By publication date

Exploited and new serious CVEs: September 2026

7,965 records · 32 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 13 of 80

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
21Monitor	CVE-2026-52307Proof of concept	An authenticated stored cross-site scripting (XSS) vulnerability in the Column Management component of ClassCMS 1CMS v5.6 allows attackers tCWE-79 RCE XSS	Medium5.4	—	0.2%	Sep 8, 2026
36Monitor	CVE-2026-75156No exploit	Apache Airflow FAB provider: FAB Azure AD OAuth: id_token issuer/audience not validated — cross-tenant authentication bypassapache · apache-airflow-providers-fab · CWE-346 Pre-auth Auth bypass	Critical9.1	—	0.3%	Sep 8, 2026
37Monitor	CVE-2026-78997No exploit	UC Browser for Android (package com.UCMobile.intl, version 13.7.8.1314) contains a Universal Cross-Site Scripting vulnerability that allows CWE-79 pre-auth RCE XSS	Critical9.3	—	0.3%	Sep 8, 2026
39Monitor	CVE-2026-79569No exploit	Movie_Recommend v1.0.0 was discovered to contain a SQL injection vulnerability in the sort parameter at /loadingmore.CWE-89 Pre-auth SQL injection	Critical9.8	—	0.4%	Sep 8, 2026
39Monitor	CVE-2026-79570No exploit	mfish-nocode-pro v1.0.0 was discovered to contain a SQL injection vulnerability in the tableName parameter at /sys/dbConnect/data.CWE-89 Pre-auth SQL injection	Critical9.8	—	0.4%	Sep 8, 2026
28Monitor	CVE-2026-82052No exploit	$regexFindAll may crash mongod server when byte-matching multi-byte UTF-8 charsmongodb · mongodb · CWE-617	High7.1	—	0.4%	Sep 8, 2026
30Monitor	CVE-2026-82053No exploit	Improper Session Handling in MongoDB Server LDAP Authorization Integration Leads to Incorrect Role Assignmentmongodb · mongodb · CWE-863 Broken access control (IDOR)	High7.6	—	0.4%	Sep 8, 2026
28Monitor	CVE-2026-82054No exploit	Uncontrolled Resource Consumption in MongoDB Server JSON Pointer Parser Leads to Denial of Servicemongodb · mongodb · CWE-770 Denial of service	High7.1	—	0.4%	Sep 8, 2026
28Monitor	CVE-2026-82055No exploit	Null Pointer Dereference in MongoDB Server 2dsphere Index Key Generation Leads to Denial of Servicemongodb · mongodb · CWE-476 Memory safety	High7.1	—	0.4%	Sep 8, 2026
28Monitor	CVE-2026-82057No exploit	Type Confusion in MongoDB Server WiredTiger Storage Engine via Custom Collection Configuration Leads to Persistent Denial of Servicemongodb · mongodb · CWE-843	High7.1	—	0.4%	Sep 8, 2026
28Monitor	CVE-2026-82058No exploit	Unhandled Exception in MongoDB Server JSON Schema Validation Error Generation Leads to Denial of Servicemongodb · mongodb · CWE-248	High7.1	—	0.4%	Sep 8, 2026
28Monitor	CVE-2026-82061No exploit	Use-After-Free in MongoDB Server Query Execution Memory Tracking Subsystem Leads to Denial of Servicemongodb · mongodb · CWE-416 Memory safety	High7.2	—	0.5%	Sep 8, 2026
28Monitor	CVE-2026-82062No exploit	Improper Authorization in MongoDB Server applyOps Command Allows Writes to Arbitrary Internal Storage Tables via Feature Gate Bypassmongodb · mongodb · CWE-863 Broken access control (IDOR)	High7.0	—	0.4%	Sep 8, 2026
34Monitor	CVE-2026-82064No exploit	Unauthenticated Denial of Service in MongoDB Server via Assertion Failure in Read Concern Processing on Replica Set Membersmongodb · mongodb · CWE-617 Pre-auth Auth bypass	High8.7	—	0.5%	Sep 8, 2026
28Monitor	CVE-2026-82065No exploit	Insufficient Validation of Storage Configuration Options in MongoDB Server Leads to Persistent Denial of Service via Corrupted Metadatamongodb · mongodb · CWE-617	High7.1	—	0.4%	Sep 8, 2026
36Monitor	CVE-2026-82067No exploit	Improper Case Sensitivity Handling in MongoDB Server Configuration Validation May Cause Authorization to Remain Disabled at Startupmongodb · mongodb · CWE-178 Pre-auth	Critical9.2	—	0.5%	Sep 8, 2026
28Monitor	CVE-2026-82068No exploit	Persistent Fatal Assertion Crash in MongoDB Server via Crafted Retryable Write Commands Leads to Denial of Servicemongodb · mongodb · CWE-617	High7.1	—	0.4%	Sep 8, 2026
