bot Elevation of Privilege Vulnerability | CRITICAL | 9.8 | 66%ile | Microsoft | 2025-04-08 |
| CVE-2025-30215 | NATS-Server Fails to Authorize Certain Jetstream Admin APIs | CRITICAL | 9.6 | 49%ile | Microsoft | 2025-04-08 |
| CVE-2025-22871 | Request smuggling due to acceptance of invalid chunked data in net/http | CRITICAL | 9.1 | 58%ile | Microsoft | 2025-04-08 |
| CVE-2025-32911 | Libsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" g | CRITICAL | 9.0 | 62%ile | Microsoft | 2025-04-08 |
| CVE-2025-21969 | Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd | HIGH | 8.8 | 15%ile | Microsoft | 2025-04-08 |
| CVE-2025-26669 | Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability | HIGH | 8.8 | 75%ile | Microsoft | 2025-04-08 |
| CVE-2025-27477 | Windows Telephony Service Remote Code Execution Vulnerability | HIGH | 8.8 | 76%ile | Microsoft | 2025-04-08 |
| CVE-2025-27740 | Active Directory Certificate Services Elevation of Privilege Vulnerability | HIGH | 8.8 | 89%ile | Microsoft | 2025-04-08 |
| CVE-2025-29794 | Microsoft SharePoint Remote Code Execution Vulnerability | HIGH | 8.8 | 92%ile | Microsoft | 2025-04-08 |
| CVE-2025-21205 | Windows Telephony Service Remote Code Execution Vulnerability | HIGH | 8.8 | 72%ile | Microsoft | 2025-04-08 |
| CVE-2025-21221 | Windows Telephony Service Remote Code Execution Vulnerability | HIGH | 8.8 | 72%ile | Microsoft | 2025-04-08 |
| CVE-2025-21222 | Windows Telephony Service Remote Code Execution Vulnerability | HIGH | 8.8 | 72%ile | Microsoft | 2025-04-08 |
| CVE-2025-25000 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | HIGH | 8.8 | 63%ile | Microsoft | 2025-04-08 |
| CVE-2025-26647 | Windows Kerberos Elevation of Privilege Vulnerability | HIGH | 8.8 | 83%ile | Microsoft | 2025-04-08 |
| CVE-2025-27481 | Windows Telephony Service Remote Code Execution Vulnerability | HIGH | 8.8 | 70%ile | Microsoft | 2025-04-08 |
| CVE-2025-30389 | Azure Bot Framework SDK Elevation of Privilege Vulnerability | HIGH | 8.7 | 60%ile | Microsoft | 2025-04-08 |
| CVE-2024-56406 | Perl is vulnerable to a heap buffer overflow when transliterating non-ASCII bytes | HIGH | 8.6 | 45%ile | Microsoft | 2025-04-08 |
| CVE-2025-27737 | Windows Security Zone Mapping Security Feature Bypass Vulnerability | HIGH | 8.6 | 56%ile | Microsoft | 2025-04-08 |
| CVE-2025-21416 | Azure Virtual Desktop Elevation of Privilege Vulnerability | HIGH | 8.5 | 56%ile | Microsoft | 2025-04-08 |
| CVE-2025-26678 | Windows Defender Application Control Security Feature Bypass Vulnerability | HIGH | 8.4 | 45%ile | Microsoft | 2025-04-08 |
| CVE-2025-21947 | ksmbd: fix type confusion via race condition when using ipc_msg_send_request | HIGH | 8.1 | 33%ile | Microsoft | 2025-04-08 |
| CVE-2025-2291 | PgBouncer default auth_query does not take Postgres password expiry into account | HIGH | 8.1 | 31%ile | Microsoft | 2025-04-08 |
| CVE-2024-11235 | Reference counting in php_request_shutdown causes Use-After-Free | HIGH | 8.1 | 74%ile | Microsoft | 2025-04-08 |
| CVE-2025-26663 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability | HIGH | 8.1 | 78%ile | Microsoft | 2025-04-08 |
| CVE-2025-26670 | Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability | HIGH | 8.1 | 96%ile | Microsoft | 2025-04-08 |
| CVE-2025-26671 | Windows Remote Desktop Services Remote Code Execution Vulnerability | HIGH | 8.1 | 68%ile | Microsoft | 2025-04-08 |
| CVE-2025-27480 | Windows Remote Desktop Services Remote Code Execution Vulnerability | HIGH | 8.1 | 96%ile | Microsoft | 2025-04-08 |
| CVE-2025-27482 | Windows Remote Desktop Services Remote Code Execution Vulnerability | HIGH | 8.1 | 76%ile | Microsoft | 2025-04-08 |
| CVE-2025-30391 | Microsoft Dynamics Information Disclosure Vulnerability | HIGH | 8.1 | 73%ile | Microsoft | 2025-04-08 |
| CVE-2025-27487 | Remote Desktop Client Remote Code Execution Vulnerability | HIGH | 8.0 | 75%ile | Microsoft | 2025-04-08 |
| CVE-2025-21919 | sched/fair: Fix potential memory corruption in child_cfs_rq_on_list | HIGH | 7.8 | 15%ile | Microsoft | 2025-04-08 |
| CVE-2025-21923 | HID: hid-steam: Fix use-after-free when detaching device | HIGH | 7.8 | 11%ile | Microsoft | 2025-04-08 |
| CVE-2025-21927 | nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() | HIGH | 7.8 | 50%ile | Microsoft | 2025-04-08 |
| CVE-2025-21934 | rapidio: fix an API misues when rio_add_net() fails | HIGH | 7.8 | 13%ile | Microsoft | 2025-04-08 |
| CVE-2025-21966 | dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature | HIGH | 7.8 | 10%ile | Microsoft | 2025-04-08 |
| CVE-2025-21979 | wifi: cfg80211: cancel wiphy_work before freeing wiphy | HIGH | 7.8 | 10%ile | Microsoft | 2025-04-08 |
| CVE-2025-21991 | x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes | HIGH | 7.8 | 13%ile | Microsoft | 2025-04-08 |
| CVE-2025-21999 | proc: fix UAF in proc_get_inode() | HIGH | 7.8 | 14%ile | Microsoft | 2025-04-08 |
| CVE-2025-22004 | net: atm: fix use after free in lec_send() | HIGH | 7.8 | 30%ile | Microsoft | 2025-04-08 |
| CVE-2025-22020 | memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove | HIGH | 7.8 | 12%ile | Microsoft | 2025-04-08 |
| CVE-2025-22022 | usb: xhci: Apply the link chain quirk on NEC isoc endpoints | HIGH | 7.8 | 10%ile | Microsoft | 2025-04-08 |
| CVE-2025-22035 | tracing: Fix use-after-free in print_graph_function_flags during tracer switching | HIGH | 7.8 | 23%ile | Microsoft | 2025-04-08 |
| CVE-2025-22056 | netfilter: nft_tunnel: fix geneve_opt type confusion addition | HIGH | 7.8 | 25%ile | Microsoft | 2025-04-08 |
| CVE-2025-22057 | net: decrease cached dst counters in dst_release | HIGH | 7.8 | 12%ile | Microsoft | 2025-04-08 |
| CVE-2025-22083 | vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint | HIGH | 7.8 | 11%ile | Microsoft | 2025-04-08 |
| CVE-2025-22088 | RDMA/erdma: Prevent use-after-free in erdma_accept_newconn() | HIGH | 7.8 | 46%ile | Microsoft | 2025-04-08 |
| CVE-2025-22097 | drm/vkms: Fix use after free and double free on init error | HIGH | 7.8 | 13%ile | Microsoft | 2025-04-08 |
| CVE-2025-21967 | ksmbd: fix use-after-free in ksmbd_free_work_struct | HIGH | 7.8 | 32%ile | Microsoft | 2025-04-08 |
| CVE-2025-21949 | LoongArch: Set hugetlb mmap base address aligned with pmd size | HIGH | 7.8 | 8%ile | Microsoft | 2025-04-08 |
| CVE-2025-23133 | wifi: ath11k: update channel list in reg notifier instead reg worker | HIGH | 7.8 | 24%ile | Microsoft | 2025-04-08 |
| CVE-2025-40014 | objtool, spi: amd: Fix out-of-bounds stack access in amd_set_spi_freq() | HIGH | 7.8 | 15%ile | Microsoft | 2025-04-08 |
| CVE-2025-21915 | cdx: Fix possible UAF error in driver_override_show() | HIGH | 7.8 | 11%ile | Microsoft | 2025-04-08 |
| CVE-2025-21928 | HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() | HIGH | 7.8 | 14%ile | Microsoft | 2025-04-08 |
| CVE-2025-21945 | ksmbd: fix use-after-free in smb2_lock | HIGH | 7.8 | 44%ile | Microsoft | 2025-04-08 |
| CVE-2025-21968 | drm/amd/display: Fix slab-use-after-free on hdcp_work | HIGH | 7.8 | 10%ile | Microsoft | 2025-04-08 |
| CVE-2025-22040 | ksmbd: fix session use-after-free in multichannel connection | HIGH | 7.8 | 53%ile | Microsoft | 2025-04-08 |
| CVE-2025-22041 | ksmbd: fix use-after-free in ksmbd_sessions_deregister() | HIGH | 7.8 | 53%ile | Microsoft | 2025-04-08 |
| CVE-2025-37838 | HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition | HIGH | 7.8 | 16%ile | Microsoft | 2025-04-08 |
| CVE-2025-26666 | Windows Media Remote Code Execution Vulnerability | HIGH | 7.8 | 51%ile | Microsoft | 2025-04-08 |
| CVE-2025-26688 | Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability | HIGH | 7.8 | 48%ile | Microsoft | 2025-04-08 |
| CVE-2025-27476 | Windows Digital Media Elevation of Privilege Vulnerability | HIGH | 7.8 | 51%ile | Microsoft | 2025-04-08 |
| CVE-2025-27741 | NTFS Elevation of Privilege Vulnerability | HIGH | 7.8 | 57%ile | Microsoft | 2025-04-08 |
| CVE-2025-27744 | Microsoft Office Elevation of Privilege Vulnerability | HIGH | 7.8 | 69%ile | Microsoft | 2025-04-08 |
| CVE-2025-27745 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 7.8 | 66%ile | Microsoft | 2025-04-08 |
| CVE-2025-27746 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 7.8 | 59%ile | Microsoft | 2025-04-08 |
| CVE-2025-27748 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 7.8 | 66%ile | Microsoft | 2025-04-08 |
| CVE-2025-27747 | Microsoft Word Remote Code Execution Vulnerability | HIGH | 7.8 | 58%ile | Microsoft | 2025-04-08 |
| CVE-2025-27749 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 7.8 | 66%ile | Microsoft | 2025-04-08 |
| CVE-2025-27743 | Microsoft System Center Elevation of Privilege Vulnerability | HIGH | 7.8 | 60%ile | Microsoft | 2025-04-08 |
| CVE-2025-27751 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 85%ile | Microsoft | 2025-04-08 |
