By publication date
Exploited and new serious CVEs: November 2026
3,408 records · 10 KEV. In publication order.
Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.
Month boundaries are UTC, the same rule as the publication date on each record page.
Page 30 of 35
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
28Monitor | CVE-2026-96042No exploit | Windows Connection Manager Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-416 | High7.0 | — | — | 1 day ago |
28Monitor | CVE-2026-96043No exploit | Windows Connection Manager Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-416 | High7.0 | — | — | 1 day ago |
28Monitor | CVE-2026-96046No exploit | Windows Installer Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-416 | High7.0 | — | — | 1 day ago |
28Monitor | CVE-2026-96047No exploit | Windows Installer Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-416 | High7.0 | — | — | 1 day ago |
28Monitor | CVE-2026-96051No exploit | Windows USB Driver Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-125 | High7.0 | — | — | 1 day ago |
31Monitor | CVE-2026-96052No exploit | Windows Kernel Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 21h2 · CWE-191 | High7.8 | — | — | 1 day ago |
31Monitor | CVE-2026-96053No exploit | Windows Task Scheduler Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-77 | High7.8 | — | — | 1 day ago |
28Monitor | CVE-2026-96054No exploit | Microsoft Color Management Remote Code Execution Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-122 | High7.0 | — | — | 1 day ago |
31Monitor | CVE-2026-96055No exploit | Windows USB Driver Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-122 | High7.8 | — | — | 1 day ago |
31Monitor | CVE-2026-96056No exploit | Windows USB Driver Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-122 | High7.8 | — | — | 1 day ago |
31Monitor | CVE-2026-96057No exploit | Windows USB Driver Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-122 | High7.8 | — | — | 1 day ago |
31Monitor | CVE-2026-96060No exploit | Windows Installer Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-125 | High7.8 | — | — | 1 day ago |
28Monitor | CVE-2026-96061No exploit | Windows Installer Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-416 | High7.0 | — | — | 1 day ago |
31Monitor | CVE-2026-96062No exploit | Windows Installer Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-122 | High7.8 | — | — | 1 day ago |
35Monitor | CVE-2026-96064No exploit | Windows Domain Name Service Remote Code Execution Vulnerabilitymicrosoft · windows server 2016 · CWE-122 | High8.8 | — | — | 1 day ago |
31Monitor | CVE-2026-96066No exploit | Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1809 · CWE-121 | High7.8 | — | — | 1 day ago |
39Monitor | CVE-2026-96067No exploit | Microsoft Color Management Remote Code Execution Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-190 | Critical9.8 | — | — | 1 day ago |
28Monitor | CVE-2026-96072No exploit | Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-416 | High7.0 | — | — | 1 day ago |
28Monitor | CVE-2026-96073No exploit | Windows Installer Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-416 | High7.0 | — | — | 1 day ago |
31Monitor | CVE-2026-96074No exploit | Windows AppX Package Manager Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-122 | High7.8 | — | — | 1 day ago |
28Monitor | CVE-2026-96075No exploit | Windows Feedback Hub Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 21h2 · CWE-362 | High7.0 | — | — | 1 day ago |
31Monitor | CVE-2026-96076No exploit | Windows DIAL Client Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-416 | High7.8 | — | — | 1 day ago |
30Monitor | CVE-2026-96077No exploit | Windows TCP/IP Denial of Service Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-476 | High7.5 | — | — | 1 day ago |
39Monitor | CVE-2026-96078No exploit | Microsoft Color Management Remote Code Execution Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-122 | Critical9.8 | — | — | 1 day ago |
