| CVE-2026-44802 | 7.8 | — | — | — | microsoft / windows 10 1809 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | 127d ago |
| CVE-2026-42991 | 7.8 | — | — | — | microsoft / windows 10 1809 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifi | 127d ago |
| CVE-2026-42989 | 7.8 | — | — | — | microsoft / windows 10 1607 | Improper link resolution before file access ('link following') in Winlogon allows an authorized attacker to elevat | 127d ago |
| CVE-2026-42986 | 7.8 | — | — | — | microsoft / windows 10 1607 | Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. | 127d ago |
| CVE-2026-42983 | 7.8 | — | — | — | microsoft / windows 10 1809 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | 127d ago |
| CVE-2026-42980 | 7.8 | — | — | — | microsoft / windows 10 1607 | Integer underflow (wrap or wraparound) in Windows NT OS Kernel allows an authorized attacker to elevate privileges | 127d ago |
| CVE-2026-42979 | 7.8 | — | — | — | microsoft / windows 10 1809 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifi | 127d ago |
| CVE-2026-42978 | 7.8 | — | — | — | microsoft / windows 10 1809 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifi | 127d ago |
| CVE-2026-42977 | 7.8 | — | — | — | microsoft / windows 10 1809 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifi | 127d ago |
| CVE-2026-42916 | 7.8 | — | — | — | microsoft / windows 10 1607 | Integer overflow or wraparound in Windows NT OS Kernel allows an authorized attacker to elevate privileges locally | 127d ago |
| CVE-2026-42910 | 7.8 | — | — | — | microsoft / windows 11 24h2 | Out-of-bounds write in Windows Hotpatch Monitoring Service allows an authorized attacker to elevate privileges loc | 127d ago |
| CVE-2026-42905 | 7.8 | — | — | — | microsoft / windows 10 1607 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | 127d ago |
| CVE-2026-42902 | 7.8 | — | — | — | microsoft / powertoys | Improper authorization in Microsoft PowerToys allows an authorized attacker to elevate privileges locally. | 127d ago |
| CVE-2026-42837 | 7.8 | — | — | — | microsoft / windows 10 1809 | Out-of-bounds read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privile | 127d ago |
| CVE-2026-42829 | 7.8 | — | — | — | microsoft / windows 11 24h2 | Improper access control in Windows Administrator Protection allows an authorized attacker to bypass a security fea | 127d ago |
| CVE-2026-42828 | 7.8 | — | — | — | microsoft / windows 10 1809 | Buffer over-read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privilege | 127d ago |
| CVE-2026-41092 | 7.8 | — | — | — | microsoft / windows 10 1607 | Improper access control in Microsoft Kinect allows an authorized attacker to elevate privileges locally. | 127d ago |
| CVE-2026-40409 | 7.8 | — | — | — | microsoft / windows 10 1607 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | 127d ago |
| CVE-2026-40404 | 7.8 | — | — | — | microsoft / windows 10 1607 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | 127d ago |
| CVE-2026-33828 | 7.8 | — | — | — | microsoft / windows 10 1607 | Trust boundary violation in Windows Attestation allows an authorized attacker to elevate privileges locally. | 127d ago |
| CVE-2026-22926 | 7.8 | — | — | — | — | Omnissa Workspace ONE® Assist for macOS contains a Local Privilege Escalation Vulnerability. | 127d ago |
| CVE-2026-24064 | 7.8 | — | — | — | — | Waves Central for macOS versions 13.0.9 through 16.5.5 contain a local privilege escalation vulnerability. | 127d ago |
| CVE-2026-52907 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: media: rockchip: rkcif: fix off by one bugs Ch | 127d ago |
| CVE-2026-46330 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: Revert "net/smc: Introduce TCP ULP support" Th | 127d ago |
| CVE-2026-46327 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: dm: fix unlocked test for dm_suspended_md The | 127d ago |
| CVE-2026-46324 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: use list_del_rcu for net | 127d ago |
| CVE-2026-46323 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: net: gro: don't merge zcopy skbs skb_gro_recei | 127d ago |
| CVE-2026-46319 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: Only release RCU read lock | 127d ago |
| CVE-2026-8795 | 7.8 | — | — | — | — | A YAML injection vulnerability exists in the Windows.Collectors.Remapping artifact of Rapid7 Velociraptor before ve | 127d ago |
| CVE-2026-46311 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: fix access to stale wptr map | 128d ago |