| CVE-2025-27752 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 65%ile | Microsoft | 2025-04-08 |
| CVE-2025-27750 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 59%ile | Microsoft | 2025-04-08 |
| CVE-2025-29791 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 65%ile | Microsoft | 2025-04-08 |
| CVE-2025-29820 | Microsoft Word Remote Code Execution Vulnerability | HIGH | 7.8 | 56%ile | Microsoft | 2025-04-08 |
| CVE-2025-29822 | Microsoft OneNote Security Feature Bypass Vulnerability | HIGH | 7.8 | 58%ile | Microsoft | 2025-04-08 |
| CVE-2025-29823 | Microsoft Excel Remote Code Execution Vulnerability | HIGH | 7.8 | 53%ile | Microsoft | 2025-04-08 |
| CVE-2025-29824 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 97%ile | Microsoft | 2025-04-08 |
| CVE-2025-24074 | Microsoft DWM Core Library Elevation of Privilege Vulnerability | HIGH | 7.8 | 49%ile | Microsoft | 2025-04-08 |
| CVE-2025-24073 | Microsoft DWM Core Library Elevation of Privilege Vulnerability | HIGH | 7.8 | 49%ile | Microsoft | 2025-04-08 |
| CVE-2025-21204 | Windows Process Activation Elevation of Privilege Vulnerability | HIGH | 7.8 | 94%ile | Microsoft | 2025-04-08 |
| CVE-2025-24058 | Windows DWM Core Library Elevation of Privilege Vulnerability | HIGH | 7.8 | 49%ile | Microsoft | 2025-04-08 |
| CVE-2025-26639 | Windows USB Print Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 47%ile | Microsoft | 2025-04-08 |
| CVE-2025-26642 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 7.8 | 57%ile | Microsoft | 2025-04-08 |
| CVE-2025-26648 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.8 | 42%ile | Microsoft | 2025-04-08 |
| CVE-2025-26674 | Windows Media Remote Code Execution Vulnerability | HIGH | 7.8 | 51%ile | Microsoft | 2025-04-08 |
| CVE-2025-26675 | Windows Subsystem for Linux Elevation of Privilege Vulnerability | HIGH | 7.8 | 48%ile | Microsoft | 2025-04-08 |
| CVE-2025-26679 | RPC Endpoint Mapper Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 48%ile | Microsoft | 2025-04-08 |
| CVE-2025-27483 | NTFS Elevation of Privilege Vulnerability | HIGH | 7.8 | 56%ile | Microsoft | 2025-04-08 |
| CVE-2025-27489 | Azure Local Elevation of Privilege Vulnerability | HIGH | 7.8 | 50%ile | Microsoft | 2025-04-08 |
| CVE-2025-27490 | Windows Bluetooth Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 49%ile | Microsoft | 2025-04-08 |
| CVE-2025-27727 | Windows Installer Elevation of Privilege Vulnerability | HIGH | 7.8 | 64%ile | Microsoft | 2025-04-08 |
| CVE-2025-27729 | Windows Shell Remote Code Execution Vulnerability | HIGH | 7.8 | 58%ile | Microsoft | 2025-04-08 |
| CVE-2025-27728 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 49%ile | Microsoft | 2025-04-08 |
| CVE-2025-27731 | Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability | HIGH | 7.8 | 51%ile | Microsoft | 2025-04-08 |
| CVE-2025-27730 | Windows Digital Media Elevation of Privilege Vulnerability | HIGH | 7.8 | 51%ile | Microsoft | 2025-04-08 |
| CVE-2025-27733 | NTFS Elevation of Privilege Vulnerability | HIGH | 7.8 | 55%ile | Microsoft | 2025-04-08 |
| CVE-2025-27739 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.8 | 51%ile | Microsoft | 2025-04-08 |
| CVE-2025-29800 | Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability | HIGH | 7.8 | 65%ile | Microsoft | 2025-04-08 |
| CVE-2025-29801 | Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability | HIGH | 7.8 | 65%ile | Microsoft | 2025-04-08 |
| CVE-2025-29812 | DirectX Graphics Kernel Elevation of Privilege Vulnerability | HIGH | 7.8 | 61%ile | Microsoft | 2025-04-08 |
| CVE-2025-29811 | Windows Mobile Broadband Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 49%ile | Microsoft | 2025-04-08 |
| CVE-2025-24060 | Microsoft DWM Core Library Elevation of Privilege Vulnerability | HIGH | 7.8 | 49%ile | Microsoft | 2025-04-08 |
| CVE-2025-24062 | Microsoft DWM Core Library Elevation of Privilege Vulnerability | HIGH | 7.8 | 49%ile | Microsoft | 2025-04-08 |
| CVE-2025-29815 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | HIGH | 7.6 | 57%ile | Microsoft | 2025-04-08 |
| CVE-2025-21605 | Redis DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated client | HIGH | 7.5 | 59%ile | Microsoft | 2025-04-08 |
| CVE-2025-32049 | Libsoup: denial of service attack to websocket server | HIGH | 7.5 | 59%ile | Microsoft | 2025-04-08 |
| CVE-2025-32906 | Libsoup: out of bounds reads in soup_headers_parse_request() | HIGH | 7.5 | 62%ile | Microsoft | 2025-04-08 |
| CVE-2025-32907 | Libsoup: denial of service in server when client requests a large amount of overlapping ranges with range header | HIGH | 7.5 | 53%ile | Microsoft | 2025-04-08 |
| CVE-2025-32908 | Libsoup: denial of service on libsoup through http/2 server | HIGH | 7.5 | 49%ile | Microsoft | 2025-04-08 |
| CVE-2025-32913 | Libsoup: null pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present | HIGH | 7.5 | 58%ile | Microsoft | 2025-04-08 |
| CVE-2025-21961 | eth: bnxt: fix truesize for mb-xdp-pass case | HIGH | 7.5 | 48%ile | Microsoft | 2025-04-08 |
| CVE-2025-26668 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | HIGH | 7.5 | 70%ile | Microsoft | 2025-04-08 |
| CVE-2025-26680 | Windows Standards-Based Storage Management Service Denial of Service Vulnerability | HIGH | 7.5 | 81%ile | Microsoft | 2025-04-08 |
| CVE-2025-26686 | Windows TCP/IP Remote Code Execution Vulnerability | HIGH | 7.5 | 73%ile | Microsoft | 2025-04-08 |
| CVE-2025-26687 | Win32k Elevation of Privilege Vulnerability | HIGH | 7.5 | 67%ile | Microsoft | 2025-04-08 |
| CVE-2025-27470 | Windows Standards-Based Storage Management Service Denial of Service Vulnerability | HIGH | 7.5 | 84%ile | Microsoft | 2025-04-08 |
| CVE-2025-27473 | HTTP.sys Denial of Service Vulnerability | HIGH | 7.5 | 83%ile | Microsoft | 2025-04-08 |
| CVE-2025-27479 | Kerberos Key Distribution Proxy Service Denial of Service Vulnerability | HIGH | 7.5 | 83%ile | Microsoft | 2025-04-08 |
| CVE-2025-21174 | Windows Standards-Based Storage Management Service Denial of Service Vulnerability | HIGH | 7.5 | 82%ile | Microsoft | 2025-04-08 |
| CVE-2025-26641 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability | HIGH | 7.5 | 83%ile | Microsoft | 2025-04-08 |
| CVE-2025-26652 | Windows Standards-Based Storage Management Service Denial of Service Vulnerability | HIGH | 7.5 | 84%ile | Microsoft | 2025-04-08 |
| CVE-2025-26673 | Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability | HIGH | 7.5 | 86%ile | Microsoft | 2025-04-08 |
| CVE-2025-27469 | Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability | HIGH | 7.5 | 85%ile | Microsoft | 2025-04-08 |
| CVE-2025-27485 | Windows Standards-Based Storage Management Service Denial of Service Vulnerability | HIGH | 7.5 | 82%ile | Microsoft | 2025-04-08 |
| CVE-2025-27484 | Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability | HIGH | 7.5 | 58%ile | Microsoft | 2025-04-08 |
| CVE-2025-27486 | Windows Standards-Based Storage Management Service Denial of Service Vulnerability | HIGH | 7.5 | 82%ile | Microsoft | 2025-04-08 |
| CVE-2025-29805 | Outlook for Android Information Disclosure Vulnerability | HIGH | 7.5 | 76%ile | Microsoft | 2025-04-08 |
| CVE-2025-29810 | Active Directory Domain Services Elevation of Privilege Vulnerability | HIGH | 7.5 | 86%ile | Microsoft | 2025-04-08 |
| CVE-2025-29816 | Microsoft Word Security Feature Bypass Vulnerability | HIGH | 7.5 | 42%ile | Microsoft | 2025-04-08 |
| CVE-2025-26682 | ASP.NET Core and Visual Studio Denial of Service Vulnerability | HIGH | 7.5 | 78%ile | Microsoft | 2025-04-08 |
| CVE-2025-29834 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | HIGH | 7.5 | 51%ile | Microsoft | 2025-04-08 |
| CVE-2025-33074 | Azure Functions Remote Code Execution Vulnerability | HIGH | 7.5 | 48%ile | Microsoft | 2025-04-08 |
| CVE-2025-32914 | Libsoup: oob read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or | HIGH | 7.4 | 56%ile | Microsoft | 2025-04-08 |
| CVE-2025-31344 | The giflib open-source component has a buffer overflow vulnerability | HIGH | 7.3 | 18%ile | Microsoft | 2025-04-08 |
| CVE-2025-29792 | Microsoft Office Elevation of Privilege Vulnerability | HIGH | 7.3 | 67%ile | Microsoft | 2025-04-08 |
| CVE-2025-26628 | Azure Local Cluster Information Disclosure Vulnerability | HIGH | 7.3 | 72%ile | Microsoft | 2025-04-08 |
| CVE-2025-29803 | Visual Studio Tools for Applications and SQL Server Management Studio Elevation of Privilege Vulnerability | HIGH | 7.3 | 55%ile | Microsoft | 2025-04-08 |
| CVE-2025-29802 | Visual Studio Elevation of Privilege Vulnerability | HIGH | 7.3 | 62%ile | Microsoft | 2025-04-08 |
| CVE-2025-29804 | Visual Studio Elevation of Privilege Vulnerability | HIGH | 7.3 | 71%ile | Microsoft | 2025-04-08 |
| CVE-2025-29793 | Microsoft SharePoint Remote Code Execution Vulnerability | HIGH | 7.2 | 98%ile | Microsoft | 2025-04-08 |
