By publication date

Exploited and new serious CVEs: November 2026

3,408 records · 10 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 28 of 35

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
28Monitor	CVE-2026-122182No exploit	Windows Maps Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-59 Local privilege escalation	High7.0	—	—	1 day ago
31Monitor	CVE-2026-122183No exploit	Windows Kernel Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-125 Local privilege escalation Memory safety	High7.8	—	—	1 day ago
35Monitor	CVE-2026-122194No exploit	Microsoft Defender Remote Code Execution Vulnerabilitymicrosoft · microsoft malware protection engine · CWE-476 pre-auth RCE Memory safety	High8.8	—	—	1 day ago
35Monitor	CVE-2026-122198No exploit	Microsoft Office Remote Code Execution Vulnerabilitymicrosoft · microsoft 365 apps for enterprise · CWE-122 pre-auth RCE Memory safety	High8.8	—	—	1 day ago
35Monitor	CVE-2026-122475No exploit	Windows Storage Spaces Controller Remote Code Execution Vulnerabilitymicrosoft · windows 11 version 23h2 · CWE-822 pre-auth RCE	High8.8	—	—	1 day ago
32Monitor	CVE-2026-122979No exploit	Microsoft Teams for Android Spoofing Vulnerabilitymicrosoft · microsoft teams for android · CWE-94 pre-auth RCE	High8.1	—	—	1 day ago
31Monitor	CVE-2026-122984No exploit	Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-122 Local privilege escalation Memory safety	High7.8	—	—	1 day ago
31Monitor	CVE-2026-122986No exploit	Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerabilitymicrosoft · kernel-mshv-6.6.137.mshv2-2.azl3.x86_64 · CWE-269 Local privilege escalation	High7.8	—	—	1 day ago
32Monitor	CVE-2026-122988No exploit	Windows Admin Center Elevation of Privilege Vulnerabilitymicrosoft · windows admin center · CWE-78 RCE Command injection	High8.0	—	—	1 day ago
35Monitor	CVE-2026-123375No exploit	Microsoft Office Outlook Remote Code Execution Vulnerabilitymicrosoft · microsoft 365 apps for enterprise · CWE-121 pre-auth RCE Memory safety	High8.8	—	—	1 day ago
35Monitor	CVE-2026-123376No exploit	Microsoft Office Outlook Remote Code Execution Vulnerabilitymicrosoft · microsoft 365 apps for enterprise · CWE-122 pre-auth RCE Memory safety	High8.8	—	—	1 day ago
35Monitor	CVE-2026-123377No exploit	Microsoft Office Outlook Remote Code Execution Vulnerabilitymicrosoft · microsoft 365 apps for enterprise · CWE-122 pre-auth RCE Memory safety	High8.8	—	—	1 day ago
30Monitor	CVE-2026-123378No exploit	Microsoft Office Outlook Remote Code Execution Vulnerabilitymicrosoft · microsoft 365 apps for enterprise · CWE-122 pre-auth RCE Memory safety	High7.5	—	—	1 day ago
30Monitor	CVE-2026-123379No exploit	Microsoft Office Outlook Remote Code Execution Vulnerabilitymicrosoft · microsoft 365 apps for enterprise · CWE-122 pre-auth RCE Memory safety	High7.5	—	—	1 day ago
35Monitor	CVE-2026-123380No exploit	Microsoft Office Outlook Remote Code Execution Vulnerabilitymicrosoft · microsoft 365 apps for enterprise · CWE-122 pre-auth RCE Memory safety	High8.8	—	—	1 day ago
35Monitor	CVE-2026-123381No exploit	Microsoft Office Outlook Remote Code Execution Vulnerabilitymicrosoft · microsoft 365 apps for enterprise · CWE-121 pre-auth RCE Memory safety	High8.8	—	—	1 day ago
35Monitor	CVE-2026-123382No exploit	Microsoft Office Outlook Remote Code Execution Vulnerabilitymicrosoft · microsoft 365 apps for enterprise · CWE-822 pre-auth RCE	High8.8	—	—	1 day ago
35Monitor	CVE-2026-123383No exploit	Microsoft Office Outlook Remote Code Execution Vulnerabilitymicrosoft · microsoft 365 apps for enterprise · CWE-122 pre-auth RCE Memory safety	High8.8	—	—	1 day ago
35Monitor	CVE-2026-123384No exploit	Microsoft Office Outlook Remote Code Execution Vulnerabilitymicrosoft · microsoft 365 apps for enterprise · CWE-122 pre-auth RCE Memory safety	High8.8	—	—	1 day ago
35Monitor	CVE-2026-123385No exploit	Microsoft Office Excel Remote Code Execution Vulnerabilitymicrosoft · microsoft 365 apps for enterprise · CWE-121 pre-auth RCE Memory safety	High8.8	—	—	1 day ago
32Monitor	CVE-2026-123387No exploit	Active Directory Domain Services Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-77 RCE Command injection	High8.0	—	—	1 day ago
31Monitor	CVE-2026-123388No exploit	Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-122 Local privilege escalation Memory safety	High7.8	—	—	1 day ago
28Monitor	CVE-2026-123389No exploit	Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-416 Local privilege escalation Memory safety	High7.0	—	—	1 day ago
35Monitor	CVE-2026-123390No exploit	Microsoft Office SharePoint Remote Code Execution Vulnerabilitymicrosoft · microsoft sharepoint server subscription edition · CWE-502 RCE Deserialization	High8.8	—	—	1 day ago
