CVE Vulnerability Database

Complete database of CVE vulnerabilities. Track critical security threats, exploits and patches. Updated daily from NVD NIST.

CVE-2026-88152

7.8

Use after free in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

Microsoft
Details

CVE-2026-88151

6.5

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

Microsoft
Details

CVE-2026-88150

8.8

Use of uninitialized resource in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Microsoft
Details

CVE-2026-88149

7.0

Double free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Microsoft
Details

CVE-2026-88147

7.8

Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.

Microsoft
Details

CVE-2026-88146

7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

Microsoft
Details

CVE-2026-88145

8.8

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Microsoft
Details

CVE-2026-88144

8.8

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

Microsoft
Details

CVE-2026-88143

7.8

Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.

Microsoft
Details

CVE-2026-88142

8.8

Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.

Microsoft
Details
← 1009/12272 →