| CVE-2025-21905 | wifi: iwlwifi: limit printed string from FW file | HIGH | 7.1 | 15%ile | Microsoft | 2025-04-08 |
| CVE-2025-21920 | vlan: enforce underlying device type | HIGH | 7.1 | 14%ile | Microsoft | 2025-04-08 |
| CVE-2025-21993 | iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() | HIGH | 7.1 | 12%ile | Microsoft | 2025-04-08 |
| CVE-2025-22055 | net: fix geneve_opt length integer overflow | HIGH | 7.1 | 17%ile | Microsoft | 2025-04-08 |
| CVE-2025-22058 | udp: Fix memory accounting leak. | HIGH | 7.1 | 14%ile | Microsoft | 2025-04-08 |
| CVE-2025-22107 | net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry() | HIGH | 7.1 | 12%ile | Microsoft | 2025-04-08 |
| CVE-2025-22113 | ext4: avoid journaling sb update on error if journal is destroying | HIGH | 7.1 | 17%ile | Microsoft | 2025-04-08 |
| CVE-2025-22121 | ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() | HIGH | 7.1 | 12%ile | Microsoft | 2025-04-08 |
| CVE-2025-37785 | ext4: fix OOB read when checking dotdot dir | HIGH | 7.1 | 24%ile | Microsoft | 2025-04-08 |
| CVE-2025-22038 | ksmbd: validate zero num_subauth before sub_auth is accessed | HIGH | 7.1 | 48%ile | Microsoft | 2025-04-08 |
| CVE-2025-22104 | ibmvnic: Use kernel helpers for hex dumps | HIGH | 7.1 | 14%ile | Microsoft | 2025-04-08 |
| CVE-2025-21946 | ksmbd: fix out-of-bounds in parse_sec_desc() | HIGH | 7.1 | 43%ile | Microsoft | 2025-04-08 |
| CVE-2025-39735 | jfs: fix slab-out-of-bounds read in ea_get() | HIGH | 7.1 | 22%ile | Microsoft | 2025-04-08 |
| CVE-2025-22039 | ksmbd: fix overflow in dacloffset bounds check | HIGH | 7.1 | 56%ile | Microsoft | 2025-04-08 |
| CVE-2025-27491 | Windows Hyper-V Remote Code Execution Vulnerability | HIGH | 7.1 | 73%ile | Microsoft | 2025-04-08 |
| CVE-2025-29809 | Windows Kerberos Security Feature Bypass Vulnerability | HIGH | 7.1 | 91%ile | Microsoft | 2025-04-08 |
| CVE-2025-22126 | md: fix mddev uaf while iterating all_mddevs list | HIGH | 7.0 | 10%ile | Microsoft | 2025-04-08 |
| CVE-2025-2784 | Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content | HIGH | 7.0 | 59%ile | Microsoft | 2025-04-08 |
| CVE-2025-26665 | Windows upnphost.dll Elevation of Privilege Vulnerability | HIGH | 7.0 | 27%ile | Microsoft | 2025-04-08 |
| CVE-2025-27475 | Windows Update Stack Elevation of Privilege Vulnerability | HIGH | 7.0 | 31%ile | Microsoft | 2025-04-08 |
| CVE-2025-27478 | Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability | HIGH | 7.0 | 40%ile | Microsoft | 2025-04-08 |
| CVE-2025-21191 | Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability | HIGH | 7.0 | 25%ile | Microsoft | 2025-04-08 |
| CVE-2025-26640 | Windows Digital Media Elevation of Privilege Vulnerability | HIGH | 7.0 | 41%ile | Microsoft | 2025-04-08 |
| CVE-2025-26649 | Windows Secure Channel Elevation of Privilege Vulnerability | HIGH | 7.0 | 33%ile | Microsoft | 2025-04-08 |
| CVE-2025-27492 | Windows Secure Channel Elevation of Privilege Vulnerability | HIGH | 7.0 | 29%ile | Microsoft | 2025-04-08 |
| CVE-2025-27732 | Windows Graphics Component Elevation of Privilege Vulnerability | HIGH | 7.0 | 28%ile | Microsoft | 2025-04-08 |
| CVE-2025-32464 | HAProxy 2.2 through 3.1.6, in certain uncommon configurations, has a sample_conv_regsub heap-based buffer overflow becau | MEDIUM | 6.8 | 56%ile | Microsoft | 2025-04-08 |
| CVE-2025-46421 | Libsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redir | MEDIUM | 6.8 | 48%ile | Microsoft | 2025-04-08 |
| CVE-2025-25002 | Azure Local Cluster Information Disclosure Vulnerability | MEDIUM | 6.8 | 67%ile | Microsoft | 2025-04-08 |
| CVE-2025-26637 | Windows BitLocker Security Feature Bypass Vulnerability | MEDIUM | 6.8 | 58%ile | Microsoft | 2025-04-08 |
| CVE-2025-32726 | Visual Studio Code Elevation of Privilege Vulnerability | MEDIUM | 6.8 | 39%ile | Microsoft | 2025-04-08 |
| CVE-2025-26681 | Win32k Elevation of Privilege Vulnerability | MEDIUM | 6.7 | 48%ile | Microsoft | 2025-04-08 |
| CVE-2024-58093 | PCI/ASPM: Fix link state exit during switch upstream function removal | MEDIUM | 6.6 | 14%ile | Microsoft | 2025-04-08 |
| CVE-2024-58095 | jfs: add check read-only before txBeginAnon() call | MEDIUM | 6.6 | 10%ile | Microsoft | 2025-04-08 |
| CVE-2025-21574 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported versions that are affe | MEDIUM | 6.5 | 66%ile | Microsoft | 2025-04-08 |
| CVE-2025-21575 | Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5 | MEDIUM | 6.5 | 62%ile | Microsoft | 2025-04-08 |
| CVE-2025-21577 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) | MEDIUM | 6.5 | 57%ile | Microsoft | 2025-04-08 |
| CVE-2025-22872 | Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net | MEDIUM | 6.5 | 46%ile | Microsoft | 2025-04-08 |
| CVE-2025-30682 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a | MEDIUM | 6.5 | 58%ile | Microsoft | 2025-04-08 |
| CVE-2025-30687 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a | MEDIUM | 6.5 | 58%ile | Microsoft | 2025-04-08 |
| CVE-2025-30688 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a | MEDIUM | 6.5 | 58%ile | Microsoft | 2025-04-08 |
| CVE-2025-32052 | Libsoup: heap buffer overflow in sniff_unknown() | MEDIUM | 6.5 | 52%ile | Microsoft | 2025-04-08 |
| CVE-2025-32053 | Libsoup: heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space() | MEDIUM | 6.5 | 52%ile | Microsoft | 2025-04-08 |
| CVE-2025-32386 | Helm Allows A Specially Crafted Chart Archive To Cause Out Of Memory Termination | MEDIUM | 6.5 | 40%ile | Microsoft | 2025-04-08 |
| CVE-2025-32387 | Helm Allows A Specially Crafted JSON Schema To Cause A Stack Overflow | MEDIUM | 6.5 | 43%ile | Microsoft | 2025-04-08 |
| CVE-2025-32910 | Libsoup: null pointer deference on libsoup via /auth/soup-auth-digest.c through "soup_auth_digest_authenticate" on cli | MEDIUM | 6.5 | 39%ile | Microsoft | 2025-04-08 |
| CVE-2025-32912 | Libsoup: null pointer dereference in client when server omits the "nonce" parameter in an unauthorized response with di | MEDIUM | 6.5 | 39%ile | Microsoft | 2025-04-08 |
| CVE-2025-46420 | Libsoup: memory leak on soup_header_parse_quality_list() via soup-headers.c | MEDIUM | 6.5 | 48%ile | Microsoft | 2025-04-08 |
| CVE-2024-52980 | Elasticsearch Uncontrolled Resource Consumption vulnerability | MEDIUM | 6.5 | 46%ile | Microsoft | 2025-04-08 |
| CVE-2025-43857 | net-imap rubygem vulnerable to possible DoS by memory exhaustion | MEDIUM | 6.5 | 42%ile | Microsoft | 2025-04-08 |
| CVE-2025-26664 | Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability | MEDIUM | 6.5 | 79%ile | Microsoft | 2025-04-08 |
| CVE-2025-26667 | Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability | MEDIUM | 6.5 | 79%ile | Microsoft | 2025-04-08 |
| CVE-2025-27474 | Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability | MEDIUM | 6.5 | 79%ile | Microsoft | 2025-04-08 |
| CVE-2025-21197 | Windows NTFS Information Disclosure Vulnerability | MEDIUM | 6.5 | 89%ile | Microsoft | 2025-04-08 |
| CVE-2025-21203 | Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability | MEDIUM | 6.5 | 77%ile | Microsoft | 2025-04-08 |
| CVE-2025-26635 | Windows Hello Security Feature Bypass Vulnerability | MEDIUM | 6.5 | 75%ile | Microsoft | 2025-04-08 |
| CVE-2025-26651 | Windows Local Session Manager (LSM) Denial of Service Vulnerability | MEDIUM | 6.5 | 85%ile | Microsoft | 2025-04-08 |
| CVE-2025-26672 | Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability | MEDIUM | 6.5 | 79%ile | Microsoft | 2025-04-08 |
| CVE-2025-26676 | Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability | MEDIUM | 6.5 | 77%ile | Microsoft | 2025-04-08 |
| CVE-2025-27738 | Windows Resilient File System (ReFS) Information Disclosure Vulnerability | MEDIUM | 6.5 | 89%ile | Microsoft | 2025-04-08 |
| CVE-2023-25584 | Out of bounds read in parse_module function in bfd/vms-alpha.c | MEDIUM | 6.3 | 32%ile | Microsoft | 2025-04-08 |
| CVE-2025-29481 | Buffer Overflow vulnerability in libbpf 1.5.0 allows a local attacker to execute arbitrary code via the bpf_object__init | MEDIUM | 6.2 | 15%ile | Microsoft | 2025-04-08 |
| CVE-2025-29819 | Windows Admin Center in Azure Portal Information Disclosure Vulnerability | MEDIUM | 6.2 | 65%ile | Microsoft | 2025-04-08 |
| CVE-2025-22075 | rtnetlink: Allocate vfinfo size for VF GUIDs when supported | MEDIUM | 6.1 | 12%ile | Microsoft | 2025-04-08 |
| CVE-2025-22125 | md/raid1,raid10: don't ignore IO flags | MEDIUM | 6.1 | 9%ile | Microsoft | 2025-04-08 |
| CVE-2023-53034 | ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans | MEDIUM | 6.0 | 22%ile | Microsoft | 2025-04-08 |
| CVE-2025-22124 | md/md-bitmap: fix wrong bitmap_limit for clustermd when write sb | MEDIUM | 6.0 | 10%ile | Microsoft | 2025-04-08 |
| CVE-2025-27735 | Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability | MEDIUM | 6.0 | 35%ile | Microsoft | 2025-04-08 |