28Monitor	CVE-2026-82070No exploit	Insufficiently Protected Credentials in MongoDB Server Diagnostic Reporting Interfacemongodb · mongodb · CWE-522 Info leak	High7.1	—	0.3%	Sep 8, 2026
28Monitor	CVE-2026-82071No exploit	Insufficient Validation of Storage Engine Configuration Options in MongoDB Server Leads to Out-of-Bounds Writemongodb · mongodb · CWE-787 RCE Memory safety	High7.2	—	0.5%	Sep 8, 2026
28Monitor	CVE-2026-82073No exploit	Improper Validation in MongoDB Server Aggregation Framework Allows Authorization Bypass and Unauthorized Collection Access with Atlas Searchmongodb · mongodb · CWE-863 Broken access control (IDOR)	High7.1	—	0.3%	Sep 8, 2026
28Monitor	CVE-2026-82074No exploit	Incorrect Authorization in MongoDB Server Aggregation Framework Allows Unauthorized Read Access to Collection Datamongodb · mongodb · CWE-863 Broken access control (IDOR)	High7.1	—	0.3%	Sep 8, 2026
34Monitor	CVE-2026-82075No exploit	Uncontrolled Resource Consumption in MongoDB Sharded Cluster Router Allows Unauthenticated Denial of Servicemongodb · mongodb · CWE-770 Pre-auth Denial of service	High8.7	—	0.5%	Sep 8, 2026
28Monitor	CVE-2026-82076No exploit	Integer Overflow in Query Planner Leads to Unbounded Memory Allocation and Denial of Service in MongoDB Servermongodb · mongodb · CWE-190 Memory safety	High7.1	—	0.4%	Sep 8, 2026
37Monitor	CVE-2026-82533No exploit	DeepSeek Harness < 0.1.2-alpha.1 Authentication Bypass via Host Header Spoofingdeepseek · deepseek harness · CWE-807 pre-auth RCE Auth bypass	Critical9.4	—	1.2%	Sep 8, 2026
28Monitor	CVE-2026-50349No exploit	Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-362 Local privilege escalation Race condition	High7.0	—	0.2%	Sep 8, 2026
31Monitor	CVE-2026-56172No exploit	Windows VHD miniport driver Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1809 · CWE-416 Local privilege escalation Memory safety	High7.8	—	0.3%	Sep 8, 2026
31Monitor	CVE-2026-56177No exploit	Windows Server Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-416 Local privilege escalation Memory safety	High7.8	—	0.3%	Sep 8, 2026
30Monitor	CVE-2026-57098No exploit	Microsoft Remote Desktop App for Windows Information Disclosure Vulnerabilitymicrosoft · remote desktop client · CWE-347 Pre-auth Weak crypto	High7.5	—	0.6%	Sep 8, 2026
31Monitor	CVE-2026-58611No exploit	Xbox Gaming Services Elevation of Privilege Vulnerabilitymicrosoft · xbox gaming services · CWE-285 Local privilege escalation Broken access control (IDOR)	High7.8	—	0.3%	Sep 8, 2026
28Monitor	CVE-2026-62694No exploit	Windows Installer Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-416 Local privilege escalation Memory safety	High7.0	—	0.2%	Sep 8, 2026
31Monitor	CVE-2026-62697No exploit	Windows Push Notifications Elevation of Privilege Vulnerabilitymicrosoft · windows 10 21h2 · CWE-416 Local privilege escalation Memory safety	High7.8	—	0.3%	Sep 8, 2026
35Monitor	CVE-2026-62706No exploit	Microsoft Windows Media Foundation Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-121 pre-auth RCE Memory safety	High8.8	—	0.8%	Sep 8, 2026
30Monitor	CVE-2026-62759No exploit	Windows Netlogon Spoofing Vulnerabilitymicrosoft · windows 10 1607 · CWE-290 Pre-auth Auth bypass	High7.5	—	0.3%	Sep 8, 2026
35Monitor	CVE-2026-66814No exploit	Microsoft SQL Server Elevation of Privilege Vulnerabilitymicrosoft · sql server 2017 · CWE-1220	High8.8	—	0.7%	Sep 8, 2026
35Monitor	CVE-2026-66818No exploit	Microsoft SQL Server Elevation of Privilege Vulnerabilitymicrosoft · sql server 2017 · CWE-269	High8.8	—	0.7%	Sep 8, 2026
35Monitor	CVE-2026-66819No exploit	Microsoft SQL Server Elevation of Privilege Vulnerabilitymicrosoft · sql server 2017 · CWE-89 SQL injection	High8.8	—	0.9%	Sep 8, 2026
35Monitor	CVE-2026-66820No exploit	SQL Server Elevation of Privilege Vulnerabilitymicrosoft · sql server 2017 · CWE-89 SQL injection	High8.8	—	0.9%	Sep 8, 2026
