CVE Vulnerability Database

Complete database of CVE vulnerabilities. Track critical security threats, exploits and patches. Updated daily from NVD NIST.

CVE-2026-69452

7.1

Use after free in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network.

Microsoft
Details

CVE-2026-69387

7.0

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

Microsoft
Details

CVE-2026-69370

8.8

Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.

Details

CVE-2026-69363

8.0

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network.

Microsoft
Details

CVE-2026-69354

7.8

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

Microsoft
Details

CVE-2026-69326

8.8

Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.

Microsoft
Details

CVE-2026-68836

7.8

Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally.

Microsoft
Details

CVE-2026-66822

5.9

Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network.

Insertion
Details

CVE-2026-62879

5.5

Missing authentication for critical function in Windows SmartScreen allows an authorized attacker to perform tampering locally.

Microsoft
Details

CVE-2026-62687

5.5

Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to disclose information locally.

Microsoft
Details
← 990/12162 →