| CVE-2025-32050 | Libsoup: integer overflow in append_param_quoted | MEDIUM | 5.9 | 56%ile | Microsoft | 2025-04-08 |
| CVE-2025-32051 | Libsoup: segmentation fault when parsing malformed data uri | MEDIUM | 5.9 | 47%ile | Microsoft | 2025-04-08 |
| CVE-2025-3576 | Krb5: kerberos rc4-hmac-md5 checksum vulnerability enabling message spoofing via md5 collisions | MEDIUM | 5.9 | 29%ile | Microsoft | 2025-04-08 |
| CVE-2025-27471 | Microsoft Streaming Service Denial of Service Vulnerability | MEDIUM | 5.9 | 71%ile | Microsoft | 2025-04-08 |
| CVE-2025-29817 | Microsoft Power Automate Desktop Information Disclosure Vulnerability | MEDIUM | 5.7 | 60%ile | Microsoft | 2025-04-08 |
| CVE-2025-32414 | In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API (Python bindi | MEDIUM | 5.6 | 32%ile | Microsoft | 2025-04-08 |
| CVE-2025-21898 | ftrace: Avoid potential division by zero in function_stat_show() | MEDIUM | 5.5 | 14%ile | Microsoft | 2025-04-08 |
| CVE-2025-21899 | tracing: Fix bad hist from corrupting named_triggers list | MEDIUM | 5.5 | 12%ile | Microsoft | 2025-04-08 |
| CVE-2025-21904 | caif_virtio: fix wrong pointer check in cfv_probe() | MEDIUM | 5.5 | 14%ile | Microsoft | 2025-04-08 |
| CVE-2025-21907 | mm: memory-failure: update ttu flag inside unmap_poisoned_folio | MEDIUM | 5.5 | 10%ile | Microsoft | 2025-04-08 |
| CVE-2025-21908 | NFS: fix nfs_release_folio() to not deadlock via kcompactd writeback | MEDIUM | 5.5 | 5%ile | Microsoft | 2025-04-08 |
| CVE-2025-21917 | usb: renesas_usbhs: Flush the notify_hotplug_work | MEDIUM | 5.5 | 19%ile | Microsoft | 2025-04-08 |
| CVE-2025-21918 | usb: typec: ucsi: Fix NULL pointer access | MEDIUM | 5.5 | 11%ile | Microsoft | 2025-04-08 |
| CVE-2025-21922 | ppp: Fix KMSAN uninit-value warning with bpf | MEDIUM | 5.5 | 14%ile | Microsoft | 2025-04-08 |
| CVE-2025-21931 | hwpoison, memory_hotplug: lock folio before unmap hwpoisoned folio | MEDIUM | 5.5 | 5%ile | Microsoft | 2025-04-08 |
| CVE-2025-21936 | Bluetooth: Add check for mgmt_alloc_skb() in mgmt_device_connected() | MEDIUM | 5.5 | 11%ile | Microsoft | 2025-04-08 |
| CVE-2025-21937 | Bluetooth: Add check for mgmt_alloc_skb() in mgmt_remote_name() | MEDIUM | 5.5 | 11%ile | Microsoft | 2025-04-08 |
| CVE-2025-21941 | drm/amd/display: Fix null check for pipe_ctx->plane_state in resource_build_scaling_params | MEDIUM | 5.5 | 13%ile | Microsoft | 2025-04-08 |
| CVE-2025-21948 | HID: appleir: Fix potential NULL dereference at raw event handle | MEDIUM | 5.5 | 14%ile | Microsoft | 2025-04-08 |
| CVE-2025-21951 | bus: mhi: host: pci_generic: Use pci_try_reset_function() to avoid deadlock | MEDIUM | 5.5 | 5%ile | Microsoft | 2025-04-08 |
| CVE-2025-21957 | scsi: qla1280: Fix kernel oops when debug level > 2 | MEDIUM | 5.5 | 14%ile | Microsoft | 2025-04-08 |
| CVE-2025-21959 | netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() | MEDIUM | 5.5 | 39%ile | Microsoft | 2025-04-08 |
| CVE-2025-21962 | cifs: Fix integer overflow while processing closetimeo mount option | MEDIUM | 5.5 | 11%ile | Microsoft | 2025-04-08 |
| CVE-2025-21963 | cifs: Fix integer overflow while processing acdirmax mount option | MEDIUM | 5.5 | 11%ile | Microsoft | 2025-04-08 |
| CVE-2025-21964 | cifs: Fix integer overflow while processing acregmax mount option | MEDIUM | 5.5 | 11%ile | Microsoft | 2025-04-08 |
| CVE-2025-21976 | fbdev: hyperv_fb: Allow graceful removal of framebuffer | MEDIUM | 5.5 | 17%ile | Microsoft | 2025-04-08 |
| CVE-2025-21980 | sched: address a potential NULL pointer dereference in the GRED scheduler. | MEDIUM | 5.5 | 9%ile | Microsoft | 2025-04-08 |
| CVE-2025-21981 | ice: fix memory leak in aRFS after reset | MEDIUM | 5.5 | 11%ile | Microsoft | 2025-04-08 |
| CVE-2025-21985 | drm/amd/display: Fix out-of-bound accesses | MEDIUM | 5.5 | 10%ile | Microsoft | 2025-04-08 |
| CVE-2025-21995 | drm/sched: Fix fence reference count leak | MEDIUM | 5.5 | 9%ile | Microsoft | 2025-04-08 |
| CVE-2025-21996 | drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse() | MEDIUM | 5.5 | 12%ile | Microsoft | 2025-04-08 |
| CVE-2025-21997 | xsk: fix an integer overflow in xp_create_and_assign_umem() | MEDIUM | 5.5 | 11%ile | Microsoft | 2025-04-08 |
| CVE-2025-22001 | accel/qaic: Fix integer overflow in qaic_validate_req() | MEDIUM | 5.5 | 10%ile | Microsoft | 2025-04-08 |
| CVE-2025-22003 | can: ucan: fix out of bound read in strscpy() source | MEDIUM | 5.5 | 9%ile | Microsoft | 2025-04-08 |
| CVE-2025-22005 | ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw(). | MEDIUM | 5.5 | 12%ile | Microsoft | 2025-04-08 |
| CVE-2025-22007 | Bluetooth: Fix error code in chan_alloc_skb_cb() | MEDIUM | 5.5 | 13%ile | Microsoft | 2025-04-08 |
| CVE-2025-22009 | regulator: dummy: force synchronous probing | MEDIUM | 5.5 | 10%ile | Microsoft | 2025-04-08 |
| CVE-2025-22010 | RDMA/hns: Fix soft lockup during bt pages loop | MEDIUM | 5.5 | 6%ile | Microsoft | 2025-04-08 |
| CVE-2025-22018 | atm: Fix NULL pointer dereference | MEDIUM | 5.5 | 13%ile | Microsoft | 2025-04-08 |
| CVE-2025-22025 | nfsd: put dl_stid if fail to queue dl_recall | MEDIUM | 5.5 | 48%ile | Microsoft | 2025-04-08 |
| CVE-2025-22026 | nfsd: don't ignore the return code of svc_proc_register() | MEDIUM | 5.5 | 11%ile | Microsoft | 2025-04-08 |
| CVE-2025-22028 | media: vimc: skip .s_stream() for stopped entities | MEDIUM | 5.5 | 10%ile | Microsoft | 2025-04-08 |
| CVE-2025-22033 | arm64: Don't call NULL in do_compat_alignment_fixup() | MEDIUM | 5.5 | 10%ile | Microsoft | 2025-04-08 |
| CVE-2025-22042 | ksmbd: add bounds check for create lease context | MEDIUM | 5.5 | 45%ile | Microsoft | 2025-04-08 |
| CVE-2025-22043 | ksmbd: add bounds check for durable handle context | MEDIUM | 5.5 | 42%ile | Microsoft | 2025-04-08 |
| CVE-2025-22044 | acpi: nfit: fix narrowing conversion in acpi_nfit_ctl | MEDIUM | 5.5 | 12%ile | Microsoft | 2025-04-08 |
| CVE-2025-22045 | x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs | MEDIUM | 5.5 | 15%ile | Microsoft | 2025-04-08 |
| CVE-2025-22049 | LoongArch: Increase ARCH_DMA_MINALIGN up to 16 | MEDIUM | 5.5 | 12%ile | Microsoft | 2025-04-08 |
| CVE-2025-22053 | net: ibmveth: make veth_pool_store stop hanging | MEDIUM | 5.5 | 4%ile | Microsoft | 2025-04-08 |
| CVE-2025-22060 | net: mvpp2: Prevent parser TCAM memory corruption | MEDIUM | 5.5 | 5%ile | Microsoft | 2025-04-08 |
| CVE-2025-22062 | sctp: add mutual exclusion in proc_sctp_do_udp_port() | MEDIUM | 5.5 | 22%ile | Microsoft | 2025-04-08 |
| CVE-2025-22063 | netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets | MEDIUM | 5.5 | 22%ile | Microsoft | 2025-04-08 |
| CVE-2025-22064 | netfilter: nf_tables: don't unregister hook when table is dormant | MEDIUM | 5.5 | 18%ile | Microsoft | 2025-04-08 |
| CVE-2025-22066 | ASoC: imx-card: Add NULL check in imx_card_probe() | MEDIUM | 5.5 | 11%ile | Microsoft | 2025-04-08 |
| CVE-2025-22070 | fs/9p: fix NULL pointer dereference on mkdir | MEDIUM | 5.5 | 15%ile | Microsoft | 2025-04-08 |
| CVE-2025-22071 | spufs: fix a leak in spufs_create_context() | MEDIUM | 5.5 | 15%ile | Microsoft | 2025-04-08 |
| CVE-2025-22072 | spufs: fix gang directory lifetimes | MEDIUM | 5.5 | 12%ile | Microsoft | 2025-04-08 |
| CVE-2025-22073 | spufs: fix a leak on spufs_new_file() failure | MEDIUM | 5.5 | 14%ile | Microsoft | 2025-04-08 |
| CVE-2025-22079 | ocfs2: validate l_tree_depth to avoid out-of-bounds access | MEDIUM | 5.5 | 16%ile | Microsoft | 2025-04-08 |
| CVE-2025-22080 | fs/ntfs3: Prevent integer overflow in hdr_first_de() | MEDIUM | 5.5 | 12%ile | Microsoft | 2025-04-08 |
| CVE-2025-22081 | fs/ntfs3: Fix a couple integer overflows on 32bit systems | MEDIUM | 5.5 | 12%ile | Microsoft | 2025-04-08 |
| CVE-2025-22086 | RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow | MEDIUM | 5.5 | 22%ile | Microsoft | 2025-04-08 |
| CVE-2025-22090 | x86/mm/pat: Fix VM_PAT handling when fork() fails in copy_page_range() | MEDIUM | 5.5 | 12%ile | Microsoft | 2025-04-08 |
| CVE-2025-22102 | Bluetooth: btnxpuart: Fix kernel panic during FW release | MEDIUM | 5.5 | 12%ile | Microsoft | 2025-04-08 |
| CVE-2025-22103 | net: fix NULL pointer dereference in l3mdev_l3_rcv | MEDIUM | 5.5 | 10%ile | Microsoft | 2025-04-08 |
| CVE-2025-22105 | bonding: check xdp prog when set bond mode | MEDIUM | 5.5 | 10%ile | Microsoft | 2025-04-08 |
| CVE-2025-22109 | ax25: Remove broken autobind | MEDIUM | 5.5 | 17%ile | Microsoft | 2025-04-08 |
| CVE-2025-22111 | net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF. | MEDIUM | 5.5 | 10%ile | Microsoft | 2025-04-08 |
| CVE-2025-23131 | dlm: prevent NPD when writing a positive value to event_done | MEDIUM | 5.5 | 9%ile | Microsoft | 2025-04-08 |
| CVE-2025-23135 | RISC-V: KVM: Teardown riscv specific bits after kvm_exit | MEDIUM | 5.5 | 16%ile | Microsoft | 2025-04-08 |
