| CVE-2026-58602 | 7.8 | — | — | — | microsoft / windows 11 24h2 | Use after free in Windows Kernel Mode Driver allows an authorized attacker to elevate privileges locally. | 106d ago |
| CVE-2026-58601 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate pri | 106d ago |
| CVE-2026-57107 | 7.8 | — | — | — | microsoft / windows admin center | Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges locally. | 106d ago |
| CVE-2026-56155zero day | 7.8 | 0.35% | 3/3 | same day | microsoft / windows 10 1607 | Insufficient granularity of access control in Active Directory Federation Services (AD FS) allows an authorized at | 106d ago |
| CVE-2026-55948 | 7.8 | — | — | — | microsoft / 365 apps | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 106d ago |
| CVE-2026-55899 | 7.8 | — | — | — | microsoft / 365 apps | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 106d ago |
| CVE-2026-55014 | 7.8 | — | — | — | microsoft / remote help | Improper access control in Windows Remote Help Defense allows an authorized attacker to elevate privileges locally | 106d ago |
| CVE-2026-55012 | 7.8 | — | — | — | microsoft / malware protection engine | Integer overflow or wraparound in Microsoft Defender allows an unauthorized attacker to execute code locally. | 106d ago |
| CVE-2026-55011 | 7.8 | — | — | — | microsoft / malware protection engine | Integer underflow (wrap or wraparound) in Microsoft Defender allows an unauthorized attacker to execute code local | 106d ago |
| CVE-2026-55009 | 7.8 | — | — | — | microsoft / exchange server | Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges | 106d ago |
| CVE-2026-55006 | 7.8 | — | — | — | microsoft / exchange server | Insufficient granularity of access control in Microsoft Exchange Server allows an authorized attacker to elevate p | 106d ago |
| CVE-2026-55004 | 7.8 | — | — | — | microsoft / windows 10 1607 | Double free in Microsoft Printer Drivers allows an authorized attacker to elevate privileges locally. | 106d ago |
| CVE-2026-55001 | 7.8 | — | — | — | microsoft / windows 10 1607 | Improper certificate validation in Windows Active Directory allows an authorized attacker to elevate privileges lo | 106d ago |
| CVE-2026-54993 | 7.8 | — | — | — | microsoft / windows 10 1809 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code l | 106d ago |
| CVE-2026-54991 | 7.8 | — | — | — | microsoft / windows 11 24h2 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print D | 106d ago |
| CVE-2026-54987 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. | 106d ago |
| CVE-2026-54986 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally. | 106d ago |
| CVE-2026-54114 | 7.8 | — | — | — | microsoft / windows 10 1809 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. | 106d ago |
| CVE-2026-54112 | 7.8 | — | — | — | microsoft / windows 10 1809 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allo | 106d ago |
| CVE-2026-54109 | 7.8 | — | — | — | microsoft / windows 10 1607 | Integer overflow or wraparound in Windows Resilient File System (ReFS) allows an authorized attacker to execute co | 106d ago |
| CVE-2026-50697 | 7.8 | — | — | — | microsoft / windows 10 1607 | Exposure of sensitive information to an unauthorized actor in Windows Common Log File System Driver allows an auth | 106d ago |
| CVE-2026-50675 | 7.8 | — | — | — | microsoft / 365 apps | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 106d ago |
| CVE-2026-50351 | 7.8 | — | — | — | microsoft / windows 10 1607 | Improper access control in Windows Audio Compression Manager (ACM) allows an authorized attacker to elevate privil | 106d ago |
| CVE-2026-50333 | 7.8 | — | — | — | microsoft / windows 10 1607 | Missing authentication for critical function in Windows Spaceport.sys allows an authorized attacker to elevate pri | 106d ago |
| CVE-2026-50318 | 7.8 | — | — | — | microsoft / windows 10 1607 | Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privi | 106d ago |
| CVE-2026-50311 | 7.8 | — | — | — | microsoft / windows 10 1607 | Improper access control in Windows Server allows an authorized attacker to elevate privileges locally. | 106d ago |
| CVE-2026-50308 | 7.8 | — | — | — | microsoft / windows 10 1607 | Integer underflow (wrap or wraparound) in Windows NTFS allows an unauthorized attacker to execute code locally. | 106d ago |
| CVE-2026-50293 | 7.8 | — | — | — | microsoft / windows 10 21h2 | Use after free in Windows Internal Task Bar allows an authorized attacker to elevate privileges locally. | 106d ago |
| CVE-2026-49808 | 7.8 | — | — | — | microsoft / windows 11 24h2 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allo | 106d ago |
| CVE-2026-49800 | 7.8 | — | — | — | microsoft / windows 10 1809 | Integer overflow or wraparound in Windows Web Proxy Auto-Discovery Protocol (WPAD) allows an authorized attacker t | 106d ago |