35Monitor	CVE-2026-67368No exploit	Microsoft SQL Server Elevation of Privilege Vulnerabilitymicrosoft · sql server 2017 · CWE-59	High8.8	—	1.0%	Sep 8, 2026
35Monitor	CVE-2026-67370No exploit	Microsoft SQL Server Elevation of Privilege Vulnerabilitymicrosoft · sql server 2017 · CWE-89 SQL injection	High8.8	—	0.9%	Sep 8, 2026
35Monitor	CVE-2026-67373No exploit	Microsoft SQL Server Remote Code Execution Vulnerabilitymicrosoft · sql server 2025 · CWE-122 RCE Memory safety	High8.8	—	0.9%	Sep 8, 2026
30Monitor	CVE-2026-67376No exploit	Microsoft SQL Server Denial of Service Vulnerabilitymicrosoft · sql server 2017 · CWE-190 Pre-auth Memory safety Denial of service	High7.5	—	1.1%	Sep 8, 2026
36Monitor	CVE-2026-67378No exploit	Microsoft SQL Server Remote Code Execution Vulnerabilitymicrosoft · sql server 2019 · CWE-822 pre-auth RCE	Critical9.0	—	0.7%	Sep 8, 2026
34Monitor	CVE-2026-67379No exploit	Microsoft SQL Server Remote Code Execution Vulnerabilitymicrosoft · sql server 2019 · CWE-121 RCE Memory safety	High8.5	—	0.6%	Sep 8, 2026
35Monitor	CVE-2026-67380No exploit	Microsoft SQL Server Remote Code Execution Vulnerabilitymicrosoft · sql server 2017 · CWE-122 RCE Memory safety	High8.8	—	0.9%	Sep 8, 2026
35Monitor	CVE-2026-67381No exploit	Microsoft SQL Server Elevation of Privilege Vulnerabilitymicrosoft · sql server 2017 · CWE-122 Memory safety	High8.8	—	0.9%	Sep 8, 2026
35Monitor	CVE-2026-67384No exploit	Microsoft SQL Server Remote Code Execution Vulnerabilitymicrosoft · sql server 2017 · CWE-122 RCE Memory safety	High8.8	—	0.9%	Sep 8, 2026
35Monitor	CVE-2026-67385No exploit	Microsoft SQL Server Remote Code Execution Vulnerabilitymicrosoft · sql server 2017 · CWE-416 RCE Memory safety	High8.8	—	0.9%	Sep 8, 2026
35Monitor	CVE-2026-67388No exploit	Microsoft SQL Server Remote Code Execution Vulnerabilitymicrosoft · sql server 2017 · CWE-122 RCE Memory safety	High8.8	—	0.9%	Sep 8, 2026
39Monitor	CVE-2026-67631No exploit	Microsoft SQL Server Remote Code Execution Vulnerabilitymicrosoft · sql server 2017 · CWE-122 pre-auth RCE Memory safety	Critical9.8	—	0.9%	Sep 8, 2026
36Monitor	CVE-2026-67636No exploit	Microsoft SQL Server Remote Code Execution Vulnerabilitymicrosoft · sql server 2019 · CWE-125 pre-auth RCE Memory safety	Critical9.0	—	0.7%	Sep 8, 2026
35Monitor	CVE-2026-67638No exploit	Microsoft SQL Server Remote Code Execution Vulnerabilitymicrosoft · sql server 2025 · CWE-122 RCE Memory safety	High8.8	—	0.9%	Sep 8, 2026
35Monitor	CVE-2026-67639No exploit	Microsoft SQL Server Remote Code Execution Vulnerabilitymicrosoft · sql server 2017 · CWE-122 RCE Memory safety	High8.8	—	0.9%	Sep 8, 2026
35Monitor	CVE-2026-67642No exploit	Microsoft SQL Server Remote Code Execution Vulnerabilitymicrosoft · sql server 2025 · CWE-122 RCE Memory safety	High8.8	—	0.9%	Sep 8, 2026
39Monitor	CVE-2026-67643No exploit	Microsoft SQL Server Remote Code Execution Vulnerabilitymicrosoft · sql server 2022 · CWE-122 pre-auth RCE Memory safety	Critical9.8	—	0.9%	Sep 8, 2026
35Monitor	CVE-2026-68775No exploit	Microsoft SQL Server Remote Code Execution Vulnerabilitymicrosoft · sql server 2017 · CWE-122 RCE Memory safety	High8.8	—	0.9%	Sep 8, 2026
35Monitor	CVE-2026-68786No exploit	Microsoft SQL Server Remote Code Execution Vulnerabilitymicrosoft · sql server 2017 · CWE-122 RCE Memory safety	High8.8	—	0.9%	Sep 8, 2026
31Monitor	CVE-2026-68787No exploit	Microsoft SQL Server Remote Code Execution Vulnerabilitymicrosoft · sql server 2017 · CWE-122 RCE Memory safety	High7.8	—	0.3%	Sep 8, 2026
28Monitor	CVE-2026-68824No exploit	Connected User Experiences and Telemetry Elevation of Privilege Vulnerabilitymicrosoft · windows 10 21h2 · CWE-362 Local privilege escalation Race condition	High7.0	—	0.2%	Sep 8, 2026
28Monitor	CVE-2026-68825No exploit	Windows Bind Filter Driver Elevation of Privilege Vulnerabilitymicrosoft · windows 11 23h2 · CWE-416 Local privilege escalation Memory safety	High7.0	—	0.2%	Sep 8, 2026