| CVE-2025-30693 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are | MEDIUM | 5.5 | 62%ile | Microsoft | 2025-04-08 |
| CVE-2025-30695 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are | MEDIUM | 5.5 | 55%ile | Microsoft | 2025-04-08 |
| CVE-2025-37860 | sfc: fix NULL dereferences in ef100_process_design_param() | MEDIUM | 5.5 | 24%ile | Microsoft | 2025-04-08 |
| CVE-2025-37893 | LoongArch: BPF: Fix off-by-one error in build_prologue() | MEDIUM | 5.5 | 20%ile | Microsoft | 2025-04-08 |
| CVE-2025-38575 | ksmbd: use aead_request_free to match aead_request_alloc | MEDIUM | 5.5 | 19%ile | Microsoft | 2025-04-08 |
| CVE-2025-38637 | net_sched: skbprio: Remove overly strict queue assertions | MEDIUM | 5.5 | 26%ile | Microsoft | 2025-04-08 |
| CVE-2025-39989 | x86/mce: use is_copy_from_user() to determine copy-from-user context | MEDIUM | 5.5 | 16%ile | Microsoft | 2025-04-08 |
| CVE-2025-40325 | md/raid10: wait barrier before returning discard request with REQ_NOWAIT | MEDIUM | 5.5 | 21%ile | Microsoft | 2025-04-08 |
| CVE-2025-22054 | arcnet: Add NULL check in com20020pci_probe() | MEDIUM | 5.5 | 14%ile | Microsoft | 2025-04-08 |
| CVE-2025-22127 | f2fs: fix potential deadloop in prepare_compress_overwrite() | MEDIUM | 5.5 | 9%ile | Microsoft | 2025-04-08 |
| CVE-2024-58097 | wifi: ath11k: fix RCU stall while reaping monitor destination ring | MEDIUM | 5.5 | 14%ile | Microsoft | 2025-04-08 |
| CVE-2025-22101 | net: libwx: fix Tx L4 checksum | MEDIUM | 5.5 | 10%ile | Microsoft | 2025-04-08 |
| CVE-2025-23132 | f2fs: quota: fix to avoid warning in dquot_writeback_dquots() | MEDIUM | 5.5 | 32%ile | Microsoft | 2025-04-08 |
| CVE-2025-23130 | f2fs: fix to avoid panic once fallocation fails for pinfile | MEDIUM | 5.5 | 8%ile | Microsoft | 2025-04-08 |
| CVE-2025-22115 | btrfs: fix block group refcount race in btrfs_create_pending_block_groups() | MEDIUM | 5.5 | 7%ile | Microsoft | 2025-04-08 |
| CVE-2024-58096 | wifi: ath11k: add srng->lock for ath11k_hal_srng_* in monitor mode | MEDIUM | 5.5 | 18%ile | Microsoft | 2025-04-08 |
| CVE-2025-22037 | ksmbd: fix null pointer dereference in alloc_preauth_hash() | MEDIUM | 5.5 | 99%ile | Microsoft | 2025-04-08 |
| CVE-2025-21944 | ksmbd: fix bug on trap in smb2_lock | MEDIUM | 5.5 | 5%ile | Microsoft | 2025-04-08 |
| CVE-2025-23129 | wifi: ath11k: Clear affinity hint before calling ath11k_pcic_free_irq() in error path | MEDIUM | 5.5 | 8%ile | Microsoft | 2025-04-08 |
| CVE-2025-23136 | thermal: int340x: Add NULL check for adev | MEDIUM | 5.5 | 13%ile | Microsoft | 2025-04-08 |
| CVE-2025-38152 | remoteproc: core: Clear table_sz when rproc_shutdown | MEDIUM | 5.5 | 20%ile | Microsoft | 2025-04-08 |
| CVE-2025-39728 | clk: samsung: Fix UBSAN panic in samsung_clk_init() | MEDIUM | 5.5 | 20%ile | Microsoft | 2025-04-08 |
| CVE-2025-21972 | net: mctp: unshare packets when reassembling | MEDIUM | 5.5 | 24%ile | Microsoft | 2025-04-08 |
| CVE-2025-37925 | jfs: reject on-disk inodes of an unsupported type | MEDIUM | 5.5 | 22%ile | Microsoft | 2025-04-08 |
| CVE-2024-58094 | jfs: add check read-only before truncation in jfs_truncate_nolock() | MEDIUM | 5.5 | 13%ile | Microsoft | 2025-04-08 |
| CVE-2025-21894 | net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC | MEDIUM | 5.5 | 11%ile | Microsoft | 2025-04-08 |
| CVE-2025-21955 | ksmbd: prevent connection release during oplock break notification | MEDIUM | 5.5 | 43%ile | Microsoft | 2025-04-08 |
| CVE-2025-27742 | NTFS Information Disclosure Vulnerability | MEDIUM | 5.5 | 59%ile | Microsoft | 2025-04-08 |
| CVE-2025-27736 | Windows Power Dependency Coordinator Information Disclosure Vulnerability | MEDIUM | 5.5 | 61%ile | Microsoft | 2025-04-08 |
| CVE-2025-29808 | Windows Cryptographic Services Information Disclosure Vulnerability | MEDIUM | 5.5 | 44%ile | Microsoft | 2025-04-08 |
| CVE-2025-29821 | Microsoft Dynamics Business Central Information Disclosure Vulnerability | MEDIUM | 5.5 | 53%ile | Microsoft | 2025-04-08 |
| CVE-2025-27472 | Windows Mark of the Web Security Feature Bypass Vulnerability | MEDIUM | 5.4 | 75%ile | Microsoft | 2025-04-08 |
| CVE-2025-32909 | Libsoup: null pointer dereference on libsoup through function "sniff_mp4" in soup-content-sniffer.c | MEDIUM | 5.3 | 45%ile | Microsoft | 2025-04-08 |
| CVE-2025-29070 | A heap buffer overflow vulnerability has been identified in thesmooth2() in cmsgamma.c in lcms2-2.16 which allows a remo | MEDIUM | 5.3 | 62%ile | Microsoft | 2025-04-08 |
| CVE-2025-26644 | Windows Hello Spoofing Vulnerability | MEDIUM | 5.1 | 47%ile | Microsoft | 2025-04-08 |
| CVE-2025-21579 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options). Supported versions that are aff | MEDIUM | 4.9 | 56%ile | Microsoft | 2025-04-08 |
| CVE-2025-21580 | Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5 | MEDIUM | 4.9 | 56%ile | Microsoft | 2025-04-08 |
| CVE-2025-21581 | Vulnerability in the MySQL Server product of Oracle MySQL | MEDIUM | 4.9 | 60%ile | Microsoft | 2025-04-08 |
| CVE-2025-21584 | Vulnerability in the MySQL Server product of Oracle MySQL | MEDIUM | 4.9 | 60%ile | Microsoft | 2025-04-08 |
| CVE-2025-21585 | Vulnerability in the MySQL Server product of Oracle MySQL | MEDIUM | 4.9 | 60%ile | Microsoft | 2025-04-08 |
| CVE-2025-30683 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are | MEDIUM | 4.9 | 60%ile | Microsoft | 2025-04-08 |
| CVE-2025-30684 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are | MEDIUM | 4.9 | 60%ile | Microsoft | 2025-04-08 |
| CVE-2025-30685 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are | MEDIUM | 4.9 | 60%ile | Microsoft | 2025-04-08 |
| CVE-2025-30689 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a | MEDIUM | 4.9 | 60%ile | Microsoft | 2025-04-08 |
| CVE-2025-30696 | Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5 | MEDIUM | 4.9 | 60%ile | Microsoft | 2025-04-08 |
| CVE-2025-30699 | Vulnerability in the MySQL Server product of Oracle MySQL | MEDIUM | 4.9 | 60%ile | Microsoft | 2025-04-08 |
| CVE-2025-30705 | Vulnerability in the MySQL Server product of Oracle MySQL | MEDIUM | 4.9 | 62%ile | Microsoft | 2025-04-08 |
| CVE-2025-30715 | Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5 | MEDIUM | 4.9 | 62%ile | Microsoft | 2025-04-08 |
| CVE-2024-52981 | An issue was discovered in Elasticsearch, where a large recursion using the Well-KnownText formatted string with nested | MEDIUM | 4.9 | 48%ile | Microsoft | 2025-04-08 |
| CVE-2025-21943 | gpio: aggregator: protect driver attr handlers against module unload | MEDIUM | 4.7 | 6%ile | Microsoft | 2025-04-08 |
| CVE-2025-22027 | media: streamzap: fix race between device disconnection and urb callback | MEDIUM | 4.7 | 6%ile | Microsoft | 2025-04-08 |
| CVE-2025-22029 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | MEDIUM | 4.7 | — | Microsoft | 2025-04-08 |
| CVE-2025-38104 | drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV | MEDIUM | 4.7 | 8%ile | Microsoft | 2025-04-08 |
| CVE-2023-25588 | Field `the_bfd` of `asymbol` is uninitialized in function `bfd_mach_o_get_synthetic_symtab` | MEDIUM | 4.7 | 32%ile | Microsoft | 2025-04-08 |
| CVE-2023-25585 | Field `file_table` of `struct module *module` is uninitialized | MEDIUM | 4.7 | 32%ile | Microsoft | 2025-04-08 |
| CVE-2025-22108 | bnxt_en: Mask the bd_cnt field in the TX BD properly | MEDIUM | 4.7 | 31%ile | Microsoft | 2025-04-08 |
| CVE-2025-29796 | Microsoft Edge for iOS Spoofing Vulnerability | MEDIUM | 4.7 | 49%ile | Microsoft | 2025-04-08 |
| CVE-2025-22106 | vmxnet3: unregister xdp rxq info in the reset path | MEDIUM | 4.4 | 10%ile | Microsoft | 2025-04-08 |
| CVE-2025-30704 | Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5 | MEDIUM | 4.4 | 58%ile | Microsoft | 2025-04-08 |
| CVE-2025-32728 | In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it dis | MEDIUM | 4.3 | 9%ile | Microsoft | 2025-04-08 |
| CVE-2025-4035 | Libsoup: cookie domain validation bypass via uppercase characters in libsoup | MEDIUM | 4.3 | 39%ile | Microsoft | 2025-04-08 |
| CVE-2025-25001 | Microsoft Edge for iOS Spoofing Vulnerability | MEDIUM | 4.3 | 56%ile | Microsoft | 2025-04-08 |
| CVE-2025-30721 | Vulnerability in the MySQL Server product of Oracle MySQL | MEDIUM | 4.0 | 13%ile | Microsoft | 2025-04-08 |
| CVE-2025-3360 | Glibc: glib prior to 2.82.5 is vulnerable to integer overflow and buffer under-read when parsing a very long invalid is | LOW | 3.7 | 52%ile | Microsoft | 2025-04-08 |
| CVE-2025-3416 | Rust-openssl: rust-openssl use-after-free in `md::fetch` and `cipher::fetch` | LOW | 3.7 | 45%ile | Microsoft | 2025-04-08 |
| CVE-2025-29478 | An issue in fluent-bit v.3.7.2 allows a local attacker to cause a denial of service via the cfl_list_size in cfl_list.h: | LOW | 3.6 | 11%ile | Microsoft | 2025-04-08 |
| CVE-2025-29477 | An issue in fluent-bit v.3.7.2 allows a local attacker to cause a denial of service via the function consume_event. | LOW | 3.3 | 8%ile | Microsoft | 2025-04-08 |
