Browse CVEs

HIGH 7.8 CVE-2026-44824 Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. 365 Apps 16.0.19725.20384+ Fix from $1,9502026-06-09 HIGH 7.0 CVE-2026-44818 Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Office Excel allows an unauthorized attacker… 365 Apps Mitigation only Fix from $1,9502026-06-09 MEDIUM 5.5 CVE-2026-44821 Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. 365 Apps 16.0.19725.20384+ Fix from $1,6002026-06-09 CRITICAL 9.8 CVE-2026-44815 Stack-based buffer overflow in Windows DHCP Client allows an unauthorized attacker to execute code over a network. Windows 10 1607 10.0.14393.9234 / 10.0.17763.8880+ Fix from $2,3002026-06-09 HIGH 7.8 CVE-2026-44811 Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. Windows 11 26h1 10.0.28000.2269+ Fix from $1,9502026-06-09 HIGH 7.8 CVE-2026-44817 Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 365 Apps Mitigation only Fix from $1,9502026-06-09 HIGH 7.8 CVE-2026-44810 Improper authentication in Windows Cryptographic Services allows an unauthorized attacker to elevate privileges locally. Windows 11 23h2 10.0.20348.5256 / 10.0.22631.7219+ Fix from $1,9502026-06-09 HIGH 7.8 CVE-2026-44812 Integer overflow or wraparound in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally. Excel 10.0.14393.9234 / 10.0.17763.8880+ Fix from $1,9502026-06-09 HIGH 7.8 CVE-2026-44813 Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. Windows 11 26h1 10.0.28000.2269+ Fix from $1,9502026-06-09 MEDIUM 5.5 CVE-2026-44814 Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally. Windows 11 26h1 10.0.28000.2269+ Fix from $1,6002026-06-09 HIGH 7.8 CVE-2026-44808 Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. Windows 11 26h1 10.0.28000.2269+ Fix from $1,9502026-06-09 HIGH 7.8 CVE-2026-44802 Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. Windows 10 1809 10.0.17763.8880 / 10.0.19044.7417+ Fix from $1,9502026-06-09 HIGH 7.8 CVE-2026-44803 Integer overflow or wraparound in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally. Excel 10.0.14393.9234 / 10.0.17763.8880+ Fix from $1,9502026-06-09 HIGH 7.8 CVE-2026-44804 Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. Windows 11 26h1 10.0.28000.2269+ Fix from $1,9502026-06-09 HIGH 7.8 CVE-2026-44807 Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. Windows 11 26h1 10.0.28000.2269+ Fix from $1,9502026-06-09 HIGH 7.8 CVE-2026-44809 Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. Windows 11 24h2 10.0.26100.8655 / 10.0.26100.32995+ Fix from $1,9502026-06-09 MEDIUM 5.5 CVE-2026-44805 Use after free in Windows Network Controller (NC) Host Agent allows an authorized attacker to deny service locally. Windows Server 2019 10.0.17763.8880 / 10.0.20348.5256+ Fix from $1,6002026-06-09 HIGH 7.8 CVE-2026-42989 Improper link resolution before file access ('link following') in Winlogon allows an authorized attacker to elevate privileges locally. Windows 10 1607 10.0.14393.9234 / 10.0.17763.8880+ Fix from $1,9502026-06-09 HIGH 7.8 CVE-2026-42991 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attack… Windows 10 1809 10.0.17763.8880 / 10.0.19044.7417+ Fix from $1,9502026-06-09 HIGH 7.5 CVE-2026-44801 Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. Remote Desktop Client 1.2.7214 / 2.0.1193.0+ Fix from $1,9502026-06-09 HIGH 7.5 CVE-2026-42992 Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. Windows App 2.0.1193.0 / 10.0.14393.9234+ Fix from $1,9502026-06-09 HIGH 7.5 CVE-2026-42993 Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. Windows 10 21h2 10.0.19044.7417 / 10.0.19045.7417+ Fix from $1,9502026-06-09 HIGH 7.5 CVE-2026-44799 Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. Remote Desktop Client 1.2.7214 / 2.0.1193.0+ Fix from $1,9502026-06-09 HIGH 8.8 CVE-2026-42985 Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. Remote Desktop Client 1.2.7214 / 2.0.1193.0+ Fix from $1,9502026-06-09 HIGH 8.1 CVE-2026-42981 Integer underflow (wrap or wraparound) in Windows Performance Monitor allows an unauthorized attacker to execute code over a network. Windows 11 23h2 10.0.20348.5256 / 10.0.22631.7219+ Fix from $1,9502026-06-09 HIGH 8.1 CVE-2026-42987 Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network. Windows Server 2012 10.0.14393.9234 / 10.0.17763.8880+ Fix from $1,9502026-06-09 HIGH 7.8 CVE-2026-42983 Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. Windows 10 1809 10.0.17763.8880 / 10.0.19044.7417+ Fix from $1,9502026-06-09 HIGH 7.8 CVE-2026-42986 Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. Windows 10 1607 10.0.14393.9234 / 10.0.17763.8880+ Fix from $1,9502026-06-09 HIGH 7.0 CVE-2026-42984 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. Windows 10 1809 10.0.17763.8880 / 10.0.19044.7417+ Fix from $1,9502026-06-09 HIGH 8.1 CVE-2026-42974 Integer overflow or wraparound in Windows Performance Monitor allows an unauthorized attacker to execute code over a network. Windows 11 23h2 10.0.20348.5256 / 10.0.22631.7219+ Fix from $1,9502026-06-09