32Monitor	CVE-2026-68827No exploit	Windows GDI+ Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 Memory safety	High8.0	—	0.7%	Sep 8, 2026
31Monitor	CVE-2026-68832No exploit	Windows NTFS Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-190 Local privilege escalation Memory safety	High7.8	—	0.3%	Sep 8, 2026
32Monitor	CVE-2026-68834No exploit	Windows NTFS Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-121 Memory safety	High8.0	—	0.7%	Sep 8, 2026
28Monitor	CVE-2026-68835No exploit	Windows Print Spooler Components Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-416 Memory safety	High7.1	—	0.5%	Sep 8, 2026
28Monitor	CVE-2026-68837No exploit	Windows File History Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-416 Local privilege escalation Memory safety	High7.0	—	0.2%	Sep 8, 2026
32Monitor	CVE-2026-68838No exploit	Windows NTFS Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-121 Memory safety	High8.0	—	0.7%	Sep 8, 2026
39Monitor	CVE-2026-68839No exploit	Windows USB Mass Storage Class Driver Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-20 pre-auth RCE	Critical9.8	—	1.0%	Sep 8, 2026
28Monitor	CVE-2026-68840No exploit	Windows USB Driver Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-362 Local privilege escalation Race condition	High7.0	—	0.2%	Sep 8, 2026
31Monitor	CVE-2026-68841No exploit	Windows NTFS Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 Local privilege escalation Memory safety	High7.8	—	0.3%	Sep 8, 2026
31Monitor	CVE-2026-68844No exploit	Windows Storage Spaces Controller Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 RCE Memory safety	High7.8	—	0.3%	Sep 8, 2026
31Monitor	CVE-2026-68845No exploit	Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 Local privilege escalation Memory safety	High7.8	—	0.3%	Sep 8, 2026
28Monitor	CVE-2026-68846No exploit	Windows Kernel Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-416 Memory safety	High7.1	—	0.5%	Sep 8, 2026
28Monitor	CVE-2026-68847No exploit	Connected User Experiences and Telemetry Elevation of Privilege Vulnerabilitymicrosoft · windows 10 21h2 · CWE-416 Local privilege escalation Memory safety	High7.0	—	0.2%	Sep 8, 2026
31Monitor	CVE-2026-68848No exploit	Windows Print Spooler Components Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 Local privilege escalation Memory safety	High7.8	—	0.3%	Sep 8, 2026
31Monitor	CVE-2026-68875No exploit	Windows NTFS Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-126 RCE	High7.8	—	0.3%	Sep 8, 2026
32Monitor	CVE-2026-68876No exploit	Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 Memory safety	High8.0	—	0.7%	Sep 8, 2026
31Monitor	CVE-2026-68877No exploit	Windows Storage Spaces Controller Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 RCE Memory safety	High7.8	—	0.3%	Sep 8, 2026
32Monitor	CVE-2026-68878No exploit	Windows Fast FAT Driver Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-121 Memory safety	High8.0	—	0.7%	Sep 8, 2026
28Monitor	CVE-2026-68884No exploit	Windows Kernel Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 Local privilege escalation Memory safety	High7.0	—	0.2%	Sep 8, 2026
30Monitor	CVE-2026-68887No exploit	Windows Message Queuing Queue Manager Denial of Service Vulnerabilitymicrosoft · windows 10 1607 · CWE-125 Pre-auth Memory safety Denial of service	High7.5	—	1.1%	Sep 8, 2026
28Monitor	CVE-2026-68893No exploit	Remote Desktop Licensing Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-416 Memory safety	High7.1	—	0.5%	Sep 8, 2026
32Monitor	CVE-2026-68894No exploit	Windows Error Reporting Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 Memory safety	High8.0	—	0.7%	Sep 8, 2026
31Monitor	CVE-2026-68896No exploit	Microsoft Windows Search Component Elevation of Privilege Vulnerabilitymicrosoft · windows 11 23h2 · CWE-36 Path traversal Local privilege escalation	High7.8	—	0.3%	Sep 8, 2026
31Monitor	CVE-2026-69265No exploit	Windows NTFS Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-125 Local privilege escalation Memory safety	High7.8	—	0.3%	Sep 8, 2026
