| CVE-2026-62719 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally. | 78d ago |
| CVE-2026-62717 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally. | 78d ago |
| CVE-2026-62713 | 7.8 | — | — | — | microsoft / windows 10 1809 | Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate priv | 78d ago |
| CVE-2026-62712 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally. | 78d ago |
| CVE-2026-62711 | 7.8 | — | — | — | microsoft / windows 10 1607 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. | 78d ago |
| CVE-2026-62710 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileg | 78d ago |
| CVE-2026-62707 | 7.8 | — | — | — | microsoft / windows 10 1607 | Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges local | 78d ago |
| CVE-2026-62701 | 7.8 | — | — | — | microsoft / windows 10 1607 | Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. | 78d ago |
| CVE-2026-62700 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. | 78d ago |
| CVE-2026-62698 | 7.8 | — | — | — | microsoft / windows 10 1607 | Numeric truncation error in Microsoft Digest Authentication allows an authorized attacker to elevate privileges lo | 78d ago |
| CVE-2026-62696 | 7.8 | — | — | — | microsoft / windows 10 1607 | Integer underflow (wrap or wraparound) in Windows Program Compatibility Assistant Service allows an authorized att | 78d ago |
| CVE-2026-62695 | 7.8 | — | — | — | microsoft / windows 11 23h2 | Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. | 78d ago |
| CVE-2026-62692 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to elevate privileges | 78d ago |
| CVE-2026-62688 | 7.8 | — | — | — | microsoft / windows 11 24h2 | Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges loca | 78d ago |
| CVE-2026-61937 | 7.8 | — | — | — | microsoft / windows 10 1607 | Integer overflow or wraparound in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. | 78d ago |
| CVE-2026-61934 | 7.8 | — | — | — | microsoft / windows 11 23h2 | Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. | 78d ago |
| CVE-2026-61932 | 7.8 | — | — | — | microsoft / windows 10 1607 | Access of resource using incompatible type ('type confusion') in Windows DWM Core Library allows an authorized att | 78d ago |
| CVE-2026-61930 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | 78d ago |
| CVE-2026-61926 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. | 78d ago |
| CVE-2026-61925 | 7.8 | — | — | — | microsoft / windows 10 1607 | Incorrect authorization in Windows Installer allows an authorized attacker to elevate privileges locally. | 78d ago |
| CVE-2026-61923 | 7.8 | — | — | — | microsoft / windows 10 1809 | Heap-based buffer overflow in Windows Display Enhancement Service allows an authorized attacker to elevate privile | 78d ago |
| CVE-2026-61367 | 7.8 | — | — | — | microsoft / windows 10 1607 | Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to e | 78d ago |
| CVE-2026-61365 | 7.8 | — | — | — | microsoft / windows 10 1607 | Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to e | 78d ago |
| CVE-2026-61364 | 7.8 | — | — | — | microsoft / windows 10 1607 | Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to e | 78d ago |
| CVE-2026-61359 | 7.8 | — | — | — | microsoft / windows 11 23h2 | Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. | 78d ago |
| CVE-2026-61358 | 7.8 | — | — | — | microsoft / windows 10 1809 | Improper link resolution before file access ('link following') in Windows Accessibility Infrastructure (ATBroker.e | 78d ago |
| CVE-2026-61357 | 7.8 | — | — | — | microsoft / windows 11 24h2 | Use after free in Application Information Services allows an authorized attacker to elevate privileges locally. | 78d ago |
| CVE-2026-61356 | 7.8 | — | — | — | microsoft / windows 10 1809 | Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to e | 78d ago |
| CVE-2026-61355 | 7.8 | — | — | — | microsoft / windows 10 21h2 | Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges loca | 78d ago |
| CVE-2026-61353 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locall | 78d ago |
| CVE-2026-61349 | 7.8 | — | — | — | microsoft / windows 10 1607 | Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally. | 78d ago |
| CVE-2026-59127 | 7.8 | — | — | — | microsoft / windows 10 1607 | Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally. | 78d ago |
| CVE-2026-58651 | 7.8 | — | — | — | microsoft / 365 apps | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 78d ago |
| CVE-2026-58650 | 7.8 | — | — | — | microsoft / visual studio code | Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a | 78d ago |
| CVE-2026-58641 | 7.8 | — | — | — | microsoft / .net | Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally. | 78d ago |
| CVE-2026-56174 | 7.8 | — | — | — | microsoft / windows 10 1809 | Untrusted search path in Windows Narrator Braille allows an authorized attacker to elevate privileges locally. | 78d ago |
| CVE-2026-54984 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code locally. | 78d ago |
| CVE-2026-54981 | 7.8 | — | — | — | microsoft / python | Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauth | 78d ago |
| CVE-2026-42976 | 7.8 | — | — | — | microsoft / windows 10 1607 | Missing authentication for critical function in Windows RPC API allows an authorized attacker to elevate privilege | 78d ago |
| CVE-2026-25652 | 7.8 | — | — | — | adobe / coldfusion | is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. | 78d ago |
| CVE-2026-20789 | 7.8 | — | — | — | intel / proset\/wireless wifi | Improper access control for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers | 78d ago |
| CVE-2026-67179 | 7.8 | — | — | — | — | Genkit does not properly validate host request headers. | 78d ago |
| CVE-2026-64629 | 7.8 | — | — | — | — | A vulnerability has been identified in Parasolid V38.0 (All versions < V38.0.235), Parasolid V38.1 (All versions < | 78d ago |
| CVE-2026-59701 | 7.8 | — | — | — | — | A vulnerability has been identified in Simcenter Femap (All versions < V2606.0001). | 78d ago |
| CVE-2026-59700 | 7.8 | — | — | — | — | A vulnerability has been identified in Simcenter Femap (All versions < V2606.0001). | 78d ago |
| CVE-2026-59086 | 7.8 | — | — | — | — | A vulnerability has been identified in Simcenter Femap (All versions < V2606), Simcenter Nastran (All versions < V | 78d ago |
| CVE-2026-50064 | 7.8 | — | — | — | — | A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All | 78d ago |
| CVE-2026-50063 | 7.8 | — | — | — | — | A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All | 78d ago |
| CVE-2026-50062 | 7.8 | — | — | — | — | A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All | 78d ago |
| CVE-2026-50061 | 7.8 | — | — | — | — | A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All | 78d ago |
| CVE-2026-50060 | 7.8 | — | — | — | — | A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All | 78d ago |
| CVE-2026-50059 | 7.8 | — | — | — | — | A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All | 78d ago |
| CVE-2026-50058 | 7.8 | — | — | — | — | A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All | 78d ago |
| CVE-2026-72693 | 7.8 | — | — | — | — | `openvt -u` is intended to identify the owner of the current VT and then execute `login` as that user from a privi | 79d ago |
| CVE-2026-63622 | 7.8 | — | — | — | — | A flaw was found in libvirt. | 79d ago |
| CVE-2026-68427 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix use-after-free in host1x_bo_c | 79d ago |
| CVE-2026-68419 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Prevent rereg_mr for non-mem regio | 79d ago |
| CVE-2026-68417 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: publish QP after initialization siw_ | 79d ago |
| CVE-2026-68415 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: xfrm: clear mode callbacks after failed mode s | 79d ago |
| CVE-2026-68404 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: use wiphy work for socket owne | 79d ago |
