CVE Vulnerability Database

Complete database of CVE vulnerabilities. Track critical security threats, exploits and patches. Updated daily from NVD NIST.

CVE-2026-96188

7.3

External control of system or configuration setting in Microsoft PowerToys allows an authorized attacker to elevate privileges locally.

Microsoft
Details

CVE-2026-96186

7.8

Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.

Microsoft
Details

CVE-2026-96183

5.5

Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to disclose information locally.

Microsoft
Details

CVE-2026-96118

7.8

Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Microsoft
Details

CVE-2026-96113

9.8

Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network.

Microsoft
Details

CVE-2026-96108

7.8

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

Microsoft
Details

CVE-2026-96096

9.8

Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.

Microsoft
Details

CVE-2026-96071

7.5

Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.

Microsoft
Details

CVE-2026-96044

8.8

No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Microsoft
Details

CVE-2026-95943

7.0

Double free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.

Microsoft
Details
← 1013/12284 →