35Monitor	CVE-2026-69266No exploit	Windows DHCP Server Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-190 pre-auth RCE Memory safety	High8.8	—	0.8%	Sep 8, 2026
35Monitor	CVE-2026-69268No exploit	Microsoft Office SharePoint Remote Code Execution Vulnerabilitymicrosoft · sharepoint server · CWE-284 RCE Broken access control (IDOR)	High8.8	—	0.7%	Sep 8, 2026
31Monitor	CVE-2026-69270No exploit	Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-20 Local privilege escalation	High7.8	—	0.3%	Sep 8, 2026
35Monitor	CVE-2026-69273No exploit	Microsoft Office SharePoint Remote Code Execution Vulnerabilitymicrosoft · sharepoint server · CWE-284 RCE Broken access control (IDOR)	High8.8	—	0.7%	Sep 8, 2026
28Monitor	CVE-2026-69274No exploit	Windows Win32k Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-416 Memory safety	High7.1	—	0.5%	Sep 8, 2026
28Monitor	CVE-2026-69279No exploit	Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1809 · CWE-416 Local privilege escalation Memory safety	High7.0	—	0.2%	Sep 8, 2026
28Monitor	CVE-2026-69280No exploit	Windows Push Notifications Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-416 Local privilege escalation Memory safety	High7.0	—	0.2%	Sep 8, 2026
28Monitor	CVE-2026-69281No exploit	Windows License Manager Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1809 · CWE-416 Local privilege escalation Memory safety	High7.0	—	0.2%	Sep 8, 2026
35Monitor	CVE-2026-69282No exploit	Microsoft Office SharePoint Remote Code Execution Vulnerabilitymicrosoft · sharepoint server · CWE-284 RCE Broken access control (IDOR)	High8.8	—	0.7%	Sep 8, 2026
31Monitor	CVE-2026-69283No exploit	Windows CD-ROM Driver Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 Local privilege escalation Memory safety	High7.8	—	0.3%	Sep 8, 2026
31Monitor	CVE-2026-69284No exploit	Windows DCOM Server Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 Local privilege escalation Memory safety	High7.8	—	0.3%	Sep 8, 2026
35Monitor	CVE-2026-69285No exploit	Microsoft Office Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-122 pre-auth RCE Memory safety	High8.8	—	0.8%	Sep 8, 2026
28Monitor	CVE-2026-69287No exploit	Windows Remote Desktop Services Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-416 Local privilege escalation Memory safety	High7.0	—	0.2%	Sep 8, 2026
31Monitor	CVE-2026-69289No exploit	Windows Setup Files Cleanup Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-59 Local privilege escalation	High7.8	—	0.3%	Sep 8, 2026
31Monitor	CVE-2026-69290No exploit	Windows Storage Spaces Controller Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-121 Local privilege escalation Memory safety	High7.8	—	0.3%	Sep 8, 2026
35Monitor	CVE-2026-69291No exploit	Windows Volume Manager Extension Driver Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 pre-auth RCE Memory safety	High8.8	—	0.8%	Sep 8, 2026
31Monitor	CVE-2026-69293No exploit	Windows Biometric Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-20 Local privilege escalation	High7.8	—	0.3%	Sep 8, 2026

CVE-2026-52307
21Monitor
An authenticated stored cross-site scripting (XSS) vulnerability in the Column Management component of ClassCMS 1CMS v5.6 allows attackers t
MediumCVSS 5.4Proof of conceptEPSS 0%
- RCE
- XSS
Sep 8, 2026
CVE-2026-75156
36Monitor
Apache Airflow FAB provider: FAB Azure AD OAuth: id_token issuer/audience not validated — cross-tenant authentication bypass
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
apache · apache-airflow-providers-fabSep 8, 2026
CVE-2026-78997
37Monitor
UC Browser for Android (package com.UCMobile.intl, version 13.7.8.1314) contains a Universal Cross-Site Scripting vulnerability that allows
CriticalCVSS 9.3No exploitEPSS 0%
- pre-auth RCE
- XSS
Sep 8, 2026
CVE-2026-79569
39Monitor
Movie_Recommend v1.0.0 was discovered to contain a SQL injection vulnerability in the sort parameter at /loadingmore.
