Home / CVEs
CVE Database
Published vulnerabilities with severity, known exploitation and official sources.
CVE-2026-108435
Medium · 6.5
CWE-822 Oct 15, 2026
Microsoft Office Word Information Disclosure Vulnerability
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-96933
High · 7.8
CWE-822 Oct 13, 2026
Windows COM+ Event System Service Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
CVE-2026-96931
High · 7.8
CWE-822 Oct 13, 2026
Windows NTFS Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-96924
Critical · 9.8
CWE-822 Oct 13, 2026
Windows OLE Remote Code Execution Vulnerability
Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a network.
CVE-2026-96910
Medium · 5.5
CWE-822 Oct 13, 2026
Microsoft Windows Search Component Information Disclosure Vulnerability
Untrusted pointer dereference in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
CVE-2026-96847
High · 7.8
CWE-822 Oct 13, 2026
WebDAV Elevation of Privilege Vulnerability
Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.
CVE-2026-88219
High · 8.8
CWE-822 Oct 13, 2026
RPC Runtime Library Remote Code Execution Vulnerability
Untrusted pointer dereference in RPC Runtime allows an unauthorized attacker to execute code over a network.
CVE-2026-88203
Medium · 6.5
CWE-822 Oct 13, 2026
Microsoft Office PowerPoint Information Disclosure Vulnerability
Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-88126
High · 7.8
CWE-822 Oct 13, 2026
WebDAV Elevation of Privilege Vulnerability
Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.
CVE-2026-88116
High · 8.8
CWE-822 Oct 13, 2026
Windows Domain Name Service Remote Code Execution Vulnerability
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
CVE-2026-88114
High · 8.8
CWE-822 Oct 13, 2026
Windows Domain Name Service Remote Code Execution Vulnerability
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
CVE-2026-88112
High · 8.8
CWE-822 Oct 13, 2026
Windows Domain Name Service Remote Code Execution Vulnerability
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
CVE-2026-88098
High · 7.0
CWE-822 Oct 13, 2026
Windows Security Support Provider Interface Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Security Support Provider Interface allows an authorized attacker to elevate privileges locally.
CVE-2026-85909
Medium · 5.5
CWE-822 Oct 13, 2026
Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability
Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.
CVE-2026-85903
High · 8.8
CWE-822 Oct 13, 2026
Windows Domain Name Service Remote Code Execution Vulnerability
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
CVE-2026-83848
High · 7.8
CWE-822 Oct 13, 2026
Windows COM+ Event System Service Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83826
High · 7.8
CWE-822 Oct 13, 2026
Windows Error Reporting Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-83587
High · 7.8
CWE-822 Oct 13, 2026
Windows Core Messaging Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
CVE-2026-70300
Critical · 9.8
CWE-822 Oct 13, 2026
Microsoft Office Word Remote Code Execution Vulnerability
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-70275
High · 8.8
CWE-822 Oct 13, 2026
Windows CD-ROM File System Driver Remote Code Execution Vulnerability
Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network.
CVE-2026-70270
Medium · 5.5
CWE-822 Oct 13, 2026
Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-70172
High · 7.8
CWE-822 Oct 13, 2026
Windows NTFS Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-70170
Medium · 6.5
CWE-822 Oct 13, 2026
Windows Kernel Denial of Service Vulnerability
Untrusted pointer dereference in Windows Kernel allows an authorized attacker to deny service over a network.
CVE-2026-70167
High · 8.8
CWE-822 Oct 13, 2026
Windows Domain Name Service Remote Code Execution Vulnerability
Access of resource using incompatible type ('type confusion') in DNS Server allows an authorized attacker to execute code over a network.
CVE-2026-70111
High · 8.1
CWE-822 Oct 13, 2026
Windows Kernel Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges over a network.