35Monitor	CVE-2026-123391No exploit	Microsoft Office SharePoint Elevation of Privilege Vulnerabilitymicrosoft · microsoft sharepoint server subscription edition · CWE-863 Broken access control (IDOR)	High8.8	—	—	1 day ago
35Monitor	CVE-2026-123394No exploit	Microsoft Office Word Remote Code Execution Vulnerabilitymicrosoft · microsoft 365 apps for enterprise · CWE-122 pre-auth RCE Memory safety	High8.8	—	—	1 day ago
30Monitor	CVE-2026-124170No exploit	Microsoft Office Excel Remote Code Execution Vulnerabilitymicrosoft · microsoft 365 apps for enterprise · CWE-122 pre-auth RCE Memory safety	High7.5	—	—	1 day ago
35Monitor	CVE-2026-124174No exploit	Microsoft Office Excel Remote Code Execution Vulnerabilitymicrosoft · microsoft 365 apps for enterprise · CWE-122 pre-auth RCE Memory safety	High8.8	—	—	1 day ago
35Monitor	CVE-2026-124176No exploit	Microsoft Office Excel Remote Code Execution Vulnerabilitymicrosoft · microsoft 365 apps for enterprise · CWE-122 pre-auth RCE Memory safety	High8.8	—	—	1 day ago
30Monitor	CVE-2026-124185No exploit	Microsoft Office Word Remote Code Execution Vulnerabilitymicrosoft · microsoft 365 apps for enterprise · CWE-908 pre-auth RCE Memory safety	High7.5	—	—	1 day ago
35Monitor	CVE-2026-124187No exploit	Microsoft Office Excel Remote Code Execution Vulnerabilitymicrosoft · microsoft 365 apps for enterprise · CWE-416 pre-auth RCE Memory safety	High8.8	—	—	1 day ago
60This week	CVE-2026-124194Weaponized	Microsoft Outlook Spoofing Vulnerabilitymicrosoft · 365 apps · CWE-356 Pre-auth	Medium6.5	KEV	—	1 day ago
28Monitor	CVE-2026-124224No exploit	PowerShell Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-59 Local privilege escalation	High7.0	—	—	1 day ago
31Monitor	CVE-2026-124225No exploit	Windows PowerShell Remote Code Execution Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-94 RCE	High7.8	—	—	1 day ago
35Monitor	CVE-2026-124226No exploit	Microsoft PowerShell Security Feature Bypass Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-250 Local privilege escalation	High8.8	—	—	1 day ago
30Monitor	CVE-2026-124227No exploit	Microsoft Office Outlook Remote Code Execution Vulnerabilitymicrosoft · microsoft 365 apps for enterprise · CWE-908 pre-auth RCE Memory safety	High7.5	—	—	1 day ago
35Monitor	CVE-2026-124228No exploit	Microsoft Office Outlook Remote Code Execution Vulnerabilitymicrosoft · microsoft 365 apps for enterprise · CWE-22 RCE Path traversal	High8.8	—	—	1 day ago
30Monitor	CVE-2026-125134No exploit	Windows Function Discovery Resource Publication Remote Code Execution Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-416 pre-auth RCE Memory safety	High7.5	—	—	1 day ago
35Monitor	CVE-2026-125136No exploit	Windows Network Connected Devices Auto-Setup Service Remote Code Execution Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-122 pre-auth RCE Memory safety	High8.8	—	—	1 day ago
31Monitor	CVE-2026-125137No exploit	Windows Graphics Kernel Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1809 · CWE-122 Local privilege escalation Memory safety	High7.8	—	—	1 day ago
30Monitor	CVE-2026-125327No exploit	pgEdge RAG Server unbounded corpus read allows resource exhaustion from unauthenticated requestspgedge · pgedge-rag-server · CWE-405 Pre-auth Denial of service	High7.5	—	—	1 day ago
33Monitor	CVE-2026-125329No exploit	Kaneo: Gitea integration access token and webhook secret exposed to any workspace memberusekaneo · kaneo · CWE-200 Info leak	High8.4	—	—	1 day ago
30Monitor	CVE-2026-125330No exploit	HarnessRouter: A workspace's API key could read and change sessions, files and responses of other workspaces in the same organizationharnessrouter · harnessrouter · CWE-639 Broken access control (IDOR)	High7.5	—	—	1 day ago
36Monitor	CVE-2026-125331No exploit	HarnessRouter: Service-only routes that write an organization's provider connections could be reached through a multi-tenant console with a made-up bearerharnessrouter · harnessrouter · CWE-862 Pre-auth Broken access control (IDOR)	Critical9.1	—	—	1 day ago
29Monitor	CVE-2026-125336No exploit	Forge: X.509 nameConstraints not enforced by verifyCertificateChain()digitalbazaar · forge · CWE-295 Pre-auth Weak crypto	High7.4	—	—	1 day ago
37Monitor	CVE-2026-126087No exploit	Untrusted search path in the cross-user process launcher in OpenJD Sessions for Python, as used in the AWS Deadline Cloud worker agentaws · openjd-sessions · CWE-426 RCE	Critical9.4	—	—	1 day ago
28Monitor	CVE-2026-14968No exploit	AMD MmSaveStateLib SysCall path performs out-of-bounds writes for partial save-state readstianocore · edk2 · CWE-787 Local privilege escalation Memory safety	High7.0	—	—	1 day ago
33Monitor	CVE-2026-40275No exploit	Vulnerabilities in the QNX Neutrino kernel affect QNX Software Development Platform and QNX OS for Safetyblackberry ltd · qnx software development platform · CWE-122 Memory safety	High8.4	—	—	1 day ago
