cve.bz

New CVEs this week, the last 7 days, newest first, page 51

Filter

The new CVEs published in the last 7 days, newest first, with CVSS, EPSS, CISA KEV and public exploits for each. Refreshed every few minutes. Narrow it: in CISA KEV · critical. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, Patch Tuesday

  1. 4.4CVE-2026-85907EPSS 0.2%

    Improper authentication in Windows SSDP Service allows an authorized attacker to elevate privileges locally.

  2. 7.0CVE-2026-85862EPSS 0.2%

    Double free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

  3. 9.8CVE-2026-85844EPSS 1.0%

    Authentication bypass using an alternate path or channel in Windows Kerberos allows an unauthorized attacker to elevate privileges over a network.

  4. 8.8CVE-2026-85839EPSS 0.7%

    Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.

  5. 8.8CVE-2026-85838EPSS 0.7%

    Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.

  6. 7.8CVE-2026-85801EPSS 0.3%

    Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.

  7. 7.5CVE-2026-84010EPSS 0.6%

    Exposed dangerous method or function in SQL Server allows an authorized attacker to elevate privileges over a network.

  8. 5.5CVE-2026-84005EPSS 0.4%

    Processor optimization removal or modification of security-critical code in AMD Zen allows an authorized attacker to disclose information locally.

  9. 5.5CVE-2026-84004EPSS 0.4%

    Processor optimization removal or modification of security-critical code in AMD Zen allows an authorized attacker to disclose information locally.

  10. 5.5CVE-2026-83953EPSS 0.8%

    Improper neutralization of special elements used in a command ('command injection') in Github Copilot allows an authorized attacker to disclose information locally.

  11. 7.0CVE-2026-83894EPSS 0.3%

    Use after free in RPC Runtime allows an authorized attacker to elevate privileges locally.

  12. 7.5CVE-2026-83684EPSS 1.0%

    Buffer over-read in Windows iSCSI Target Service allows an unauthorized attacker to disclose information over a network.

  13. 7.8CVE-2026-83563EPSS 0.5%

    Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally.

  14. 8.1CVE-2026-81384EPSS 0.7%

    Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network.

  15. 9.0CVE-2026-80095EPSS 0.8%

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  16. 7.5CVE-2026-80094EPSS 0.5%

    Use after free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network.

  17. 8.1CVE-2026-72998EPSS 0.7%

    Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

  18. 7.5CVE-2026-70240EPSS 1.1%

    Missing release of memory after effective lifetime in Windows Kerberos allows an unauthorized attacker to deny service over a network.

  19. 7.0CVE-2026-70231EPSS 0.3%

    Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.

  20. 7.8CVE-2026-70182EPSS 0.3%

    Weak authentication in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

  21. 7.0CVE-2026-70120EPSS 0.3%

    Use after free in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges locally.

  22. 8.8CVE-2026-70094EPSS 0.7%

    Untrusted search path in Visual Studio Code allows an unauthorized attacker to execute code over a network.

  23. 8.7CVE-2026-70003EPSS 0.3%

    Improper verification of cryptographic signature in JDBC Driver for SQL Server allows an unauthorized attacker to bypass a security feature over a network.

  24. 7.5CVE-2026-69901EPSS 0.4%

    Origin validation error in Microsoft Teams for Android allows an unauthorized attacker to perform spoofing over a network.

  25. 7.0CVE-2026-69565EPSS 0.3%

    Use after free in Remote Desktop Gateway Service allows an authorized attacker to execute code locally.

  26. 7.4CVE-2026-69327EPSS 0.3%

    Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code locally.

  27. 6.5CVE-2026-68783EPSS 1.1%

    Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

  28. 8.8CVE-2026-67646EPSS 1.0%

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  29. 8.8CVE-2026-67637EPSS 0.8%

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  30. 8.8CVE-2026-67632EPSS 0.9%

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  31. 8.8CVE-2026-67391EPSS 0.9%

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  32. 8.8CVE-2026-67387EPSS 1.0%

    Untrusted pointer dereference in SQL Server allows an authorized attacker to elevate privileges over a network.

  33. 6.5CVE-2026-67382EPSS 1.1%

    Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

  34. 8.8CVE-2026-67375EPSS 0.9%

    Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

  35. 8.8CVE-2026-67374EPSS 0.8%

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  36. 8.8CVE-2026-67372EPSS 0.8%

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  37. 8.1CVE-2026-66813EPSS 0.7%

    Out-of-bounds read in SQL Server allows an unauthorized attacker to elevate privileges over a network.

  38. 9.8CVE-2026-66801EPSS 1.1%

    Heap-based buffer overflow in Xbox allows an unauthorized attacker to execute code over a network.

  39. 7.4CVE-2026-62903EPSS 0.6%

    Authentication bypass by capture-replay in SQL Server allows an unauthorized attacker to disclose information over a network.

  40. 6.2CVE-2026-54437EPSS 0.2%

    Improper Input Validation in the io-char library's DCMD_CHR_TCINJECTC devctl() handler could allow an attacker with local access to cause data tampering in the memory input buffer of the Character I/O device driver.

  41. 7.4CVE-2026-54436EPSS 0.1%

    Heap-based Buffer Overflow in the io-char library's DCMD_CHR_WAITINFO devctl() handler could allow an attacker with local access to cause data tampering, arbitrary code execution, or a crash in the Character I/O device driver.

  42. 8.4CVE-2026-40275EPSS 0.1%

    Heap-based Buffer Overflow in the DCMD_PROC_EVENT handler of the procnto could allow an attacker with local access to cause an information disclosure, data tampering or a crash of the QNX Neutrino kernel.

  43. 4.0CVE-2026-40274EPSS 0.2%

    Invalid Pointer Reference in the TimerSettime() system call could allow an attacker with local access to arm a crafted timer event which can cause an information disclosure in the QNX Neutrino kernel.

  44. 4.0CVE-2026-40273EPSS 0.1%

    Improper Input Validation in a procnto message handler could allow an attacker with local access to send a crafted message which can cause an information disclosure in the QNX Neutrino kernel

  45. 5.6CVE-2026-18448EPSS 0.1%

    EDK2 contains a vulnerability in BIOS where a privileged attacker may cause “Exposure of Sensitive Information during Transient Execution” by local access. Successful exploitation of this vulnerability may result in disclosure of SMRAM con…

  46. 7.0CVE-2026-14968EPSS 0.1%

    EDK2 contains vulnerabilities in BIOS where skilled and privileged users or attackers may cause “Out-of-bounds Write” by local access. Successful exploitation of this vulnerability could compromise SMM handler integrity, cause system insta…

  47. –CVE-2026-126136EPSS 0.2%

    For Exchange accounts using EWS or Microsoft Graph with OAuth2 authentication, Thunderbird sent the OAuth2 access token to the server even when the configured server URL used unencrypted HTTP. An attacker able to observe network traffic co…

  48. –CVE-2026-126135EPSS 0.2%

    If an attacker was able to perform a man-in-the-middle attack on an SMTP or POP3 server connection using STARTTLS, the attacker could inject server responses before the TLS handshake completed. Thunderbird would process these responses aft…

  49. –CVE-2026-126134EPSS 0.2%

    Thunderbird allowed feed subscriptions to file: URLs that point to a network share. If a user was tricked into subscribing to such a URL, Thunderbird connected to the attacker's server when fetching the feed. Windows then sent the user's N…

  50. –CVE-2026-126133EPSS 0.2%

    When a CalDAV or ICS calendar was accessed through an HTTP proxy that requested authentication, Thunderbird could answer the proxy with the calendar server's username and password. This affected both setting up a new calendar and syncing e…