30Monitor | CVE-2026-96081No exploit | Windows Rich Text Edit Control Remote Code Execution Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-122 | High7.5 | — | — | 1 day ago |
31Monitor | CVE-2026-96084No exploit | Graphic Fonts Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 21h2 · CWE-122 | High7.8 | — | — | 1 day ago |
31Monitor | CVE-2026-96085No exploit | Windows Installer Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-122 | High7.8 | — | — | 1 day ago |
28Monitor | CVE-2026-96088No exploit | Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerabilitymicrosoft · windows 11 version 23h2 · CWE-362 | High7.0 | — | — | 1 day ago |
32Monitor | CVE-2026-96092No exploit | Windows Domain Name Service Remote Code Execution Vulnerabilitymicrosoft · windows server 2025 · CWE-416 | High8.1 | — | — | 1 day ago |
28Monitor | CVE-2026-96097No exploit | Windows Brokering File System Elevation of Privilege Vulnerabilitymicrosoft · windows 11 version 24h2 · CWE-763 | High7.0 | — | — | 1 day ago |
31Monitor | CVE-2026-96102No exploit | Windows TCP/IP Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-122 | High7.8 | — | — | 1 day ago |
31Monitor | CVE-2026-96103No exploit | Desktop Window Manager Elevation of Privilege Vulnerabilitymicrosoft · windows 11 version 23h2 · CWE-122 | High7.8 | — | — | 1 day ago |
28Monitor | CVE-2026-96107No exploit | Windows Phone Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-476 | High7.0 | — | — | 1 day ago |
32Monitor | CVE-2026-96115No exploit | Windows DHCP Client Elevation of Privilege Vulnerabilitymicrosoft · windows 11 version 24h2 · CWE-122 | High8.0 | — | — | 1 day ago |
31Monitor | CVE-2026-96117No exploit | Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-122 | High7.8 | — | — | 1 day ago |
31Monitor | CVE-2026-96122No exploit | Windows Graphics Kernel Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-822 | High7.8 | — | — | 1 day ago |
28Monitor | CVE-2026-96124No exploit | Windows Graphics Kernel Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-416 | High7.0 | — | — | 1 day ago |
31Monitor | CVE-2026-96126No exploit | Windows Graphics Kernel Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-122 | High7.8 | — | — | 1 day ago |
31Monitor | CVE-2026-96127No exploit | Windows Biometric Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-122 | High7.8 | — | — | 1 day ago |
31Monitor | CVE-2026-96129No exploit | Windows Kernel Elevation of Privilege Vulnerabilitymicrosoft · windows 11 version 24h2 · CWE-829 | High7.8 | — | — | 1 day ago |
30Monitor | CVE-2026-96134No exploit | Windows DHCP Server Denial of Service Vulnerabilitymicrosoft · windows server 2016 · CWE-190 | High7.5 | — | — | 1 day ago |
28Monitor | CVE-2026-96139No exploit | Windows Kernel-Mode Drivers Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-822 | High7.0 | — | — | 1 day ago |
31Monitor | CVE-2026-96152No exploit | Windows Installer Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-121 | High7.8 | — | — | 1 day ago |
28Monitor | CVE-2026-96153No exploit | Windows Error Reporting Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-122 | High7.0 | — | — | 1 day ago |
28Monitor | CVE-2026-96155No exploit | Windows Audio Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-416 | High7.0 | — | — | 1 day ago |
39Monitor | CVE-2026-96157No exploit | Microsoft Windows Media Foundation Remote Code Execution Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-122 | Critical9.8 | — | — | 1 day ago |
28Monitor | CVE-2026-96158No exploit | Microsoft ActiveX Installer Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-362 | High7.0 | — | — | 1 day ago |
31Monitor | CVE-2026-96160No exploit | Windows Graphics Kernel Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-125 | High7.8 | — | — | 1 day ago |
31Monitor | CVE-2026-96162No exploit | Windows Clipboard Virtual Channel Extension Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-863 | High7.8 | — | — | 1 day ago |