29Monitor	CVE-2026-54436No exploit	Vulnerabilities in the QNX io-char library Impacts QNX Software Development Platformblackberry ltd · qnx software development platform · CWE-122 RCE Memory safety	High7.4	—	—	1 day ago
29Monitor	CVE-2026-62903No exploit	Microsoft.Data.SqlClient Information Disclosure Vulnerabilitymicrosoft · microsoft.data.sqlclient 6.1 · CWE-294 Pre-auth Auth bypass	High7.4	—	—	1 day ago
39Monitor	CVE-2026-66801No exploit	Microsoft Xbox Remote Code Execution Vulnerabilitymicrosoft · microsoft gdk · CWE-122 pre-auth RCE Memory safety	Critical9.8	—	—	1 day ago
32Monitor	CVE-2026-66813No exploit	Microsoft SQL Server Elevation of Privilege Vulnerabilitymicrosoft · microsoft sql server 2017 (gdr) · CWE-125 Pre-auth Memory safety	High8.1	—	—	1 day ago
35Monitor	CVE-2026-67372No exploit	Microsoft SQL Server Remote Code Execution Vulnerabilitymicrosoft · microsoft sql server 2025 cu10 · CWE-122 RCE Memory safety	High8.8	—	—	1 day ago
35Monitor	CVE-2026-67374No exploit	Microsoft SQL Server Remote Code Execution Vulnerabilitymicrosoft · microsoft sql server 2017 (gdr) · CWE-122 RCE Memory safety	High8.8	—	—	1 day ago
35Monitor	CVE-2026-67375No exploit	Microsoft SQL Server Elevation of Privilege Vulnerabilitymicrosoft · microsoft sql server 2025 for x64-based systems (gdr) · CWE-121 Memory safety	High8.8	—	—	1 day ago
35Monitor	CVE-2026-67387No exploit	Microsoft SQL Server Elevation of Privilege Vulnerabilitymicrosoft · microsoft sql server 2017 (gdr) · CWE-822	High8.8	—	—	1 day ago
35Monitor	CVE-2026-67391No exploit	Microsoft SQL Server Remote Code Execution Vulnerabilitymicrosoft · microsoft sql server 2017 (gdr) · CWE-122 RCE Memory safety	High8.8	—	—	1 day ago
35Monitor	CVE-2026-67632No exploit	Microsoft SQL Server Remote Code Execution Vulnerabilitymicrosoft · microsoft sql server 2017 (gdr) · CWE-122 RCE Memory safety	High8.8	—	—	1 day ago
35Monitor	CVE-2026-67637No exploit	Microsoft SQL Server Remote Code Execution Vulnerabilitymicrosoft · microsoft sql server 2017 (gdr) · CWE-122 RCE Memory safety	High8.8	—	—	1 day ago
35Monitor	CVE-2026-67646No exploit	Microsoft SQL Server Remote Code Execution Vulnerabilitymicrosoft · microsoft sql server 2025 cu10 · CWE-122 RCE Memory safety	High8.8	—	—	1 day ago
29Monitor	CVE-2026-69327No exploit	Windows Remote Desktop Services Remote Code Execution Vulnerabilitymicrosoft · windows server 2016 · CWE-416 RCE Memory safety	High7.4	—	—	1 day ago
28Monitor	CVE-2026-69565No exploit	Windows Remote Desktop Services Remote Code Execution Vulnerabilitymicrosoft · windows server 2016 · CWE-416 RCE Memory safety	High7.0	—	—	1 day ago
30Monitor	CVE-2026-69901No exploit	Microsoft Teams for Android Spoofing Vulnerabilitymicrosoft · microsoft teams for android · CWE-346 Pre-auth	High7.5	—	—	1 day ago
34Monitor	CVE-2026-70003No exploit	JDBC Driver for SQL Server Security Feature Bypass Vulnerabilitymicrosoft · microsoft jdbc driver for sql server 13.4 · CWE-347 Pre-auth Weak crypto	High8.7	—	—	1 day ago
35Monitor	CVE-2026-70094No exploit	Visual Studio Code Remote Code Execution Vulnerabilitymicrosoft · visual studio code · CWE-426 pre-auth RCE	High8.8	—	—	1 day ago
28Monitor	CVE-2026-70120No exploit	Microsoft Bluetooth Driver Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-416 Local privilege escalation Memory safety	High7.0	—	—	1 day ago
31Monitor	CVE-2026-70182No exploit	Windows Bind Filter Driver Elevation of Privilege Vulnerabilitymicrosoft · windows 11 version 24h2 · CWE-1390 Auth bypass Local privilege escalation	High7.8	—	—	1 day ago
28Monitor	CVE-2026-70231No exploit	Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-416 Local privilege escalation Memory safety	High7.0	—	—	1 day ago
30Monitor	CVE-2026-70240No exploit	Windows Kerberos Denial of Service Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-401 Pre-auth Denial of service	High7.5	—	—	1 day ago
32Monitor	CVE-2026-72998No exploit	Windows DHCP Server Remote Code Execution Vulnerabilitymicrosoft · windows server 2016 · CWE-416 pre-auth RCE Memory safety	High8.1	—	—	1 day ago
30Monitor	CVE-2026-80094No exploit	Remote Desktop Gateway Service Elevation of Privilege Vulnerabilitymicrosoft · windows server 2016 · CWE-416 Memory safety	High7.5	—	—	1 day ago
36Monitor	CVE-2026-80095No exploit	Microsoft Office SharePoint Elevation of Privilege Vulnerabilitymicrosoft · microsoft sharepoint server subscription edition · CWE-79 XSS	Critical9.0	—	—	1 day ago
32Monitor	CVE-2026-81384No exploit	Windows DNS Server Remote Code Execution Vulnerabilitymicrosoft · windows server 2022 · CWE-122 pre-auth RCE Memory safety	High8.1	—	—	1 day ago
