By publication date

Exploited and new serious CVEs: November 2026

3,408 records · 10 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 22 of 35

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
28Monitor	CVE-2026-82518No exploit	Akamai CLI before 2.0.6 Path Traversal via cli.json Command Namesakamai · akamai cli · CWE-22 Pre-auth Path traversal	High7.1	—	—	1 day ago
34Monitor	CVE-2026-92684No exploit	Aggregation queries can bypass authentication restrictions in @neo4j/graphqlneo4j · @neo4j/graphql · CWE-306 Pre-auth Auth bypass	High8.7	—	—	1 day ago
29Monitor	CVE-2026-97401No exploit	In Kura versions <= 5.6.2, `CommandCloudApp.execute()` extracts a caller-supplied ZIP archive into a caller-supplied directory inside the Kueclipse foundation · eclipse kura · CWE-73 RCE Path traversal	High7.4	—	—	1 day ago
35Monitor	CVE-2026-97891No exploit	In Eclipse Kura version 5.0.0 to 5.6.2, the Web Console allocates a new HTTP session for every request to its built-in authentication endpoieclipse foundation · eclipse kura · CWE-400 Pre-auth Denial of service	High8.8	—	—	1 day ago
31Monitor	CVE-2026-125323No exploit	pgEdge Control Plane generates pg_hba.conf with trust authentication for local and loopback connectionspgedge · control-plane · CWE-306 Auth bypass Local privilege escalation	High7.8	—	—	1 day ago
33Monitor	CVE-2026-125343No exploit	Buffer overflow in Compositing in Google Chrome prior to 157.0.8103.50 allowed a remote attacker who had compromised the renderer process togoogle · chrome · CWE-122 pre-auth RCE Memory safety	High8.3	—	—	1 day ago
35Monitor	CVE-2026-125344No exploit	Type confusion in V8 in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary code inside the sandbox via a crgoogle · chrome · CWE-843 pre-auth RCE	High8.8	—	—	1 day ago
38Monitor	CVE-2026-125347No exploit	Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.50 allowed a remote attacker leveraging social engineering to exegoogle · chrome · CWE-863 pre-auth RCE Broken access control (IDOR)	Critical9.6	—	—	1 day ago
35Monitor	CVE-2026-125348No exploit	Out of bounds write in GPU in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to potentially execute arbitrary code outside tgoogle · chrome · CWE-787 pre-auth RCE Memory safety	High8.8	—	—	1 day ago
65This week	CVE-2026-125350Weaponized	Use after free in XML in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary code inside the sandbox via a cgoogle · chrome · CWE-416 pre-auth RCE Memory safety	High8.8	KEV	—	1 day ago
34Monitor	CVE-2026-35500No exploit	Stack-based buffer overflow in the UEFI firmware for the Intel(R) Slim Bootloader within Ring 0: Bare Metal OS may allow an escalation of prCWE-121 Memory safety	High8.6	—	—	1 day ago
34Monitor	CVE-2026-40433No exploit	Heap-based buffer overflow for some Intel(R) PROSet Wireless Wi-Fi Software for Windows within Ring 0: Kernel may allow a denial of service.CWE-122 Pre-auth Memory safety	High8.5	—	—	1 day ago
34Monitor	CVE-2026-41221No exploit	Integer overflow in the UEFI firmware for the Intel(R) Slim Bootloader within Ring 0: Bare Metal OS may allow an escalation of privilege.CWE-190 Memory safety	High8.6	—	—	1 day ago
34Monitor	CVE-2026-41224No exploit	Out-of-bounds write in the UEFI firmware for the Intel(R) Slim Bootloader within Ring 0: Bare Metal OS may allow an escalation of privilege.CWE-787 Memory safety	High8.6	—	—	1 day ago
28Monitor	CVE-2026-42956No exploit	Out-of-bounds write for some Intel(R) Wireless Bluetooth(R) within Ring 0: Kernel may allow a denial of service.CWE-787 Pre-auth Memory safety	High7.1	—	—	1 day ago
28Monitor	CVE-2026-44382No exploit	Out-of-bounds read for some Intel(R) Wireless Bluetooth(R) within Ring 0: Kernel may allow a denial of service.CWE-125 Pre-auth Memory safety	High7.1	—	—	1 day ago
37Monitor	CVE-2026-44685No exploit	Authentication bypass by spoofing in the MigTD rebinding protocol for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: HyperviCWE-290 Auth bypass Local privilege escalation	Critical9.3	—	—	1 day ago
33Monitor	CVE-2026-50175No exploit	Untrusted pointer dereference in the FirmwareWakingVector for the Intel(R) Slim Bootloader within Ring 0: Bare Metal OS may allow an escalatCWE-822 Local privilege escalation	High8.4	—	—	1 day ago
32Monitor	CVE-2026-56432No exploit	Unintended proxy or intermediary ('confused deputy') in the MigTD signing for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0:CWE-441 Local privilege escalation	High8.2	—	—	1 day ago
34Monitor	CVE-2026-56435No exploit	Out-of-bounds write in the XmlCliCommonDxe for the Intel(R) Server Board D50DNP and Intel(R) Server Board M50FCP within Ring 0 UEFI may alloCWE-787 Local privilege escalation Memory safety	High8.7	—	—	1 day ago
34Monitor	CVE-2026-57882No exploit	Out-of-bounds write in the XmlCliCommonDxe for the Intel(R) Server Board D50DNP and Intel(R) Server Board M50FCP within Ring 0 UEFI may alloCWE-787 Local privilege escalation Memory safety	High8.7	—	—	1 day ago