35Monitor | CVE-2026-96164No exploit | Windows Imaging Component Remote Code Execution Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-122 | High8.8 | — | — | 1 day ago |
28Monitor | CVE-2026-96168No exploit | Windows Graphics Kernel Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-822 | High7.0 | — | — | 1 day ago |
28Monitor | CVE-2026-96171No exploit | Windows Graphics Kernel Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-362 | High7.0 | — | — | 1 day ago |
31Monitor | CVE-2026-96172No exploit | Desktop Window Manager Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1809 · CWE-763 | High7.8 | — | — | 1 day ago |
31Monitor | CVE-2026-96174No exploit | Desktop Window Manager Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1809 · CWE-763 | High7.8 | — | — | 1 day ago |
31Monitor | CVE-2026-96175No exploit | Desktop Window Manager Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1809 · CWE-763 | High7.8 | — | — | 1 day ago |
30Monitor | CVE-2026-96176No exploit | Windows DNS Denial of Service Vulnerabilitymicrosoft · windows 11 version 23h2 · CWE-401 | High7.5 | — | — | 1 day ago |
32Monitor | CVE-2026-96177No exploit | Windows Domain Name Service Remote Code Execution Vulnerabilitymicrosoft · windows server 2025 · CWE-416 | High8.1 | — | — | 1 day ago |
31Monitor | CVE-2026-96184No exploit | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-122 | High7.8 | — | — | 1 day ago |
31Monitor | CVE-2026-96845No exploit | Windows Task Scheduler Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-862 | High7.8 | — | — | 1 day ago |
28Monitor | CVE-2026-96969No exploit | Windows TCP/IP Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 21h2 · CWE-415 | High7.0 | — | — | 1 day ago |
28Monitor | CVE-2026-96971No exploit | Windows NetBIOS Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-416 | High7.0 | — | — | 1 day ago |
30Monitor | CVE-2026-96972No exploit | Windows DNS Server Information Disclosure Vulnerabilitymicrosoft · windows server 2016 · CWE-125 | High7.5 | — | — | 1 day ago |
28Monitor | CVE-2026-96973No exploit | Windows Encrypting File System (EFS) Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1809 · CWE-416 | High7.0 | — | — | 1 day ago |
28Monitor | CVE-2026-96978No exploit | Windows Credential User Interface Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-416 | High7.0 | — | — | 1 day ago |
30Monitor | CVE-2026-96993No exploit | Windows Performance Monitor Remote Code Execution Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-122 | High7.5 | — | — | 1 day ago |
28Monitor | CVE-2026-96994No exploit | Winsock Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-416 | High7.0 | — | — | 1 day ago |
28Monitor | CVE-2026-97000No exploit | Windows USM Communication Manager Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 21h2 · CWE-476 | High7.0 | — | — | 1 day ago |
30Monitor | CVE-2026-97002No exploit | Microsoft Windows VMSwitch Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1809 · CWE-125 | High7.5 | — | — | 1 day ago |
31Monitor | CVE-2026-97013No exploit | Windows Shell Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-843 | High7.8 | — | — | 1 day ago |
32Monitor | CVE-2025-61625No exploit | An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.fortinet · fortimanager · CWE-22 | High8.1 | — | — | 1 day ago |
37Monitor | CVE-2026-102166No exploit | Security Advisory 0227arista networks · wi-fi access point · CWE-798 | Critical9.4 | — | — | 1 day ago |
28Monitor | CVE-2026-104060No exploit | Worklenz < 3.3.0 SQL Injection via Reporting Members Endpointworklenz · worklenz · CWE-89 | High7.1 | — | — | 1 day ago |
30Monitor | CVE-2026-115483No exploit | Everest Forms <= 3.6.3 - Unauthenticated Arbitrary File Read via 'Signature' Field Meta Key Branch of attach_entry_fileswpeverest · everest forms – contact form, payment form, quiz, survey & custom form builder with ai · CWE-22 | High7.5 | — | — | 1 day ago |