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- SQL injection
Sep 8, 2026
CVE-2026-79570
39Monitor
mfish-nocode-pro v1.0.0 was discovered to contain a SQL injection vulnerability in the tableName parameter at /sys/dbConnect/data.
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- SQL injection
Sep 8, 2026
CVE-2026-82052
28Monitor
$regexFindAll may crash mongod server when byte-matching multi-byte UTF-8 chars
HighCVSS 7.1No exploitEPSS 0%
mongodb · mongodbSep 8, 2026
CVE-2026-82053
30Monitor
Improper Session Handling in MongoDB Server LDAP Authorization Integration Leads to Incorrect Role Assignment
HighCVSS 7.6No exploitEPSS 0%
- Broken access control (IDOR)
mongodb · mongodbSep 8, 2026
CVE-2026-82054
28Monitor
Uncontrolled Resource Consumption in MongoDB Server JSON Pointer Parser Leads to Denial of Service
HighCVSS 7.1No exploitEPSS 0%
- Denial of service
mongodb · mongodbSep 8, 2026
CVE-2026-82055
28Monitor
Null Pointer Dereference in MongoDB Server 2dsphere Index Key Generation Leads to Denial of Service
HighCVSS 7.1No exploitEPSS 0%
- Memory safety
mongodb · mongodbSep 8, 2026
CVE-2026-82057
28Monitor
Type Confusion in MongoDB Server WiredTiger Storage Engine via Custom Collection Configuration Leads to Persistent Denial of Service
HighCVSS 7.1No exploitEPSS 0%
mongodb · mongodbSep 8, 2026
CVE-2026-82058
28Monitor
Unhandled Exception in MongoDB Server JSON Schema Validation Error Generation Leads to Denial of Service
HighCVSS 7.1No exploitEPSS 0%
mongodb · mongodbSep 8, 2026
CVE-2026-82061
28Monitor
Use-After-Free in MongoDB Server Query Execution Memory Tracking Subsystem Leads to Denial of Service
HighCVSS 7.2No exploitEPSS 0%
- Memory safety
mongodb · mongodbSep 8, 2026
CVE-2026-82062
28Monitor
Improper Authorization in MongoDB Server applyOps Command Allows Writes to Arbitrary Internal Storage Tables via Feature Gate Bypass
HighCVSS 7.0No exploitEPSS 0%
- Broken access control (IDOR)
mongodb · mongodbSep 8, 2026
CVE-2026-82064
34Monitor
Unauthenticated Denial of Service in MongoDB Server via Assertion Failure in Read Concern Processing on Replica Set Members
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Auth bypass
mongodb · mongodbSep 8, 2026
CVE-2026-82065
28Monitor
Insufficient Validation of Storage Configuration Options in MongoDB Server Leads to Persistent Denial of Service via Corrupted Metadata
HighCVSS 7.1No exploitEPSS 0%
mongodb · mongodbSep 8, 2026
CVE-2026-82067
36Monitor
Improper Case Sensitivity Handling in MongoDB Server Configuration Validation May Cause Authorization to Remain Disabled at Startup
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
mongodb · mongodbSep 8, 2026
CVE-2026-82068
28Monitor
Persistent Fatal Assertion Crash in MongoDB Server via Crafted Retryable Write Commands Leads to Denial of Service
HighCVSS 7.1No exploitEPSS 0%
mongodb · mongodbSep 8, 2026
CVE-2026-82070
28Monitor
Insufficiently Protected Credentials in MongoDB Server Diagnostic Reporting Interface
HighCVSS 7.1No exploitEPSS 0%
- Info leak
mongodb · mongodbSep 8, 2026
CVE-2026-82071
28Monitor
Insufficient Validation of Storage Engine Configuration Options in MongoDB Server Leads to Out-of-Bounds Write
HighCVSS 7.2No exploitEPSS 0%
- RCE
- Memory safety
mongodb · mongodbSep 8, 2026
CVE-2026-82073
28Monitor
Improper Validation in MongoDB Server Aggregation Framework Allows Authorization Bypass and Unauthorized Collection Access with Atlas Search
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
mongodb · mongodbSep 8, 2026
CVE-2026-82074
28Monitor
Incorrect Authorization in MongoDB Server Aggregation Framework Allows Unauthorized Read Access to Collection Data
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
mongodb · mongodbSep 8, 2026
CVE-2026-82075
34Monitor
Uncontrolled Resource Consumption in MongoDB Sharded Cluster Router Allows Unauthenticated Denial of Service
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
mongodb · mongodbSep 8, 2026
CVE-2026-82076
28Monitor
Integer Overflow in Query Planner Leads to Unbounded Memory Allocation and Denial of Service in MongoDB Server
HighCVSS 7.1No exploitEPSS 0%
- Memory safety
mongodb · mongodbSep 8, 2026
CVE-2026-82533
37Monitor
DeepSeek Harness < 0.1.2-alpha.1 Authentication Bypass via Host Header Spoofing
CriticalCVSS 9.4No exploitEPSS 1%
- pre-auth RCE
- Auth bypass
deepseek · deepseek harnessSep 8, 2026
CVE-2026-50349
28Monitor
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Race condition
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-56172
31Monitor
Windows VHD miniport driver Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1809Sep 8, 2026
CVE-2026-56177
31Monitor
Windows Server Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-57098
30Monitor
Microsoft Remote Desktop App for Windows Information Disclosure Vulnerability
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Weak crypto
microsoft · remote desktop clientSep 8, 2026
CVE-2026-58611
31Monitor
