Home / CVEs
CVE Database
Published vulnerabilities with severity, known exploitation and official sources.
CVE-2026-78523
High · 7.5
CWE-416 Sep 8, 2026
Windows DNS Server Denial of Service Vulnerability
Use after free in Windows DNS allows an unauthorized attacker to deny service over a network.
CVE-2026-78514
High · 8.8
CWE-416 Sep 8, 2026
Microsoft Office Word Remote Code Execution Vulnerability
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-78507
High · 8.8
CWE-416 Sep 8, 2026
Microsoft Office Word Remote Code Execution Vulnerability
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-78457
High · 7.0
CWE-416 Sep 8, 2026
Windows Security Health Service Elevation of Privilege Vulnerability
Use after free in Windows Security App allows an authorized attacker to elevate privileges locally.
CVE-2026-78450
High · 8.1
CWE-416 Sep 8, 2026
Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.
CVE-2026-78449
High · 8.1
CWE-416 Sep 8, 2026
Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.
CVE-2026-78445
Critical · 9.8
CWE-416 Sep 8, 2026
Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability
Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network.
CVE-2026-78446
High · 7.5
CWE-416 Sep 8, 2026
Windows Distributed File System (DFS) Remote Code Execution Vulnerability
Use after free in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.
CVE-2026-77905
High · 7.0
CWE-416 Sep 8, 2026
Windows Management Instrumentation Elevation of Privilege Vulnerability
Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
CVE-2026-77899
High · 7.0
CWE-416 Sep 8, 2026
Windows Security Center Elevation of Privilege Vulnerability
Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally.
CVE-2026-77505
High · 8.1
CWE-416 Sep 8, 2026
Windows DNS Server Remote Code Execution Vulnerability
Use after free in DNS Server allows an unauthorized attacker to execute code over a network.
CVE-2026-77485
High · 7.0
CWE-416 Sep 8, 2026
SQL Server Elevation of Privilege Vulnerability
Use after free in SQL Server allows an authorized attacker to elevate privileges locally.
CVE-2026-73022
High · 7.0
CWE-416 Sep 8, 2026
Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability
Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
CVE-2026-73010
Critical · 9.8
CWE-416 Sep 8, 2026
Microsoft Failover Cluster Remote Code Execution Vulnerability
Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.
CVE-2026-73009
Critical · 9.8
CWE-416 Sep 8, 2026
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
CVE-2026-73003
High · 7.0
CWE-416 Sep 8, 2026
Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability
Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
CVE-2026-72987
High · 8.1
CWE-416 Sep 8, 2026
Windows DNS Remote Code Execution Vulnerability
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
CVE-2026-72983
Critical · 9.8
CWE-416 Sep 8, 2026
Internet Connection Sharing (ICS) Remote Code Execution Vulnerability
Use after free in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to execute code over a network.
CVE-2026-72981
High · 8.1
CWE-416 Sep 8, 2026
IP Helper Remote Code Execution Vulnerability
Use after free in IP Helper allows an unauthorized attacker to execute code over a network.
CVE-2026-72979
Critical · 9.8
CWE-416 Sep 8, 2026
Windows DHCP Server Remote Code Execution Vulnerability
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
CVE-2026-72965
High · 7.8
CWE-416 Sep 8, 2026
Windows WebClient Service Elevation of Privilege Vulnerability
Use after free in Windows WebClient Service allows an authorized attacker to elevate privileges locally.
CVE-2026-72963
High · 7.0
CWE-416 Sep 8, 2026
Windows Modern Execution Server Elevation of Privilege Vulnerability
Use after free in Windows Modern Execution Server allows an authorized attacker to elevate privileges locally.
CVE-2026-72954
High · 7.5
CWE-416 Sep 8, 2026
Windows Deployment Services Remote Code Execution Vulnerability
Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network.
CVE-2026-72943
High · 7.5
CWE-416 Sep 8, 2026
Windows Deployment Services Remote Code Execution Vulnerability
Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network.
CVE-2026-72936
High · 8.1
CWE-416 Sep 8, 2026
Windows SMB Client Remote Code Execution Vulnerability
Use after free in Windows SMB Client allows an unauthorized attacker to execute code over a network.