cve.bz

New CVEs this week, the last 7 days, newest first, page 48

Filter

The new CVEs published in the last 7 days, newest first, with CVSS, EPSS, CISA KEV and public exploits for each. Refreshed every few minutes. Narrow it: in CISA KEV · critical. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, Patch Tuesday

  1. 4.7CVE-2026-96048EPSS 0.2%

    Use of uninitialized resource in Windows Graphics Kernel allows an authorized attacker to disclose information locally.

  2. 7.0CVE-2026-96047EPSS 0.3%

    Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

  3. 7.0CVE-2026-96046EPSS 0.3%

    Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

  4. 7.0CVE-2026-96043EPSS 0.3%

    Use after free in Windows Connection Manager Service allows an authorized attacker to elevate privileges locally.

  5. 7.0CVE-2026-96042EPSS 0.3%

    Use after free in Windows Connection Manager Service allows an authorized attacker to elevate privileges locally.

  6. 5.5CVE-2026-96041EPSS 0.4%

    Out-of-bounds read in Windows USB Hub Driver allows an authorized attacker to disclose information locally.

  7. 7.8CVE-2026-96038EPSS 0.3%

    Inclusion of functionality from untrusted control sphere in Windows Audio Service allows an authorized attacker to elevate privileges locally.

  8. 7.8CVE-2026-96037EPSS 0.3%

    Heap-based buffer overflow in Windows User Manager Service allows an authorized attacker to elevate privileges locally.

  9. 7.8CVE-2026-96036EPSS 0.4%

    Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally.

  10. 7.0CVE-2026-96035EPSS 0.3%

    Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

  11. 7.8CVE-2026-96031EPSS 0.4%

    Out-of-bounds write in Windows Kernel allows an authorized attacker to elevate privileges locally.

  12. 7.8CVE-2026-96029EPSS 0.3%

    Improper access control in Windows Installer allows an authorized attacker to elevate privileges locally.

  13. 7.8CVE-2026-96028EPSS 0.3%

    Access of resource using incompatible type ('type confusion') in Windows Installer allows an authorized attacker to elevate privileges locally.

  14. 7.0CVE-2026-96027EPSS 0.3%

    Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

  15. 7.0CVE-2026-96026EPSS 0.3%

    Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

  16. 7.8CVE-2026-96023EPSS 0.3%

    Use after free in Windows Push Notification Core allows an authorized attacker to elevate privileges locally.

  17. 5.6CVE-2026-96022EPSS 0.3%

    Use of uninitialized resource in Windows Text Services Framework allows an authorized attacker to disclose information locally.

  18. 8.8CVE-2026-96020EPSS 0.7%

    Out-of-bounds write in DNS Server allows an authorized attacker to execute code over a network.

  19. 7.0CVE-2026-96019EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.

  20. 6.5CVE-2026-96018EPSS 0.3%

    Weak authentication in Windows AppContainer allows an authorized attacker to disclose information locally.

  21. 4.9CVE-2026-96017EPSS 1.2%

    Use after free in DNS Server allows an authorized attacker to deny service over a network.

  22. 7.8CVE-2026-96016EPSS 0.3%

    Heap-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.

  23. 8.8CVE-2026-96010EPSS 0.9%

    Integer underflow (wrap or wraparound) in HID Parser Library allows an authorized attacker to elevate privileges over a network.

  24. 7.0CVE-2026-96008EPSS 0.3%

    Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

  25. 7.0CVE-2026-96007EPSS 0.2%

    Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.

  26. 7.8CVE-2026-96005EPSS 0.3%

    Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

  27. 7.0CVE-2026-96004EPSS 0.3%

    Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

  28. 8.8CVE-2026-96002EPSS 0.7%

    Heap-based buffer overflow in DNS Server allows an authorized attacker to execute code over a network.

  29. 5.5CVE-2026-96001EPSS 0.5%

    Exposure of sensitive system information to an unauthorized control sphere in Windows Bluetooth Service allows an authorized attacker to disclose information locally.

  30. 7.8CVE-2026-95999EPSS 0.4%

    Out-of-bounds read in Windows USB Hub Driver allows an authorized attacker to elevate privileges locally.

  31. 4.4CVE-2026-95998EPSS 0.3%

    Missing authentication for critical function in Windows StateRepository API allows an authorized attacker to perform tampering locally.

  32. 7.8CVE-2026-95997EPSS 0.3%

    Use after free in Windows Event Logging Service allows an authorized attacker to elevate privileges locally.

  33. 8.8CVE-2026-95996EPSS 0.7%

    Integer underflow (wrap or wraparound) in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges over a network.

  34. 7.8CVE-2026-95991EPSS 0.3%

    Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

  35. 7.0CVE-2026-95989EPSS 0.2%

    Use after free in vhdmp.sys allows an authorized attacker to elevate privileges locally.

  36. 7.8CVE-2026-95988EPSS 0.3%

    Incorrect authorization in Windows Kernel allows an authorized attacker to elevate privileges locally.

  37. 7.0CVE-2026-95987EPSS 0.3%

    Use after free in Windows User Manager Service allows an authorized attacker to elevate privileges locally.

  38. 7.8CVE-2026-95983EPSS 0.3%

    Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

  39. 7.0CVE-2026-95979EPSS 0.3%

    Use after free in Windows Brokering File System allows an authorized attacker to elevate privileges locally.

  40. 5.5CVE-2026-95977EPSS 0.4%

    Out-of-bounds read in Windows Event Viewer allows an authorized attacker to disclose information locally.

  41. 7.0CVE-2026-95976EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally.

  42. 8.8CVE-2026-95975EPSS 0.8%

    Heap-based buffer overflow in Windows Performance Counters allows an unauthorized attacker to execute code over a network.

  43. 7.0CVE-2026-95974EPSS 0.3%

    Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

  44. 7.0CVE-2026-95973EPSS 0.3%

    Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

  45. 7.0CVE-2026-95971EPSS 0.3%

    Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

  46. 7.0CVE-2026-95968EPSS 0.3%

    Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally.

  47. 7.0CVE-2026-95966EPSS 0.3%

    Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

  48. 7.8CVE-2026-95965EPSS 0.3%

    Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

  49. 7.5CVE-2026-95964EPSS 0.5%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  50. 7.8CVE-2026-95963EPSS 0.4%

    Improper link resolution before file access ('link following') in Data Sharing Service Client allows an authorized attacker to elevate privileges locally.