28Monitor | CVE-2026-115538No exploit | Docker Engine overlay-network encryption rules are not restored after a firewalld reloaddocker · docker engine · CWE-693 | High7.0 | — | — | 1 day ago |
30Monitor | CVE-2026-115539No exploit | Cluster-API proxy overwrites forwarded client identity with its ownmoby · swarmkit · CWE-441 | High7.7 | — | — | 1 day ago |
28Monitor | CVE-2026-120803No exploit | MongoDB SBE $locf Window Accumulator Use-After-Free Enables Heap OOB Read and Server Crashmongodb · mongodb server · CWE-416 | High7.1 | — | — | 1 day ago |
32Monitor | CVE-2026-120804No exploit | Credential-handle retention via missing flag set in Windows Kerberos auth handlermongodb · mongodb server · CWE-772 | High8.2 | — | — | 1 day ago |
28Monitor | CVE-2026-120806No exploit | Authorization role-graph corruption via no-op cleanup filters in dropAllRolesFromDatabasemongodb · mongodb server · CWE-459 | High7.0 | — | — | 1 day ago |
30Monitor | CVE-2026-120807No exploit | Privilege escalation via fail-open user lookup in X.509 cluster-membership guardmongodb · mongodb server · CWE-754 | High7.5 | — | — | 1 day ago |
36Monitor | CVE-2026-120808No exploit | Certificate Validation Bypass via IPv6 trust-result skip in macOS TLS clientmongodb · mongodb server · CWE-295 | Critical9.1 | — | — | 1 day ago |
28Monitor | CVE-2026-120810No exploit | Uncontrolled Resource Consumption in MongoDB Server Aggregation Framework via Internal Expression Leads to Denial of Servicemongodb · mongodb server · CWE-770 | High7.1 | — | — | 1 day ago |
32Monitor | CVE-2026-120813No exploit | Plaintext storage of encrypted fields via duplicate keys in client-side encryption schema parsingmongodb · mongodb server · CWE-436 | High8.2 | — | — | 1 day ago |
30Monitor | CVE-2026-120814No exploit | MultiUpdateCoordinator state replay lets a shard administrator create a persistent cluster root usermongodb · mongodb server · CWE-250 | High7.5 | — | — | 1 day ago |
34Monitor | CVE-2026-120815No exploit | Incorrect Authorization Check in MongoDB Server Localhost Exception Leads to Unauthorized Administrative Accessmongodb · mongodb server · CWE-863 | High8.6 | — | — | 1 day ago |
28Monitor | CVE-2026-120976No exploit | Security Advisory 0216arista networks · eos · CWE-532 | High7.0 | — | — | 1 day ago |
28Monitor | CVE-2026-120977No exploit | Security Advisory 0217arista networks · eos · CWE-807 | High7.1 | — | — | 1 day ago |
34Monitor | CVE-2026-120982No exploit | Security Advisory 0207arista networks · eos · CWE-440 | High8.7 | — | — | 1 day ago |
30Monitor | CVE-2026-121287No exploit | Security Advisory 0221arista networks · eos · CWE-124 | High7.7 | — | — | 1 day ago |
37Monitor | CVE-2026-121289No exploit | Security Advisory 0208arista networks · eos · CWE-121 | Critical9.3 | — | — | 1 day ago |
33Monitor | CVE-2026-121290No exploit | Security Advisory 0209arista networks · eos · CWE-420 | High8.3 | — | — | 1 day ago |
33Monitor | CVE-2026-121291No exploit | Security Advisory 0222arista networks · eos · CWE-696 | High8.3 | — | — | 1 day ago |
33Monitor | CVE-2026-121292No exploit | Security Advisory 0222arista networks · eos · CWE-125 | High8.3 | — | — | 1 day ago |
36Monitor | CVE-2026-121295No exploit | Security Advisory 0223arista networks · eos · CWE-1284 | Critical9.2 | — | — | 1 day ago |
35Monitor | CVE-2026-121368No exploit | Security Advisory 0206arista networks · eos · CWE-787 | High8.9 | — | — | 1 day ago |
36Monitor | CVE-2026-121370No exploit | Security Advisory 0224arista networks · eos · CWE-770 | Critical9.2 | — | — | 1 day ago |
34Monitor | CVE-2026-121371No exploit | Security Advisory 0218arista networks · eos · CWE-22 | High8.7 | — | — | 1 day ago |
38Monitor | CVE-2026-121529No exploit | A origin validation error vulnerability in Fortinet FortiClientMac 7.4.0 through 7.4.7, FortiClientWindows 7.4.0 through 7.4.7, FortiClientWfortinet · forticlientmac · CWE-346 | Critical9.6 | — | — | 1 day ago |
