New CVEs this week, the last 7 days, newest first, page 46
Filter
The new CVEs published in the last 7 days, newest first, with CVSS, EPSS, CISA KEV and public exploits for each. Refreshed every few minutes. Narrow it: in CISA KEV · critical. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, Patch Tuesday
- –CVE-2026-99287EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: xen-netback: Zero out sring pointers on unmap If xenvif_map_frontend_data_rings() fails when a ring is already mapped, it unmaps them via xenvif_unmap_frontend_data_ring…
- –CVE-2026-99286EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: xen-netback: Fix XenBus connection failure cleanup xenvif_get_stats and xenvif_get_ethtool_stats capture vif->num_queues under rcu_read_lock. We need to unpublish vif->n…
- 6.8CVE-2026-97015EPSS 0.4%
Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
- 7.8CVE-2026-97013EPSS 0.3%
Access of resource using incompatible type ('type confusion') in Windows Shell allows an authorized attacker to elevate privileges locally.
- 4.9CVE-2026-97006EPSS 0.9%
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.
- 7.5CVE-2026-97002EPSS 0.3%
Out-of-bounds read in Windows VMSwitch allows an authorized attacker to elevate privileges locally.
- 7.0CVE-2026-97000EPSS 0.3%
Null pointer dereference in Windows USM Communication Manager allows an authorized attacker to elevate privileges locally.
- 7.0CVE-2026-96994EPSS 0.3%
Use after free in Winsock allows an authorized attacker to elevate privileges locally.
- 7.5CVE-2026-96993EPSS 0.6%
Release of invalid pointer or reference in Windows Performance Monitor allows an unauthorized attacker to execute code over a network.
- 6.4CVE-2026-96992EPSS 0.3%
Use after free in Windows PCI Bus Driver allows an unauthorized attacker to elevate privileges with a physical attack.
- 5.5CVE-2026-96989EPSS 0.4%
Out-of-bounds read in Secondary Logon allows an authorized attacker to disclose information locally.
- 4.9CVE-2026-96988EPSS 1.0%
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.
- 4.9CVE-2026-96987EPSS 0.9%
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.
- 4.9CVE-2026-96986EPSS 1.1%
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.
- 4.9CVE-2026-96985EPSS 0.9%
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.
- 4.9CVE-2026-96984EPSS 0.9%
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.
- 5.3CVE-2026-96983EPSS 0.4%
Use after free in Windows DNS allows an unauthorized attacker to deny service over an adjacent network.
- 6.8CVE-2026-96982EPSS 0.4%
Integer overflow or wraparound in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack.
- 6.4CVE-2026-96981EPSS 0.3%
Out-of-bounds write in Windows PCI Bus Driver allows an unauthorized attacker to elevate privileges with a physical attack.
- 4.9CVE-2026-96980EPSS 0.9%
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.
- 6.8CVE-2026-96979EPSS 0.4%
Integer overflow or wraparound in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack.
- 7.0CVE-2026-96978EPSS 0.3%
Use after free in Windows Credential User Interface allows an authorized attacker to elevate privileges locally.
- 4.9CVE-2026-96976EPSS 0.9%
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.
- 5.9CVE-2026-96975EPSS 0.8%
Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network.
- 6.8CVE-2026-96974EPSS 0.4%
Integer overflow or wraparound in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack.
- 7.0CVE-2026-96973EPSS 0.3%
Use after free in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.
- 7.5CVE-2026-96972EPSS 1.0%
Out-of-bounds read in Windows DNS allows an unauthorized attacker to disclose information over a network.
- 7.0CVE-2026-96971EPSS 0.3%
Use after free in Windows NetBIOS allows an authorized attacker to elevate privileges locally.
- 4.9CVE-2026-96970EPSS 1.0%
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.
- 7.0CVE-2026-96969EPSS 0.3%
Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
- 5.3CVE-2026-96965EPSS 0.4%
Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.
- 7.8CVE-2026-96845EPSS 0.3%
Improper authorization in Windows Task Scheduler allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2026-96184EPSS 0.3%
Heap-based buffer overflow in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
- 6.7CVE-2026-96179EPSS 0.3%
Use after free in DNS Server allows an authorized attacker to elevate privileges locally.
- 8.1CVE-2026-96177EPSS 0.6%
Use after free in DNS Server allows an unauthorized attacker to execute code over a network.
- 7.5CVE-2026-96176EPSS 1.2%
Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny service over a network.
- 7.8CVE-2026-96175EPSS 0.3%
Release of invalid pointer or reference in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2026-96174EPSS 0.3%
Release of invalid pointer or reference in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2026-96172EPSS 0.3%
No cwe for this issue in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
- 7.0CVE-2026-96171EPSS 0.2%
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
- 7.0CVE-2026-96168EPSS 0.3%
Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
- 8.8CVE-2026-96164EPSS 0.6%
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
- 7.8CVE-2026-96162EPSS 0.3%
Incorrect authorization in Windows Clipboard Virtual Channel Extension allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2026-96160EPSS 0.3%
Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
- 7.0CVE-2026-96158EPSS 0.2%
Use of uninitialized resource in Microsoft ActiveX Installer Service allows an authorized attacker to elevate privileges locally.
- 9.8CVE-2026-96157EPSS 0.9%
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
- 5.5CVE-2026-96156EPSS 0.5%
Use of uninitialized resource in Windows Broker Infrastructure Service allows an authorized attacker to disclose information locally.
- 7.0CVE-2026-96155EPSS 0.3%
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
- 7.0CVE-2026-96153EPSS 0.3%
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2026-96152EPSS 0.3%
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.