31Monitor	CVE-2026-83563No exploit	Winlogon Elevation of Privilege Vulnerabilitymicrosoft · windows 11 version 23h2 · CWE-122 Local privilege escalation Memory safety	High7.8	—	—	1 day ago
30Monitor	CVE-2026-83684No exploit	Windows iSCSI Target Service Information Disclosure Vulnerabilitymicrosoft · windows server 2016 · CWE-126 Pre-auth	High7.5	—	—	1 day ago
28Monitor	CVE-2026-83894No exploit	RPC Runtime Elevation of Privilege Vulnerabilitymicrosoft · windows 11 version 24h2 · CWE-416 Local privilege escalation Memory safety	High7.0	—	—	1 day ago
30Monitor	CVE-2026-84010No exploit	Microsoft SQL Server Elevation of Privilege Vulnerabilitymicrosoft · microsoft sql server 2017 (gdr) · CWE-749	High7.5	—	—	1 day ago
31Monitor	CVE-2026-85801No exploit	Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-416 Local privilege escalation Memory safety	High7.8	—	—	1 day ago
35Monitor	CVE-2026-85838No exploit	Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-122 pre-auth RCE Memory safety	High8.8	—	—	1 day ago
35Monitor	CVE-2026-85839No exploit	Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-122 pre-auth RCE Memory safety	High8.8	—	—	1 day ago
39Monitor	CVE-2026-85844No exploit	Windows Kerberos Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-288 Pre-auth Auth bypass	Critical9.8	—	—	1 day ago
28Monitor	CVE-2026-85862No exploit	Windows Error Reporting Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-362 Local privilege escalation Race condition	High7.0	—	—	1 day ago
35Monitor	CVE-2026-85923No exploit	Azure DevOps Server Elevation of Privilege Vulnerabilitymicrosoft · azure devops server · CWE-639 Broken access control (IDOR)	High8.8	—	—	1 day ago
31Monitor	CVE-2026-85929No exploit	Microsoft Brokering File System Elevation of Privilege Vulnerabilitymicrosoft · windows 11 version 24h2 · CWE-732 Local privilege escalation	High7.8	—	—	1 day ago
31Monitor	CVE-2026-85942No exploit	Windows Camera Frame Server Monitor Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1809 · CWE-122 Local privilege escalation Memory safety	High7.8	—	—	1 day ago
30Monitor	CVE-2026-88111No exploit	SQL Server Remote Code Execution Vulnerabilitymicrosoft · microsoft sql server 2022 for x64-based systems (cu27) · CWE-122 RCE Memory safety	High7.5	—	—	1 day ago
35Monitor	CVE-2026-88176No exploit	Microsoft Office SharePoint Elevation of Privilege Vulnerabilitymicrosoft · microsoft sharepoint server subscription edition · CWE-862 Broken access control (IDOR)	High8.8	—	—	1 day ago
32Monitor	CVE-2026-88187No exploit	Windows Bluetooth A2DP driver Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1809 · CWE-122 Memory safety	High8.0	—	—	1 day ago
30Monitor	CVE-2026-88212No exploit	Windows Network Address Translation (NAT) Remote Code Execution Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-416 pre-auth RCE Memory safety	High7.5	—	—	1 day ago
31Monitor	CVE-2026-88213No exploit	Windows Bluetooth Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1809 · CWE-197 Local privilege escalation	High7.8	—	—	1 day ago
30Monitor	CVE-2026-88216No exploit	Windows DHCP Server Remote Code Execution Vulnerabilitymicrosoft · windows server 2016 · CWE-122 RCE Memory safety Race condition	High7.5	—	—	1 day ago
39Monitor	CVE-2026-88218No exploit	Windows DNS Remote Code Execution Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-415 pre-auth RCE Memory safety	Critical9.8	—	—	1 day ago
28Monitor	CVE-2026-88221No exploit	Windows Broadcast DVR User Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1809 · CWE-416 Local privilege escalation Memory safety	High7.0	—	—	1 day ago
35Monitor	CVE-2026-88222No exploit	Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-122 pre-auth RCE Memory safety	High8.8	—	—	1 day ago
28Monitor	CVE-2026-88224No exploit	Windows AppX Deployment Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-59 Local privilege escalation	High7.0	—	—	1 day ago
31Monitor	CVE-2026-88227No exploit	Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-122 Local privilege escalation Memory safety	High7.8	—	—	1 day ago
28Monitor	CVE-2026-88228No exploit	Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-122 Local privilege escalation Memory safety	High7.0	—	—	1 day ago
35Monitor	CVE-2026-88229No exploit	Windows Media Player Remote Code Execution Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-122 pre-auth RCE Memory safety	High8.8	—	—	1 day ago
31Monitor	CVE-2026-88230No exploit	Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-122 Local privilege escalation Memory safety	High7.8	—	—	1 day ago
31Monitor	CVE-2026-88232No exploit	Windows Camera Frame Server Monitor Elevation of Privilege Vulnerabilitymicrosoft · windows 11 version 24h2 · CWE-416 Local privilege escalation Memory safety	High7.8	—	—	1 day ago

CVE-2026-122182