34Monitor	CVE-2026-57890No exploit	Improper cleanup on thrown exception in the MigTD's SPDM responder for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: HypervCWE-460 Pre-auth	High8.7	—	—	1 day ago
34Monitor	CVE-2026-57891No exploit	Out-of-bounds write in the XmlCliCommonDxe for the Intel(R) Server Board D50DNP and Intel(R) Server Board M50FCP within Ring 0 UEFI may alloCWE-787 Local privilege escalation Memory safety	High8.7	—	—	1 day ago
35Monitor	CVE-2026-57892No exploit	Insufficient granularity of access control in the MigTD v2 policy evaluation engine for the Intel(R) TDX Migration Trust Domain (MigTD) withCWE-1220 Pre-auth	High8.8	—	—	1 day ago
33Monitor	CVE-2026-60138No exploit	Use of out-of-range pointer offset in the MigTD's virtio-vsock implementation for the Intel(R) TDX Migration Trust Domain (MigTD) within RinCWE-823 Local privilege escalation	High8.4	—	—	1 day ago
33Monitor	CVE-2026-60142No exploit	Write-what-where condition in the MigTD for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow an informatiCWE-123 Local privilege escalation	High8.4	—	—	1 day ago
36Monitor	CVE-2026-61473No exploit	Authentication bypass by capture-replay in the MigTD for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allowCWE-294 Auth bypass Local privilege escalation	Critical9.2	—	—	1 day ago
37Monitor	CVE-2026-61887No exploit	Missing critical step in authentication in the MigTD SPDM rebind implementation for the Intel(R) TDX Migration Trust Domain (MigTD) within RCWE-304 pre-auth RCE	Critical9.4	—	—	1 day ago
33Monitor	CVE-2026-62929No exploit	Expired pointer dereference in the MigTD's virtio-vsock implementation for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: HyCWE-825 Local privilege escalation	High8.4	—	—	1 day ago
28Monitor	CVE-2026-100204Proof of concept	HEIF Image Extensions Remote Code Execution Vulnerabilitymicrosoft · heif image extension · CWE-416 RCE Memory safety	High7.0	—	—	1 day ago
31Monitor	CVE-2026-100223No exploit	Windows NTFS Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-416 Local privilege escalation Memory safety	High7.8	—	—	1 day ago
32Monitor	CVE-2026-102219No exploit	Windows Modern Device Management (MDM) Remote Code Execution Vulnerabilitymicrosoft · windows 10 version 1809 · CWE-326 pre-auth RCE Weak crypto	High8.1	—	—	1 day ago
33Monitor	CVE-2026-102224No exploit	Azure CycleCloud Elevation of Privilege Vulnerabilitymicrosoft · azure cyclecloud 8.9.1 · CWE-78 RCE Command injection	High8.4	—	—	1 day ago
29Monitor	CVE-2026-102230No exploit	Visual Studio Code Information Disclosure Vulnerabilitymicrosoft · visual studio code · CWE-862 Pre-auth Broken access control (IDOR)	High7.4	—	—	1 day ago
34Monitor	CVE-2026-102236No exploit	Visual Studio Code Security Feature Bypass Vulnerabilitymicrosoft · visual studio code · CWE-1021	High8.6	—	—	1 day ago
28Monitor	CVE-2026-103571No exploit	Windows CNG Key Isolation Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-415 Local privilege escalation Memory safety	High7.0	—	—	1 day ago
28Monitor	CVE-2026-105017No exploit	Volume Shadow Copy Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-362 Local privilege escalation Race condition	High7.0	—	—	1 day ago
35Monitor	CVE-2026-105020No exploit	Windows Advanced Rasterization Platform Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1809 · CWE-122 Local privilege escalation Memory safety	High8.8	—	—	1 day ago
35Monitor	CVE-2026-105021No exploit	Windows Advanced Rasterization Platform Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1809 · CWE-122 Local privilege escalation Memory safety	High8.8	—	—	1 day ago
31Monitor	CVE-2026-105022No exploit	Windows Advanced Rasterization Platform Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1809 · CWE-416 Local privilege escalation Memory safety	High7.8	—	—	1 day ago
35Monitor	CVE-2026-105023No exploit	Windows Advanced Rasterization Platform Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1809 · CWE-122 Local privilege escalation Memory safety	High8.8	—	—	1 day ago
28Monitor	CVE-2026-105024No exploit	Windows Storage Spaces Controller Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-416 Local privilege escalation Memory safety	High7.0	—	—	1 day ago
31Monitor	CVE-2026-105025No exploit	Windows Advanced Rasterization Platform Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1809 · CWE-415 Local privilege escalation Memory safety	High7.8	—	—	1 day ago
35Monitor	CVE-2026-105026No exploit	Windows Advanced Rasterization Platform Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1809 · CWE-122 Local privilege escalation Memory safety	High8.8	—	—	1 day ago
31Monitor	CVE-2026-105028No exploit	Windows Win32k Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-125 Local privilege escalation Memory safety	High7.8	—	—	1 day ago
30Monitor	CVE-2026-105437No exploit	Heap-based Buffer Overflow in Gitgit · git · CWE-122 Pre-auth Memory safety	High7.5	—	—	1 day ago