Xbox Gaming Services Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Broken access control (IDOR)
microsoft · xbox gaming servicesSep 8, 2026
CVE-2026-62694
28Monitor
Windows Installer Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-62697
31Monitor
Windows Push Notifications Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 21h2Sep 8, 2026
CVE-2026-62706
35Monitor
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-62759
30Monitor
Windows Netlogon Spoofing Vulnerability
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Auth bypass
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-66814
35Monitor
Microsoft SQL Server Elevation of Privilege Vulnerability
HighCVSS 8.8No exploitEPSS 0%
microsoft · sql server 2017Sep 8, 2026
CVE-2026-66818
35Monitor
Microsoft SQL Server Elevation of Privilege Vulnerability
HighCVSS 8.8No exploitEPSS 0%
microsoft · sql server 2017Sep 8, 2026
CVE-2026-66819
35Monitor
Microsoft SQL Server Elevation of Privilege Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- SQL injection
microsoft · sql server 2017Sep 8, 2026
CVE-2026-66820
35Monitor
SQL Server Elevation of Privilege Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- SQL injection
microsoft · sql server 2017Sep 8, 2026
CVE-2026-67368
35Monitor
Microsoft SQL Server Elevation of Privilege Vulnerability
HighCVSS 8.8No exploitEPSS 1%
microsoft · sql server 2017Sep 8, 2026
CVE-2026-67370
35Monitor
Microsoft SQL Server Elevation of Privilege Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- SQL injection
microsoft · sql server 2017Sep 8, 2026
CVE-2026-67373
35Monitor
Microsoft SQL Server Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Memory safety
microsoft · sql server 2025Sep 8, 2026
CVE-2026-67376
30Monitor
Microsoft SQL Server Denial of Service Vulnerability
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Memory safety
- Denial of service
microsoft · sql server 2017Sep 8, 2026
CVE-2026-67378
36Monitor
Microsoft SQL Server Remote Code Execution Vulnerability
CriticalCVSS 9.0No exploitEPSS 0%
- pre-auth RCE
microsoft · sql server 2019Sep 8, 2026
CVE-2026-67379
34Monitor
Microsoft SQL Server Remote Code Execution Vulnerability
HighCVSS 8.5No exploitEPSS 0%
- RCE
- Memory safety
microsoft · sql server 2019Sep 8, 2026
CVE-2026-67380
35Monitor
Microsoft SQL Server Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Memory safety
microsoft · sql server 2017Sep 8, 2026
CVE-2026-67381
35Monitor
Microsoft SQL Server Elevation of Privilege Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- Memory safety
microsoft · sql server 2017Sep 8, 2026
CVE-2026-67384
35Monitor
Microsoft SQL Server Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Memory safety
microsoft · sql server 2017Sep 8, 2026
CVE-2026-67385
35Monitor
Microsoft SQL Server Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Memory safety
microsoft · sql server 2017Sep 8, 2026
CVE-2026-67388
35Monitor
Microsoft SQL Server Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Memory safety
microsoft · sql server 2017Sep 8, 2026
CVE-2026-67631
39Monitor
Microsoft SQL Server Remote Code Execution Vulnerability
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · sql server 2017Sep 8, 2026
CVE-2026-67636
36Monitor
Microsoft SQL Server Remote Code Execution Vulnerability
CriticalCVSS 9.0No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · sql server 2019Sep 8, 2026
CVE-2026-67638
35Monitor
Microsoft SQL Server Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Memory safety
microsoft · sql server 2025Sep 8, 2026
CVE-2026-67639
35Monitor
Microsoft SQL Server Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Memory safety
microsoft · sql server 2017Sep 8, 2026
CVE-2026-67642
35Monitor
Microsoft SQL Server Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Memory safety
microsoft · sql server 2025Sep 8, 2026
CVE-2026-67643
39Monitor
Microsoft SQL Server Remote Code Execution Vulnerability
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · sql server 2022Sep 8, 2026
CVE-2026-68775
35Monitor
Microsoft SQL Server Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Memory safety
microsoft · sql server 2017Sep 8, 2026
CVE-2026-68786
35Monitor
Microsoft SQL Server Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Memory safety
microsoft · sql server 2017Sep 8, 2026
CVE-2026-68787
31Monitor
Microsoft SQL Server Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
microsoft · sql server 2017Sep 8, 2026
CVE-2026-68824
28Monitor
Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Race condition
microsoft · windows 10 21h2Sep 8, 2026
CVE-2026-68825
28Monitor
Windows Bind Filter Driver Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 11 23h2Sep 8, 2026
CVE-2026-68827
32Monitor
Windows GDI+ Elevation of Privilege Vulnerability
HighCVSS 8.0No exploitEPSS 0%
- Memory safety
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-68832
31Monitor
Windows NTFS Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-68834
32Monitor
