cve.bz

New CVEs this week, the last 7 days, newest first, page 56

Filter

The new CVEs published in the last 7 days, newest first, with CVSS, EPSS, CISA KEV and public exploits for each. Refreshed every few minutes. Narrow it: in CISA KEV · critical. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, Patch Tuesday

  1. 7.0CVE-2026-119898EPSS 0.3%

    Null pointer dereference in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.

  2. 7.0CVE-2026-119895EPSS 0.3%

    Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

  3. 7.0CVE-2026-119894EPSS 0.3%

    Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

  4. 7.0CVE-2026-119893EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Audio Service allows an authorized attacker to elevate privileges locally.

  5. 7.8CVE-2026-119892EPSS 0.4%

    Incorrect authorization in Windows Installer allows an authorized attacker to elevate privileges locally.

  6. 5.3CVE-2026-119890EPSS 0.9%

    Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over a network.

  7. 6.5CVE-2026-119889EPSS 0.9%

    Out-of-bounds read in ActiveSyncProvider allows an unauthorized attacker to disclose information over a network.

  8. 7.0CVE-2026-119888EPSS 0.3%

    Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

  9. 6.5CVE-2026-119887EPSS 0.9%

    Use of uninitialized resource in Windows Installer allows an unauthorized attacker to disclose information over a network.

  10. 7.8CVE-2026-119886EPSS 0.4%

    Missing authentication for critical function in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

  11. 6.8CVE-2026-119885EPSS 0.4%

    Heap-based buffer overflow in Windows Storport Miniport Driver allows an unauthorized attacker to elevate privileges with a physical attack.

  12. 6.8CVE-2026-119884EPSS 0.4%

    Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.

  13. 3.3CVE-2026-119883EPSS 0.3%

    Improper authorization in Data Deduplication allows an authorized attacker to bypass a security feature locally.

  14. 5.3CVE-2026-119882EPSS 0.8%

    Exposure of sensitive system information to an unauthorized control sphere in Windows Remote Desktop Services allows an authorized attacker to disclose information over a network.

  15. 8.8CVE-2026-119881EPSS 0.8%

    Heap-based buffer overflow in Microsoft XPS Document Converter allows an unauthorized attacker to elevate privileges over a network.

  16. 7.5CVE-2026-119880EPSS 0.6%

    Heap-based buffer overflow in Microsoft XPS Document Converter allows an unauthorized attacker to execute code over a network.

  17. 7.0CVE-2026-119876EPSS 0.3%

    Heap-based buffer overflow in Windows USB Scanner Driver allows an authorized attacker to elevate privileges locally.

  18. 4.0CVE-2026-119875EPSS 0.3%

    Numeric truncation error in Windows Storport Miniport Driver allows an authorized attacker to disclose information with a physical attack.

  19. 7.0CVE-2026-119874EPSS 0.3%

    Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

  20. 7.0CVE-2026-119873EPSS 0.3%

    Use after free in Windows NetBIOS allows an authorized attacker to elevate privileges locally.

  21. 6.4CVE-2026-119872EPSS 0.3%

    Heap-based buffer overflow in Windows USB Driver allows an unauthorized attacker to elevate privileges with a physical attack.

  22. 6.4CVE-2026-119871EPSS 0.3%

    Use after free in Windows IP Translation Configuration Service allows an authorized attacker to elevate privileges locally.

  23. 7.0CVE-2026-119870EPSS 0.3%

    Untrusted pointer dereference in Windows SMB Client allows an authorized attacker to elevate privileges locally.

  24. 6.4CVE-2026-119869EPSS 0.3%

    Use after free in Windows Failover Cluster allows an authorized attacker to elevate privileges locally.

  25. 7.0CVE-2026-119868EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.

  26. 5.3CVE-2026-119867EPSS 0.4%

    Improper verification of cryptographic signature in Windows Installer allows an unauthorized attacker to bypass a security feature over a network.

  27. 7.0CVE-2026-119866EPSS 0.3%

    Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

  28. 7.0CVE-2026-119865EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.

  29. 8.8CVE-2026-119862EPSS 0.3%

    Out-of-bounds read in Windows Input System allows an authorized attacker to elevate privileges locally.

  30. 7.0CVE-2026-119861EPSS 0.3%

    Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally.

  31. 7.0CVE-2026-119860EPSS 0.3%

    Use after free in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally.

  32. 7.0CVE-2026-119859EPSS 0.3%

    Use after free in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally.

  33. 7.5CVE-2026-119858EPSS 0.7%

    Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  34. 5.5CVE-2026-119857EPSS 0.4%

    Buffer over-read in Windows Kernel allows an authorized attacker to disclose information locally.

  35. 5.5CVE-2026-119856EPSS 0.5%

    Exposure of sensitive system information to an unauthorized control sphere in Windows Win32K allows an authorized attacker to disclose information locally.

  36. 5.5CVE-2026-119855EPSS 0.4%

    Buffer over-read in Windows COM+ Event System Service allows an authorized attacker to disclose information locally.

  37. 7.8CVE-2026-119853EPSS 0.5%

    Untrusted search path in Windows Remote Access API allows an authorized attacker to elevate privileges locally.

  38. 6.7CVE-2026-119852EPSS 0.3%

    Missing authorization in Windows Installer allows an authorized attacker to elevate privileges locally.

  39. 7.0CVE-2026-119851EPSS 0.2%

    Time-of-check time-of-use (toctou) race condition in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.

  40. 7.0CVE-2026-119849EPSS 0.3%

    Stack-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to execute code locally.

  41. 5.3CVE-2026-119848EPSS 0.8%

    Improper input validation in Windows Message Queuing allows an authorized attacker to deny service over a network.

  42. 7.8CVE-2026-119847EPSS 0.3%

    Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.

  43. 7.8CVE-2026-119846EPSS 0.4%

    Out-of-bounds read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.

  44. 7.0CVE-2026-119844EPSS 0.3%

    Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

  45. 4.7CVE-2026-119841EPSS 0.3%

    Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to disclose information locally.

  46. 6.3CVE-2026-119840EPSS 0.3%

    Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

  47. 8.8CVE-2026-119839EPSS 0.8%

    Untrusted search path in Remote Desktop Client allows an unauthorized attacker to elevate privileges over a network.

  48. 4.7CVE-2026-119838EPSS 0.3%

    Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.

  49. 7.5CVE-2026-119837EPSS 0.6%

    Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

  50. 4.7CVE-2026-119836EPSS 0.4%

    Use after free in Windows Management Services allows an authorized attacker to disclose information locally.