Total
5545 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2020-1021 | 1 Microsoft | 3 Windows 10, Windows Server 2016, Windows Server 2019 | 2026-08-19 | 4.6 MEDIUM | 7.8 HIGH |
| An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files. The vulnerability could allow elevation of privilege if an attacker can successfully exploit it. An attacker who successfully exploited the vulnerability could gain greater access to sensitive information and system functionality. To exploit the vulnerability, an attacker could run a specially crafted application. The security update addresses the vulnerability by correcting the way that WER handles and executes files. | |||||
| CVE-2020-1010 | 1 Microsoft | 8 Windows 10, Windows 7, Windows 8.1 and 5 more | 2026-08-19 | 7.2 HIGH | 7.8 HIGH |
| An elevation of privilege vulnerability exists in Windows Block Level Backup Engine Service (wbengine) that allows file deletion in arbitrary locations. To exploit the vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system. The update addresses the vulnerability by correcting how the Windows Block Level Backup Engine Service handles file operations. | |||||
| CVE-2020-0963 | 1 Microsoft | 8 Windows 10, Windows 7, Windows 8.1 and 5 more | 2026-08-19 | 4.3 MEDIUM | 5.5 MEDIUM |
| An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user to visit an untrusted webpage. The security update addresses the vulnerability by correcting how the Windows GDI component handles objects in memory. | |||||
| CVE-2020-0909 | 1 Microsoft | 7 Windows 10, Windows 7, Windows 8.1 and 4 more | 2026-08-19 | 5.0 MEDIUM | 7.5 HIGH |
| A denial of service vulnerability exists when Hyper-V on a Windows Server fails to properly handle specially crafted network packets. To exploit the vulnerability, an attacker would send specially crafted network packets to the Hyper-V Server. The security update addresses the vulnerability by resolving the conditions where Hyper-V would fail to properly handle these network packets. | |||||
| CVE-2026-33824 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-08-19 | N/A | 9.8 CRITICAL |
| Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network. | |||||
| CVE-2026-62723 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-08-18 | N/A | 7.0 HIGH |
| Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-62724 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-08-18 | N/A | 7.0 HIGH |
| Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-62725 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-08-18 | N/A | 7.0 HIGH |
| Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-62726 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-08-18 | N/A | 7.0 HIGH |
| Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-62729 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-08-18 | N/A | 7.0 HIGH |
| Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-62732 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-08-18 | N/A | 7.8 HIGH |
| Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-62734 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-08-18 | N/A | 7.0 HIGH |
| Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-62748 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-08-18 | N/A | 7.0 HIGH |
| Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-70330 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-08-18 | N/A | 6.7 MEDIUM |
| Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-59127 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-08-17 | N/A | 7.8 HIGH |
| Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-61925 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-08-17 | N/A | 7.8 HIGH |
| Incorrect authorization in Windows Installer allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-62768 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-08-17 | N/A | 7.8 HIGH |
| Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-65774 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-08-17 | N/A | 7.8 HIGH |
| Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-65797 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-08-17 | N/A | 6.7 MEDIUM |
| Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-70304 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-08-17 | N/A | 6.7 MEDIUM |
| Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally. | |||||