Home / CVEs
CVE Database
Published vulnerabilities with severity, known exploitation and official sources.
CVE-2026-77899
High · 7.0
CWE-416 Sep 8, 2026
Windows Security Center Elevation of Privilege Vulnerability
Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally.
CVE-2026-77505
High · 8.1
CWE-416 Sep 8, 2026
Windows DNS Server Remote Code Execution Vulnerability
Use after free in DNS Server allows an unauthorized attacker to execute code over a network.
CVE-2026-77485
High · 7.0
CWE-416 Sep 8, 2026
SQL Server Elevation of Privilege Vulnerability
Use after free in SQL Server allows an authorized attacker to elevate privileges locally.
CVE-2026-73022
High · 7.0
CWE-416 Sep 8, 2026
Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability
Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
CVE-2026-73010
Critical · 9.8
CWE-416 Sep 8, 2026
Microsoft Failover Cluster Remote Code Execution Vulnerability
Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.
CVE-2026-73009
Critical · 9.8
CWE-416 Sep 8, 2026
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
CVE-2026-73003
High · 7.0
CWE-416 Sep 8, 2026
Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability
Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
CVE-2026-72987
High · 8.1
CWE-416 Sep 8, 2026
Windows DNS Remote Code Execution Vulnerability
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
CVE-2026-72983
Critical · 9.8
CWE-416 Sep 8, 2026
Internet Connection Sharing (ICS) Remote Code Execution Vulnerability
Use after free in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to execute code over a network.
CVE-2026-72981
High · 8.1
CWE-416 Sep 8, 2026
IP Helper Remote Code Execution Vulnerability
Use after free in IP Helper allows an unauthorized attacker to execute code over a network.
CVE-2026-72979
Critical · 9.8
CWE-416 Sep 8, 2026
Windows DHCP Server Remote Code Execution Vulnerability
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
CVE-2026-72965
High · 7.8
CWE-416 Sep 8, 2026
Windows WebClient Service Elevation of Privilege Vulnerability
Use after free in Windows WebClient Service allows an authorized attacker to elevate privileges locally.
CVE-2026-72963
High · 7.0
CWE-416 Sep 8, 2026
Windows Modern Execution Server Elevation of Privilege Vulnerability
Use after free in Windows Modern Execution Server allows an authorized attacker to elevate privileges locally.
CVE-2026-72954
High · 7.5
CWE-416 Sep 8, 2026
Windows Deployment Services Remote Code Execution Vulnerability
Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network.
CVE-2026-72943
High · 7.5
CWE-416 Sep 8, 2026
Windows Deployment Services Remote Code Execution Vulnerability
Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network.
CVE-2026-72936
High · 8.1
CWE-416 Sep 8, 2026
Windows SMB Client Remote Code Execution Vulnerability
Use after free in Windows SMB Client allows an unauthorized attacker to execute code over a network.
CVE-2026-72930
High · 7.0
CWE-416 Sep 8, 2026
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to execute code locally.
CVE-2026-72928
High · 7.5
CWE-416 Sep 8, 2026
Windows DNS Server Remote Code Execution Vulnerability
Use after free in Windows DNS allows an authorized attacker to execute code over a network.
CVE-2026-72926
High · 7.0
CWE-416 Sep 8, 2026
Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability
Use after free in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally.
CVE-2026-71342
High · 7.0
CWE-416 Sep 8, 2026
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-71340
High · 7.0
CWE-416 Sep 8, 2026
Windows File History Service Elevation of Privilege Vulnerability
Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally.
CVE-2026-71333
High · 7.0
CWE-416 Sep 8, 2026
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-71332
High · 7.0
CWE-416 Sep 8, 2026
Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.
CVE-2026-70585
High · 7.0
CWE-416 Sep 8, 2026
Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability
Use after free in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to execute code locally.
CVE-2026-70577
High · 7.0
CWE-416 Sep 8, 2026
Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability
Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.