Total
3151 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-73026 | 1 Microsoft | 12 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 9 more | 2026-09-10 | N/A | 7.8 HIGH |
| Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-69878 | 1 Microsoft | 7 Windows 10 1607, Windows 10 1809, Windows Server 2012 and 4 more | 2026-09-10 | N/A | 6.4 MEDIUM |
| Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code locally. | |||||
| CVE-2026-69845 | 1 Microsoft | 7 Windows 10 1607, Windows 10 1809, Windows Server 2012 and 4 more | 2026-09-10 | N/A | 9.8 CRITICAL |
| Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network. | |||||
| CVE-2026-69824 | 2026-09-10 | N/A | 9.8 CRITICAL | ||
| Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an unauthorized attacker to execute code over a network. | |||||
| CVE-2026-69768 | 2026-09-10 | N/A | 9.8 CRITICAL | ||
| Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to execute code over a network. | |||||
| CVE-2026-69715 | 2026-09-10 | N/A | 9.8 CRITICAL | ||
| Out-of-bounds read in Windows Direct Show allows an unauthorized attacker to execute code over a network. | |||||
| CVE-2026-42807 | 2026-09-10 | N/A | 8.0 HIGH | ||
| A heap-based buffer overflow vulnerability in the PC bridge protocol decoder of BoschSensortec COINES_SDK (versions 2.10 through 2.12.2) allows attackers to cause a denial of service (process crash) or potentially execute arbitrary code. The bridge decoder ({{bridge_decoder.c}}) trusts the packet length field provided by the external device and forwards it to the host response queue ({{mqueue_add_data}}) without validating the bounds of the destination buffer. A malicious or compromised USB or Bluetooth Low Energy (BLE) peripheral can advertise a payload size up to ~3 KB, which exceeds the default queue slot size of 255 bytes. This results in an unbounded heap overwrite ({{memcpy}}), corrupting adjacent heap metadata on the host system when processing the device's response. | |||||
| CVE-2026-81992 | 3 Adobe, Apple, Microsoft | 5 Acrobat, Acrobat Dc, Acrobat Reader Dc and 2 more | 2026-09-10 | N/A | 7.8 HIGH |
| Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | |||||
| CVE-2026-58095 | 1 Freebsd | 1 Freebsd | 2026-09-10 | N/A | 8.8 HIGH |
| mp_Enddisc() used incorrect length calculations when formatting endpoint discriminator addresses for display, allowing a received endpoint option to overflow a global result buffer. A malicious PPP peer can crash ppp(8) or potentially execute arbitrary code as root. | |||||
| CVE-2026-58097 | 1 Freebsd | 1 Freebsd | 2026-09-10 | N/A | 7.8 HIGH |
| mp_SetEnddisc() copied a user-supplied PSN endpoint value without length validation, allowing a buffer overflow via the ppp(8) command interface. A local user with access to the ppp(8) command interface can crash ppp(8) or potentially execute arbitrary code as root. | |||||
| CVE-2026-83974 | 1 Microsoft | 12 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 9 more | 2026-09-10 | N/A | 7.8 HIGH |
| Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-83969 | 1 Microsoft | 12 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 9 more | 2026-09-10 | N/A | 7.8 HIGH |
| Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-83952 | 1 Microsoft | 4 Windows 11 24h2, Windows 11 25h2, Windows 11 26h1 and 1 more | 2026-09-10 | N/A | 7.8 HIGH |
| Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-72986 | 2026-09-10 | N/A | 8.8 HIGH | ||
| Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network. | |||||
| CVE-2026-69729 | 2026-09-10 | N/A | 8.8 HIGH | ||
| Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to execute code over a network. | |||||
| CVE-2026-69420 | 2026-09-10 | N/A | 7.8 HIGH | ||
| Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-69284 | 2026-09-10 | N/A | 7.8 HIGH | ||
| Heap-based buffer overflow in Windows DCOM Server allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-68892 | 2026-09-10 | N/A | 7.8 HIGH | ||
| Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-45531 | 2026-09-10 | N/A | 7.8 HIGH | ||
| In read_boot_region of fsck.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | |||||
| CVE-2026-45515 | 2026-09-10 | N/A | 7.8 HIGH | ||
| In a2dp_vendor_opus_decoder_decode_packet of a2dp_vendor_opus_decoder.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | |||||