CVE Vulnerability Database

Complete database of CVE vulnerabilities. Track critical security threats, exploits and patches. Updated daily from NVD NIST.

CVE-2026-105591

8.8

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

Microsoft
Details

CVE-2026-105010

9.8

Use after free in Microsoft Windows Search Component allows an unauthorized attacker to elevate privileges over a network.

Microsoft
Details

CVE-2026-105009

7.5

Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elevate privileges locally.

Microsoft
Details

CVE-2026-105008

9.0

No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.

Microsoft
Details

CVE-2026-105007

8.8

An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior to copying memory to it. To …

Microsoft
Details

CVE-2026-105006

6.4

Use after free in HID class driver allows an unauthorized attacker to elevate privileges with a physical attack.

Microsoft
Details

CVE-2026-105005

8.1

Out-of-bounds write in Windows Schannel allows an unauthorized attacker to execute code over a network.

Microsoft
Details

CVE-2026-105004

7.8

Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

Microsoft
Details

CVE-2026-105003

7.8

Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.

Microsoft
Details

CVE-2026-104937

8.1

Shopware version 6.7 allows the upload of attacker‑controlled HTML files and serves them as text/html without effective security headers, enabling stored cross-site scripting (XSS). When a malicious uploaded file containing …

PHP
Details
← 984/12143 →