28Monitor
Windows Maps Elevation of Privilege Vulnerability
HighCVSS 7.0No exploit
- Local privilege escalation
microsoft · windows 10 version 16071 day ago
CVE-2026-122183
31Monitor
Windows Kernel Elevation of Privilege Vulnerability
HighCVSS 7.8No exploit
- Local privilege escalation
- Memory safety
microsoft · windows 10 version 16071 day ago
CVE-2026-122194
35Monitor
Microsoft Defender Remote Code Execution Vulnerability
HighCVSS 8.8No exploit
- pre-auth RCE
- Memory safety
microsoft · microsoft malware protection engine1 day ago
CVE-2026-122198
35Monitor
Microsoft Office Remote Code Execution Vulnerability
HighCVSS 8.8No exploit
- pre-auth RCE
- Memory safety
microsoft · microsoft 365 apps for enterprise1 day ago
CVE-2026-122475
35Monitor
Windows Storage Spaces Controller Remote Code Execution Vulnerability
HighCVSS 8.8No exploit
- pre-auth RCE
microsoft · windows 11 version 23h21 day ago
CVE-2026-122979
32Monitor
Microsoft Teams for Android Spoofing Vulnerability
HighCVSS 8.1No exploit
- pre-auth RCE
microsoft · microsoft teams for android1 day ago
CVE-2026-122984
31Monitor
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
HighCVSS 7.8No exploit
- Local privilege escalation
- Memory safety
microsoft · windows 10 version 16071 day ago
CVE-2026-122986
31Monitor
Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability
HighCVSS 7.8No exploit
- Local privilege escalation
microsoft · kernel-mshv-6.6.137.mshv2-2.azl3.x86_641 day ago
CVE-2026-122988
32Monitor
Windows Admin Center Elevation of Privilege Vulnerability
HighCVSS 8.0No exploit
- RCE
- Command injection
microsoft · windows admin center1 day ago
CVE-2026-123375
35Monitor
Microsoft Office Outlook Remote Code Execution Vulnerability
HighCVSS 8.8No exploit
- pre-auth RCE
- Memory safety
microsoft · microsoft 365 apps for enterprise1 day ago
CVE-2026-123376
35Monitor
Microsoft Office Outlook Remote Code Execution Vulnerability
HighCVSS 8.8No exploit
- pre-auth RCE
- Memory safety
microsoft · microsoft 365 apps for enterprise1 day ago
CVE-2026-123377
35Monitor
Microsoft Office Outlook Remote Code Execution Vulnerability
HighCVSS 8.8No exploit
- pre-auth RCE
- Memory safety
microsoft · microsoft 365 apps for enterprise1 day ago
CVE-2026-123378
30Monitor
Microsoft Office Outlook Remote Code Execution Vulnerability
HighCVSS 7.5No exploit
- pre-auth RCE
- Memory safety
microsoft · microsoft 365 apps for enterprise1 day ago
CVE-2026-123379
30Monitor
Microsoft Office Outlook Remote Code Execution Vulnerability
HighCVSS 7.5No exploit
- pre-auth RCE
- Memory safety
microsoft · microsoft 365 apps for enterprise1 day ago
CVE-2026-123380
35Monitor
Microsoft Office Outlook Remote Code Execution Vulnerability
HighCVSS 8.8No exploit
- pre-auth RCE
- Memory safety
microsoft · microsoft 365 apps for enterprise1 day ago
CVE-2026-123381
35Monitor
Microsoft Office Outlook Remote Code Execution Vulnerability
HighCVSS 8.8No exploit
- pre-auth RCE
- Memory safety
microsoft · microsoft 365 apps for enterprise1 day ago
CVE-2026-123382
35Monitor
Microsoft Office Outlook Remote Code Execution Vulnerability
HighCVSS 8.8No exploit
- pre-auth RCE
microsoft · microsoft 365 apps for enterprise1 day ago
CVE-2026-123383
35Monitor
Microsoft Office Outlook Remote Code Execution Vulnerability
HighCVSS 8.8No exploit
- pre-auth RCE
- Memory safety
microsoft · microsoft 365 apps for enterprise1 day ago
CVE-2026-123384
35Monitor
Microsoft Office Outlook Remote Code Execution Vulnerability
HighCVSS 8.8No exploit
- pre-auth RCE
- Memory safety
microsoft · microsoft 365 apps for enterprise1 day ago
CVE-2026-123385
35Monitor
Microsoft Office Excel Remote Code Execution Vulnerability
HighCVSS 8.8No exploit
- pre-auth RCE
- Memory safety
microsoft · microsoft 365 apps for enterprise1 day ago
CVE-2026-123387
32Monitor
Active Directory Domain Services Elevation of Privilege Vulnerability
HighCVSS 8.0No exploit
- RCE
- Command injection
microsoft · windows 10 version 16071 day ago
CVE-2026-123388
31Monitor
Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
HighCVSS 7.8No exploit
- Local privilege escalation
- Memory safety
microsoft · windows 10 version 16071 day ago
CVE-2026-123389
28Monitor
Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege Vulnerability
HighCVSS 7.0No exploit
- Local privilege escalation
- Memory safety
microsoft · windows 10 version 16071 day ago
CVE-2026-123390
35Monitor
Microsoft Office SharePoint Remote Code Execution Vulnerability
HighCVSS 8.8No exploit
- RCE
- Deserialization
microsoft · microsoft sharepoint server subscription edition1 day ago
CVE-2026-123391
35Monitor
Microsoft Office SharePoint Elevation of Privilege Vulnerability
HighCVSS 8.8No exploit
- Broken access control (IDOR)
