| CVE-2026-56193 | 7.1 | — | — | — | microsoft / 365 apps | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. | 101d ago |
| CVE-2026-55144 | 7.1 | — | — | — | microsoft / windows 11 24h2 | Missing cryptographic step in Windows CryptoAPI allows an authorized attacker to perform tampering locally. | 101d ago |
| CVE-2026-50354 | 7.1 | — | — | — | microsoft / windows 10 1607 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 101d ago |
| CVE-2026-49791 | 7.1 | — | — | — | microsoft / windows 10 1607 | Improper link resolution before file access ('link following') in Windows Routing and Remote Access Service (RRAS) | 101d ago |
| CVE-2026-49165 | 7.1 | — | — | — | microsoft / windows 10 1607 | Use of uninitialized resource in Microsoft Windows App Store allows an authorized attacker to disclose information | 101d ago |
| CVE-2026-58297 | 7.1 | — | — | — | microsoft / edge chromium | Exposure of private personal information to an unauthorized actor in Microsoft Edge for Android allows an unauthor | 112d ago |
| CVE-2026-58296 | 7.1 | — | — | — | microsoft / edge chromium | Exposure of private personal information to an unauthorized actor in Microsoft Edge for Android allows an unauthor | 112d ago |
| CVE-2026-57988 | 7.1 | — | — | — | microsoft / edge chromium | Relative path traversal in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a | 112d ago |
| CVE-2026-57977 | 7.1 | — | — | — | microsoft / edge chromium | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-b | 112d ago |
| CVE-2026-48569 | 7.1 | — | — | — | microsoft / visual studio code | Improper input validation in Visual Studio Code allows an unauthorized attacker to bypass a security feature local | 136d ago |
| CVE-2026-47288 | 7.1 | — | — | — | microsoft / windows server 2012 | Integer overflow or wraparound in Windows Kerberos allows an authorized attacker to execute code over an adjacent | 136d ago |
| CVE-2026-45649 | 7.1 | — | — | — | microsoft / excel | Improper access control in Office for Android allows an unauthorized attacker to perform spoofing locally. | 136d ago |
| CVE-2026-41102 | 7.1 | — | — | — | microsoft / powerpoint | Improper access control in Microsoft Office PowerPoint allows an authorized attacker to perform spoofing locally. | 164d ago |
| CVE-2026-41101 | 7.1 | — | — | — | microsoft / word | Improper access control in Microsoft Office Word allows an authorized attacker to perform spoofing locally. | 164d ago |
| CVE-2026-40401 | 7.1 | — | — | — | microsoft / windows 10 1607 | Windows TCP/IP Denial of Service Vulnerability | 164d ago |
| CVE-2026-26133 | 7.1 | — | — | — | microsoft / 365 copilot | AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network. | 221d ago |
| CVE-2026-70307 | 7 | — | — | — | microsoft / windows 10 1607 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privilege | 73d ago |
| CVE-2026-68820zero day | 7 | 0.33% | 3/3 | same day | microsoft / windows 10 1607 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privilege | 73d ago |
| CVE-2026-65788 | 7 | — | — | — | microsoft / windows 11 23h2 | Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. | 73d ago |
| CVE-2026-65783 | 7 | — | — | — | microsoft / windows 11 24h2 | Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally. | 73d ago |
| CVE-2026-65782 | 7 | — | — | — | microsoft / windows 11 24h2 | Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally. | 73d ago |
| CVE-2026-65781 | 7 | — | — | — | microsoft / windows 11 24h2 | Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally. | 73d ago |
| CVE-2026-65780 | 7 | — | — | — | microsoft / windows 11 24h2 | Double free in Windows Autopilot allows an authorized attacker to elevate privileges locally. | 73d ago |
| CVE-2026-65779 | 7 | — | — | — | microsoft / windows 11 24h2 | Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally. | 73d ago |
| CVE-2026-65778 | 7 | — | — | — | microsoft / windows 11 24h2 | Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally. | 73d ago |
| CVE-2026-65776 | 7 | — | — | — | microsoft / windows 11 24h2 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. | 73d ago |
| CVE-2026-65678 | 7 | — | — | — | microsoft / windows 10 1607 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. | 73d ago |
| CVE-2026-62908 | 7 | — | — | — | microsoft / windows 10 1607 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engi | 73d ago |
