| CVE-2026-48574 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally. | 142d ago |
| CVE-2026-48565 | 7.8 | — | — | — | microsoft / windows narrator braille | Untrusted search path in Windows Narrator Braille allows an authorized attacker to elevate privileges locally. | 142d ago |
| CVE-2026-47292 | 7.8 | — | — | — | microsoft / visual studio code | Inclusion of functionality from untrusted control sphere in Visual Studio Code allows an unauthorized attacker to | 142d ago |
| CVE-2026-45658 | 7.8 | — | — | — | microsoft / windows 10 1607 | Improper access control in Windows BitLocker allows an authorized attacker to bypass a security feature locally. | 142d ago |
| CVE-2026-45656 | 7.8 | — | — | — | microsoft / windows 10 1607 | Protection mechanism failure in Windows UEFI allows an authorized attacker to bypass a security feature locally. | 142d ago |
| CVE-2026-45645 | 7.8 | — | — | — | microsoft / 365 apps | Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally. | 142d ago |
| CVE-2026-45643 | 7.8 | — | — | — | microsoft / 365 apps | Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 142d ago |
| CVE-2026-45638 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to eleva | 142d ago |
| CVE-2026-45637 | 7.8 | — | — | — | microsoft / windows 10 1809 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | 142d ago |
| CVE-2026-45636 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. | 142d ago |
| CVE-2026-45605 | 7.8 | — | — | — | microsoft / windows 10 1607 | Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally. | 142d ago |
| CVE-2026-45600 | 7.8 | — | — | — | microsoft / windows 11 24h2 | Access of resource using incompatible type ('type confusion') in Windows Kernel-Mode Drivers allows an authorized | 142d ago |
| CVE-2026-45593 | 7.8 | — | — | — | microsoft / windows 10 1809 | Use after free in Windows SDK allows an authorized attacker to elevate privileges locally. | 142d ago |
| CVE-2026-45592 | 7.8 | — | — | — | microsoft / windows 10 1607 | Integer overflow or wraparound in Windows Internet (wininet.dll) allows an authorized attacker to elevate privileg | 142d ago |
| CVE-2026-45586exploited | 7.8 | 3.6% | 1/3 | +31d | microsoft / windows 10 1607 | Improper link resolution before file access ('link following') in Windows Collaborative Translation Framework allo | 142d ago |
| CVE-2026-45490 | 7.8 | — | — | — | microsoft / .net | Improper authorization in .NET allows an authorized attacker to elevate privileges locally. | 142d ago |
| CVE-2026-45487 | 7.8 | — | — | — | microsoft / windows 10 21h2 | Time-of-check time-of-use (TOCTOU) race condition in Program Compatibility Assistant Service allows an authorized | 142d ago |
| CVE-2026-45486 | 7.8 | — | — | — | microsoft / 365 apps | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 142d ago |
| CVE-2026-45475 | 7.8 | — | — | — | microsoft / 365 apps | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. | 142d ago |
| CVE-2026-45471 | 7.8 | — | — | — | microsoft / 365 apps | Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 142d ago |
| CVE-2026-45469 | 7.8 | — | — | — | microsoft / 365 apps | Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code l | 142d ago |
| CVE-2026-45457 | 7.8 | — | — | — | microsoft / 365 apps | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 142d ago |
| CVE-2026-44824 | 7.8 | — | — | — | microsoft / 365 apps | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. | 142d ago |
| CVE-2026-44823 | 7.8 | — | — | — | microsoft / 365 apps | Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 142d ago |
| CVE-2026-44820 | 7.8 | — | — | — | microsoft / 365 apps | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 142d ago |
| CVE-2026-44819 | 7.8 | — | — | — | microsoft / 365 apps | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. | 142d ago |
| CVE-2026-44817 | 7.8 | — | — | — | microsoft / 365 apps | Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized att | 142d ago |
| CVE-2026-44813 | 7.8 | — | — | — | microsoft / windows 11 26h1 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | 142d ago |
| CVE-2026-44812 | 7.8 | — | — | — | microsoft / excel | Integer overflow or wraparound in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally. | 142d ago |
| CVE-2026-44811 | 7.8 | — | — | — | microsoft / windows 11 26h1 | Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally | 142d ago |
| CVE-2026-44809 | 7.8 | — | — | — | microsoft / windows 11 24h2 | Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locall | 142d ago |