| CVE-2026-49797 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. | 106d ago |
| CVE-2026-49796 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally. | 106d ago |
| CVE-2026-49793 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code l | 106d ago |
| CVE-2026-49792 | 7.8 | — | — | — | microsoft / windows 10 1607 | Numeric truncation error in Windows Resilient File System (ReFS) allows an authorized attacker to execute code loc | 106d ago |
| CVE-2026-49783 | 7.8 | — | — | — | microsoft / windows 10 1607 | Improperly implemented security check for standard in Windows Secure Boot allows an authorized attacker to bypass | 106d ago |
| CVE-2026-49176 | 7.8 | — | — | — | microsoft / windows 10 1607 | Improper privilege management in Windows WalletService allows an authorized attacker to elevate privileges locally | 106d ago |
| CVE-2026-49175 | 7.8 | — | — | — | microsoft / windows 10 21h2 | Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally. | 106d ago |
| CVE-2026-49173 | 7.8 | — | — | — | microsoft / windows 11 26h1 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 106d ago |
| CVE-2026-49170 | 7.8 | — | — | — | microsoft / windows 10 1809 | Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate | 106d ago |
| CVE-2026-49166 | 7.8 | — | — | — | microsoft / windows 11 24h2 | Use after free in Microsoft Printer Drivers allows an authorized attacker to elevate privileges locally. | 106d ago |
| CVE-2026-48581 | 7.8 | — | — | — | microsoft / surface go 2 1901 firmware | Insufficient granularity of access control in Microsoft Surface allows an authorized attacker to elevate privilege | 106d ago |
| CVE-2026-44800 | 7.8 | — | — | — | microsoft / windows 11 23h2 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifi | 106d ago |
| CVE-2026-42982 | 7.8 | — | — | — | microsoft / windows 10 1607 | Improper validation of consistency within input in Windows Secure Kernel Mode allows an authorized attacker to ele | 106d ago |
| CVE-2026-10669 | 7.8 | — | — | — | zephyrproject / zephyr | On Xtensa SoCs built with CONFIG_XTENSA_MPU and CONFIG_USERSPACE, arch_buffer_validate() in arch/xtensa/core/mpu.c | 107d ago |
| CVE-2026-9492 | 7.8 | — | — | — | — | The MBStorage DRAM lighting control module within Gigabyte Control Center (GCC) developed by GIGABYTE Technology ha | 108d ago |
| CVE-2026-7162 | 7.8 | — | — | — | — | Successful exploitation of the integer overflow vulnerability could allow an attacker to achieve system-level acces | 108d ago |
| CVE-2026-15506 | 7.8 | — | — | — | — | A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.3. | 108d ago |
| CVE-2026-10667 | 7.8 | — | — | — | zephyrproject / zephyr | Zephyr's dynamic kernel-object tracking (kernel/userspace/userspace.c, formerly kernel/userspace.c) maintains a do | 108d ago |
| CVE-2026-7639 | 7.8 | — | — | — | imaginationtech / ddk | Software installed and run as a non-privileged user may conduct a sequence of improper GPU system calls causing use | 110d ago |
| CVE-2026-45203 | 7.8 | — | — | — | imaginationtech / ddk | Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a | 110d ago |
| CVE-2026-45196 | 7.8 | — | — | — | imaginationtech / ddk | Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a | 110d ago |
| CVE-2026-41154 | 7.8 | — | — | — | imaginationtech / ddk | Software installed and run as a non-privileged user may cause OOB kernel memory reads or writes through GPU API ca | 110d ago |
| CVE-2026-34196 | 7.8 | — | — | — | imaginationtech / ddk | Software installed and run as a non-privileged user may conduct improper GPU system calls to cause an integer over | 110d ago |
| CVE-2026-61437 | 7.8 | — | — | — | — | PraisonAI (pip package praisonaiagents) before 1.6.78 contains an unsafe dynamic module loading vulnerability in A | 111d ago |
| CVE-2026-59858 | 7.8 | — | — | — | vim / vim | Vim is an open source, command line text editor. | 111d ago |
| CVE-2026-59856 | 7.8 | — | — | — | vim / vim | Vim is an open source, command line text editor. | 111d ago |
| CVE-2026-0278 | 7.8 | — | — | — | paloaltonetworks / prisma access agent | Multiple protection mechanism failures in the Prisma Access Agent Data Loss Prevention (DLP) component for Windows | 111d ago |
| CVE-2026-0276 | 7.8 | — | — | — | paloaltonetworks / cortex xdr broker vm | A privilege escalation vulnerability in Palo Alto Networks Cortex® XDR Broker VM enables a locally authenticated us | 111d ago |
| CVE-2026-58459 | 7.8 | — | — | — | gpsd project / gpsd | gpsd through release-3.27.5, fixed at commit 4c06658, contains a command injection vulnerability in gpsprof that a | 111d ago |
| CVE-2026-47829 | 7.8 | — | — | — | cloudfoundry / bosh cli | Argument Injection in bosh-cli allows a compromised BOSH Director to inject arbitrary OpenSSH options into the loc | 112d ago |