35Monitor	CVE-2026-105490No exploit	Windows Advanced Rasterization Platform Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1809 · CWE-121 Local privilege escalation Memory safety	High8.8	—	—	1 day ago
35Monitor	CVE-2026-105491No exploit	Windows Advanced Rasterization Platform Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1809 · CWE-122 Local privilege escalation Memory safety	High8.8	—	—	1 day ago
35Monitor	CVE-2026-105493No exploit	Windows Advanced Rasterization Platform Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1809 · CWE-121 Local privilege escalation Memory safety	High8.8	—	—	1 day ago
31Monitor	CVE-2026-105494No exploit	Azure NFS mount helper (aznfs) Elevation of Privilege Vulnerabilitymicrosoft · aznfs · CWE-426 Local privilege escalation	High7.8	—	—	1 day ago
35Monitor	CVE-2026-105495No exploit	Windows Advanced Rasterization Platform Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1809 · CWE-122 Local privilege escalation Memory safety	High8.8	—	—	1 day ago
35Monitor	CVE-2026-105496No exploit	Windows Advanced Rasterization Platform Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1809 · CWE-415 Local privilege escalation Memory safety	High8.8	—	—	1 day ago
35Monitor	CVE-2026-105497No exploit	Windows Advanced Rasterization Platform Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1809 · CWE-122 Local privilege escalation Memory safety	High8.8	—	—	1 day ago
35Monitor	CVE-2026-105498No exploit	Windows Advanced Rasterization Platform Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1809 · CWE-122 Local privilege escalation Memory safety	High8.8	—	—	1 day ago
35Monitor	CVE-2026-105499No exploit	Windows Advanced Rasterization Platform Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1809 · CWE-122 Local privilege escalation Memory safety	High8.8	—	—	1 day ago
31Monitor	CVE-2026-105501No exploit	Windows Installer Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-863 Local privilege escalation Broken access control (IDOR)	High7.8	—	—	1 day ago
31Monitor	CVE-2026-105503No exploit	Windows Management Instrumentation Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-122 Local privilege escalation Memory safety	High7.8	—	—	1 day ago
28Monitor	CVE-2026-105504No exploit	Windows Kernel Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-416 Local privilege escalation Memory safety	High7.0	—	—	1 day ago
31Monitor	CVE-2026-105505No exploit	Microsoft Input Method Editor (IME) Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-23 Path traversal Local privilege escalation	High7.8	—	—	1 day ago
31Monitor	CVE-2026-105507No exploit	Windows Installer Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-122 RCE Local privilege escalation Memory safety	High7.8	—	—	1 day ago
28Monitor	CVE-2026-105509No exploit	Windows Resilient File System (ReFS) Elevation of Privilege Vulnerabilitymicrosoft · windows 11 version 26h1 · CWE-362 Local privilege escalation Race condition	High7.0	—	—	1 day ago
28Monitor	CVE-2026-105510No exploit	Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-416 Local privilege escalation Memory safety	High7.0	—	—	1 day ago
28Monitor	CVE-2026-105511No exploit	Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-362 Local privilege escalation Race condition	High7.0	—	—	1 day ago
30Monitor	CVE-2026-105512No exploit	Microsoft QUIC Denial of Service Vulnerabilitymicrosoft · windows 11 version 23h2 · CWE-191 Pre-auth Memory safety Denial of service	High7.5	—	—	1 day ago
28Monitor	CVE-2026-105513No exploit	Windows Kernel Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-763 Local privilege escalation	High7.0	—	—	1 day ago
30Monitor	CVE-2026-105515No exploit	Windows Message Queuing Denial of Service Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-126 Pre-auth Denial of service	High7.5	—	—	1 day ago
35Monitor	CVE-2026-105518No exploit	Windows iSCSI Remote Code Execution Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-416 pre-auth RCE Memory safety	High8.8	—	—	1 day ago
28Monitor	CVE-2026-105520No exploit	Windows DNS Elevation of Privilege Vulnerabilitymicrosoft · windows server 2016 · CWE-59	High7.2	—	—	1 day ago
28Monitor	CVE-2026-105522No exploit	Winlogon Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1809 · CWE-416 Local privilege escalation Memory safety	High7.0	—	—	1 day ago
31Monitor	CVE-2026-105524No exploit	Windows Management Instrumentation Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-1390 Auth bypass Local privilege escalation	High7.8	—	—	1 day ago
28Monitor	CVE-2026-105525No exploit	Windows Network Connection Broker Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-190 Local privilege escalation Memory safety	High7.0	—	—	1 day ago
28Monitor	CVE-2026-105526No exploit	Winsock Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-415 Local privilege escalation Memory safety	High7.0	—	—	1 day ago
