| CVE-2026-34690 | 7.8 | — | — | — | adobe / after effects | After Effects is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execu | 170d ago |
| CVE-2026-34684 | 7.8 | — | — | — | adobe / substance 3d designer | Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could | 170d ago |
| CVE-2026-34683 | 7.8 | — | — | — | adobe / substance 3d designer | Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could | 170d ago |
| CVE-2026-34682 | 7.8 | — | — | — | adobe / substance 3d designer | Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could | 170d ago |
| CVE-2026-34681 | 7.8 | — | — | — | adobe / substance 3d designer | Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could | 170d ago |
| CVE-2026-42896 | 7.8 | — | — | — | microsoft / windows 11 24h2 | Integer overflow or wraparound in Windows DWM Core Library allows an authorized attacker to elevate privileges loc | 170d ago |
| CVE-2026-42831 | 7.8 | — | — | — | microsoft / 365 copilot | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. | 170d ago |
| CVE-2026-41611 | 7.8 | — | — | — | microsoft / visual studio code | Improper neutralization of script-related html tags in a web page (basic xss) in Visual Studio Code allows an unau | 170d ago |
| CVE-2026-41095 | 7.8 | — | — | — | microsoft / windows server 2012 | Use after free in Data Deduplication allows an authorized attacker to elevate privileges locally. | 170d ago |
| CVE-2026-41088 | 7.8 | — | — | — | microsoft / windows 10 21h2 | Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock all | 170d ago |
| CVE-2026-40419 | 7.8 | — | — | — | microsoft / 365 apps | Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally. | 170d ago |
| CVE-2026-40418 | 7.8 | — | — | — | microsoft / 365 apps | Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally. | 170d ago |
| CVE-2026-40417 | 7.8 | — | — | — | microsoft / dynamics 365 business central | Weak authentication in Dynamics Business Central allows an authorized attacker to elevate privileges locally. | 170d ago |
| CVE-2026-40408 | 7.8 | — | — | — | microsoft / windows 10 1607 | Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. | 170d ago |
| CVE-2026-40407 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privi | 170d ago |
| CVE-2026-40399 | 7.8 | — | — | — | microsoft / windows 10 1607 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allo | 170d ago |
| CVE-2026-40398 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows Remote Desktop allows an authorized attacker to elevate privileges locally. | 170d ago |
| CVE-2026-40397 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privi | 170d ago |
| CVE-2026-40382 | 7.8 | — | — | — | microsoft / windows 10 1607 | Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. | 170d ago |
| CVE-2026-40381 | 7.8 | — | — | — | microsoft / azure connected machine agent | Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges local | 170d ago |
| CVE-2026-40377 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows Cryptographic Services allows an authorized attacker to elevate privileges l | 170d ago |
| CVE-2026-40369 | 7.8 | — | — | — | microsoft / windows 11 24h2 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | 170d ago |
| CVE-2026-40362 | 7.8 | — | — | — | microsoft / 365 apps | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 170d ago |
| CVE-2026-40360 | 7.8 | — | — | — | microsoft / 365 apps | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | 170d ago |
| CVE-2026-40359 | 7.8 | — | — | — | microsoft / 365 apps | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 170d ago |
| CVE-2026-35421 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code locally. | 170d ago |
| CVE-2026-35420 | 7.8 | — | — | — | microsoft / windows server 2012 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | 170d ago |
| CVE-2026-35418 | 7.8 | — | — | — | microsoft / windows 10 1809 | Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges local | 170d ago |
| CVE-2026-35417 | 7.8 | — | — | — | microsoft / windows 10 1809 | Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. | 170d ago |
| CVE-2026-35415 | 7.8 | — | — | — | microsoft / windows 10 1607 | Integer overflow or wraparound in Windows Storage Spaces Controller allows an authorized attacker to elevate privi | 170d ago |
| CVE-2026-34687 | 7.8 | — | — | — | adobe / illustrator | Illustrator versions 29.8.6, 30.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that coul | 170d ago |
| CVE-2026-34676 | 7.8 | — | — | — | adobe / substance 3d painter | Substance3D - Painter versions 12.0.2 and earlier are affected by an out-of-bounds write vulnerability that could | 170d ago |
