CVE Database
Search and filter vulnerabilities by ID, vendor, product, severity, or description.
Search and filter vulnerabilities by ID, vendor, product, severity, or description.
| CVE ID | Severity | Score | Description | Published | |
|---|---|---|---|---|---|
| CVE-2026-69794 | MEDIUM | 5.5 | Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally. | Sep 8, 2026 | |
| CVE-2026-69791 | HIGH | 7.0 | Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. | Sep 8, 2026 | |
| CVE-2026-69787 | HIGH | 7.8 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | Sep 8, 2026 | |
| CVE-2026-69781 | MEDIUM | 6.5 | Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network. | Sep 8, 2026 | |
| CVE-2026-69778 | HIGH | 8.8 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | Sep 8, 2026 | |
| CVE-2026-69777 | HIGH | 8.0 | Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network. | Sep 8, 2026 | |
| CVE-2026-69773 | HIGH | 8.0 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network. | Sep 8, 2026 | |
| CVE-2026-69771 | MEDIUM | 4.7 | Improper link resolution before file access ('link following') in Windows Container Manager Service allows an authorized attacker to bypass a security feature locally. | Sep 8, 2026 | |
| CVE-2026-69770 | MEDIUM | 5.5 | Use of uninitialized resource in Windows Spaceport.sys allows an authorized attacker to disclose information locally. | Sep 8, 2026 | |
| CVE-2026-69768 | CRITICAL | 9.8 | Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to execute code over a network. | Sep 8, 2026 | |
| CVE-2026-69764 | HIGH | 8.8 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | Sep 8, 2026 | |
| CVE-2026-69760 | HIGH | 7.5 | Out-of-bounds read in Windows Kerberos allows an unauthorized attacker to deny service over a network. | Sep 8, 2026 | |
| CVE-2026-69758 | HIGH | 7.8 | Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. | Sep 8, 2026 | |
| CVE-2026-69744 | HIGH | 7.5 | Null pointer dereference in Windows Kerberos allows an unauthorized attacker to deny service over a network. | Sep 8, 2026 | |
| CVE-2026-69741 | MEDIUM | 5.5 | Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally. | Sep 8, 2026 | |
| CVE-2026-69740 | HIGH | 8.8 | Use after free in Windows Hello allows an authorized attacker to elevate privileges locally. | Sep 8, 2026 | |
| CVE-2026-69734 | MEDIUM | 6.5 | Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. | Sep 8, 2026 | |
| CVE-2026-69732 | HIGH | 8.1 | Heap-based buffer overflow in Windows Link Layer Topology Discovery Protocol allows an unauthorized attacker to execute code over a network. | Sep 8, 2026 | |
| CVE-2026-69729 | HIGH | 8.8 | Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to execute code over a network. | Sep 8, 2026 | |
| CVE-2026-69723 | MEDIUM | 5.7 | Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information over a network. | Sep 8, 2026 | |
| CVE-2026-69719 | MEDIUM | 6.5 | Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. | Sep 8, 2026 | |
| CVE-2026-69715 | CRITICAL | 9.8 | Out-of-bounds read in Windows Direct Show allows an unauthorized attacker to execute code over a network. | Sep 8, 2026 | |
| CVE-2026-69707 | HIGH | 7.8 | Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally. | Sep 8, 2026 | |
| CVE-2026-69694 | HIGH | 7.0 | Deserialization of untrusted data in Windows IP Address Management (IPAM) Service allows an authorized attacker to elevate privileges locally. | Sep 8, 2026 | |
| CVE-2026-69684 | MEDIUM | 5.5 | Generation of error message containing sensitive information in Windows Error Reporting allows an authorized attacker to disclose information locally. | Sep 8, 2026 |