31Monitor	CVE-2026-105528No exploit	Desktop Window Manager Elevation of Privilege Vulnerabilitymicrosoft · windows 11 version 23h2 · CWE-122 Local privilege escalation Memory safety	High7.8	—	—	1 day ago
28Monitor	CVE-2026-105529No exploit	Windows Storage Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-1390 Auth bypass Local privilege escalation	High7.0	—	—	1 day ago
31Monitor	CVE-2026-105532No exploit	Windows Installer Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-59 Local privilege escalation	High7.8	—	—	1 day ago
28Monitor	CVE-2026-105533No exploit	Windows COM Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-122 Local privilege escalation Memory safety	High7.0	—	—	1 day ago
35Monitor	CVE-2026-105534No exploit	Windows Storage Remote Code Execution Vulnerabilitymicrosoft · windows server 2016 · CWE-122 pre-auth RCE Memory safety	High8.8	—	—	1 day ago
28Monitor	CVE-2026-105540No exploit	Windows Error Reporting Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-669 Local privilege escalation	High7.0	—	—	1 day ago
31Monitor	CVE-2026-105541No exploit	Windows Audio Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-823 Local privilege escalation	High7.8	—	—	1 day ago
35Monitor	CVE-2026-105542No exploit	Windows NTFS Remote Code Execution Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-822 pre-auth RCE	High8.8	—	—	1 day ago
31Monitor	CVE-2026-105543No exploit	Windows Installer Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-476 Local privilege escalation Memory safety	High7.8	—	—	1 day ago
30Monitor	CVE-2026-105544No exploit	.NET Elevation of Privilege Vulnerabilitymicrosoft · .net 10.0 installed on linux · CWE-15 Local privilege escalation	High7.5	—	—	1 day ago
28Monitor	CVE-2026-105545No exploit	Windows Installer Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-362 RCE Local privilege escalation Race condition	High7.0	—	—	1 day ago
28Monitor	CVE-2026-105546No exploit	Windows Management Instrumentation Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-362 Local privilege escalation Race condition	High7.0	—	—	1 day ago
28Monitor	CVE-2026-105547No exploit	Windows Setup and Deployment Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1809 · CWE-122 Local privilege escalation Memory safety	High7.0	—	—	1 day ago
30Monitor	CVE-2026-105551No exploit	Windows NetBIOS Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-122 Pre-auth Memory safety	High7.5	—	—	1 day ago
28Monitor	CVE-2026-105553No exploit	Windows Filtering Platform (WFP) Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1809 · CWE-121 Local privilege escalation Memory safety	High7.0	—	—	1 day ago
28Monitor	CVE-2026-105554No exploit	Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-122 Local privilege escalation Memory safety	High7.0	—	—	1 day ago
30Monitor	CVE-2026-105558No exploit	Windows Deployment Services Remote Code Execution Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-122 RCE Memory safety	High7.5	—	—	1 day ago
28Monitor	CVE-2026-105560No exploit	Windows DHCP Server Remote Code Execution Vulnerabilitymicrosoft · windows server 2016 · CWE-122 RCE Memory safety	High7.2	—	—	1 day ago
30Monitor	CVE-2026-105561No exploit	Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-401 Pre-auth Denial of service	High7.5	—	—	1 day ago
28Monitor	CVE-2026-105565No exploit	Windows MIDI Service Module Elevation of Privileges Vulnerabilitymicrosoft · windows 11 version 24h2 · CWE-416 Local privilege escalation Memory safety	High7.0	—	—	1 day ago
28Monitor	CVE-2026-105566No exploit	Windows Kernel Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-362 Local privilege escalation Race condition	High7.0	—	—	1 day ago
28Monitor	CVE-2026-105567No exploit	Windows Print Spooler Components Elevation of Privilege Vulnerabilitymicrosoft · windows 11 version 24h2 · CWE-416 Local privilege escalation Memory safety	High7.0	—	—	1 day ago
31Monitor	CVE-2026-105569No exploit	Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1809 · CWE-125 Local privilege escalation Memory safety	High7.8	—	—	1 day ago
28Monitor	CVE-2026-105574No exploit	Windows MIDI Service Module Elevation of Privileges Vulnerabilitymicrosoft · windows 11 version 24h2 · CWE-416 Local privilege escalation Memory safety	High7.0	—	—	1 day ago
31Monitor	CVE-2026-105575No exploit	Windows DWM Core Library Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1809 · CWE-843 Local privilege escalation	High7.8	—	—	1 day ago
30Monitor	CVE-2026-105578No exploit	Microsoft JScript Remote Code Execution Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-190 pre-auth RCE Memory safety	High7.5	—	—	1 day ago
30Monitor	CVE-2026-105579No exploit	Windows DNS Information Disclosure Vulnerabilitymicrosoft · windows server 2016 · CWE-125 Pre-auth Memory safety	High7.5	—	—	1 day ago
31Monitor	CVE-2026-105580No exploit	Windows Management Instrumentation Remote Code Execution Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-122 RCE Memory safety	High7.8	—	—	1 day ago

CVE-2026-82518