| CVE-2025-3198 | GNU Binutils objdump bucomm.c display_info memory leak | LOW | 3.3 | 21%ile | Microsoft | 2025-04-08 |
| CVE-2025-3730 | PyTorch LossCTC.cpp torch.nn.functional.ctc_loss denial of service | LOW | 3.3 | 26%ile | Microsoft | 2025-04-08 |
| CVE-2025-46327 | Go Snowflake Driver has race condition when checking access to Easy Logging configuration file | LOW | 3.3 | 3%ile | Microsoft | 2025-04-08 |
| CVE-2025-46394 | In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal esc | LOW | 3.2 | 8%ile | Microsoft | 2025-04-08 |
| CVE-2025-32415 | In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer un | LOW | 2.9 | 48%ile | Microsoft | 2025-04-08 |
| CVE-2025-30681 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are | LOW | 2.7 | 56%ile | Microsoft | 2025-04-08 |
| CVE-2025-30703 | Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5 | LOW | 2.7 | 48%ile | Microsoft | 2025-04-08 |
| CVE-2024-58251 | In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI t | LOW | 2.5 | 7%ile | Microsoft | 2025-04-08 |
| CVE-2025-21912 | gpio: rcar: Use raw_spinlock to protect register access | UNKNOWN | — | 5%ile | Microsoft | 2025-04-08 |
| CVE-2025-22014 | soc: qcom: pdr: Fix the potential deadlock | UNKNOWN | — | 6%ile | Microsoft | 2025-04-08 |
| CVE-2025-31115 | XZ has a heap-use-after-free bug in threaded .xz decoder | UNKNOWN | — | 52%ile | Microsoft | 2025-04-08 |
| CVE-2025-31498 | c-ares has a use-after-free in read_answers() | UNKNOWN | — | 49%ile | Microsoft | 2025-04-08 |
| CVE-2025-3066 | Chromium: CVE-2025-3066 Use after free in Site Isolation | UNKNOWN | — | 35%ile | Microsoft | 2025-04-08 |
| CVE-2025-3070 | Chromium: CVE-2025-3070 Insufficient validation of untrusted input in Extensions | UNKNOWN | — | 27%ile | Microsoft | 2025-04-08 |
| CVE-2025-3069 | Chromium: CVE-2025-3069 Inappropriate implementation in Extensions | UNKNOWN | — | 32%ile | Microsoft | 2025-04-08 |
| CVE-2025-3068 | Chromium: CVE-2025-3068 Inappropriate implementation in Intents | UNKNOWN | — | 32%ile | Microsoft | 2025-04-08 |
| CVE-2025-3067 | Chromium: CVE-2025-3067 Inappropriate implementation in Custom Tabs | UNKNOWN | — | 55%ile | Microsoft | 2025-04-08 |
| CVE-2025-3071 | Chromium: CVE-2025-3071 Inappropriate implementation in Navigations | UNKNOWN | — | 20%ile | Microsoft | 2025-04-08 |
| CVE-2025-3072 | Chromium: CVE-2025-3072 Inappropriate implementation in Custom Tabs | UNKNOWN | — | 22%ile | Microsoft | 2025-04-08 |
| CVE-2025-3073 | Chromium: CVE-2025-3073 Inappropriate implementation in Autofill | UNKNOWN | — | 22%ile | Microsoft | 2025-04-08 |
| CVE-2025-3074 | Chromium: CVE-2025-3074 Inappropriate implementation in Downloads | UNKNOWN | — | 22%ile | Microsoft | 2025-04-08 |
| CVE-2025-3620 | Chromium: CVE-2025-3620 Use after free in USB | UNKNOWN | — | 24%ile | Microsoft | 2025-04-08 |
| CVE-2025-3619 | Chromium: CVE-2025-3619 Heap buffer overflow in Codecs | UNKNOWN | — | 43%ile | Microsoft | 2025-04-08 |
| CVE-2024-24790 | Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip | CRITICAL | 9.8 | 80%ile | Microsoft | 2024-06-11 |
| CVE-2024-39331 | In Emacs before 29.4 org-link-expand-abbrev in lisp/ol.el expands a %(...) link abbrev even when it specifies an unsafe | CRITICAL | 9.8 | 71%ile | Microsoft | 2024-06-11 |
| CVE-2024-4577 | Argument Injection in PHP-CGI | CRITICAL | 9.8 | 100%ile | Microsoft | 2024-06-11 |
| CVE-2024-5699 | In violation of spec, cookie prefixes such as `__Secure` were being ignored if they were not correctly capitalized - by | CRITICAL | 9.8 | 56%ile | Microsoft | 2024-06-11 |
| CVE-2024-38541 | of: module: add buffer overflow check in of_modalias() | CRITICAL | 9.8 | 60%ile | Microsoft | 2024-06-11 |
| CVE-2024-5701 | Memory safety bugs present in Firefox 126. Some of these bugs showed evidence of memory corruption and we presume that w | CRITICAL | 9.8 | 48%ile | Microsoft | 2024-06-11 |
| CVE-2024-5171 | heap buffer overflow in libaom | CRITICAL | 9.8 | 70%ile | Microsoft | 2024-06-11 |
| CVE-2024-30080 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability | CRITICAL | 9.8 | 99%ile | Microsoft | 2024-06-11 |
| CVE-2024-37371 | In MIT Kerberos 5 (aka krb5) before 1.21.3 an attacker can cause invalid memory reads during GSS message token handling | CRITICAL | 9.1 | 79%ile | Microsoft | 2024-06-11 |
| CVE-2024-37407 | Libarchive before 3.7.4 allows name out-of-bounds access when a ZIP archive has an empty-name file and mac-ext is enable | CRITICAL | 9.1 | 62%ile | Microsoft | 2024-06-11 |
| CVE-2024-38428 | url.c in GNU Wget through 1.24.5 mishandles semicolons in the userinfo subcomponent of a URI and thus there may be insec | CRITICAL | 9.1 | 52%ile | Microsoft | 2024-06-11 |
| CVE-2024-5197 | Integer overflow in libvpx | CRITICAL | 9.1 | 57%ile | Microsoft | 2024-06-11 |
| CVE-2024-29039 | Missing check in tpm2_checkquote allows attackers to misrepresent the TPM state | CRITICAL | 9.0 | 62%ile | Microsoft | 2024-06-11 |
| CVE-2024-5187 | Arbitrary File Overwrite in download_model_with_test_data in onnx/onnx | HIGH | 8.8 | 67%ile | Microsoft | 2024-06-11 |
| CVE-2024-5585 | Command injection via array-ish $command parameter of proc_open() (bypass CVE-2024-1874 fix) | HIGH | 8.8 | 98%ile | Microsoft | 2024-06-11 |
| CVE-2024-38620 | Bluetooth: HCI: Remove HCI_AMP support | HIGH | 8.8 | 24%ile | Microsoft | 2024-06-11 |
| CVE-2024-30078 | Windows Wi-Fi Driver Remote Code Execution Vulnerability | HIGH | 8.8 | 92%ile | Microsoft | 2024-06-11 |
| CVE-2024-30064 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 8.8 | 56%ile | Microsoft | 2024-06-11 |
| CVE-2024-30068 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 8.8 | 56%ile | Microsoft | 2024-06-11 |
| CVE-2024-30097 | Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability | HIGH | 8.8 | 78%ile | Microsoft | 2024-06-11 |
| CVE-2024-30103 | Microsoft Outlook Remote Code Execution Vulnerability | HIGH | 8.8 | 89%ile | Microsoft | 2024-06-11 |
| CVE-2024-35249 | Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability | HIGH | 8.8 | 89%ile | Microsoft | 2024-06-11 |
| CVE-2024-37676 | An issue in htop-dev htop v.2.20 allows a local attacker to cause an out-of-bounds access in the Header_populateFromSett | HIGH | 8.4 | 10%ile | Microsoft | 2024-06-11 |
| CVE-2024-6257 | HashiCorp go-getter Vulnerable to Code Execution On Git Update Via Git Config Manipulation | HIGH | 8.4 | 62%ile | Microsoft | 2024-06-11 |
| CVE-2024-37325 | Azure Science Virtual Machine (DSVM) Elevation of Privilege Vulnerability | HIGH | 8.1 | 66%ile | Microsoft | 2024-06-11 |
| CVE-2024-30074 | Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability | HIGH | 8.0 | 68%ile | Microsoft | 2024-06-11 |
| CVE-2024-30075 | Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability | HIGH | 8.0 | 59%ile | Microsoft | 2024-06-11 |
| CVE-2024-30077 | Windows OLE Remote Code Execution Vulnerability | HIGH | 8.0 | 78%ile | Microsoft | 2024-06-11 |
| CVE-2024-35260 | Microsoft Dataverse Remote Code Execution Vulnerability | HIGH | 8.0 | 58%ile | Microsoft | 2024-06-11 |
| CVE-2022-48744 | net/mlx5e: Avoid field-overflowing memcpy() | HIGH | 7.8 | 49%ile | Microsoft | 2024-06-11 |
| CVE-2024-36477 | tpm_tis_spi: Account for SPI header when allocating TPM SPI xfer buffer | HIGH | 7.8 | 13%ile | Microsoft | 2024-06-11 |
| CVE-2024-36971 | net: fix __dst_negative_advice() race | HIGH | 7.8 | 86%ile | Microsoft | 2024-06-11 |
| CVE-2024-38545 | RDMA/hns: Fix UAF for cq async event | HIGH | 7.8 | 17%ile | Microsoft | 2024-06-11 |
| CVE-2024-38556 | net/mlx5: Add a timeout to acquire the command queue semaphore | HIGH | 7.8 | 18%ile | Microsoft | 2024-06-11 |
| CVE-2024-38570 | gfs2: Fix potential glock use-after-free on unmount | HIGH | 7.8 | 52%ile | Microsoft | 2024-06-11 |
| CVE-2024-38577 | rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow | HIGH | 7.8 | 17%ile | Microsoft | 2024-06-11 |
| CVE-2024-38581 | drm/amdgpu/mes: fix use-after-free issue | HIGH | 7.8 | 14%ile | Microsoft | 2024-06-11 |
| CVE-2024-38583 | nilfs2: fix use-after-free of timer for log writer thread | HIGH | 7.8 | 18%ile | Microsoft | 2024-06-11 |
| CVE-2024-38588 | ftrace: Fix possible use-after-free issue in ftrace_location() | HIGH | 7.8 | 15%ile | Microsoft | 2024-06-11 |
| CVE-2024-38630 | watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger | HIGH | 7.8 | 16%ile | Microsoft | 2024-06-11 |
| CVE-2024-38664 | drm: zynqmp_dpsub: Always register bridge | HIGH | 7.8 | 10%ile | Microsoft | 2024-06-11 |
| CVE-2024-38667 | riscv: prevent pt_regs corruption for secondary idle threads | HIGH | 7.8 | 14%ile | Microsoft | 2024-06-11 |
| CVE-2024-39277 | dma-mapping: benchmark: handle NUMA_NO_NODE correctly | HIGH | 7.8 | 13%ile | Microsoft | 2024-06-11 |
