VIR Vulnerability Intelligence Relay

Search

Found 2,443 results in 197ms · Match type: Filtered list

Severitycriticalhighmediumlowunknown
0
KEVHas exploit
Reset
CVE Severity CVSS Risk Flags OS Vendor Published Description
CVE-2026-42830 medium 6.5 6.5 windows windows microsoft 23d ago Untrusted search path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.
CVE-2026-42825 high 7.0 7.0 FIX windows windows 23d ago Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
CVE-2026-41614 medium 6.2 6.2 windows windows microsoft 23d ago Improper access control in M365 Copilot for Desktop allows an unauthorized attacker to perform spoofing locally.
CVE-2026-41613 high 8.8 8.8 windows windows microsoft 23d ago Session fixation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-41612 medium 5.5 5.5 windows windows microsoft 23d ago Relative path traversal in Visual Studio Code allows an unauthorized attacker to disclose information locally.
CVE-2026-41611 high 7.8 7.8 windows windows microsoft 23d ago Improper neutralization of script-related html tags in a web page (basic xss) in Visual Studio Code allows an unauthorized attacker to execute code locally.
CVE-2026-41610 medium 6.3 6.3 windows windows microsoft 23d ago Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
CVE-2026-41109 high 8.8 8.8 windows windows microsoft 23d ago Improper neutralization of special elements in output used by a downstream component ('injection') in GitHub Copilot and Visual Studio allows an unauthorized attacker to bypass a security feature ove…
CVE-2026-41107 high 7.4 7.4 windows windows microsoft 23d ago External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
CVE-2026-41102 high 7.1 7.1 windows windows microsoft 23d ago Improper access control in Microsoft Office PowerPoint allows an authorized attacker to perform spoofing locally.
CVE-2026-41101 high 7.1 7.1 windows windows microsoft 23d ago Improper access control in Microsoft Office Word allows an authorized attacker to perform spoofing locally.
CVE-2026-41100 medium 4.4 4.4 windows windows microsoft 23d ago Improper access control in M365 Copilot allows an authorized attacker to perform spoofing locally.
CVE-2026-41097 medium 6.7 6.7 FIX windows windows 23d ago Reliance on a component that is not updateable in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
CVE-2026-41095 high 7.8 7.8 FIX windows windows 23d ago Use after free in Data Deduplication allows an authorized attacker to elevate privileges locally.
CVE-2026-41094 high 8.8 8.8 windows windows microsoft 23d ago Improper control of generation of code ('code injection') in Microsoft Data Formulator allows an unauthorized attacker to execute code over a network.
CVE-2026-41088 high 7.8 7.8 FIX windows windows 23d ago Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2026-41086 high 8.8 8.8 windows windows microsoft 23d ago Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network.
CVE-2026-40421 medium 4.3 4.3 windows windows microsoft 23d ago Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-40420 high 8.8 8.8 windows windows microsoft 23d ago Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.
CVE-2026-40419 high 7.8 7.8 windows windows microsoft 23d ago Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.
CVE-2026-40418 high 7.8 7.8 windows windows microsoft 23d ago Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.
CVE-2026-40417 high 7.8 7.8 windows windows microsoft 23d ago Weak authentication in Dynamics Business Central allows an authorized attacker to elevate privileges locally.
CVE-2026-40416 medium 4.3 4.3 windows windows microsoft 23d ago User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-40415 high 8.1 8.1 FIX windows windows 23d ago Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
CVE-2026-40414 high 7.4 7.4 FIX windows windows 23d ago Windows TCP/IP Denial of Service Vulnerability
CVE-2026-40413 high 7.4 7.4 FIX windows windows 23d ago Windows TCP/IP Denial of Service Vulnerability
CVE-2026-40410 high 7.0 7.0 FIX windows windows 23d ago Use after free in Windows SMB Client allows an authorized attacker to elevate privileges locally.