28Monitor
Akamai CLI before 2.0.6 Path Traversal via cli.json Command Names
HighCVSS 7.1No exploit
- Pre-auth
- Path traversal
akamai · akamai cli1 day ago
CVE-2026-92684
34Monitor
Aggregation queries can bypass authentication restrictions in @neo4j/graphql
HighCVSS 8.7No exploit
- Pre-auth
- Auth bypass
neo4j · @neo4j/graphql1 day ago
CVE-2026-97401
29Monitor
In Kura versions <= 5.6.2, `CommandCloudApp.execute()` extracts a caller-supplied ZIP archive into a caller-supplied directory inside the Ku
HighCVSS 7.4No exploit
- RCE
- Path traversal
eclipse foundation · eclipse kura1 day ago
CVE-2026-97891
35Monitor
In Eclipse Kura version 5.0.0 to 5.6.2, the Web Console allocates a new HTTP session for every request to its built-in authentication endpoi
HighCVSS 8.8No exploit
- Pre-auth
- Denial of service
eclipse foundation · eclipse kura1 day ago
CVE-2026-125323
31Monitor
pgEdge Control Plane generates pg_hba.conf with trust authentication for local and loopback connections
HighCVSS 7.8No exploit
- Auth bypass
- Local privilege escalation
pgedge · control-plane1 day ago
CVE-2026-125343
33Monitor
Buffer overflow in Compositing in Google Chrome prior to 157.0.8103.50 allowed a remote attacker who had compromised the renderer process to
HighCVSS 8.3No exploit
- pre-auth RCE
- Memory safety
google · chrome1 day ago
CVE-2026-125344
35Monitor
Type confusion in V8 in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr
HighCVSS 8.8No exploit
- pre-auth RCE
google · chrome1 day ago
CVE-2026-125347
38Monitor
Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.50 allowed a remote attacker leveraging social engineering to exe
CriticalCVSS 9.6No exploit
- pre-auth RCE
- Broken access control (IDOR)
google · chrome1 day ago
CVE-2026-125348
35Monitor
Out of bounds write in GPU in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to potentially execute arbitrary code outside t
HighCVSS 8.8No exploit
- pre-auth RCE
- Memory safety
google · chrome1 day ago
CVE-2026-125350
65This week
Use after free in XML in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary code inside the sandbox via a c
HighCVSS 8.8KEVWeaponized
- pre-auth RCE
- Memory safety
google · chrome1 day ago
CVE-2026-35500
34Monitor
Stack-based buffer overflow in the UEFI firmware for the Intel(R) Slim Bootloader within Ring 0: Bare Metal OS may allow an escalation of pr
HighCVSS 8.6No exploit
- Memory safety
1 day ago
CVE-2026-40433
34Monitor
Heap-based buffer overflow for some Intel(R) PROSet Wireless Wi-Fi Software for Windows within Ring 0: Kernel may allow a denial of service.
HighCVSS 8.5No exploit
- Pre-auth
- Memory safety
1 day ago
CVE-2026-41221
34Monitor
Integer overflow in the UEFI firmware for the Intel(R) Slim Bootloader within Ring 0: Bare Metal OS may allow an escalation of privilege.
HighCVSS 8.6No exploit
- Memory safety
1 day ago
CVE-2026-41224
34Monitor
Out-of-bounds write in the UEFI firmware for the Intel(R) Slim Bootloader within Ring 0: Bare Metal OS may allow an escalation of privilege.
HighCVSS 8.6No exploit
- Memory safety
1 day ago
CVE-2026-42956
28Monitor
Out-of-bounds write for some Intel(R) Wireless Bluetooth(R) within Ring 0: Kernel may allow a denial of service.
HighCVSS 7.1No exploit
- Pre-auth
- Memory safety
1 day ago
CVE-2026-44382
28Monitor
Out-of-bounds read for some Intel(R) Wireless Bluetooth(R) within Ring 0: Kernel may allow a denial of service.
HighCVSS 7.1No exploit
- Pre-auth
- Memory safety
1 day ago
CVE-2026-44685
37Monitor
Authentication bypass by spoofing in the MigTD rebinding protocol for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervi
CriticalCVSS 9.3No exploit
- Auth bypass
- Local privilege escalation
1 day ago
CVE-2026-50175
33Monitor
Untrusted pointer dereference in the FirmwareWakingVector for the Intel(R) Slim Bootloader within Ring 0: Bare Metal OS may allow an escalat
HighCVSS 8.4No exploit
- Local privilege escalation
1 day ago
CVE-2026-56432
32Monitor
Unintended proxy or intermediary ('confused deputy') in the MigTD signing for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0:
HighCVSS 8.2No exploit
- Local privilege escalation
1 day ago
CVE-2026-56435
34Monitor
Out-of-bounds write in the XmlCliCommonDxe for the Intel(R) Server Board D50DNP and Intel(R) Server Board M50FCP within Ring 0 UEFI may allo
HighCVSS 8.7No exploit
- Local privilege escalation
- Memory safety
1 day ago
CVE-2026-57882
34Monitor
Out-of-bounds write in the XmlCliCommonDxe for the Intel(R) Server Board D50DNP and Intel(R) Server Board M50FCP within Ring 0 UEFI may allo
HighCVSS 8.7No exploit
- Local privilege escalation
- Memory safety
1 day ago
CVE-2026-57890
34Monitor
Improper cleanup on thrown exception in the MigTD's SPDM responder for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hyperv
HighCVSS 8.7No exploit
- Pre-auth
1 day ago
CVE-2026-57891
34Monitor
Out-of-bounds write in the XmlCliCommonDxe for the Intel(R) Server Board D50DNP and Intel(R) Server Board M50FCP within Ring 0 UEFI may allo
