cve.bz

New CVEs this week, the last 7 days, newest first, page 57

Filter

The new CVEs published in the last 7 days, newest first, with CVSS, EPSS, CISA KEV and public exploits for each. Refreshed every few minutes. Narrow it: in CISA KEV · critical. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, Patch Tuesday

  1. 7.0CVE-2026-119835EPSS 0.3%

    Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally.

  2. 7.8CVE-2026-119834EPSS 0.4%

    Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.

  3. 7.0CVE-2026-119833EPSS 0.3%

    Untrusted pointer dereference in Windows Message Queuing allows an authorized attacker to elevate privileges locally.

  4. 5.9CVE-2026-119832EPSS 0.3%

    Improper access control in Windows BitLocker allows an authorized attacker to bypass a security feature with a physical attack.

  5. 7.0CVE-2026-119831EPSS 0.3%

    Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

  6. 6.8CVE-2026-119830EPSS 0.5%

    Heap-based buffer overflow in Windows Storport Miniport Driver allows an unauthorized attacker to elevate privileges with a physical attack.

  7. 6.8CVE-2026-119829EPSS 0.4%

    Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to elevate privileges with a physical attack.

  8. 7.0CVE-2026-119827EPSS 0.3%

    Missing authorization in Windows Win32K allows an authorized attacker to elevate privileges locally.

  9. 7.8CVE-2026-119826EPSS 0.4%

    Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

  10. 5.5CVE-2026-119825EPSS 0.5%

    Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally.

  11. 8.8CVE-2026-119824EPSS 0.8%

    Missing authentication for critical function in Remote Desktop Client allows an unauthorized attacker to perform tampering over a network.

  12. 6.8CVE-2026-119823EPSS 0.5%

    Heap-based buffer overflow in Windows Storport Miniport Driver allows an unauthorized attacker to execute code with a physical attack.

  13. 7.0CVE-2026-119822EPSS 0.4%

    Exposure of sensitive system information to an unauthorized control sphere in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

  14. 7.8CVE-2026-119821EPSS 0.3%

    Improper authorization in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.

  15. 7.8CVE-2026-119818EPSS 0.4%

    Incorrect authorization in Windows Text Services Framework allows an authorized attacker to elevate privileges locally.

  16. 7.8CVE-2026-119817EPSS 0.4%

    Double free in Windows Shell allows an authorized attacker to elevate privileges locally.

  17. 7.8CVE-2026-119816EPSS 0.4%

    Heap-based buffer overflow in Windows Microsoft Account Sign-in Assistant allows an authorized attacker to elevate privileges locally.

  18. 7.0CVE-2026-119405EPSS 0.3%

    Use after free in Windows Backup Engine allows an authorized attacker to elevate privileges locally.

  19. 5.9CVE-2026-119404EPSS 0.7%

    Improper access control in Windows Client for NFS allows an unauthorized attacker to bypass a security feature over a network.

  20. 7.0CVE-2026-119403EPSS 0.3%

    Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

  21. 7.0CVE-2026-119402EPSS 0.3%

    Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

  22. 7.0CVE-2026-119401EPSS 0.3%

    Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

  23. 7.0CVE-2026-119399EPSS 0.2%

    Double free in Windows Installer allows an authorized attacker to elevate privileges locally.

  24. 7.8CVE-2026-119398EPSS 0.3%

    Time-of-check time-of-use (toctou) race condition in Windows Installer allows an authorized attacker to elevate privileges locally.

  25. 7.0CVE-2026-119397EPSS 0.3%

    Use after free in Kernel Transaction Manager allows an authorized attacker to elevate privileges locally.

  26. 6.5CVE-2026-119396EPSS 0.3%

    Improper access control in Windows Remote Access API allows an authorized attacker to perform tampering locally.

  27. 4.0CVE-2026-119395EPSS 0.4%

    Out-of-bounds read in Storport.sys Driver allows an authorized attacker to disclose information with a physical attack.

  28. 6.6CVE-2026-119394EPSS 0.5%

    Heap-based buffer overflow in Windows Enhanced Storage allows an authorized attacker to execute code with a physical attack.

  29. 7.8CVE-2026-119393EPSS 0.4%

    Stack-based buffer overflow in Windows Credential Manager allows an authorized attacker to elevate privileges locally.

  30. 8.8CVE-2026-119392EPSS 0.9%

    Heap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized attacker to elevate privileges over a network.

  31. 7.8CVE-2026-119391EPSS 0.4%

    Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

  32. 7.8CVE-2026-119390EPSS 0.4%

    Heap-based buffer overflow in Remote Desktop Client allows an authorized attacker to execute code locally.

  33. 7.0CVE-2026-119389EPSS 0.4%

    Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.

  34. 7.0CVE-2026-119388EPSS 0.3%

    Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally.

  35. 7.0CVE-2026-119387EPSS 0.3%

    Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally.

  36. 7.0CVE-2026-119386EPSS 0.3%

    Use after free in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.

  37. 4.7CVE-2026-119385EPSS 0.3%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorized attacker to deny service locally.

  38. 6.6CVE-2026-119383EPSS 0.4%

    Use of uninitialized resource in Windows Smart Card allows an authorized attacker to elevate privileges with a physical attack.

  39. 7.8CVE-2026-119382EPSS 0.4%

    Heap-based buffer overflow in Windows TPM allows an authorized attacker to elevate privileges locally.

  40. 7.5CVE-2026-118750EPSS 1.1%

    Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

  41. 7.5CVE-2026-118749EPSS 1.1%

    Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.

  42. 7.5CVE-2026-118748EPSS 1.1%

    Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

  43. 7.5CVE-2026-118747EPSS 1.3%

    Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

  44. 6.8CVE-2026-118746EPSS 0.7%

    Not failing securely ('failing open') in .NET allows an unauthorized attacker to bypass a security feature over a network.

  45. 8.8CVE-2026-118745EPSS 0.9%

    Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

  46. 8.6CVE-2026-118742EPSS 0.7%

    Incorrect permission assignment for critical resource in Azure Front Door (AFD) allows an unauthorized attacker to elevate privileges over a network.

  47. 8.1CVE-2026-118741EPSS 0.8%

    Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.

  48. 9.1CVE-2026-118740EPSS 0.9%

    Missing authorization in Aspire allows an unauthorized attacker to bypass a security feature over a network.

  49. 6.5CVE-2026-118739EPSS 0.7%

    Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network.

  50. 8.1CVE-2026-118737EPSS 0.7%

    Improper verification of cryptographic signature in Windows Remote Procedure Call Runtime allows an unauthorized attacker to execute code over a network.