CVE-2026-40408 high 7.8 7.8 FIX windows windows 23d ago Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
CVE-2026-40407 high 7.8 7.8 FIX windows windows 23d ago Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-40406 high 7.5 7.5 FIX windows windows 23d ago Use after free in Windows TCP/IP allows an unauthorized attacker to disclose information over a network.
CVE-2026-40405 high 7.5 7.5 FIX windows windows 23d ago Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network.
CVE-2026-40403 high 8.8 8.8 FIX windows windows 23d ago Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to execute code locally.
CVE-2026-40401 high 7.1 7.1 FIX windows windows 23d ago Windows TCP/IP Denial of Service Vulnerability
CVE-2026-40399 high 7.8 7.8 FIX windows windows 23d ago Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
CVE-2026-40398 high 7.8 7.8 FIX windows windows 23d ago Heap-based buffer overflow in Windows Remote Desktop allows an authorized attacker to elevate privileges locally.
CVE-2026-40397 high 7.8 7.8 FIX windows windows 23d ago Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-40382 high 7.8 7.8 FIX windows windows 23d ago Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
CVE-2026-40381 high 7.8 7.8 windows windows microsoft 23d ago Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.
CVE-2026-40380 medium 6.2 6.2 FIX windows windows 23d ago Heap-based buffer overflow in Volume Manager Extension Driver allows an authorized attacker to execute code with a physical attack.
CVE-2026-40377 high 7.8 7.8 FIX windows windows 23d ago Heap-based buffer overflow in Windows Cryptographic Services allows an authorized attacker to elevate privileges locally.
CVE-2026-40374 medium 6.5 6.5 windows windows microsoft 23d ago Exposure of sensitive information to an unauthorized actor in Power Automate allows an authorized attacker to disclose information over a network.
CVE-2026-40370 high 8.8 8.8 windows windows 23d ago External control of file name or path in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-40369 high 7.8 7.8 FIX windows windows 23d ago Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-40368 high 8.0 8.0 windows windows microsoft 23d ago Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-40367 high 8.4 8.4 windows windows microsoft 23d ago Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-40366 high 8.4 8.4 windows windows microsoft 23d ago Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-40365 high 8.8 8.8 windows windows microsoft 23d ago Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-40364 high 8.4 8.4 windows windows microsoft 23d ago Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-40363 high 8.4 8.4 windows windows microsoft 23d ago Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-40362 high 7.8 7.8 windows windows microsoft 23d ago Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-40361 high 8.4 8.4 windows windows microsoft 23d ago Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-40360 high 7.8 7.8 windows windows microsoft 23d ago Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-40359 high 7.8 7.8 windows windows microsoft 23d ago Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-40358 high 8.4 8.4 windows windows microsoft 23d ago Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-40357 high 8.8 8.8 windows windows microsoft 23d ago Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-35440 medium 5.5 5.5 windows windows microsoft 23d ago Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-35439 high 8.8 8.8 windows windows microsoft 23d ago Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-35438 high 8.3 8.3 windows windows microsoft 23d ago Missing authorization in Windows Admin Center allows an authorized attacker to elevate privileges over a network.
CVE-2026-35436 high 8.8 8.8 windows windows microsoft 23d ago Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.
CVE-2026-35433 high 7.3 7.3 windows windows 23d ago Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.
CVE-2026-35429 medium 4.3 4.3 windows windows microsoft 23d ago User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-35424 high 7.5 7.5 FIX windows windows 23d ago Missing release of memory after effective lifetime in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network.
CVE-2026-35423 medium 5.4 5.4 FIX windows windows 23d ago Out-of-bounds read in Telnet Client allows an unauthorized attacker to disclose information over a network.
CVE-2026-35422 medium 6.5 6.5 FIX windows windows 23d ago Authentication bypass using an alternate path or channel in Windows TCP/IP allows an authorized attacker to bypass a security feature over a network.