| CVE-2026-34675 | 7.8 | — | — | — | adobe / substance 3d painter | Substance3D - Painter versions 12.0.2 and earlier are affected by an out-of-bounds write vulnerability that could | 170d ago |
| CVE-2026-34661 | 7.8 | — | — | — | adobe / illustrator | Illustrator versions 29.8.6, 30.3 and earlier are affected by an out-of-bounds write vulnerability that could resu | 170d ago |
| CVE-2026-34644 | 7.8 | — | — | — | adobe / after effects | After Effects versions 26.0, 25.6.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability th | 170d ago |
| CVE-2026-34643 | 7.8 | — | — | — | adobe / after effects | After Effects versions 26.0, 25.6.4 and earlier are affected by an out-of-bounds write vulnerability that could re | 170d ago |
| CVE-2026-34642 | 7.8 | — | — | — | adobe / after effects | After Effects versions 26.0, 25.6.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that co | 170d ago |
| CVE-2026-34640 | 7.8 | — | — | — | adobe / media encoder | Media Encoder versions 26.0.2, 25.6.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability | 170d ago |
| CVE-2026-34639 | 7.8 | — | — | — | adobe / media encoder | Media Encoder versions 26.0.2, 25.6.4 and earlier are affected by an out-of-bounds write vulnerability that could | 170d ago |
| CVE-2026-34638 | 7.8 | — | — | — | adobe / premiere pro | Premiere Pro versions 26.0.2, 25.6.4 and earlier are affected by a Use After Free vulnerability that could result | 170d ago |
| CVE-2026-34637 | 7.8 | — | — | — | adobe / premiere pro | Premiere Pro versions 26.0.2, 25.6.4 and earlier are affected by an out-of-bounds write vulnerability that could r | 170d ago |
| CVE-2026-34636 | 7.8 | — | — | — | adobe / premiere pro | Premiere Pro versions 26.0.2, 25.6.4 and earlier are affected by an out-of-bounds write vulnerability that could r | 170d ago |
| CVE-2026-34351 | 7.8 | — | — | — | microsoft / windows 10 1607 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allo | 170d ago |
| CVE-2026-34344 | 7.8 | — | — | — | microsoft / windows 10 1607 | Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock all | 170d ago |
| CVE-2026-34343 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows Application Identity (AppID) Subsystem allows an authorized attacker to elev | 170d ago |
| CVE-2026-34338 | 7.8 | — | — | — | microsoft / windows 10 1607 | Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. | 170d ago |
| CVE-2026-34337 | 7.8 | — | — | — | microsoft / windows 10 1809 | Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges local | 170d ago |
| CVE-2026-34336 | 7.8 | — | — | — | microsoft / windows 10 1607 | Integer overflow or wraparound in Windows DWM Core Library allows an authorized attacker to elevate privileges loc | 170d ago |
| CVE-2026-34334 | 7.8 | — | — | — | microsoft / windows 10 1607 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allo | 170d ago |
| CVE-2026-34333 | 7.8 | — | — | — | microsoft / windows 10 1607 | Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. | 170d ago |
| CVE-2026-34330 | 7.8 | — | — | — | microsoft / windows 10 1607 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GR | 170d ago |
| CVE-2026-33841 | 7.8 | — | — | — | microsoft / windows 10 21h2 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | 170d ago |
| CVE-2026-33840 | 7.8 | — | — | — | microsoft / windows 11 24h2 | Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally. | 170d ago |
| CVE-2026-33838 | 7.8 | — | — | — | microsoft / windows 10 1607 | Double free in Windows Message Queuing allows an authorized attacker to elevate privileges locally. | 170d ago |
| CVE-2026-33837 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally. | 170d ago |
| CVE-2026-33835 | 7.8 | — | — | — | microsoft / windows 10 1809 | Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges local | 170d ago |
| CVE-2026-33834 | 7.8 | — | — | — | microsoft / windows 10 1607 | Improper access control in Windows Event Logging Service allows an authorized attacker to elevate privileges local | 170d ago |
| CVE-2026-32204 | 7.8 | — | — | — | microsoft / azure monitor agent | External control of file name or path in Azure Monitor Agent allows an authorized attacker to elevate privileges l | 170d ago |
| CVE-2026-20767 | 7.8 | — | — | — | intel / quickassist technology | Improper input validation for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: Us | 170d ago |
| CVE-2026-20714 | 7.8 | — | — | — | intel / quickassist technology | Out-of-bounds write for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User App | 170d ago |
