Security
CVE Feed
Latest vulnerabilities from the National Vulnerability Database.
48851
Total
3923
Critical
14488
High
14228
Medium
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2026-65779 | HIGH | 7.0 | Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally. | Aug 11, 2026 |
| CVE-2026-65778 | HIGH | 7.0 | Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally. | Aug 11, 2026 |
| CVE-2026-65777 | MEDIUM | 5.3 | Inadequate encryption strength in Windows Active Directory allows an authorized attacker to bypass a security feature over a network. | Aug 11, 2026 |
| CVE-2026-65776 | HIGH | 7.0 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. | Aug 11, 2026 |
| CVE-2026-65775 | HIGH | 7.8 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. | Aug 11, 2026 |
| CVE-2026-65774 | HIGH | 7.8 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | Aug 11, 2026 |
| CVE-2026-65773 | HIGH | 7.8 | Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locally. | Aug 11, 2026 |
| CVE-2026-65769 | MEDIUM | 6.5 | Exposure of sensitive information to an unauthorized actor in Microsoft Teams Mobile allows an unauthorized attacker to disclose information over a network. | Aug 11, 2026 |
| CVE-2026-65768 | HIGH | 8.8 | Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Teams for Android allows an unauthorized attacker to execute code over a … | Aug 11, 2026 |
| CVE-2026-65767 | HIGH | 8.8 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Teams for Android allows an authorized attacker to perform spoofing over a network. | Aug 11, 2026 |
| CVE-2026-65681 | HIGH | 7.5 | Null pointer dereference in Windows iSCSI Target Service allows an unauthorized attacker to deny service over a network. | Aug 11, 2026 |
| CVE-2026-65679 | HIGH | 8.1 | Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network. | Aug 11, 2026 |
| CVE-2026-65678 | HIGH | 7.0 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. | Aug 11, 2026 |
| CVE-2026-65675 | HIGH | 7.1 | No cwe for this issue in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to bypass a security feature over a network. | Aug 11, 2026 |
| CVE-2026-65673 | HIGH | 7.8 | Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Entra Connect Sync allows an authorized attacker to elevate privileges locally. | Aug 11, 2026 |
| CVE-2026-65672 | HIGH | 7.8 | Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally. | Aug 11, 2026 |
| CVE-2026-65671 | HIGH | 7.8 | Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally. | Aug 11, 2026 |
| CVE-2026-65665 | HIGH | 8.8 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | Aug 11, 2026 |
| CVE-2026-65664 | HIGH | 7.8 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. | Aug 11, 2026 |
| CVE-2026-65663 | HIGH | 8.8 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | Aug 11, 2026 |
| CVE-2026-65662 | MEDIUM | 5.5 | Out-of-bounds read in Windows GDI allows an authorized attacker to disclose information locally. | Aug 11, 2026 |
| CVE-2026-65661 | HIGH | 7.8 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. | Aug 11, 2026 |
| CVE-2026-65660 | MEDIUM | 6.5 | Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | Aug 11, 2026 |
| CVE-2026-65658 | HIGH | 8.8 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | Aug 11, 2026 |
| CVE-2026-65657 | HIGH | 7.8 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. | Aug 11, 2026 |