| CVE-2026-44808 | 7.8 | — | — | — | microsoft / windows 11 26h1 | Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally | 142d ago |
| CVE-2026-44807 | 7.8 | — | — | — | microsoft / windows 11 26h1 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | 142d ago |
| CVE-2026-44804 | 7.8 | — | — | — | microsoft / windows 11 26h1 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | 142d ago |
| CVE-2026-44803 | 7.8 | — | — | — | microsoft / excel | Integer overflow or wraparound in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally. | 142d ago |
| CVE-2026-44802 | 7.8 | — | — | — | microsoft / windows 10 1809 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | 142d ago |
| CVE-2026-42991 | 7.8 | — | — | — | microsoft / windows 10 1809 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifi | 142d ago |
| CVE-2026-42989 | 7.8 | — | — | — | microsoft / windows 10 1607 | Improper link resolution before file access ('link following') in Winlogon allows an authorized attacker to elevat | 142d ago |
| CVE-2026-42986 | 7.8 | — | — | — | microsoft / windows 10 1607 | Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. | 142d ago |
| CVE-2026-42983 | 7.8 | — | — | — | microsoft / windows 10 1809 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | 142d ago |
| CVE-2026-42980 | 7.8 | — | — | — | microsoft / windows 10 1607 | Integer underflow (wrap or wraparound) in Windows NT OS Kernel allows an authorized attacker to elevate privileges | 142d ago |
| CVE-2026-42979 | 7.8 | — | — | — | microsoft / windows 10 1809 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifi | 142d ago |
| CVE-2026-42978 | 7.8 | — | — | — | microsoft / windows 10 1809 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifi | 142d ago |
| CVE-2026-42977 | 7.8 | — | — | — | microsoft / windows 10 1809 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifi | 142d ago |
| CVE-2026-42916 | 7.8 | — | — | — | microsoft / windows 10 1607 | Integer overflow or wraparound in Windows NT OS Kernel allows an authorized attacker to elevate privileges locally | 142d ago |
| CVE-2026-42910 | 7.8 | — | — | — | microsoft / windows 11 24h2 | Out-of-bounds write in Windows Hotpatch Monitoring Service allows an authorized attacker to elevate privileges loc | 142d ago |
| CVE-2026-42905 | 7.8 | — | — | — | microsoft / windows 10 1607 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | 142d ago |
| CVE-2026-42902 | 7.8 | — | — | — | microsoft / powertoys | Improper authorization in Microsoft PowerToys allows an authorized attacker to elevate privileges locally. | 142d ago |
| CVE-2026-42837 | 7.8 | — | — | — | microsoft / windows 10 1809 | Out-of-bounds read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privile | 142d ago |
| CVE-2026-42829 | 7.8 | — | — | — | microsoft / windows 11 24h2 | Improper access control in Windows Administrator Protection allows an authorized attacker to bypass a security fea | 142d ago |
| CVE-2026-42828 | 7.8 | — | — | — | microsoft / windows 10 1809 | Buffer over-read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privilege | 142d ago |
| CVE-2026-41092 | 7.8 | — | — | — | microsoft / windows 10 1607 | Improper access control in Microsoft Kinect allows an authorized attacker to elevate privileges locally. | 142d ago |
| CVE-2026-40409 | 7.8 | — | — | — | microsoft / windows 10 1607 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | 142d ago |
| CVE-2026-40404 | 7.8 | — | — | — | microsoft / windows 10 1607 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | 142d ago |
| CVE-2026-33828 | 7.8 | — | — | — | microsoft / windows 10 1607 | Trust boundary violation in Windows Attestation allows an authorized attacker to elevate privileges locally. | 142d ago |
| CVE-2026-22926 | 7.8 | — | — | — | — | Omnissa Workspace ONE® Assist for macOS contains a Local Privilege Escalation Vulnerability. | 142d ago |
| CVE-2026-24064 | 7.8 | — | — | — | — | Waves Central for macOS versions 13.0.9 through 16.5.5 contain a local privilege escalation vulnerability. | 142d ago |
| CVE-2026-52907 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: media: rockchip: rkcif: fix off by one bugs Ch | 142d ago |
| CVE-2026-46330 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: Revert "net/smc: Introduce TCP ULP support" Th | 142d ago |
| CVE-2026-46327 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: dm: fix unlocked test for dm_suspended_md The | 142d ago |