33Monitor | CVE-2026-125337No exploit | Winter CMS: ImportExportController AJAX handlers bypass granular import/export permission gatewintercms · winter · CWE-862 | High8.3 | — | — | 1 day ago |
35Monitor | CVE-2026-26248No exploit | A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 5.0.0 through fortinet · fortisandbox · CWE-79 | High8.8 | — | — | 1 day ago |
30Monitor | CVE-2026-50077No exploit | Vulnerabilities in the QNX Virtual Machine (QVM) affect QNX Hypervisor and QNX Hypervisor for Safetyblackberry ltd · qnx hypervisor · CWE-787 | High7.7 | — | — | 1 day ago |
- CVE-2026-9604228Monitor
Windows Connection Manager Service Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitmicrosoft · windows 10 version 16071 day ago
- CVE-2026-9604328Monitor
Windows Connection Manager Service Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitmicrosoft · windows 10 version 16071 day ago
- CVE-2026-9604628Monitor
Windows Installer Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitmicrosoft · windows 10 version 16071 day ago
- CVE-2026-9604728Monitor
Windows Installer Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitmicrosoft · windows 10 version 16071 day ago
- CVE-2026-9605128Monitor
Windows USB Driver Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitmicrosoft · windows 10 version 16071 day ago
- CVE-2026-9605231Monitor
Windows Kernel Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitmicrosoft · windows 10 version 21h21 day ago
- CVE-2026-9605331Monitor
Windows Task Scheduler Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitmicrosoft · windows 10 version 16071 day ago
- CVE-2026-9605428Monitor
Microsoft Color Management Remote Code Execution Vulnerability
HighCVSS 7.0No exploitmicrosoft · windows 10 version 16071 day ago
- CVE-2026-9605531Monitor
Windows USB Driver Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitmicrosoft · windows 10 version 16071 day ago
- CVE-2026-9605631Monitor
Windows USB Driver Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitmicrosoft · windows 10 version 16071 day ago
- CVE-2026-9605731Monitor
Windows USB Driver Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitmicrosoft · windows 10 version 16071 day ago
- CVE-2026-9606031Monitor
Windows Installer Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitmicrosoft · windows 10 version 16071 day ago
- CVE-2026-9606128Monitor
Windows Installer Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitmicrosoft · windows 10 version 16071 day ago
- CVE-2026-9606231Monitor
Windows Installer Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitmicrosoft · windows 10 version 16071 day ago
- CVE-2026-9606435Monitor
Windows Domain Name Service Remote Code Execution Vulnerability
HighCVSS 8.8No exploitmicrosoft · windows server 20161 day ago
- CVE-2026-9606631Monitor
Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitmicrosoft · windows 10 version 18091 day ago
- CVE-2026-9606739Monitor
Microsoft Color Management Remote Code Execution Vulnerability
CriticalCVSS 9.8No exploitmicrosoft · windows 10 version 16071 day ago
- CVE-2026-9607228Monitor
Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitmicrosoft · windows 10 version 16071 day ago
- CVE-2026-9607328Monitor
Windows Installer Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitmicrosoft · windows 10 version 16071 day ago
- CVE-2026-9607431Monitor
Windows AppX Package Manager Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitmicrosoft · windows 10 version 16071 day ago
- CVE-2026-9607528Monitor
Windows Feedback Hub Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitmicrosoft · windows 10 version 21h21 day ago
- CVE-2026-9607631Monitor
Windows DIAL Client Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitmicrosoft · windows 10 version 16071 day ago
- CVE-2026-9607730Monitor
Windows TCP/IP Denial of Service Vulnerability
HighCVSS 7.5No exploitmicrosoft · windows 10 version 16071 day ago
- CVE-2026-9607839Monitor