| CVE-2024-39291 | drm/amdgpu: Fix buffer size in gfx_v9_4_3_init_ cp_compute_microcode() and rlc_microcode() | HIGH | 7.8 | 16%ile | Microsoft | 2024-06-11 |
| CVE-2024-39463 | 9p: add missing locking around taking dentry fid list | HIGH | 7.8 | 17%ile | Microsoft | 2024-06-11 |
| CVE-2024-38628 | usb: gadget: u_audio: Fix race condition use of controls after free during gadget unbind. | HIGH | 7.8 | 8%ile | Microsoft | 2024-06-11 |
| CVE-2024-30072 | Microsoft Event Trace Log File Parsing Remote Code Execution Vulnerability | HIGH | 7.8 | 58%ile | Microsoft | 2024-06-11 |
| CVE-2024-30082 | Win32k Elevation of Privilege Vulnerability | HIGH | 7.8 | 70%ile | Microsoft | 2024-06-11 |
| CVE-2024-35250 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 98%ile | Microsoft | 2024-06-11 |
| CVE-2024-30062 | Windows Standards-Based Storage Management Service Remote Code Execution Vulnerability | HIGH | 7.8 | 63%ile | Microsoft | 2024-06-11 |
| CVE-2024-30085 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | HIGH | 7.8 | 97%ile | Microsoft | 2024-06-11 |
| CVE-2024-30086 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability | HIGH | 7.8 | 66%ile | Microsoft | 2024-06-11 |
| CVE-2024-30087 | Win32k Elevation of Privilege Vulnerability | HIGH | 7.8 | 95%ile | Microsoft | 2024-06-11 |
| CVE-2024-30089 | Microsoft Streaming Service Elevation of Privilege Vulnerability | HIGH | 7.8 | 95%ile | Microsoft | 2024-06-11 |
| CVE-2024-30091 | Win32k Elevation of Privilege Vulnerability | HIGH | 7.8 | 91%ile | Microsoft | 2024-06-11 |
| CVE-2024-30094 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | HIGH | 7.8 | 60%ile | Microsoft | 2024-06-11 |
| CVE-2024-30095 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | HIGH | 7.8 | 63%ile | Microsoft | 2024-06-11 |
| CVE-2024-30100 | Microsoft SharePoint Server Remote Code Execution Vulnerability | HIGH | 7.8 | 68%ile | Microsoft | 2024-06-11 |
| CVE-2024-30104 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 7.8 | 74%ile | Microsoft | 2024-06-11 |
| CVE-2024-33655 | The DNS protocol in RFC 1035 and updates allows remote attackers to cause a denial of service (resource consumption) by | HIGH | 7.5 | 78%ile | Microsoft | 2024-06-11 |
| CVE-2024-36972 | af_unix: Update unix_sk(sk)->oob_skb under sk_receive_queue lock. | HIGH | 7.5 | 44%ile | Microsoft | 2024-06-11 |
| CVE-2024-37370 | In MIT Kerberos 5 (aka krb5) before 1.21.3 an attacker can modify the plaintext Extra Count field of a confidential GSS | HIGH | 7.5 | 55%ile | Microsoft | 2024-06-11 |
| CVE-2024-37890 | Denial of service when handling a request with many HTTP headers in ws | HIGH | 7.5 | 72%ile | Microsoft | 2024-06-11 |
| CVE-2024-39134 | A Stack Buffer Overflow vulnerability in zziplibv 0.13.77 allows attackers to cause a denial of service via the __zzip_f | HIGH | 7.5 | 49%ile | Microsoft | 2024-06-11 |
| CVE-2024-4032 | Incorrect IPv4 and IPv6 private ranges | HIGH | 7.5 | 65%ile | Microsoft | 2024-06-11 |
| CVE-2024-5702 | Memory corruption in the networking stack could have led to a potentially exploitable crash. This vulnerability affects | HIGH | 7.5 | 58%ile | Microsoft | 2024-06-11 |
| CVE-2024-5694 | An attacker could have caused a use-after-free in the JavaScript engine to read memory in the JavaScript string section | HIGH | 7.5 | 41%ile | Microsoft | 2024-06-11 |
| CVE-2024-30070 | DHCP Server Service Denial of Service Vulnerability | HIGH | 7.5 | 83%ile | Microsoft | 2024-06-11 |
| CVE-2023-50868 | MITRE: CVE-2023-50868 NSEC3 closest encloser proof can exhaust CPU | HIGH | 7.5 | 100%ile | Microsoft | 2024-06-11 |
| CVE-2024-30083 | Windows Standards-Based Storage Management Service Denial of Service Vulnerability | HIGH | 7.5 | 85%ile | Microsoft | 2024-06-11 |
| CVE-2024-30101 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 7.5 | 78%ile | Microsoft | 2024-06-11 |
| CVE-2024-35252 | Azure Storage Movement Client Library Denial of Service Vulnerability | HIGH | 7.5 | 85%ile | Microsoft | 2024-06-11 |
| CVE-2024-0397 | Memory race condition in ssl.SSLContext certificate store methods | HIGH | 7.4 | 57%ile | Microsoft | 2024-06-11 |
| CVE-2024-29187 | GitHub: CVE-2024-29187 WiX Burn-based bundles are vulnerable to binary hijack when run as SYSTEM | HIGH | 7.3 | 40%ile | Microsoft | 2024-06-11 |
| CVE-2024-30093 | Windows Storage Elevation of Privilege Vulnerability | HIGH | 7.3 | 67%ile | Microsoft | 2024-06-11 |
| CVE-2024-30102 | Microsoft Office Remote Code Execution Vulnerability | HIGH | 7.3 | 56%ile | Microsoft | 2024-06-11 |
| CVE-2024-35248 | Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability | HIGH | 7.3 | 61%ile | Microsoft | 2024-06-11 |
| CVE-2024-38381 | nfc: nci: Fix uninit-value in nci_rx_work | HIGH | 7.1 | 32%ile | Microsoft | 2024-06-11 |
| CVE-2024-38538 | net: bridge: xmit: make sure we have at least eth header len bytes | HIGH | 7.1 | 21%ile | Microsoft | 2024-06-11 |
| CVE-2024-38635 | soundwire: cadence: fix invalid PDI offset | HIGH | 7.1 | 14%ile | Microsoft | 2024-06-11 |
| CVE-2024-35254 | Azure Monitor Agent Elevation of Privilege Vulnerability | HIGH | 7.1 | 58%ile | Microsoft | 2024-06-11 |
| CVE-2024-30084 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability | HIGH | 7.0 | 93%ile | Microsoft | 2024-06-11 |
| CVE-2024-30088 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.0 | 99%ile | Microsoft | 2024-06-11 |
| CVE-2024-30090 | Microsoft Streaming Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 81%ile | Microsoft | 2024-06-11 |
| CVE-2024-30099 | Windows Kernel Elevation of Privilege Vulnerability | HIGH | 7.0 | 46%ile | Microsoft | 2024-06-11 |
| CVE-2024-35265 | Windows Perception Service Elevation of Privilege Vulnerability | HIGH | 7.0 | 31%ile | Microsoft | 2024-06-11 |
| CVE-2024-30076 | Windows Container Manager Service Elevation of Privilege Vulnerability | MEDIUM | 6.8 | 77%ile | Microsoft | 2024-06-11 |
| CVE-2024-5742 | Nano: running `chmod` and `chown` on the filename allows malicious user to replace the emergency file with a malicious s | MEDIUM | 6.7 | 28%ile | Microsoft | 2024-06-11 |
| CVE-2024-29060 | Visual Studio Elevation of Privilege Vulnerability | MEDIUM | 6.7 | 59%ile | Microsoft | 2024-06-11 |
| CVE-2024-30063 | Windows Distributed File System (DFS) Remote Code Execution Vulnerability | MEDIUM | 6.7 | 63%ile | Microsoft | 2024-06-11 |
| CVE-2022-4968 | netplan leaks the private key of wireguard to local users. | MEDIUM | 6.5 | 18%ile | Microsoft | 2024-06-11 |
| CVE-2024-24789 | Mishandling of corrupt central directory record in archive/zip | MEDIUM | 6.5 | 38%ile | Microsoft | 2024-06-11 |
| CVE-2024-36968 | Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init() | MEDIUM | 6.5 | 22%ile | Microsoft | 2024-06-11 |
| CVE-2024-5642 | Buffer overread when using an empty list with SSLContext.set_npn_protocols() | MEDIUM | 6.5 | 55%ile | Microsoft | 2024-06-11 |
| CVE-2024-6104 | go-retryablehttp can leak basic auth credentials to log files | MEDIUM | 6.0 | 30%ile | Microsoft | 2024-06-11 |
| CVE-2024-2408 | PHP is vulnerable to the Marvin Attack | MEDIUM | 5.9 | 67%ile | Microsoft | 2024-06-11 |
| CVE-2024-35263 | Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability | MEDIUM | 5.7 | 77%ile | Microsoft | 2024-06-11 |
| CVE-2022-48766 | drm/amd/display: Wrap dcn301_calculate_wm_and_dlg for FPU. | MEDIUM | 5.5 | 8%ile | Microsoft | 2024-06-11 |
| CVE-2024-36244 | net/sched: taprio: extend minimum interval restriction to entire cycle too | MEDIUM | 5.5 | 16%ile | Microsoft | 2024-06-11 |
| CVE-2024-36288 | SUNRPC: Fix loop termination condition in gss_free_in_token_pages() | MEDIUM | 5.5 | 55%ile | Microsoft | 2024-06-11 |
| CVE-2024-36478 | null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' | MEDIUM | 5.5 | 19%ile | Microsoft | 2024-06-11 |
| CVE-2024-36481 | tracing/probes: fix error check in parse_btf_field() | MEDIUM | 5.5 | 11%ile | Microsoft | 2024-06-11 |
| CVE-2024-36965 | remoteproc: mediatek: Make sure IPI buffer fits in L2TCM | MEDIUM | 5.5 | 13%ile | Microsoft | 2024-06-11 |
| CVE-2024-36967 | KEYS: trusted: Fix memory leak in tpm2_key_encode() | MEDIUM | 5.5 | 12%ile | Microsoft | 2024-06-11 |
| CVE-2024-36969 | drm/amd/display: Fix division by zero in setup_dsc_config | MEDIUM | 5.5 | 12%ile | Microsoft | 2024-06-11 |
| CVE-2024-38564 | bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE | MEDIUM | 5.5 | 15%ile | Microsoft | 2024-06-11 |
| CVE-2024-38571 | thermal/drivers/tsens: Fix null pointer dereference | MEDIUM | 5.5 | 14%ile | Microsoft | 2024-06-11 |
| CVE-2024-38595 | net/mlx5: Fix peer devlink set for SF representor devlink port | MEDIUM | 5.5 | 11%ile | Microsoft | 2024-06-11 |
| CVE-2024-38603 | drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset() | MEDIUM | 5.5 | 11%ile | Microsoft | 2024-06-11 |
| CVE-2024-38780 | dma-buf/sw-sync: don't enable IRQ from sync_print_obj() | MEDIUM | 5.5 | 8%ile | Microsoft | 2024-06-11 |
