Browse CVEs

HIGH 7.8 CVE-2026-40360 Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. 365 Apps 16.0.10417.20128+ Fix from $1,9502026-05-12 MEDIUM 5.4 CVE-2026-35423 Out-of-bounds read in Telnet Client allows an unauthorized attacker to disclose information over a network. Windows 10 1607 10.0.14393.9140 / 10.0.17763.8755+ Fix from $1,6002026-05-12 MEDIUM 5.5 CVE-2026-35419 Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally. Windows 11 24h2 10.0.26100.8390 / 10.0.26100.32772+ Fix from $1,6002026-05-12 MEDIUM 6.1 CVE-2026-33822 Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. 365 Apps Mitigation only Fix from $1,6002026-04-14 HIGH 7.5 CVE-2026-33096 Out-of-bounds read in Windows HTTP.sys allows an unauthorized attacker to deny service over a network. Windows 11 23h2 10.0.20348.5020 / 10.0.22631.6936+ Fix from $1,9502026-04-14 HIGH 7.1 CVE-2026-32188 Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. 365 Apps Mitigation only Fix from $1,9502026-04-14 HIGH 7.8 CVE-2026-32076 Out-of-bounds read in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. Windows 11 23h2 10.0.22631.6936 / 10.0.25398.2274+ Fix from $1,9502026-04-14 MEDIUM 5.5 CVE-2026-27931 Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally. Windows 10 21h2 10.0.19044.7184 / 10.0.19045.7184+ Fix from $1,6002026-04-14 MEDIUM 5.5 CVE-2026-27930 Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally. Windows 10 1607 10.0.14393.9060 / 10.0.17763.8644+ Fix from $1,6002026-04-14 HIGH 7.8 CVE-2026-26156 Heap-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code locally. Windows 10 1607 10.0.14393.9060 / 10.0.17763.8644+ Fix from $1,9502026-04-14 HIGH 7.8 CVE-2026-26153 Out-of-bounds read in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally. Windows 10 1809 10.0.17763.8644 / 10.0.19044.7184+ Fix from $1,9502026-04-14 HIGH 7.5 CVE-2026-26127 Out-of-bounds read in .NET allows an unauthorized attacker to deny service over a network. .net 9.0.14 / 10.0.4+ Fix from $1,9502026-03-10 HIGH 7.8 CVE-2026-26109 Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 365 Apps 16.0.10417.20102+ Fix from $1,9502026-03-10 HIGH 7.5 CVE-2026-25181 Out-of-bounds read in Windows GDI+ allows an unauthorized attacker to disclose information over a network. Windows 10 1607 10.0.14393.8957 / 10.0.17763.8511+ Fix from $1,9502026-03-10 MEDIUM 5.5 CVE-2026-25180 Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to disclose information locally. 365 Copilot 10.0.14393.8957 / 10.0.17763.8511+ Fix from $1,6002026-03-10 HIGH 7.8 CVE-2026-25174 Out-of-bounds read in Windows Extensible File Allocation allows an authorized attacker to elevate privileges locally. Windows 10 1607 10.0.14393.8957 / 10.0.17763.8511+ Fix from $1,9502026-03-10 HIGH 7.8 CVE-2026-25175 Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. Windows 10 1607 10.0.14393.8957 / 10.0.17763.8511+ Fix from $1,9502026-03-10 MEDIUM 5.5 CVE-2026-24282 Out-of-bounds read in Push Message Routing Service allows an authorized attacker to disclose information locally. Windows 10 1607 10.0.14393.8957 / 10.0.17763.8511+ Fix from $1,6002026-03-10 HIGH 7.8 CVE-2026-23673 Out-of-bounds read in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally. Windows 10 1607 10.0.14393.8957 / 10.0.17763.8511+ Fix from $1,9502026-03-10 HIGH 7.8 CVE-2026-23672 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Windows 10 1607 10.0.14393.8957 / 10.0.17763.8511+ Fix from $1,9502026-03-10 MEDIUM 5.5 CVE-2026-21261 Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. 365 Apps 16.0.10417.20097+ Fix from $1,6002026-02-10 MEDIUM 5.5 CVE-2026-21258 Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. 365 Apps 16.0.10417.20097+ Fix from $1,6002026-02-10 HIGH 7.3 CVE-2026-21247 Improper input validation in Windows Hyper-V allows an authorized attacker to execute code locally. Windows 10 1607 10.0.14393.8868 / 10.0.17763.8389+ Fix from $1,9502026-02-10 HIGH 7.8 CVE-2026-20946 Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 365 Apps Mitigation only Fix from $1,9502026-01-13 HIGH 8.4 CVE-2026-20944 Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to execute code locally. 365 Apps Mitigation only Fix from $1,9502026-01-13 MEDIUM 6.2 CVE-2026-20851 Out-of-bounds read in Capability Access Management Service (camsvc) allows an unauthorized attacker to disclose information locally. Windows 11 24h2 10.0.26100.7623 / 10.0.26100.32230+ Fix from $1,6002026-01-13 MEDIUM 5.5 CVE-2026-20835 Out-of-bounds read in Capability Access Management Service (camsvc) allows an authorized attacker to disclose information locally. Windows 11 24h2 10.0.25398.2092 / 10.0.26100.7623+ Fix from $1,6002026-01-13 MEDIUM 5.5 CVE-2026-20829 Out-of-bounds read in Windows TPM allows an authorized attacker to disclose information locally. Windows 10 1809 10.0.17763.8276 / 10.0.19044.6809+ Fix from $1,6002026-01-13 HIGH 7.8 CVE-2025-62572 Out-of-bounds read in Application Information Services allows an authorized attacker to elevate privileges locally. Windows 11 24h2 10.0.26100.7392 / 10.0.26200.7392+ Fix from $1,9502025-12-09 HIGH 7.8 CVE-2025-62564 Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 365 Apps 16.0.10417.20075+ Fix from $1,9502025-12-09