Microsoft Color Management Remote Code Execution Vulnerability
CriticalCVSS 9.8No exploitmicrosoft · windows 10 version 16071 day ago
- CVE-2026-9608130Monitor
Windows Rich Text Edit Control Remote Code Execution Vulnerability
HighCVSS 7.5No exploitmicrosoft · windows 10 version 16071 day ago
- CVE-2026-9608431Monitor
Graphic Fonts Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitmicrosoft · windows 10 version 21h21 day ago
- CVE-2026-9608531Monitor
Windows Installer Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitmicrosoft · windows 10 version 16071 day ago
- CVE-2026-9608828Monitor
Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitmicrosoft · windows 11 version 23h21 day ago
- CVE-2026-9609232Monitor
Windows Domain Name Service Remote Code Execution Vulnerability
HighCVSS 8.1No exploitmicrosoft · windows server 20251 day ago
- CVE-2026-9609728Monitor
Windows Brokering File System Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitmicrosoft · windows 11 version 24h21 day ago
- CVE-2026-9610231Monitor
Windows TCP/IP Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitmicrosoft · windows 10 version 16071 day ago
- CVE-2026-9610331Monitor
Desktop Window Manager Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitmicrosoft · windows 11 version 23h21 day ago
- CVE-2026-9610728Monitor
Windows Phone Service Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitmicrosoft · windows 10 version 16071 day ago
- CVE-2026-9611532Monitor
Windows DHCP Client Elevation of Privilege Vulnerability
HighCVSS 8.0No exploitmicrosoft · windows 11 version 24h21 day ago
- CVE-2026-9611731Monitor
Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitmicrosoft · windows 10 version 16071 day ago
- CVE-2026-9612231Monitor
Windows Graphics Kernel Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitmicrosoft · windows 10 version 16071 day ago
- CVE-2026-9612428Monitor
Windows Graphics Kernel Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitmicrosoft · windows 10 version 16071 day ago
- CVE-2026-9612631Monitor
Windows Graphics Kernel Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitmicrosoft · windows 10 version 16071 day ago
- CVE-2026-9612731Monitor
Windows Biometric Service Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitmicrosoft · windows 10 version 16071 day ago
- CVE-2026-9612931Monitor
Windows Kernel Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitmicrosoft · windows 11 version 24h21 day ago
- CVE-2026-9613430Monitor
Windows DHCP Server Denial of Service Vulnerability
HighCVSS 7.5No exploitmicrosoft · windows server 20161 day ago
- CVE-2026-9613928Monitor
Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitmicrosoft · windows 10 version 16071 day ago
- CVE-2026-9615231Monitor
Windows Installer Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitmicrosoft · windows 10 version 16071 day ago
- CVE-2026-9615328Monitor
Windows Error Reporting Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitmicrosoft · windows 10 version 16071 day ago
- CVE-2026-9615528Monitor
Windows Audio Service Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitmicrosoft · windows 10 version 16071 day ago
- CVE-2026-9615739Monitor
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
CriticalCVSS 9.8No exploitmicrosoft · windows 10 version 16071 day ago
- CVE-2026-9615828Monitor
Microsoft ActiveX Installer Service Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitmicrosoft · windows 10 version 16071 day ago
- CVE-2026-9616031Monitor
Windows Graphics Kernel Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitmicrosoft · windows 10 version 16071 day ago
- CVE-2026-9616231Monitor
Windows Clipboard Virtual Channel Extension Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitmicrosoft · windows 10 version 16071 day ago
- CVE-2026-9616435Monitor
Windows Imaging Component Remote Code Execution Vulnerability
HighCVSS 8.8No exploitmicrosoft · windows 10 version 16071 day ago
- CVE-2026-9616828Monitor