| CVE-2024-39292 | um: Add winch to winch_handlers before registering winch IRQ | MEDIUM | 5.5 | 16%ile | Microsoft | 2024-06-11 |
| CVE-2024-38608 | net/mlx5e: Fix netif state handling | MEDIUM | 5.5 | 18%ile | Microsoft | 2024-06-11 |
| CVE-2024-38553 | net: fec: remove .ndo_poll_controller to avoid deadlocks | MEDIUM | 5.5 | 9%ile | Microsoft | 2024-06-11 |
| CVE-2024-38557 | net/mlx5: Reload only IB representors upon lag disable/enable | MEDIUM | 5.5 | 8%ile | Microsoft | 2024-06-11 |
| CVE-2024-38543 | lib/test_hmm.c: handle src_pfns and dst_pfns allocation failure | MEDIUM | 5.5 | 15%ile | Microsoft | 2024-06-11 |
| CVE-2024-36479 | fpga: bridge: add owner module and take its refcount | MEDIUM | 5.5 | 11%ile | Microsoft | 2024-06-11 |
| CVE-2024-37021 | fpga: manager: add owner module and take its refcount | MEDIUM | 5.5 | 11%ile | Microsoft | 2024-06-11 |
| CVE-2024-38625 | fs/ntfs3: Check 'folio' pointer for NULL | MEDIUM | 5.5 | 12%ile | Microsoft | 2024-06-11 |
| CVE-2024-35255 | Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability | MEDIUM | 5.5 | 58%ile | Microsoft | 2024-06-11 |
| CVE-2024-30065 | Windows Themes Denial of Service Vulnerability | MEDIUM | 5.5 | 58%ile | Microsoft | 2024-06-11 |
| CVE-2024-30066 | Winlogon Elevation of Privilege Vulnerability | MEDIUM | 5.5 | 50%ile | Microsoft | 2024-06-11 |
| CVE-2024-30067 | Winlogon Elevation of Privilege Vulnerability | MEDIUM | 5.5 | 50%ile | Microsoft | 2024-06-11 |
| CVE-2024-30096 | Windows Cryptographic Services Information Disclosure Vulnerability | MEDIUM | 5.5 | 61%ile | Microsoft | 2024-06-11 |
| CVE-2024-30058 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | MEDIUM | 5.4 | 34%ile | Microsoft | 2024-06-11 |
| CVE-2024-30057 | Microsoft Edge for iOS Spoofing Vulnerability | MEDIUM | 5.4 | 35%ile | Microsoft | 2024-06-11 |
| CVE-2024-5458 | Filter bypass in filter_var (FILTER_VALIDATE_URL) | MEDIUM | 5.3 | 96%ile | Microsoft | 2024-06-11 |
| CVE-2024-37354 | btrfs: fix crash on racing fsync and size-extending write into prealloc | MEDIUM | 4.7 | 7%ile | Microsoft | 2024-06-11 |
| CVE-2024-38662 | bpf: Allow delete from sockmap/sockhash only if update is allowed | MEDIUM | 4.7 | 12%ile | Microsoft | 2024-06-11 |
| CVE-2024-30069 | Windows Remote Access Connection Manager Information Disclosure Vulnerability | MEDIUM | 4.7 | 47%ile | Microsoft | 2024-06-11 |
| CVE-2024-38082 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | MEDIUM | 4.7 | 43%ile | Microsoft | 2024-06-11 |
| CVE-2024-30052 | Visual Studio Remote Code Execution Vulnerability | MEDIUM | 4.7 | 72%ile | Microsoft | 2024-06-11 |
| CVE-2023-52890 | NTFS-3G before 75dcdc2 has a use-after-free in ntfs_uppercase_mbs in libntfs-3g/unistr.c. NOTE: discussion suggests that | MEDIUM | 4.5 | 5%ile | Microsoft | 2024-06-11 |
| CVE-2024-35235 | Cupsd Listen arbitrary chmod 0140777 | MEDIUM | 4.4 | 84%ile | Microsoft | 2024-06-11 |
| CVE-2024-37535 | GNOME VTE before 0.76.3 allows an attacker to cause a denial of service (memory consumption) via a window resize escape | MEDIUM | 4.4 | 15%ile | Microsoft | 2024-06-11 |
| CVE-2024-37891 | Proxy-Authorization request header isn't stripped during cross-origin redirects in urllib3 | MEDIUM | 4.4 | 67%ile | Microsoft | 2024-06-11 |
| CVE-2024-38540 | bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq | MEDIUM | 4.4 | 16%ile | Microsoft | 2024-06-11 |
| CVE-2024-35253 | Microsoft Azure File Sync Elevation of Privilege Vulnerability | MEDIUM | 4.4 | 55%ile | Microsoft | 2024-06-11 |
| CVE-2024-29038 | tpm2 does not detect if quote was not generated by TPM | MEDIUM | 4.3 | 31%ile | Microsoft | 2024-06-11 |
| CVE-2024-29040 | Fapi Verify Quote: Does not detect if quote was not generated by TPM | MEDIUM | 4.3 | 26%ile | Microsoft | 2024-06-11 |
| CVE-2024-39133 | Heap Buffer Overflow vulnerability in zziplib v0.13.77 allows attackers to cause a denial of service via the __zzip_pars | MEDIUM | 4.3 | 43%ile | Microsoft | 2024-06-11 |
| CVE-2024-5690 | By monitoring the time certain operations take, an attacker could have guessed which external protocol handlers were fun | MEDIUM | 4.3 | 54%ile | Microsoft | 2024-06-11 |
| CVE-2024-38093 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | MEDIUM | 4.3 | 43%ile | Microsoft | 2024-06-11 |
| CVE-2024-38083 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | MEDIUM | 4.3 | 43%ile | Microsoft | 2024-06-11 |
| CVE-2024-38594 | net: stmmac: move the EST lock to struct stmmac_priv | LOW | 3.3 | 11%ile | Microsoft | 2024-06-11 |
| CVE-2022-2601-M | CVE-2022-2601-M | UNKNOWN | — | — | Microsoft | 2024-06-11 |
| CVE-2022-3775-M | CVE-2022-3775-M | UNKNOWN | — | — | Microsoft | 2024-06-11 |
| CVE-2024-5841 | Chromium: CVE-2024-5841 Use after free in V8 | UNKNOWN | — | 92%ile | Microsoft | 2024-06-11 |
| CVE-2024-5835 | Chromium: CVE-2024-5835 Heap buffer overflow in Tab Groups | UNKNOWN | — | 44%ile | Microsoft | 2024-06-11 |
| CVE-2024-5837 | Chromium: CVE-2024-5837 Type Confusion in V8 | UNKNOWN | — | 45%ile | Microsoft | 2024-06-11 |
| CVE-2024-5844 | Chromium: CVE-2024-5844 Heap buffer overflow in Tab Strip | UNKNOWN | — | 45%ile | Microsoft | 2024-06-11 |
| CVE-2024-5833 | Chromium: CVE-2024-5833 Type Confusion in V8 | UNKNOWN | — | 44%ile | Microsoft | 2024-06-11 |
| CVE-2024-5839 | Chromium: CVE-2024-5839 Inappropriate Implementation in Memory Allocator | UNKNOWN | — | 42%ile | Microsoft | 2024-06-11 |
| CVE-2024-5836 | Chromium: CVE-2024-5836 Inappropriate Implementation in DevTools | UNKNOWN | — | 43%ile | Microsoft | 2024-06-11 |
| CVE-2024-5834 | Chromium: CVE-2024-5834 Inappropriate implementation in Dawn | UNKNOWN | — | 47%ile | Microsoft | 2024-06-11 |
| CVE-2024-5843 | Chromium: CVE-2024-5843 Inappropriate implementation in Downloads | UNKNOWN | — | 41%ile | Microsoft | 2024-06-11 |
| CVE-2024-5831 | Chromium: CVE-2024-5831 Use after free in Dawn | UNKNOWN | — | 42%ile | Microsoft | 2024-06-11 |
| CVE-2024-5840 | Chromium: CVE-2024-5840 Policy Bypass in CORS | UNKNOWN | — | 35%ile | Microsoft | 2024-06-11 |
| CVE-2024-5842 | Chromium: CVE-2024-5842 Use after free in Browser UI | UNKNOWN | — | 42%ile | Microsoft | 2024-06-11 |
| CVE-2024-5838 | Chromium: CVE-2024-5838 Type Confusion in V8 | UNKNOWN | — | 44%ile | Microsoft | 2024-06-11 |
| CVE-2024-5832 | Chromium: CVE-2024-5832 Use after free in Dawn | UNKNOWN | — | 42%ile | Microsoft | 2024-06-11 |
| CVE-2024-5830 | Chromium: CVE-2024-5830 Type Confusion in V8 | UNKNOWN | — | 61%ile | Microsoft | 2024-06-11 |
| CVE-2024-5493 | Chromium: CVE-2024-5493 Heap buffer overflow in WebRTC | UNKNOWN | — | 58%ile | Microsoft | 2024-06-11 |
| CVE-2024-5498 | Chromium: CVE-2024-5498 Use after free in Presentation API | UNKNOWN | — | 54%ile | Microsoft | 2024-06-11 |
| CVE-2024-5496 | Chromium: CVE-2024-5496 Use after free in Media Session | UNKNOWN | — | 60%ile | Microsoft | 2024-06-11 |
| CVE-2024-5499 | Chromium: CVE-2024-5499 Out of bounds write in Streams API | UNKNOWN | — | 62%ile | Microsoft | 2024-06-11 |
| CVE-2024-5494 | Chromium: CVE-2024-5494 Use after free in Dawn | UNKNOWN | — | 55%ile | Microsoft | 2024-06-11 |
| CVE-2024-5497 | Chromium: CVE-2024-5497 Out of bounds memory access in Keyboard Inputs | UNKNOWN | — | 58%ile | Microsoft | 2024-06-11 |
| CVE-2024-5495 | Chromium: CVE-2024-5495 Use after free in Dawn | UNKNOWN | — | 56%ile | Microsoft | 2024-06-11 |
| CVE-2024-6103 | Chromium: CVE-2024-6103: Use after free in Dawn | UNKNOWN | — | 51%ile | Microsoft | 2024-06-11 |
| CVE-2024-6102 | Chromium: CVE-2024-6102: Out of bounds memory access in Dawn | UNKNOWN | — | 53%ile | Microsoft | 2024-06-11 |
| CVE-2024-6101 | Chromium: CVE-2024-6101: Inappropriate implementation in WebAssembly | UNKNOWN | — | 57%ile | Microsoft | 2024-06-11 |
| CVE-2024-6100 | Chromium: CVE-2024-6100 Type Confusion in V8 | UNKNOWN | — | 67%ile | Microsoft | 2024-06-11 |
| CVE-2024-6290 | Chromium: CVE-2024-6290 Use after free in Dawn | UNKNOWN | — | 49%ile | Microsoft | 2024-06-11 |
| CVE-2024-6293 | Chromium: CVE-2024-6293 Use after free in Dawn | UNKNOWN | — | 49%ile | Microsoft | 2024-06-11 |
| CVE-2024-6292 | Chromium: CVE-2024-6292 Use after free in Dawn | UNKNOWN | — | 49%ile | Microsoft | 2024-06-11 |
| CVE-2024-6291 | Chromium: CVE-2024-6291 Use after free in Swiftshader | UNKNOWN | — | 52%ile | Microsoft | 2024-06-11 |
| CVE-2024-34122 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | UNKNOWN | — | 24%ile | Microsoft | 2024-06-11 |
| CVE-2024-5846 | Chromium: CVE-2024-5846 Use after free in PDFium | UNKNOWN | — | 40%ile | Microsoft | 2024-06-11 |
| CVE-2024-5847 | Chromium: CVE-2024-5847 Use after free in PDFium | UNKNOWN | — | 40%ile | Microsoft | 2024-06-11 |
| CVE-2024-5845 | Chromium: CVE-2024-5845 Use after free in Audio | UNKNOWN | — | 40%ile | Microsoft | 2024-06-11 |