HighCVSS 8.7No exploit
- Local privilege escalation
- Memory safety
1 day ago
CVE-2026-57892
35Monitor
Insufficient granularity of access control in the MigTD v2 policy evaluation engine for the Intel(R) TDX Migration Trust Domain (MigTD) with
HighCVSS 8.8No exploit
- Pre-auth
1 day ago
CVE-2026-60138
33Monitor
Use of out-of-range pointer offset in the MigTD's virtio-vsock implementation for the Intel(R) TDX Migration Trust Domain (MigTD) within Rin
HighCVSS 8.4No exploit
- Local privilege escalation
1 day ago
CVE-2026-60142
33Monitor
Write-what-where condition in the MigTD for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow an informati
HighCVSS 8.4No exploit
- Local privilege escalation
1 day ago
CVE-2026-61473
36Monitor
Authentication bypass by capture-replay in the MigTD for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow
CriticalCVSS 9.2No exploit
- Auth bypass
- Local privilege escalation
1 day ago
CVE-2026-61887
37Monitor
Missing critical step in authentication in the MigTD SPDM rebind implementation for the Intel(R) TDX Migration Trust Domain (MigTD) within R
CriticalCVSS 9.4No exploit
- pre-auth RCE
1 day ago
CVE-2026-62929
33Monitor
Expired pointer dereference in the MigTD's virtio-vsock implementation for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hy
HighCVSS 8.4No exploit
- Local privilege escalation
1 day ago
CVE-2026-100204
28Monitor
HEIF Image Extensions Remote Code Execution Vulnerability
HighCVSS 7.0Proof of concept
- RCE
- Memory safety
microsoft · heif image extension1 day ago
CVE-2026-100223
31Monitor
Windows NTFS Elevation of Privilege Vulnerability
HighCVSS 7.8No exploit
- Local privilege escalation
- Memory safety
microsoft · windows 10 version 16071 day ago
CVE-2026-102219
32Monitor
Windows Modern Device Management (MDM) Remote Code Execution Vulnerability
HighCVSS 8.1No exploit
- pre-auth RCE
- Weak crypto
microsoft · windows 10 version 18091 day ago
CVE-2026-102224
33Monitor
Azure CycleCloud Elevation of Privilege Vulnerability
HighCVSS 8.4No exploit
- RCE
- Command injection
microsoft · azure cyclecloud 8.9.11 day ago
CVE-2026-102230
29Monitor
Visual Studio Code Information Disclosure Vulnerability
HighCVSS 7.4No exploit
- Pre-auth
- Broken access control (IDOR)
microsoft · visual studio code1 day ago
CVE-2026-102236
34Monitor
Visual Studio Code Security Feature Bypass Vulnerability
HighCVSS 8.6No exploit
microsoft · visual studio code1 day ago
CVE-2026-103571
28Monitor
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
HighCVSS 7.0No exploit
- Local privilege escalation
- Memory safety
microsoft · windows 10 version 16071 day ago
CVE-2026-105017
28Monitor
Volume Shadow Copy Elevation of Privilege Vulnerability
HighCVSS 7.0No exploit
- Local privilege escalation
- Race condition
microsoft · windows 10 version 16071 day ago
CVE-2026-105020
35Monitor
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
HighCVSS 8.8No exploit
- Local privilege escalation
- Memory safety
microsoft · windows 10 version 18091 day ago
CVE-2026-105021
35Monitor
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
HighCVSS 8.8No exploit
- Local privilege escalation
- Memory safety
microsoft · windows 10 version 18091 day ago
CVE-2026-105022
31Monitor
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
HighCVSS 7.8No exploit
- Local privilege escalation
- Memory safety
microsoft · windows 10 version 18091 day ago
CVE-2026-105023
35Monitor
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
HighCVSS 8.8No exploit
- Local privilege escalation
- Memory safety
microsoft · windows 10 version 18091 day ago
CVE-2026-105024
28Monitor
Windows Storage Spaces Controller Elevation of Privilege Vulnerability
HighCVSS 7.0No exploit
- Local privilege escalation
- Memory safety
microsoft · windows 10 version 16071 day ago
CVE-2026-105025
31Monitor
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
HighCVSS 7.8No exploit
- Local privilege escalation
- Memory safety
microsoft · windows 10 version 18091 day ago
CVE-2026-105026
35Monitor
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
HighCVSS 8.8No exploit
- Local privilege escalation
- Memory safety
microsoft · windows 10 version 18091 day ago
CVE-2026-105028
31Monitor
Windows Win32k Elevation of Privilege Vulnerability
HighCVSS 7.8No exploit
- Local privilege escalation
- Memory safety
microsoft · windows 10 version 16071 day ago
CVE-2026-105437
30Monitor
Heap-based Buffer Overflow in Git
HighCVSS 7.5No exploit
- Pre-auth
- Memory safety
git · git1 day ago
CVE-2026-105490
35Monitor
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
HighCVSS 8.8No exploit
- Local privilege escalation
- Memory safety
microsoft · windows 10 version 18091 day ago
CVE-2026-105491
35Monitor
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
HighCVSS 8.8No exploit
- Local privilege escalation
- Memory safety
microsoft · windows 10 version 18091 day ago
