| CVE-2026-47911 | 7.8 | — | — | — | adobe / acrobat | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an out-of-bounds write vulnerabilit | 127d ago |
| CVE-2026-48306 | 7.8 | — | — | — | adobe / substance 3d sampler | Substance3D - Sampler versions 6.0.0 and earlier are affected by an out-of-bounds write vulnerability that could r | 127d ago |
| CVE-2026-48305 | 7.8 | — | — | — | adobe / substance 3d sampler | Substance3D - Sampler versions 6.0.0 and earlier are affected by an out-of-bounds write vulnerability that could r | 127d ago |
| CVE-2026-47908 | 7.8 | — | — | — | adobe / dreamweaver | Dreamweaver Desktop versions 21.7 and earlier are affected by an Access of Uninitialized Pointer vulnerability tha | 127d ago |
| CVE-2026-34710 | 7.8 | — | — | — | adobe / substance 3d sampler | Substance3D - Sampler versions 6.0.0 and earlier are affected by an out-of-bounds write vulnerability that could r | 127d ago |
| CVE-2026-34709 | 7.8 | — | — | — | adobe / substance 3d sampler | Substance3D - Sampler versions 6.0.0 and earlier are affected by an out-of-bounds write vulnerability that could r | 127d ago |
| CVE-2026-11824 | 7.8 | — | — | — | sqlite / sqlite | SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension th | 127d ago |
| CVE-2026-11822 | 7.8 | — | — | — | sqlite / sqlite | SQLite before 3.53.2 contains memory corruption vulnerabilities in the FTS5 full-text search extension that allow | 127d ago |
| CVE-2026-8863 | 7.8 | — | — | — | — | Multiple Microsoft-sigend UEFI SHIM bootloaders are vulnerable to SecureBoot bypass. | 127d ago |
| CVE-2026-50512 | 7.8 | — | — | — | microsoft / pc manager | Missing authentication for critical function in Microsoft PC Manager allows an authorized attacker to elevate priv | 127d ago |
| CVE-2026-50511 | 7.8 | — | — | — | microsoft / pc manager | Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attack | 127d ago |
| CVE-2026-48293 | 7.8 | — | — | — | adobe / indesign | InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by an out-of-bounds write vulnerability that could | 127d ago |
| CVE-2026-34708 | 7.8 | — | — | — | adobe / incopy | InCopy versions 21.3, 20.5.3 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could re | 127d ago |
| CVE-2026-34707 | 7.8 | — | — | — | adobe / incopy | InCopy versions 21.3, 20.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could res | 127d ago |
| CVE-2026-34706 | 7.8 | — | — | — | adobe / incopy | InCopy versions 21.3, 20.5.3 and earlier are affected by an out-of-bounds write vulnerability that could result in | 127d ago |
| CVE-2026-34702 | 7.8 | — | — | — | adobe / indesign | InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Stack-based Buffer Overflow vulnerability tha | 127d ago |
| CVE-2026-34701 | 7.8 | — | — | — | adobe / indesign | InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that | 127d ago |
| CVE-2026-34700 | 7.8 | — | — | — | adobe / indesign | InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by an out-of-bounds write vulnerability that could | 127d ago |
| CVE-2026-34699 | 7.8 | — | — | — | adobe / indesign | InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that | 127d ago |
| CVE-2026-34698 | 7.8 | — | — | — | adobe / indesign | InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that | 127d ago |
| CVE-2026-34697 | 7.8 | — | — | — | adobe / indesign | InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Stack-based Buffer Overflow vulnerability tha | 127d ago |
| CVE-2026-34696 | 7.8 | — | — | — | adobe / indesign | InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Use After Free vulnerability that could resul | 127d ago |
| CVE-2026-34695 | 7.8 | — | — | — | adobe / indesign | InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Stack-based Buffer Overflow vulnerability tha | 127d ago |
| CVE-2026-49161 | 7.8 | — | — | — | microsoft / pc manager | Improper access control in Microsoft PC Manager allows an authorized attacker to bypass a security feature locally | 127d ago |
| CVE-2026-48583 | 7.8 | — | — | — | microsoft / windows 10 1607 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 127d ago |
| CVE-2026-48574 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally. | 127d ago |
| CVE-2026-48565 | 7.8 | — | — | — | microsoft / windows narrator braille | Untrusted search path in Windows Narrator Braille allows an authorized attacker to elevate privileges locally. | 127d ago |
| CVE-2026-47292 | 7.8 | — | — | — | microsoft / visual studio code | Inclusion of functionality from untrusted control sphere in Visual Studio Code allows an unauthorized attacker to | 127d ago |
