Export limit exceeded: 414964 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (414964 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-113760 | 1 Microsoft | 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more | 2026-11-11 | 8.8 High |
| Heap-based buffer overflow in Windows XWizard Framework allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-113761 | 1 Microsoft | 2 Windows 11 26h1, Windows 11 26h1 | 2026-11-11 | 7 High |
| Untrusted pointer dereference in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-113765 | 1 Microsoft | 7 Windows Server 2016, Windows Server 2016 (server Core Installation), Windows Server 2019 and 4 more | 2026-11-11 | 7.8 High |
| Heap-based buffer overflow in Windows File Server Resource Management Service allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-113770 | 1 Microsoft | 17 Windows 10 21h2, Windows 10 21h2, Windows 10 22h2 and 14 more | 2026-11-11 | 7 High |
| Untrusted pointer dereference in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-113771 | 1 Microsoft | 2 Windows 11 26h1, Windows 11 26h1 | 2026-11-11 | 5.5 Medium |
| Off-by-one error in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-105018 | 1 Microsoft | 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more | 2026-11-11 | 6.6 Medium |
| Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges with a physical attack. | ||||
| CVE-2026-105531 | 1 Microsoft | 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more | 2026-11-11 | 5.5 Medium |
| External control of file name or path in Windows Print Spooler Components allows an authorized attacker to disclose information locally. | ||||
| CVE-2026-110061 | 1 Microsoft | 10 365 Apps, Microsoft Office Ltsc 2021, Microsoft Office Ltsc 2024 and 7 more | 2026-11-11 | 8.8 High |
| Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-112719 | 1 Microsoft | 10 365 Apps, Microsoft Office Ltsc 2021, Microsoft Office Ltsc 2024 and 7 more | 2026-11-11 | 8.8 High |
| Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-125712 | 1 Redhat | 2 Enterprise Linux, Rhel Els | 2026-11-11 | 7.5 High |
| A flaw was found in GStreamer's gst-plugins-base RTCP SDES packet parser. A remote sender able to reach an active media session can supply a malformed SDES entry whose declared length exceeds the received packet. Missing bounds validation can cause the receiver to read beyond the packet buffer, potentially crashing the application or exposing a limited amount of process memory. | ||||
| CVE-2026-126759 | 1 H3c | 1 Icg2000 Unified Communication Gateway | 2026-11-11 | 5.3 Medium |
| A flaw has been found in H3C ICG2000 Unified Communication Gateway 2023. This issue affects some unknown processing of the file /wnm/check.j of the component Web Management Module. Executing a manipulation can lead to missing authentication. The attack may be performed from remote. The exploit has been published and may be used. The researcher claims that the vendor has acknowledged receipt of the vulnerability report. No further response has been received. | ||||
| CVE-2026-119882 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-11-11 | 5.3 Medium |
| Exposure of sensitive system information to an unauthorized control sphere in Windows Remote Desktop Services allows an authorized attacker to disclose information over a network. | ||||
| CVE-2026-119886 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-11-11 | 7.8 High |
| Missing authentication for critical function in Windows Telephony Service allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-119934 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-11-11 | 8.8 High |
| Double free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-119937 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-11-11 | 6.6 Medium |
| Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges with a physical attack. | ||||
| CVE-2026-119940 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-11-11 | 6.5 Medium |
| Integer overflow or wraparound in Windows Kerberos allows an authorized attacker to deny service over a network. | ||||
| CVE-2026-119942 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-11-11 | 4.7 Medium |
| Exposure of sensitive system information to an unauthorized control sphere in Windows HTTP.sys allows an authorized attacker to disclose information locally. | ||||
| CVE-2026-119953 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-11-11 | 7.8 High |
| Use after free in Windows DNS allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-119969 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-11-11 | 8.8 High |
| Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-105558 | 1 Microsoft | 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more | 2026-11-11 | 7.5 High |
| Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code over a network. | ||||