| CVE-2026-62897 | 7 | — | — | — | microsoft / .net framework | Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally. | 73d ago |
| CVE-2026-62892 | 7 | — | — | — | microsoft / windows 10 1809 | Use after free in Capability Access Management Service (camsvc) allows an authorized attacker to elevate privilege | 73d ago |
| CVE-2026-62788 | 7 | — | — | — | microsoft / windows 11 23h2 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 73d ago |
| CVE-2026-62780 | 7 | — | — | — | microsoft / windows 11 23h2 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 73d ago |
| CVE-2026-62774 | 7 | — | — | — | microsoft / windows 10 1607 | Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. | 73d ago |
| CVE-2026-62773 | 7 | — | — | — | microsoft / windows 10 1607 | Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally. | 73d ago |
| CVE-2026-62766 | 7 | — | — | — | microsoft / windows 11 24h2 | Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally. | 73d ago |
| CVE-2026-62753 | 7 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. | 73d ago |
| CVE-2026-62749 | 7 | — | — | — | microsoft / windows 11 24h2 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 73d ago |
| CVE-2026-62748 | 7 | — | — | — | microsoft / windows 10 1607 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony S | 73d ago |
| CVE-2026-62734 | 7 | — | — | — | microsoft / windows 10 1607 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony S | 73d ago |
| CVE-2026-62729 | 7 | — | — | — | microsoft / windows 10 1607 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony S | 73d ago |
| CVE-2026-62728 | 7 | — | — | — | microsoft / windows 10 1607 | Time-of-check time-of-use (toctou) race condition in Windows Common Log File System Driver allows an authorized at | 73d ago |
| CVE-2026-62726 | 7 | — | — | — | microsoft / windows 10 1607 | Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. | 73d ago |
| CVE-2026-62725 | 7 | — | — | — | microsoft / windows 10 1607 | Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. | 73d ago |
| CVE-2026-62724 | 7 | — | — | — | microsoft / windows 10 1607 | Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. | 73d ago |
| CVE-2026-62723 | 7 | — | — | — | microsoft / windows 10 1607 | Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. | 73d ago |
| CVE-2026-62705 | 7 | — | — | — | microsoft / windows 11 24h2 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bind Filter | 73d ago |
| CVE-2026-62693 | 7 | — | — | — | microsoft / windows 11 24h2 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows MIDI Servic | 73d ago |
| CVE-2026-62690 | 7 | — | — | — | microsoft / windows 10 1809 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifi | 73d ago |
| CVE-2026-61939 | 7 | — | — | — | microsoft / windows 10 1607 | Use after free in Winlogon allows an authorized attacker to elevate privileges locally. | 73d ago |
| CVE-2026-61938 | 7 | — | — | — | microsoft / windows 11 24h2 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | 73d ago |
| CVE-2026-61929 | 7 | — | — | — | microsoft / windows 11 23h2 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 73d ago |
| CVE-2026-61927 | 7 | — | — | — | microsoft / windows 11 24h2 | Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. | 73d ago |
| CVE-2026-61366 | 7 | — | — | — | microsoft / windows 10 1607 | Double free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally. | 73d ago |
| CVE-2026-61361 | 7 | — | — | — | microsoft / windows 11 24h2 | Use after free in Windows DHCP Client allows an authorized attacker to execute code locally. | 73d ago |
| CVE-2026-61348 | 7 | — | — | — | microsoft / windows 10 1607 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privilege | 73d ago |
| CVE-2026-61346 | 7 | — | — | — | microsoft / windows 10 1809 | Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. | 73d ago |
| CVE-2026-59126 | 7 | — | — | — | microsoft / windows 10 21h2 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Event Loggi | 73d ago |
| CVE-2026-59125 | 7 | — | — | — | microsoft / windows 10 1607 | Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges loca | 73d ago |
| CVE-2026-59122 | 7 | — | — | — | microsoft / windows 10 1607 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony S | 73d ago |
| CVE-2026-50472 | 7 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally. | 73d ago |