microsoft · microsoft sharepoint server subscription edition1 day ago
CVE-2026-123394
35Monitor
Microsoft Office Word Remote Code Execution Vulnerability
HighCVSS 8.8No exploit
- pre-auth RCE
- Memory safety
microsoft · microsoft 365 apps for enterprise1 day ago
CVE-2026-124170
30Monitor
Microsoft Office Excel Remote Code Execution Vulnerability
HighCVSS 7.5No exploit
- pre-auth RCE
- Memory safety
microsoft · microsoft 365 apps for enterprise1 day ago
CVE-2026-124174
35Monitor
Microsoft Office Excel Remote Code Execution Vulnerability
HighCVSS 8.8No exploit
- pre-auth RCE
- Memory safety
microsoft · microsoft 365 apps for enterprise1 day ago
CVE-2026-124176
35Monitor
Microsoft Office Excel Remote Code Execution Vulnerability
HighCVSS 8.8No exploit
- pre-auth RCE
- Memory safety
microsoft · microsoft 365 apps for enterprise1 day ago
CVE-2026-124185
30Monitor
Microsoft Office Word Remote Code Execution Vulnerability
HighCVSS 7.5No exploit
- pre-auth RCE
- Memory safety
microsoft · microsoft 365 apps for enterprise1 day ago
CVE-2026-124187
35Monitor
Microsoft Office Excel Remote Code Execution Vulnerability
HighCVSS 8.8No exploit
- pre-auth RCE
- Memory safety
microsoft · microsoft 365 apps for enterprise1 day ago
CVE-2026-124194
60This week
Microsoft Outlook Spoofing Vulnerability
MediumCVSS 6.5KEVWeaponized
- Pre-auth
microsoft · 365 apps1 day ago
CVE-2026-124224
28Monitor
PowerShell Elevation of Privilege Vulnerability
HighCVSS 7.0No exploit
- Local privilege escalation
microsoft · windows 10 version 16071 day ago
CVE-2026-124225
31Monitor
Windows PowerShell Remote Code Execution Vulnerability
HighCVSS 7.8No exploit
- RCE
microsoft · windows 10 version 16071 day ago
CVE-2026-124226
35Monitor
Microsoft PowerShell Security Feature Bypass Vulnerability
HighCVSS 8.8No exploit
- Local privilege escalation
microsoft · windows 10 version 16071 day ago
CVE-2026-124227
30Monitor
Microsoft Office Outlook Remote Code Execution Vulnerability
HighCVSS 7.5No exploit
- pre-auth RCE
- Memory safety
microsoft · microsoft 365 apps for enterprise1 day ago
CVE-2026-124228
35Monitor
Microsoft Office Outlook Remote Code Execution Vulnerability
HighCVSS 8.8No exploit
- RCE
- Path traversal
microsoft · microsoft 365 apps for enterprise1 day ago
CVE-2026-125134
30Monitor
Windows Function Discovery Resource Publication Remote Code Execution Vulnerability
HighCVSS 7.5No exploit
- pre-auth RCE
- Memory safety
microsoft · windows 10 version 16071 day ago
CVE-2026-125136
35Monitor
Windows Network Connected Devices Auto-Setup Service Remote Code Execution Vulnerability
HighCVSS 8.8No exploit
- pre-auth RCE
- Memory safety
microsoft · windows 10 version 16071 day ago
CVE-2026-125137
31Monitor
Windows Graphics Kernel Elevation of Privilege Vulnerability
HighCVSS 7.8No exploit
- Local privilege escalation
- Memory safety
microsoft · windows 10 version 18091 day ago
CVE-2026-125327
30Monitor
pgEdge RAG Server unbounded corpus read allows resource exhaustion from unauthenticated requests
HighCVSS 7.5No exploit
- Pre-auth
- Denial of service
pgedge · pgedge-rag-server1 day ago
CVE-2026-125329
33Monitor
Kaneo: Gitea integration access token and webhook secret exposed to any workspace member
HighCVSS 8.4No exploit
- Info leak
usekaneo · kaneo1 day ago
CVE-2026-125330
30Monitor
HarnessRouter: A workspace's API key could read and change sessions, files and responses of other workspaces in the same organization
HighCVSS 7.5No exploit
- Broken access control (IDOR)
harnessrouter · harnessrouter1 day ago
CVE-2026-125331
36Monitor
HarnessRouter: Service-only routes that write an organization's provider connections could be reached through a multi-tenant console with a made-up bearer
CriticalCVSS 9.1No exploit
- Pre-auth
- Broken access control (IDOR)
harnessrouter · harnessrouter1 day ago
CVE-2026-125336
29Monitor
Forge: X.509 nameConstraints not enforced by verifyCertificateChain()
HighCVSS 7.4No exploit
- Pre-auth
- Weak crypto
digitalbazaar · forge1 day ago
CVE-2026-126087
37Monitor
Untrusted search path in the cross-user process launcher in OpenJD Sessions for Python, as used in the AWS Deadline Cloud worker agent
CriticalCVSS 9.4No exploit
- RCE
aws · openjd-sessions1 day ago
CVE-2026-14968
28Monitor
AMD MmSaveStateLib SysCall path performs out-of-bounds writes for partial save-state reads
HighCVSS 7.0No exploit
- Local privilege escalation
- Memory safety
tianocore · edk21 day ago
CVE-2026-40275
33Monitor
Vulnerabilities in the QNX Neutrino kernel affect QNX Software Development Platform and QNX OS for Safety
HighCVSS 8.4No exploit
- Memory safety
blackberry ltd · qnx software development platform1 day ago
CVE-2026-54436
29Monitor
Vulnerabilities in the QNX io-char library Impacts QNX Software Development Platform
HighCVSS 7.4No exploit