CVE-2026-35421 high 7.8 7.8 FIX windows windows 23d ago Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code locally.
CVE-2026-35420 high 7.8 7.8 FIX windows windows 23d ago Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-35419 medium 5.5 5.5 FIX windows windows 23d ago Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.
CVE-2026-35418 high 7.8 7.8 FIX windows windows 23d ago Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-35417 high 7.8 7.8 FIX windows windows 23d ago Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
CVE-2026-35416 high 7.0 7.0 FIX windows windows 23d ago Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2026-35415 high 7.8 7.8 FIX windows windows 23d ago Integer overflow or wraparound in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
CVE-2026-34351 high 7.8 7.8 FIX windows windows 23d ago Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
CVE-2026-34350 medium 6.5 6.5 FIX windows windows 23d ago Null pointer dereference in Windows Storport Miniport Driver allows an unauthorized attacker to deny service over a network.
CVE-2026-34347 high 7.0 7.0 FIX windows windows 23d ago Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
CVE-2026-34345 high 7.0 7.0 FIX windows windows 23d ago Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2026-34344 high 7.8 7.8 FIX windows windows 23d ago Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2026-34343 high 7.8 7.8 FIX windows windows 23d ago Heap-based buffer overflow in Windows Application Identity (AppID) Subsystem allows an authorized attacker to elevate privileges locally.
CVE-2026-34342 high 7.0 7.0 FIX windows windows 23d ago Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
CVE-2026-34341 high 7.0 7.0 FIX windows windows 23d ago Double free in Windows Link-Layer Discovery Protocol (LLDP) allows an authorized attacker to elevate privileges locally.
CVE-2026-34340 high 7.0 7.0 FIX windows windows 23d ago Use after free in Windows Projected File System allows an authorized attacker to elevate privileges locally.
CVE-2026-34339 medium 5.5 5.5 FIX windows windows 23d ago Null pointer dereference in Windows LDAP - Lightweight Directory Access Protocol allows an authorized attacker to deny service locally.
CVE-2026-34338 high 7.8 7.8 FIX windows windows 23d ago Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
CVE-2026-34337 high 7.8 7.8 FIX windows windows 23d ago Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-34336 high 7.8 7.8 FIX windows windows 23d ago Integer overflow or wraparound in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2026-34334 high 7.8 7.8 FIX windows windows 23d ago Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
CVE-2026-34333 high 7.8 7.8 FIX windows windows 23d ago Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
CVE-2026-34332 high 8.0 8.0 FIX windows windows 23d ago Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to execute code over a network.
CVE-2026-34331 high 7.0 7.0 FIX windows windows 23d ago Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
CVE-2026-34330 high 7.8 7.8 FIX windows windows 23d ago Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
CVE-2026-34329 high 8.8 8.8 FIX windows windows 23d ago Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over an adjacent network.
CVE-2026-33841 high 7.8 7.8 FIX windows windows 23d ago Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-33840 high 7.8 7.8 FIX windows windows 23d ago Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
CVE-2026-33839 high 7.0 7.0 FIX windows windows 23d ago Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
CVE-2026-33838 high 7.8 7.8 FIX windows windows 23d ago Double free in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
CVE-2026-33837 high 7.8 7.8 FIX windows windows 23d ago Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
CVE-2026-33835 high 7.8 7.8 FIX windows windows 23d ago Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-33834 high 7.8 7.8 FIX windows windows 23d ago Improper access control in Windows Event Logging Service allows an authorized attacker to elevate privileges locally.
CVE-2026-33833 high 8.2 8.2 windows windows microsoft 23d ago Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Machine Learning allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-33821 high 7.7 7.7 windows windows microsoft 23d ago Improper privilege management in Microsoft Dynamics 365 Customer Insights allows an authorized attacker to elevate privileges over a network.
CVE-2026-33112 high 8.8 8.8 windows windows microsoft 23d ago Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.