| CVE-2026-45658 | 7.8 | — | — | — | microsoft / windows 10 1607 | Improper access control in Windows BitLocker allows an authorized attacker to bypass a security feature locally. | 127d ago |
| CVE-2026-45656 | 7.8 | — | — | — | microsoft / windows 10 1607 | Protection mechanism failure in Windows UEFI allows an authorized attacker to bypass a security feature locally. | 127d ago |
| CVE-2026-45645 | 7.8 | — | — | — | microsoft / 365 apps | Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally. | 127d ago |
| CVE-2026-45643 | 7.8 | — | — | — | microsoft / 365 apps | Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 127d ago |
| CVE-2026-45638 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to eleva | 127d ago |
| CVE-2026-45637 | 7.8 | — | — | — | microsoft / windows 10 1809 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | 127d ago |
| CVE-2026-45636 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. | 127d ago |
| CVE-2026-45605 | 7.8 | — | — | — | microsoft / windows 10 1607 | Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally. | 127d ago |
| CVE-2026-45600 | 7.8 | — | — | — | microsoft / windows 11 24h2 | Access of resource using incompatible type ('type confusion') in Windows Kernel-Mode Drivers allows an authorized | 127d ago |
| CVE-2026-45593 | 7.8 | — | — | — | microsoft / windows 10 1809 | Use after free in Windows SDK allows an authorized attacker to elevate privileges locally. | 127d ago |
| CVE-2026-45592 | 7.8 | — | — | — | microsoft / windows 10 1607 | Integer overflow or wraparound in Windows Internet (wininet.dll) allows an authorized attacker to elevate privileg | 127d ago |
| CVE-2026-45586exploited | 7.8 | 0.37% | 1/3 | +31d | microsoft / windows 10 1607 | Improper link resolution before file access ('link following') in Windows Collaborative Translation Framework allo | 127d ago |
| CVE-2026-45490 | 7.8 | — | — | — | microsoft / .net | Improper authorization in .NET allows an authorized attacker to elevate privileges locally. | 127d ago |
| CVE-2026-45487 | 7.8 | — | — | — | microsoft / windows 10 21h2 | Time-of-check time-of-use (TOCTOU) race condition in Program Compatibility Assistant Service allows an authorized | 127d ago |
| CVE-2026-45486 | 7.8 | — | — | — | microsoft / 365 apps | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 127d ago |
| CVE-2026-45475 | 7.8 | — | — | — | microsoft / 365 apps | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. | 127d ago |
| CVE-2026-45471 | 7.8 | — | — | — | microsoft / 365 apps | Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 127d ago |
| CVE-2026-45469 | 7.8 | — | — | — | microsoft / 365 apps | Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code l | 127d ago |
| CVE-2026-45457 | 7.8 | — | — | — | microsoft / 365 apps | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 127d ago |
| CVE-2026-44824 | 7.8 | — | — | — | microsoft / 365 apps | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. | 127d ago |
| CVE-2026-44823 | 7.8 | — | — | — | microsoft / 365 apps | Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 127d ago |
| CVE-2026-44820 | 7.8 | — | — | — | microsoft / 365 apps | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 127d ago |
| CVE-2026-44819 | 7.8 | — | — | — | microsoft / 365 apps | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. | 127d ago |
| CVE-2026-44817 | 7.8 | — | — | — | microsoft / 365 apps | Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized att | 127d ago |
| CVE-2026-44813 | 7.8 | — | — | — | microsoft / windows 11 26h1 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | 127d ago |
| CVE-2026-44812 | 7.8 | — | — | — | microsoft / excel | Integer overflow or wraparound in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally. | 127d ago |
| CVE-2026-44811 | 7.8 | — | — | — | microsoft / windows 11 26h1 | Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally | 127d ago |
| CVE-2026-44809 | 7.8 | — | — | — | microsoft / windows 11 24h2 | Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locall | 127d ago |
| CVE-2026-44808 | 7.8 | — | — | — | microsoft / windows 11 26h1 | Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally | 127d ago |
| CVE-2026-44807 | 7.8 | — | — | — | microsoft / windows 11 26h1 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | 127d ago |
| CVE-2026-44804 | 7.8 | — | — | — | microsoft / windows 11 26h1 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | 127d ago |
| CVE-2026-44803 | 7.8 | — | — | — | microsoft / excel | Integer overflow or wraparound in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally. | 127d ago |