- RCE
- Memory safety
blackberry ltd · qnx software development platform1 day ago
CVE-2026-62903
29Monitor
Microsoft.Data.SqlClient Information Disclosure Vulnerability
HighCVSS 7.4No exploit
- Pre-auth
- Auth bypass
microsoft · microsoft.data.sqlclient 6.11 day ago
CVE-2026-66801
39Monitor
Microsoft Xbox Remote Code Execution Vulnerability
CriticalCVSS 9.8No exploit
- pre-auth RCE
- Memory safety
microsoft · microsoft gdk1 day ago
CVE-2026-66813
32Monitor
Microsoft SQL Server Elevation of Privilege Vulnerability
HighCVSS 8.1No exploit
- Pre-auth
- Memory safety
microsoft · microsoft sql server 2017 (gdr)1 day ago
CVE-2026-67372
35Monitor
Microsoft SQL Server Remote Code Execution Vulnerability
HighCVSS 8.8No exploit
- RCE
- Memory safety
microsoft · microsoft sql server 2025 cu101 day ago
CVE-2026-67374
35Monitor
Microsoft SQL Server Remote Code Execution Vulnerability
HighCVSS 8.8No exploit
- RCE
- Memory safety
microsoft · microsoft sql server 2017 (gdr)1 day ago
CVE-2026-67375
35Monitor
Microsoft SQL Server Elevation of Privilege Vulnerability
HighCVSS 8.8No exploit
- Memory safety
microsoft · microsoft sql server 2025 for x64-based systems (gdr)1 day ago
CVE-2026-67387
35Monitor
Microsoft SQL Server Elevation of Privilege Vulnerability
HighCVSS 8.8No exploit
microsoft · microsoft sql server 2017 (gdr)1 day ago
CVE-2026-67391
35Monitor
Microsoft SQL Server Remote Code Execution Vulnerability
HighCVSS 8.8No exploit
- RCE
- Memory safety
microsoft · microsoft sql server 2017 (gdr)1 day ago
CVE-2026-67632
35Monitor
Microsoft SQL Server Remote Code Execution Vulnerability
HighCVSS 8.8No exploit
- RCE
- Memory safety
microsoft · microsoft sql server 2017 (gdr)1 day ago
CVE-2026-67637
35Monitor
Microsoft SQL Server Remote Code Execution Vulnerability
HighCVSS 8.8No exploit
- RCE
- Memory safety
microsoft · microsoft sql server 2017 (gdr)1 day ago
CVE-2026-67646
35Monitor
Microsoft SQL Server Remote Code Execution Vulnerability
HighCVSS 8.8No exploit
- RCE
- Memory safety
microsoft · microsoft sql server 2025 cu101 day ago
CVE-2026-69327
29Monitor
Windows Remote Desktop Services Remote Code Execution Vulnerability
HighCVSS 7.4No exploit
- RCE
- Memory safety
microsoft · windows server 20161 day ago
CVE-2026-69565
28Monitor
Windows Remote Desktop Services Remote Code Execution Vulnerability
HighCVSS 7.0No exploit
- RCE
- Memory safety
microsoft · windows server 20161 day ago
CVE-2026-69901
30Monitor
Microsoft Teams for Android Spoofing Vulnerability
HighCVSS 7.5No exploit
- Pre-auth
microsoft · microsoft teams for android1 day ago
CVE-2026-70003
34Monitor
JDBC Driver for SQL Server Security Feature Bypass Vulnerability
HighCVSS 8.7No exploit
- Pre-auth
- Weak crypto
microsoft · microsoft jdbc driver for sql server 13.41 day ago
CVE-2026-70094
35Monitor
Visual Studio Code Remote Code Execution Vulnerability
HighCVSS 8.8No exploit
- pre-auth RCE
microsoft · visual studio code1 day ago
CVE-2026-70120
28Monitor
Microsoft Bluetooth Driver Elevation of Privilege Vulnerability
HighCVSS 7.0No exploit
- Local privilege escalation
- Memory safety
microsoft · windows 10 version 16071 day ago
CVE-2026-70182
31Monitor
Windows Bind Filter Driver Elevation of Privilege Vulnerability
HighCVSS 7.8No exploit
- Auth bypass
- Local privilege escalation
microsoft · windows 11 version 24h21 day ago
CVE-2026-70231
28Monitor
Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability
HighCVSS 7.0No exploit
- Local privilege escalation
- Memory safety
microsoft · windows 10 version 16071 day ago
CVE-2026-70240
30Monitor
Windows Kerberos Denial of Service Vulnerability
HighCVSS 7.5No exploit
- Pre-auth
- Denial of service
microsoft · windows 10 version 16071 day ago
CVE-2026-72998
32Monitor
Windows DHCP Server Remote Code Execution Vulnerability
HighCVSS 8.1No exploit
- pre-auth RCE
- Memory safety
microsoft · windows server 20161 day ago
CVE-2026-80094
30Monitor
Remote Desktop Gateway Service Elevation of Privilege Vulnerability
HighCVSS 7.5No exploit
- Memory safety
microsoft · windows server 20161 day ago
CVE-2026-80095
36Monitor
Microsoft Office SharePoint Elevation of Privilege Vulnerability
CriticalCVSS 9.0No exploit
- XSS
microsoft · microsoft sharepoint server subscription edition1 day ago
CVE-2026-81384
32Monitor
Windows DNS Server Remote Code Execution Vulnerability
HighCVSS 8.1No exploit
- pre-auth RCE
- Memory safety
microsoft · windows server 20221 day ago
CVE-2026-83563
31Monitor
Winlogon Elevation of Privilege Vulnerability
HighCVSS 7.8No exploit
- Local privilege escalation
- Memory safety
microsoft · windows 11 version 23h21 day ago
CVE-2026-83684
30Monitor
Windows iSCSI Target Service Information Disclosure Vulnerability
HighCVSS 7.5No exploit
- Pre-auth
