CVE Database
Search and filter vulnerabilities by ID, vendor, product, severity, or description.
Search and filter vulnerabilities by ID, vendor, product, severity, or description.
| CVE ID | Severity | Score | Description | Published | |
|---|---|---|---|---|---|
| CVE-2026-72996 | HIGH | 7.8 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | Sep 8, 2026 | |
| CVE-2026-72995 | HIGH | 7.8 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | Sep 8, 2026 | |
| CVE-2026-72993 | HIGH | 7.8 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | Sep 8, 2026 | |
| CVE-2026-72991 | HIGH | 7.8 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | Sep 8, 2026 | |
| CVE-2026-72990 | HIGH | 7.8 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | Sep 8, 2026 | |
| CVE-2026-72989 | HIGH | 7.5 | Use of uninitialized resource in Windows Failover Cluster allows an unauthorized attacker to disclose information over a network. | Sep 8, 2026 | |
| CVE-2026-72988 | HIGH | 7.8 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | Sep 8, 2026 | |
| CVE-2026-72986 | HIGH | 8.8 | Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network. | Sep 8, 2026 | |
| CVE-2026-72985 | MEDIUM | 6.8 | Heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized attacker to elevate privileges with a physical attack. | Sep 8, 2026 | |
| CVE-2026-72983 | CRITICAL | 9.8 | Use after free in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to execute code over a network. | Sep 8, 2026 | |
| CVE-2026-72980 | MEDIUM | 4.4 | Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally. | Sep 8, 2026 | |
| CVE-2026-72978 | MEDIUM | 5.9 | Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network. | Sep 8, 2026 | |
| CVE-2026-72976 | MEDIUM | 5.0 | Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information locally. | Sep 8, 2026 | |
| CVE-2026-72966 | MEDIUM | 5.5 | Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to perform tampering locally. | Sep 8, 2026 | |
| CVE-2026-72965 | HIGH | 7.8 | Use after free in Windows WebClient Service allows an authorized attacker to elevate privileges locally. | Sep 8, 2026 | |
| CVE-2026-72956 | MEDIUM | 6.5 | Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. | Sep 8, 2026 | |
| CVE-2026-72949 | HIGH | 7.5 | Null pointer dereference in Windows SMB Server Network Transport Driver (srvnet.sys) allows an unauthorized attacker to deny service over a network. | Sep 8, 2026 | |
| CVE-2026-72947 | MEDIUM | 6.4 | Integer underflow (wrap or wraparound) in Windows File History Service allows an authorized attacker to elevate privileges locally. | Sep 8, 2026 | |
| CVE-2026-72946 | HIGH | 7.8 | Heap-based buffer overflow in Storage Port Driver allows an authorized attacker to elevate privileges locally. | Sep 8, 2026 | |
| CVE-2026-72945 | MEDIUM | 5.5 | Use of uninitialized resource in Windows Task Scheduler allows an authorized attacker to disclose information locally. | Sep 8, 2026 | |
| CVE-2026-72942 | MEDIUM | 6.5 | Out-of-bounds read in Windows Spaceport.sys allows an unauthorized attacker to disclose information over a network. | Sep 8, 2026 | |
| CVE-2026-72941 | HIGH | 7.8 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | Sep 8, 2026 | |
| CVE-2026-72939 | MEDIUM | 6.5 | Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to deny service over a network. | Sep 8, 2026 | |
| CVE-2026-72937 | MEDIUM | 5.5 | Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally. | Sep 8, 2026 | |
| CVE-2026-72932 | HIGH | 7.5 | Buffer over-read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network. | Sep 8, 2026 |