CVE-2026-105493
35Monitor
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
HighCVSS 8.8No exploit
- Local privilege escalation
- Memory safety
microsoft · windows 10 version 18091 day ago
CVE-2026-105494
31Monitor
Azure NFS mount helper (aznfs) Elevation of Privilege Vulnerability
HighCVSS 7.8No exploit
- Local privilege escalation
microsoft · aznfs1 day ago
CVE-2026-105495
35Monitor
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
HighCVSS 8.8No exploit
- Local privilege escalation
- Memory safety
microsoft · windows 10 version 18091 day ago
CVE-2026-105496
35Monitor
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
HighCVSS 8.8No exploit
- Local privilege escalation
- Memory safety
microsoft · windows 10 version 18091 day ago
CVE-2026-105497
35Monitor
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
HighCVSS 8.8No exploit
- Local privilege escalation
- Memory safety
microsoft · windows 10 version 18091 day ago
CVE-2026-105498
35Monitor
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
HighCVSS 8.8No exploit
- Local privilege escalation
- Memory safety
microsoft · windows 10 version 18091 day ago
CVE-2026-105499
35Monitor
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
HighCVSS 8.8No exploit
- Local privilege escalation
- Memory safety
microsoft · windows 10 version 18091 day ago
CVE-2026-105501
31Monitor
Windows Installer Elevation of Privilege Vulnerability
HighCVSS 7.8No exploit
- Local privilege escalation
- Broken access control (IDOR)
microsoft · windows 10 version 16071 day ago
CVE-2026-105503
31Monitor
Windows Management Instrumentation Elevation of Privilege Vulnerability
HighCVSS 7.8No exploit
- Local privilege escalation
- Memory safety
microsoft · windows 10 version 16071 day ago
CVE-2026-105504
28Monitor
Windows Kernel Elevation of Privilege Vulnerability
HighCVSS 7.0No exploit
- Local privilege escalation
- Memory safety
microsoft · windows 10 version 16071 day ago
CVE-2026-105505
31Monitor
Microsoft Input Method Editor (IME) Elevation of Privilege Vulnerability
HighCVSS 7.8No exploit
- Path traversal
- Local privilege escalation
microsoft · windows 10 version 16071 day ago
CVE-2026-105507
31Monitor
Windows Installer Elevation of Privilege Vulnerability
HighCVSS 7.8No exploit
- RCE
- Local privilege escalation
- Memory safety
microsoft · windows 10 version 16071 day ago
CVE-2026-105509
28Monitor
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
HighCVSS 7.0No exploit
- Local privilege escalation
- Race condition
microsoft · windows 11 version 26h11 day ago
CVE-2026-105510
28Monitor
Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability
HighCVSS 7.0No exploit
- Local privilege escalation
- Memory safety
microsoft · windows 10 version 16071 day ago
CVE-2026-105511
28Monitor
Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability
HighCVSS 7.0No exploit
- Local privilege escalation
- Race condition
microsoft · windows 10 version 16071 day ago
CVE-2026-105512
30Monitor
Microsoft QUIC Denial of Service Vulnerability
HighCVSS 7.5No exploit
- Pre-auth
- Memory safety
- Denial of service
microsoft · windows 11 version 23h21 day ago
CVE-2026-105513
28Monitor
Windows Kernel Elevation of Privilege Vulnerability
HighCVSS 7.0No exploit
- Local privilege escalation
microsoft · windows 10 version 16071 day ago
CVE-2026-105515
30Monitor
Windows Message Queuing Denial of Service Vulnerability
HighCVSS 7.5No exploit
- Pre-auth
- Denial of service
microsoft · windows 10 version 16071 day ago
CVE-2026-105518
35Monitor
Windows iSCSI Remote Code Execution Vulnerability
HighCVSS 8.8No exploit
- pre-auth RCE
- Memory safety
microsoft · windows 10 version 16071 day ago
CVE-2026-105520
28Monitor
Windows DNS Elevation of Privilege Vulnerability
HighCVSS 7.2No exploit
microsoft · windows server 20161 day ago
CVE-2026-105522
28Monitor
Winlogon Elevation of Privilege Vulnerability
HighCVSS 7.0No exploit
- Local privilege escalation
- Memory safety
microsoft · windows 10 version 18091 day ago
CVE-2026-105524
31Monitor
Windows Management Instrumentation Elevation of Privilege Vulnerability
HighCVSS 7.8No exploit
- Auth bypass
- Local privilege escalation
microsoft · windows 10 version 16071 day ago
CVE-2026-105525
28Monitor
Windows Network Connection Broker Elevation of Privilege Vulnerability
HighCVSS 7.0No exploit
- Local privilege escalation
- Memory safety
microsoft · windows 10 version 16071 day ago
CVE-2026-105526
28Monitor
Winsock Elevation of Privilege Vulnerability
HighCVSS 7.0No exploit
- Local privilege escalation
- Memory safety
microsoft · windows 10 version 16071 day ago
CVE-2026-105528
31Monitor
Desktop Window Manager Elevation of Privilege Vulnerability
HighCVSS 7.8No exploit
- Local privilege escalation
- Memory safety
microsoft · windows 11 version 23h21 day ago
CVE-2026-105529
28Monitor
Windows Storage Elevation of Privilege Vulnerability
HighCVSS 7.0No exploit
- Auth bypass
- Local privilege escalation