microsoft · windows server 20161 day ago
CVE-2026-83894
28Monitor
RPC Runtime Elevation of Privilege Vulnerability
HighCVSS 7.0No exploit
- Local privilege escalation
- Memory safety
microsoft · windows 11 version 24h21 day ago
CVE-2026-84010
30Monitor
Microsoft SQL Server Elevation of Privilege Vulnerability
HighCVSS 7.5No exploit
microsoft · microsoft sql server 2017 (gdr)1 day ago
CVE-2026-85801
31Monitor
Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability
HighCVSS 7.8No exploit
- Local privilege escalation
- Memory safety
microsoft · windows 10 version 16071 day ago
CVE-2026-85838
35Monitor
Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability
HighCVSS 8.8No exploit
- pre-auth RCE
- Memory safety
microsoft · windows 10 version 16071 day ago
CVE-2026-85839
35Monitor
Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability
HighCVSS 8.8No exploit
- pre-auth RCE
- Memory safety
microsoft · windows 10 version 16071 day ago
CVE-2026-85844
39Monitor
Windows Kerberos Elevation of Privilege Vulnerability
CriticalCVSS 9.8No exploit
- Pre-auth
- Auth bypass
microsoft · windows 10 version 16071 day ago
CVE-2026-85862
28Monitor
Windows Error Reporting Elevation of Privilege Vulnerability
HighCVSS 7.0No exploit
- Local privilege escalation
- Race condition
microsoft · windows 10 version 16071 day ago
CVE-2026-85923
35Monitor
Azure DevOps Server Elevation of Privilege Vulnerability
HighCVSS 8.8No exploit
- Broken access control (IDOR)
microsoft · azure devops server1 day ago
CVE-2026-85929
31Monitor
Microsoft Brokering File System Elevation of Privilege Vulnerability
HighCVSS 7.8No exploit
- Local privilege escalation
microsoft · windows 11 version 24h21 day ago
CVE-2026-85942
31Monitor
Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability
HighCVSS 7.8No exploit
- Local privilege escalation
- Memory safety
microsoft · windows 10 version 18091 day ago
CVE-2026-88111
30Monitor
SQL Server Remote Code Execution Vulnerability
HighCVSS 7.5No exploit
- RCE
- Memory safety
microsoft · microsoft sql server 2022 for x64-based systems (cu27)1 day ago
CVE-2026-88176
35Monitor
Microsoft Office SharePoint Elevation of Privilege Vulnerability
HighCVSS 8.8No exploit
- Broken access control (IDOR)
microsoft · microsoft sharepoint server subscription edition1 day ago
CVE-2026-88187
32Monitor
Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability
HighCVSS 8.0No exploit
- Memory safety
microsoft · windows 10 version 18091 day ago
CVE-2026-88212
30Monitor
Windows Network Address Translation (NAT) Remote Code Execution Vulnerability
HighCVSS 7.5No exploit
- pre-auth RCE
- Memory safety
microsoft · windows 10 version 16071 day ago
CVE-2026-88213
31Monitor
Windows Bluetooth Service Elevation of Privilege Vulnerability
HighCVSS 7.8No exploit
- Local privilege escalation
microsoft · windows 10 version 18091 day ago
CVE-2026-88216
30Monitor
Windows DHCP Server Remote Code Execution Vulnerability
HighCVSS 7.5No exploit
- RCE
- Memory safety
- Race condition
microsoft · windows server 20161 day ago
CVE-2026-88218
39Monitor
Windows DNS Remote Code Execution Vulnerability
CriticalCVSS 9.8No exploit
- pre-auth RCE
- Memory safety
microsoft · windows 10 version 16071 day ago
CVE-2026-88221
28Monitor
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
HighCVSS 7.0No exploit
- Local privilege escalation
- Memory safety
microsoft · windows 10 version 18091 day ago
CVE-2026-88222
35Monitor
Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability
HighCVSS 8.8No exploit
- pre-auth RCE
- Memory safety
microsoft · windows 10 version 16071 day ago
CVE-2026-88224
28Monitor
Windows AppX Deployment Service Elevation of Privilege Vulnerability
HighCVSS 7.0No exploit
- Local privilege escalation
microsoft · windows 10 version 16071 day ago
CVE-2026-88227
31Monitor
Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability
HighCVSS 7.8No exploit
- Local privilege escalation
- Memory safety
microsoft · windows 10 version 16071 day ago
CVE-2026-88228
28Monitor
Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability
HighCVSS 7.0No exploit
- Local privilege escalation
- Memory safety
microsoft · windows 10 version 16071 day ago
CVE-2026-88229
35Monitor
Windows Media Player Remote Code Execution Vulnerability
HighCVSS 8.8No exploit
- pre-auth RCE
- Memory safety
microsoft · windows 10 version 16071 day ago
CVE-2026-88230
31Monitor
Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability
HighCVSS 7.8No exploit
- Local privilege escalation
- Memory safety
microsoft · windows 10 version 16071 day ago
CVE-2026-88232
31Monitor
Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability
HighCVSS 7.8No exploit
- Local privilege escalation
- Memory safety
microsoft · windows 11 version 24h21 day ago