Windows NTFS Elevation of Privilege Vulnerability
HighCVSS 8.0No exploitEPSS 0%
- Memory safety
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-68835
28Monitor
Windows Print Spooler Components Elevation of Privilege Vulnerability
HighCVSS 7.1No exploitEPSS 0%
- Memory safety
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-68837
28Monitor
Windows File History Service Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-68838
32Monitor
Windows NTFS Elevation of Privilege Vulnerability
HighCVSS 8.0No exploitEPSS 0%
- Memory safety
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-68839
39Monitor
Windows USB Mass Storage Class Driver Remote Code Execution Vulnerability
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-68840
28Monitor
Windows USB Driver Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Race condition
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-68841
31Monitor
Windows NTFS Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-68844
31Monitor
Windows Storage Spaces Controller Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-68845
31Monitor
Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-68846
28Monitor
Windows Kernel Elevation of Privilege Vulnerability
HighCVSS 7.1No exploitEPSS 0%
- Memory safety
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-68847
28Monitor
Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 21h2Sep 8, 2026
CVE-2026-68848
31Monitor
Windows Print Spooler Components Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-68875
31Monitor
Windows NTFS Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-68876
32Monitor
Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
HighCVSS 8.0No exploitEPSS 0%
- Memory safety
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-68877
31Monitor
Windows Storage Spaces Controller Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-68878
32Monitor
Windows Fast FAT Driver Elevation of Privilege Vulnerability
HighCVSS 8.0No exploitEPSS 0%
- Memory safety
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-68884
28Monitor
Windows Kernel Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-68887
30Monitor
Windows Message Queuing Queue Manager Denial of Service Vulnerability
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Memory safety
- Denial of service
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-68893
28Monitor
Remote Desktop Licensing Service Elevation of Privilege Vulnerability
HighCVSS 7.1No exploitEPSS 0%
- Memory safety
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-68894
32Monitor
Windows Error Reporting Elevation of Privilege Vulnerability
HighCVSS 8.0No exploitEPSS 0%
- Memory safety
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-68896
31Monitor
Microsoft Windows Search Component Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Path traversal
- Local privilege escalation
microsoft · windows 11 23h2Sep 8, 2026
CVE-2026-69265
31Monitor
Windows NTFS Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-69266
35Monitor
Windows DHCP Server Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-69268
35Monitor
Microsoft Office SharePoint Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Broken access control (IDOR)
microsoft · sharepoint serverSep 8, 2026
CVE-2026-69270
31Monitor
Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-69273
35Monitor
Microsoft Office SharePoint Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Broken access control (IDOR)
microsoft · sharepoint serverSep 8, 2026
CVE-2026-69274
28Monitor
Windows Win32k Elevation of Privilege Vulnerability
HighCVSS 7.1No exploitEPSS 0%
- Memory safety
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-69279
28Monitor
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1809Sep 8, 2026
CVE-2026-69280
28Monitor
Windows Push Notifications Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-69281
28Monitor
Windows License Manager Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1809Sep 8, 2026
CVE-2026-69282
35Monitor
Microsoft Office SharePoint Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Broken access control (IDOR)
microsoft · sharepoint serverSep 8, 2026
CVE-2026-69283
31Monitor
Windows CD-ROM Driver Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-69284
31Monitor
Windows DCOM Server Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-69285
35Monitor
Microsoft Office Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · 365 appsSep 8, 2026
CVE-2026-69287
28Monitor
Windows Remote Desktop Services Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-69289
31Monitor
Windows Setup Files Cleanup Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-69290
31Monitor
Windows Storage Spaces Controller Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-69291
35Monitor
Windows Volume Manager Extension Driver Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-69293
31Monitor
Windows Biometric Service Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
microsoft · windows 10 1607Sep 8, 2026