microsoft · windows 10 version 16071 day ago
CVE-2026-105532
31Monitor
Windows Installer Elevation of Privilege Vulnerability
HighCVSS 7.8No exploit
- Local privilege escalation
microsoft · windows 10 version 16071 day ago
CVE-2026-105533
28Monitor
Windows COM Elevation of Privilege Vulnerability
HighCVSS 7.0No exploit
- Local privilege escalation
- Memory safety
microsoft · windows 10 version 16071 day ago
CVE-2026-105534
35Monitor
Windows Storage Remote Code Execution Vulnerability
HighCVSS 8.8No exploit
- pre-auth RCE
- Memory safety
microsoft · windows server 20161 day ago
CVE-2026-105540
28Monitor
Windows Error Reporting Elevation of Privilege Vulnerability
HighCVSS 7.0No exploit
- Local privilege escalation
microsoft · windows 10 version 16071 day ago
CVE-2026-105541
31Monitor
Windows Audio Service Elevation of Privilege Vulnerability
HighCVSS 7.8No exploit
- Local privilege escalation
microsoft · windows 10 version 16071 day ago
CVE-2026-105542
35Monitor
Windows NTFS Remote Code Execution Vulnerability
HighCVSS 8.8No exploit
- pre-auth RCE
microsoft · windows 10 version 16071 day ago
CVE-2026-105543
31Monitor
Windows Installer Elevation of Privilege Vulnerability
HighCVSS 7.8No exploit
- Local privilege escalation
- Memory safety
microsoft · windows 10 version 16071 day ago
CVE-2026-105544
30Monitor
.NET Elevation of Privilege Vulnerability
HighCVSS 7.5No exploit
- Local privilege escalation
microsoft · .net 10.0 installed on linux1 day ago
CVE-2026-105545
28Monitor
Windows Installer Elevation of Privilege Vulnerability
HighCVSS 7.0No exploit
- RCE
- Local privilege escalation
- Race condition
microsoft · windows 10 version 16071 day ago
CVE-2026-105546
28Monitor
Windows Management Instrumentation Elevation of Privilege Vulnerability
HighCVSS 7.0No exploit
- Local privilege escalation
- Race condition
microsoft · windows 10 version 16071 day ago
CVE-2026-105547
28Monitor
Windows Setup and Deployment Elevation of Privilege Vulnerability
HighCVSS 7.0No exploit
- Local privilege escalation
- Memory safety
microsoft · windows 10 version 18091 day ago
CVE-2026-105551
30Monitor
Windows NetBIOS Elevation of Privilege Vulnerability
HighCVSS 7.5No exploit
- Pre-auth
- Memory safety
microsoft · windows 10 version 16071 day ago
CVE-2026-105553
28Monitor
Windows Filtering Platform (WFP) Elevation of Privilege Vulnerability
HighCVSS 7.0No exploit
- Local privilege escalation
- Memory safety
microsoft · windows 10 version 18091 day ago
CVE-2026-105554
28Monitor
Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability
HighCVSS 7.0No exploit
- Local privilege escalation
- Memory safety
microsoft · windows 10 version 16071 day ago
CVE-2026-105558
30Monitor
Windows Deployment Services Remote Code Execution Vulnerability
HighCVSS 7.5No exploit
- RCE
- Memory safety
microsoft · windows 10 version 16071 day ago
CVE-2026-105560
28Monitor
Windows DHCP Server Remote Code Execution Vulnerability
HighCVSS 7.2No exploit
- RCE
- Memory safety
microsoft · windows server 20161 day ago
CVE-2026-105561
30Monitor
Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability
HighCVSS 7.5No exploit
- Pre-auth
- Denial of service
microsoft · windows 10 version 16071 day ago
CVE-2026-105565
28Monitor
Windows MIDI Service Module Elevation of Privileges Vulnerability
HighCVSS 7.0No exploit
- Local privilege escalation
- Memory safety
microsoft · windows 11 version 24h21 day ago
CVE-2026-105566
28Monitor
Windows Kernel Elevation of Privilege Vulnerability
HighCVSS 7.0No exploit
- Local privilege escalation
- Race condition
microsoft · windows 10 version 16071 day ago
CVE-2026-105567
28Monitor
Windows Print Spooler Components Elevation of Privilege Vulnerability
HighCVSS 7.0No exploit
- Local privilege escalation
- Memory safety
microsoft · windows 11 version 24h21 day ago
CVE-2026-105569
31Monitor
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
HighCVSS 7.8No exploit
- Local privilege escalation
- Memory safety
microsoft · windows 10 version 18091 day ago
CVE-2026-105574
28Monitor
Windows MIDI Service Module Elevation of Privileges Vulnerability
HighCVSS 7.0No exploit
- Local privilege escalation
- Memory safety
microsoft · windows 11 version 24h21 day ago
CVE-2026-105575
31Monitor
Windows DWM Core Library Elevation of Privilege Vulnerability
HighCVSS 7.8No exploit
- Local privilege escalation
microsoft · windows 10 version 18091 day ago
CVE-2026-105578
30Monitor
Microsoft JScript Remote Code Execution Vulnerability
HighCVSS 7.5No exploit
- pre-auth RCE
- Memory safety
microsoft · windows 10 version 16071 day ago
CVE-2026-105579
30Monitor
Windows DNS Information Disclosure Vulnerability
HighCVSS 7.5No exploit
- Pre-auth
- Memory safety
microsoft · windows server 20161 day ago
CVE-2026-105580
31Monitor
Windows Management Instrumentation Remote Code Execution Vulnerability
HighCVSS 7.8No exploit
- RCE
- Memory safety
microsoft · windows 10 version 16071 day ago