Total
8659 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-69311 | 2026-09-09 | N/A | 7.0 HIGH | ||
| Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-69300 | 2026-09-09 | N/A | 7.0 HIGH | ||
| Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-69280 | 2026-09-09 | N/A | 7.0 HIGH | ||
| Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-69279 | 2026-09-09 | N/A | 7.0 HIGH | ||
| Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-69275 | 2026-09-09 | N/A | 7.0 HIGH | ||
| Use after free in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-69274 | 2026-09-09 | N/A | 7.1 HIGH | ||
| Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network. | |||||
| CVE-2026-68835 | 2026-09-09 | N/A | 7.1 HIGH | ||
| Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network. | |||||
| CVE-2026-68825 | 2026-09-09 | N/A | 7.0 HIGH | ||
| Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-62813 | 2026-09-09 | N/A | 7.5 HIGH | ||
| Use after free in Active Directory Domain Services allows an authorized attacker to execute code over a network. | |||||
| CVE-2026-62694 | 2026-09-09 | N/A | 7.0 HIGH | ||
| Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-56177 | 2026-09-09 | N/A | 7.8 HIGH | ||
| Use after free in Windows Server allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-50349 | 2026-09-09 | N/A | 7.0 HIGH | ||
| Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-69740 | 2026-09-09 | N/A | 8.8 HIGH | ||
| Use after free in Windows Hello allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-69607 | 2026-09-09 | N/A | 7.5 HIGH | ||
| Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network. | |||||
| CVE-2026-69338 | 2026-09-09 | N/A | 7.1 HIGH | ||
| Use after free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network. | |||||
| CVE-2026-69314 | 2026-09-09 | N/A | 7.1 HIGH | ||
| Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges over a network. | |||||
| CVE-2026-68837 | 2026-09-09 | N/A | 7.0 HIGH | ||
| Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-45200 | 2026-09-09 | N/A | 7.8 HIGH | ||
| Software installed and run as a non-privileged user may conduct improper GPU driver IOCTL calls to create an allocation scenario that when freed would cause double free and kernel heap corruption. Scenario caused by fabricating a specific combination of flags on the allocation interface that would cause an incorrect double free event when freed. | |||||
| CVE-2026-72983 | 2026-09-09 | N/A | 9.8 CRITICAL | ||
| Use after free in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to execute code over a network. | |||||
| CVE-2026-72926 | 2026-09-09 | N/A | 7.0 HIGH | ||
| Use after free in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally. | |||||