| CVE-2026-46308 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: pmdomain: mediatek: fix use-after-free in scps | 128d ago |
| CVE-2026-46301 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: spi: topcliff-pch: fix use-after-free on unbin | 128d ago |
| CVE-2026-46294 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: dm: fix a buffer overflow in ioctl processing | 128d ago |
| CVE-2026-46285 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: mtd: docg3: fix use-after-free in docg3_releas | 128d ago |
| CVE-2026-46281 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: vmalloc: fix buffer overflow in vrealloc_node_ | 128d ago |
| CVE-2026-46280 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: lib: test_hmm: evict device pages on file clos | 128d ago |
| CVE-2026-46279 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: mm/alloc_tag: clear codetag for pages allocate | 128d ago |
| CVE-2026-46277 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: mm/zone_device: do not touch device folio afte | 128d ago |
| CVE-2026-46275 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_uart: fix UAFs and race conditi | 128d ago |
| CVE-2026-46274 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: io-wq: check that the predecessor is hashed in | 128d ago |
| CVE-2026-50264 | 7.8 | — | — | — | x.org / x server | An out-of-bounds write flaw was found in the X.Org X server and Xwayland in DRIGetBuffers/DRIGetBuffersWithFormat. | 131d ago |
| CVE-2026-50261 | 7.8 | — | — | — | x.org / x server | A use-after-free flaw was found in the X.Org X server and Xwayland in SyncChangeCounter(). | 131d ago |
| CVE-2026-50260 | 7.8 | — | — | — | x.org / x server | A use-after-free flaw was found in the X.Org X server and Xwayland in FreeCounter(). | 131d ago |
| CVE-2026-50259 | 7.8 | — | — | — | x.org / x server | A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. | 131d ago |
| CVE-2026-50258 | 7.8 | — | — | — | x.org / x server | A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. | 131d ago |
| CVE-2026-50257 | 7.8 | — | — | — | x.org / x server | A use-after-free flaw was found in the X.Org X server and Xwayland in miSyncDestroyFence(). | 131d ago |
| CVE-2026-50256 | 7.8 | — | — | — | x.org / x server | A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. | 131d ago |
| CVE-2026-21031 | 7.8 | — | — | — | samsung / android | Improper authorization in AppBlock prior to SMR Jun-2026 Release 1 allows local attacker to launch arbitrary activ | 131d ago |
| CVE-2026-21030 | 7.8 | — | — | — | samsung / android | Improper access control in MediaTek Audio HAL prior to SMR Jun-2026 Release 1 allows local attackers to trigger pr | 131d ago |
| CVE-2026-21029 | 7.8 | — | — | — | samsung / android | Improper export of android application components in Galaxy Editing Service prior to SMR Jun-2026 Release 1 allows | 131d ago |
| CVE-2026-11332 | 7.8 | — | — | — | — | A flaw was found in ansible-core. | 131d ago |
| CVE-2026-20245exploited | 7.8 | — | 3/3 | +1d | cisco / catalyst sd-wan manager | A vulnerability in the CLI of Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Mana | 131d ago |
| CVE-2026-11103 | 7.8 | — | — | — | google / chrome | Inappropriate implementation in Installer in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attac | 131d ago |
| CVE-2026-11072 | 7.8 | — | — | — | google / chrome | Use after free in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to execute a | 131d ago |
| CVE-2026-10942 | 7.8 | — | — | — | google / chrome | Inappropriate implementation in UI in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to | 131d ago |
| CVE-2026-25551 | 7.8 | — | — | — | — | Seagull Software BarTender 2021 R1 through 12.0.1 contains an insecure deserialization vulnerability that allows l | 132d ago |
| CVE-2025-12694 | 7.8 | — | — | — | forcepoint / vpn client | A local privilege escalation vulnerability exists in Forcepoint VPN Client that allows a local non-administrative | 132d ago |
| CVE-2026-50209 | 7.8 | — | — | — | acer / connect m6e 5g firmware | Broadcast events allow malicious software to rewrite the device's default Mobile Device Management (MDM) endpoint | 132d ago |
| CVE-2026-50207 | 7.8 | — | — | — | acer / connect m6e 5g firmware | The system Binder boundary accepts unverified pass-through AT commands, giving local applications the power to rea | 132d ago |
| CVE-2026-49189 | 7.8 | — | — | — | acer / connect m6e 5g firmware | Unchecked public access permissions on a core Broadcast Receiver allow unauthorized local software components to i | 132d ago |
