Search Results (1074 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-116928 1 Microsoft 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more 2026-11-12 9.8 Critical
Out-of-bounds write in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network.
CVE-2026-114162 1 Microsoft 1 Azure Privileged Management 2026-11-12 9.1 Critical
Incorrect authorization in Microsoft Graph allows an authorized attacker to elevate privileges over a network.
CVE-2026-119958 1 Microsoft 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more 2026-11-11 9.8 Critical
Out-of-bounds write in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.
CVE-2026-120002 1 Microsoft 1 Sharepoint Server 2026-11-11 9.9 Critical
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-118740 1 Microsoft 2 Aspire.dashboard.sdk.linux-x64, Aspire Dashboard 2026-11-11 9.1 Critical
Missing authorization in Aspire allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-116945 1 Microsoft 8 Microsoft Sql Server 2017 For X64-based Systems \(cu31\), Microsoft Sql Server 2019 For X64-based Systems \(cu32\), Microsoft Sql Server 2022 For X64-based Systems \(cu27\) and 5 more 2026-11-11 9.8 Critical
Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.
CVE-2026-114146 1 Microsoft 16 .net 10.0 Installed On Linux, .net 10.0 Installed On Mac Os, .net 10.0 Installed On Windows and 13 more 2026-11-11 9 Critical
Incorrect authorization in ASP.NET Core allows an authorized attacker to elevate privileges over a network.
CVE-2026-109454 1 Microsoft 1 Sharepoint Server 2026-11-11 9 Critical
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-120779 1 Microsoft 1 Visual Studio Code 2026-11-11 9.6 Critical
Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.
CVE-2026-119990 1 Microsoft 1 Azure Open-ai 2026-11-11 9.8 Critical
Missing authentication for critical function in Azure OpenAI allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-85844 1 Microsoft 15 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 12 more 2026-11-11 9.8 Critical
Authentication bypass using an alternate path or channel in Windows Kerberos allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-112967 1 Microsoft 8 Windows 10 1809, Windows 10 21h2, Windows 10 22h2 and 5 more 2026-11-11 9.8 Critical
Heap-based buffer overflow in Windows Xbox Live Networking Service allows an unauthorized attacker to execute code over a network.
CVE-2026-96157 1 Microsoft 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more 2026-11-11 9.8 Critical
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
CVE-2026-96067 1 Microsoft 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more 2026-11-11 9.8 Critical
Integer overflow or wraparound in Microsoft Color Management allows an unauthorized attacker to execute code over a network.
CVE-2026-95962 1 Microsoft 12 Windows 10 1809, Windows 10 21h2, Windows 10 22h2 and 9 more 2026-11-11 9 Critical
Use after free in Windows Virtual Filtering Platform (VFP) allows an unauthorized attacker to execute code over a network.
CVE-2026-88243 1 Microsoft 4 Windows Server 2016, Windows Server 2019, Windows Server 2022 and 1 more 2026-11-11 9.8 Critical
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
CVE-2026-88234 1 Microsoft 4 Windows Server 2016, Windows Server 2019, Windows Server 2022 and 1 more 2026-11-11 9.8 Critical
Release of invalid pointer or reference in Windows iSCSI allows an unauthorized attacker to execute code over a network.
CVE-2026-96078 1 Microsoft 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more 2026-11-11 9.8 Critical
Heap-based buffer overflow in Microsoft Color Management allows an unauthorized attacker to execute code over a network.
CVE-2026-95901 1 Microsoft 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more 2026-11-11 9.8 Critical
Double free in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network.
CVE-2026-95882 1 Microsoft 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more 2026-11-11 9.8 Critical
Stack-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network.