Home / CVEs
CVE Database
Published vulnerabilities with severity, known exploitation and official sources.
CVE-2026-72995
High · 7.8
CWE-122 Sep 8, 2026
Windows Biometric Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-72993
High · 7.8
CWE-122 Sep 8, 2026
Windows Biometric Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-72992
High · 7.8
CWE-122 Sep 8, 2026
Windows Biometric Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-72991
High · 7.8
CWE-122 Sep 8, 2026
Windows Biometric Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-72990
High · 7.8
CWE-122 Sep 8, 2026
Windows Biometric Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-72988
High · 7.8
CWE-122 Sep 8, 2026
Windows Biometric Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-72986
High · 8.8
CWE-122 Sep 8, 2026
Graphic Fonts Remote Code Execution Vulnerability
Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.
CVE-2026-72985
Medium · 6.8
CWE-122 Sep 8, 2026
Volume Shadow Copy Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized attacker to elevate privileges with a physical attack.
CVE-2026-72973
High · 8.8
CWE-122 Sep 8, 2026
Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-72972
High · 8.8
CWE-122 Sep 8, 2026
Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-72967
High · 7.8
CWE-122 Sep 8, 2026
Windows Network Connection Broker Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.
CVE-2026-72962
High · 8.2
CWE-122 Sep 8, 2026
Windows USB Video Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-72961
High · 8.2
CWE-122 Sep 8, 2026
Windows Hyper-V Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
CVE-2026-72960
High · 8.8
CWE-122 Sep 8, 2026
Windows Media Player Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.
CVE-2026-72959
High · 8.8
CWE-122 Sep 8, 2026
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
CVE-2026-72957
High · 7.8
CWE-122 Sep 8, 2026
Windows Deployment Services Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally.
CVE-2026-72953
High · 7.8
CWE-122 Sep 8, 2026
Windows USB Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-72950
Critical · 9.8
CWE-122 Sep 8, 2026
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
CVE-2026-72946
High · 7.8
CWE-122 Sep 8, 2026
Microsoft Storage Port Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Storage Port Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-72944
High · 7.8
CWE-122 Sep 8, 2026
Role: Windows Fax Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.
CVE-2026-72941
High · 7.8
CWE-122 Sep 8, 2026
Windows Biometric Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-72940
High · 8.8
CWE-122 Sep 8, 2026
Windows Schannel Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over a network.
CVE-2026-72933
High · 8.8
CWE-122 Sep 8, 2026
Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.
CVE-2026-72927
High · 7.8
CWE-122 Sep 8, 2026
Winsock Elevation of Privilege Vulnerability
Heap-based buffer overflow in Winsock allows an authorized attacker to elevate privileges locally.
CVE-2026-71350
Medium · 6.8
CWE-122 Sep 8, 2026
Windows Spaceport.sys Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack.