Search
Search Results (423969 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-113750 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-11-10 | 7 High |
| Heap-based buffer overflow in Windows Device Inventory allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-113749 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-11-10 | 7.5 High |
| Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-113748 | 1 Microsoft | 11 Windows 10 1809, Windows 10 21h2, Windows 10 22h2 and 8 more | 2026-11-10 | 7.8 High |
| Stack-based buffer overflow in Software Protection Platform (SPP) allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-112990 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-11-10 | 4.7 Medium |
| Buffer over-read in Windows USB Video Driver allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-112989 | 1 Microsoft | 4 Windows 11 24h2, Windows 11 25h2, Windows 11 Version 26h2 For X64-based Systems and 1 more | 2026-11-10 | 7 High |
| Untrusted pointer dereference in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-112988 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-11-10 | 5.5 Medium |
| Untrusted pointer dereference in Desktop Window Manager allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-112987 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-11-10 | 7 High |
| Integer overflow or wraparound in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-112986 | 1 Microsoft | 10 Windows 10 1809, Windows 10 21h2, Windows 10 22h2 and 7 more | 2026-11-10 | 7 High |
| No cwe for this issue in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-112985 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-11-10 | 7.5 High |
| Integer overflow or wraparound in Microsoft JScript allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-112984 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-11-10 | 6.6 Medium |
| Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack. | ||||
| CVE-2026-112982 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-11-10 | 5.5 Medium |
| Missing authentication for critical function in Microsoft Account allows an authorized attacker to perform tampering locally. | ||||
| CVE-2026-112981 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-11-10 | 7.8 High |
| Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-112980 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-11-10 | 6.7 Medium |
| Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-112979 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-11-10 | 5.5 Medium |
| Weak authentication in Windows State Repository Service allows an authorized attacker to perform tampering locally. | ||||
| CVE-2026-112978 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-11-10 | 7.8 High |
| Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-112977 | 1 Microsoft | 4 Windows Server 2016, Windows Server 2019, Windows Server 2022 and 1 more | 2026-11-10 | 5.5 Medium |
| Improper privilege management in Windows Deployment Services allows an authorized attacker to disclose information locally. | ||||
| CVE-2026-112976 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-11-10 | 7 High |
| Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-112975 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-11-10 | 5.3 Medium |
| Untrusted pointer dereference in Windows Link-Layer Discovery Protocol (LLDP) allows an unauthorized attacker to deny service over an adjacent network. | ||||
| CVE-2026-112974 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-11-10 | 5.5 Medium |
| Improper access control in Microsoft Account allows an authorized attacker to perform tampering locally. | ||||
| CVE-2026-112973 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-11-10 | 7.1 High |
| Improper access control in Windows Kernel allows an authorized attacker to bypass a security feature locally. | ||||