Browse CVEs

HIGH 7.4 CVE-2026-41107 External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network. Edge Chromium 148.0.3967.55+ Fix from $1,9502026-05-12 MEDIUM 5.0 CVE-2026-41610 Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an unauthorized attacker to bypass … Visual Studio Code 1.119.1+ Fix from $1,6002026-05-12 CRITICAL 9.8 CVE-2026-41096 Heap-based buffer overflow in Microsoft Windows DNS allows an unauthorized attacker to execute code over a network. Windows 11 23h2 10.0.22631.7079 / 10.0.25398.2330+ Fix from $2,3002026-05-12 CRITICAL 9.1 CVE-2026-41103EPSS 5% Incorrect implementation of authentication algorithm in Microsoft SSO Plugin for Jira & Confluence allows an unauthorized attacker to elevate pri… Confluence Saml Sso 1.3.3 / 7.4.0+ Fix from $2,3002026-05-12 HIGH 7.8 CVE-2026-41095 Use after free in Data Deduplication allows an authorized attacker to elevate privileges locally. Windows Server 2012 10.0.14393.9140 / 10.0.17763.8755+ Fix from $1,9502026-05-12 MEDIUM 6.7 CVE-2026-41097 Reliance on a component that is not updateable in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. Windows 10 1809 10.0.17763.8755 / 10.0.19044.7291+ Fix from $1,6002026-05-12 MEDIUM 5.5 CVE-2026-41101 Improper access control in Microsoft Office Word allows an authorized attacker to perform spoofing locally. Word 16.0.19822.20190+ Fix from $1,6002026-05-12 MEDIUM 5.5 CVE-2026-41102 Improper access control in Microsoft Office PowerPoint allows an authorized attacker to perform spoofing locally. Powerpoint 16.0.19822.20190+ Fix from $1,6002026-05-12 CRITICAL 9.8 CVE-2026-41089EPSS 80% Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network. Windows Server 2012 10.0.14393.9140 / 10.0.17763.8755+ Fix from $2,3002026-05-12 HIGH 8.8 CVE-2026-40420 Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally. 365 Apps Mitigation only Fix from $1,9502026-05-12 HIGH 8.8 CVE-2026-41086 Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network. Windows Admin Center 2.6.7+ Fix from $1,9502026-05-12 HIGH 8.8 CVE-2026-41094 Improper control of generation of code ('code injection') in Microsoft Data Formulator allows an unauthorized attacker to execute code over a network. Data Formulator 0.7+ Fix from $1,9502026-05-12 HIGH 7.8 CVE-2026-40419 Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally. 365 Apps Mitigation only Fix from $1,9502026-05-12 HIGH 7.8 CVE-2026-41088 Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to eleva… Windows 10 21h2 10.0.19044.7291 / 10.0.19045.7291+ Fix from $1,9502026-05-12 HIGH 8.1 CVE-2026-40415 Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network. Windows 10 1809 10.0.17763.8755 / 10.0.19044.7291+ Fix from $1,9502026-05-12 HIGH 7.8 CVE-2026-40417 Weak authentication in Dynamics Business Central allows an authorized attacker to elevate privileges locally. Dynamics 365 Business Central Mitigation only Fix from $1,9502026-05-12 HIGH 7.8 CVE-2026-40418 Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally. 365 Apps Mitigation only Fix from $1,9502026-05-12 HIGH 7.4 CVE-2026-40413 Windows TCP/IP Denial of Service Vulnerability Windows 10 1607 10.0.14393.9140 / 10.0.17763.8755+ Fix from $1,9502026-05-12 HIGH 7.4 CVE-2026-40414 Windows TCP/IP Denial of Service Vulnerability Windows 10 1607 10.0.14393.9140 / 10.0.17763.8755+ Fix from $1,9502026-05-12 CRITICAL 9.3 CVE-2026-40402 Use after free in Windows Hyper-V allows an unauthorized attacker to elevate privileges locally. Windows 11 23h2 10.0.20348.5074 / 10.0.22631.7079+ Fix from $2,3002026-05-12 HIGH 8.8 CVE-2026-40403 Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to execute code locally. Windows 10 1607 10.0.14393.9140 / 10.0.17763.8755+ Fix from $1,9502026-05-12 HIGH 7.8 CVE-2026-40407 Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. Windows 10 1607 10.0.14393.9140 / 10.0.17763.8755+ Fix from $1,9502026-05-12 HIGH 7.8 CVE-2026-40408 Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. Windows 10 1607 10.0.14393.9140 / 10.0.17763.8755+ Fix from $1,9502026-05-12 HIGH 7.5 CVE-2026-40405 Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network. Windows 11 24h2 10.0.26100.8390 / 10.0.26100.32772+ Fix from $1,9502026-05-12 HIGH 7.5 CVE-2026-40406 Use after free in Windows TCP/IP allows an unauthorized attacker to disclose information over a network. Windows 10 1607 10.0.14393.9140 / 10.0.17763.8755+ Fix from $1,9502026-05-12 HIGH 7.0 CVE-2026-40410 Use after free in Windows SMB Client allows an authorized attacker to elevate privileges locally. Windows 10 1607 10.0.14393.9140 / 10.0.17763.8755+ Fix from $1,9502026-05-12 HIGH 7.8 CVE-2026-40382 Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. Windows 10 1607 10.0.14393.9140 / 10.0.17763.8755+ Fix from $1,9502026-05-12 HIGH 7.8 CVE-2026-40397 Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. Windows 10 1607 10.0.14393.9140 / 10.0.17763.8755+ Fix from $1,9502026-05-12 HIGH 7.8 CVE-2026-40398 Heap-based buffer overflow in Windows Remote Desktop allows an authorized attacker to elevate privileges locally. Windows 10 1607 10.0.14393.9140 / 10.0.17763.8755+ Fix from $1,9502026-05-12 HIGH 7.8 CVE-2026-40399 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevat… Windows 10 1607 10.0.14393.9140 / 10.0.17763.8755+ Fix from $1,9502026-05-12