cve.bz

New CVEs this week, the last 7 days, newest first, page 66

Filter

The new CVEs published in the last 7 days, newest first, with CVSS, EPSS, CISA KEV and public exploits for each. Refreshed every few minutes. Narrow it: in CISA KEV · critical. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, Patch Tuesday

  1. 8.0CVE-2026-109457EPSS 0.8%

    Improper neutralization of special elements used in an os command ('os command injection') in Azure CLI allows an authorized attacker to execute code over a network.

  2. 4.6CVE-2026-109456EPSS 0.5%

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  3. 6.5CVE-2026-109455EPSS 0.9%

    Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

  4. 9.0CVE-2026-109454EPSS 0.8%

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  5. 6.5CVE-2026-108470EPSS 0.8%

    Insufficiently protected credentials in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to disclose information over a network.

  6. 6.8CVE-2026-108469EPSS 0.6%

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Authentication Library for JavaScript allows an unauthorized attacker to perform spoofing over a network.

  7. 5.9CVE-2026-108425EPSS 0.8%

    Out-of-bounds read in Windows DNS allows an unauthorized attacker to disclose information over a network.

  8. 6.5CVE-2026-108424EPSS 1.0%

    Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.

  9. 4.7CVE-2026-108423EPSS 0.3%

    Out-of-bounds read in Windows WinHTTP allows an authorized attacker to disclose information locally.

  10. 7.5CVE-2026-108421EPSS 0.7%

    Out-of-bounds read in Windows File Server Resource Management Service allows an unauthorized attacker to elevate privileges over a network.

  11. 6.5CVE-2026-108419EPSS 1.0%

    Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

  12. 6.5CVE-2026-108418EPSS 1.0%

    Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

  13. 6.5CVE-2026-108417EPSS 1.0%

    Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

  14. 6.8CVE-2026-108416EPSS 0.4%

    Untrusted pointer dereference in Windows File Server Resource Management Service allows an unauthorized attacker to elevate privileges with a physical attack.

  15. 6.8CVE-2026-108415EPSS 0.4%

    Untrusted pointer dereference in Windows File Server Resource Management Service allows an unauthorized attacker to elevate privileges with a physical attack.

  16. 7.0CVE-2026-108414EPSS 0.3%

    Use after free in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally.

  17. 7.0CVE-2026-108413EPSS 0.3%

    Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

  18. 7.8CVE-2026-108412EPSS 0.3%

    Heap-based buffer overflow in Windows Redirected Drive Buffering allows an authorized attacker to elevate privileges locally.

  19. 8.8CVE-2026-108411EPSS 0.7%

    Heap-based buffer overflow in Windows ODBC Driver allows an unauthorized attacker to execute code over a network.

  20. 5.5CVE-2026-108410EPSS 0.4%

    Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.

  21. 5.5CVE-2026-108409EPSS 0.4%

    Exposure of sensitive system information to an unauthorized control sphere in Windows Overlay Filter allows an authorized attacker to disclose information locally.

  22. 5.5CVE-2026-108408EPSS 0.4%

    Out-of-bounds read in Windows Telephony Service allows an authorized attacker to disclose information locally.

  23. 7.8CVE-2026-108407EPSS 0.3%

    Out-of-bounds read in Windows GDI allows an authorized attacker to elevate privileges locally.

  24. 7.0CVE-2026-108406EPSS 0.3%

    Use after free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.

  25. 7.8CVE-2026-108405EPSS 0.3%

    Integer overflow or wraparound in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.

  26. 6.8CVE-2026-108404EPSS 0.4%

    Heap-based buffer overflow in Windows CD-ROM Driver allows an unauthorized attacker to execute code with a physical attack.

  27. 7.8CVE-2026-108403EPSS 0.4%

    Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

  28. 5.3CVE-2026-108402EPSS 0.5%

    Missing release of memory after effective lifetime in Windows Layer-2 Bridge Network Driver allows an unauthorized attacker to deny service over an adjacent network.

  29. 8.8CVE-2026-108401EPSS 1.0%

    Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.

  30. –CVE-2026-107496EPSS 0.1%

    Issue summary: Encrypting a CMS message to an EC certificate whose group order is 1 may cause CMS_encrypt() or CMS_encrypt_ex() to loop indefinitely. Impact summary: An attacker able to supply the recipient certificate to an application p…

  31. 7.0CVE-2026-105734EPSS 0.2%

    Incorrect permission assignment for critical resource in Azure Local allows an authorized attacker to elevate privileges locally.

  32. 5.3CVE-2026-105590EPSS 0.5%

    Improper certificate validation in Windows Active Directory Certificate Services allows an authorized attacker to bypass a security feature over a network.

  33. 7.0CVE-2026-105589EPSS 0.3%

    Use after free in Windows Wireless Networking allows an authorized attacker to elevate privileges locally.

  34. 6.4CVE-2026-105588EPSS 0.3%

    Missing authentication for critical function in Windows DHCP Server allows an authorized attacker to elevate privileges locally.

  35. 7.0CVE-2026-105587EPSS 0.3%

    Heap-based buffer overflow in Windows OLE DB allows an authorized attacker to elevate privileges locally.

  36. 7.0CVE-2026-105586EPSS 0.3%

    Null pointer dereference in Microsoft Windows SCSI Class System File allows an authorized attacker to elevate privileges locally.

  37. 5.5CVE-2026-105584EPSS 0.5%

    Use of externally-controlled format string in Windows Inventory Backup allows an authorized attacker to disclose information locally.

  38. 7.0CVE-2026-105583EPSS 0.3%

    Release of invalid pointer or reference in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

  39. 7.0CVE-2026-105582EPSS 0.3%

    Release of invalid pointer or reference in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

  40. 8.8CVE-2026-105581EPSS 0.4%

    Stack-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

  41. 7.8CVE-2026-105580EPSS 0.5%

    Heap-based buffer overflow in Windows Management Instrumentation allows an unauthorized attacker to execute code locally.

  42. 7.5CVE-2026-105579EPSS 1.0%

    Integer overflow or wraparound in Windows DNS allows an unauthorized attacker to disclose information over a network.

  43. 7.5CVE-2026-105578EPSS 0.6%

    Integer overflow or wraparound in Microsoft JScript allows an unauthorized attacker to execute code over a network.

  44. 7.8CVE-2026-105575EPSS 0.4%

    Access of resource using incompatible type ('type confusion') in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

  45. 7.0CVE-2026-105574EPSS 0.3%

    Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

  46. 7.8CVE-2026-105569EPSS 0.3%

    Out-of-bounds read in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

  47. 6.5CVE-2026-105568EPSS 1.1%

    Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network.

  48. 7.0CVE-2026-105567EPSS 0.3%

    Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

  49. 7.0CVE-2026-105566EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.

  50. 7.0CVE-2026-105565EPSS 0.3%

    Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.