Windows Graphics Kernel Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitmicrosoft · windows 10 version 16071 day ago
- CVE-2026-9617128Monitor
Windows Graphics Kernel Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitmicrosoft · windows 10 version 16071 day ago
- CVE-2026-9617231Monitor
Desktop Window Manager Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitmicrosoft · windows 10 version 18091 day ago
- CVE-2026-9617431Monitor
Desktop Window Manager Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitmicrosoft · windows 10 version 18091 day ago
- CVE-2026-9617531Monitor
Desktop Window Manager Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitmicrosoft · windows 10 version 18091 day ago
- CVE-2026-9617630Monitor
Windows DNS Denial of Service Vulnerability
HighCVSS 7.5No exploitmicrosoft · windows 11 version 23h21 day ago
- CVE-2026-9617732Monitor
Windows Domain Name Service Remote Code Execution Vulnerability
HighCVSS 8.1No exploitmicrosoft · windows server 20251 day ago
- CVE-2026-9618431Monitor
Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitmicrosoft · windows 10 version 16071 day ago
- CVE-2026-9684531Monitor
Windows Task Scheduler Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitmicrosoft · windows 10 version 16071 day ago
- CVE-2026-9696928Monitor
Windows TCP/IP Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitmicrosoft · windows 10 version 21h21 day ago
- CVE-2026-9697128Monitor
Windows NetBIOS Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitmicrosoft · windows 10 version 16071 day ago
- CVE-2026-9697230Monitor
Windows DNS Server Information Disclosure Vulnerability
HighCVSS 7.5No exploitmicrosoft · windows server 20161 day ago
- CVE-2026-9697328Monitor
Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitmicrosoft · windows 10 version 18091 day ago
- CVE-2026-9697828Monitor
Windows Credential User Interface Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitmicrosoft · windows 10 version 16071 day ago
- CVE-2026-9699330Monitor
Windows Performance Monitor Remote Code Execution Vulnerability
HighCVSS 7.5No exploitmicrosoft · windows 10 version 16071 day ago
- CVE-2026-9699428Monitor
Winsock Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitmicrosoft · windows 10 version 16071 day ago
- CVE-2026-9700028Monitor
Windows USM Communication Manager Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitmicrosoft · windows 10 version 21h21 day ago
- CVE-2026-9700230Monitor
Microsoft Windows VMSwitch Elevation of Privilege Vulnerability
HighCVSS 7.5No exploitmicrosoft · windows 10 version 18091 day ago
- CVE-2026-9701331Monitor
Windows Shell Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitmicrosoft · windows 10 version 16071 day ago
- CVE-2025-6162532Monitor
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.
HighCVSS 8.1No exploitfortinet · fortimanager1 day ago
- CVE-2026-10216637Monitor
Security Advisory 0227
CriticalCVSS 9.4No exploitarista networks · wi-fi access point1 day ago
- CVE-2026-10406028Monitor
Worklenz < 3.3.0 SQL Injection via Reporting Members Endpoint
HighCVSS 7.1No exploitworklenz · worklenz1 day ago
- CVE-2026-11548330Monitor
Everest Forms <= 3.6.3 - Unauthenticated Arbitrary File Read via 'Signature' Field Meta Key Branch of attach_entry_files
HighCVSS 7.5No exploitwpeverest · everest forms – contact form, payment form, quiz, survey & custom form builder with ai1 day ago
- CVE-2026-11553828Monitor
Docker Engine overlay-network encryption rules are not restored after a firewalld reload
HighCVSS 7.0No exploitdocker · docker engine1 day ago
- CVE-2026-11553930Monitor
Cluster-API proxy overwrites forwarded client identity with its own
HighCVSS 7.7No exploitmoby · swarmkit1 day ago
- CVE-2026-12080328Monitor
MongoDB SBE $locf Window Accumulator Use-After-Free Enables Heap OOB Read and Server Crash
HighCVSS 7.1No exploitmongodb · mongodb server1 day ago
- CVE-2026-12080432Monitor
Credential-handle retention via missing flag set in Windows Kerberos auth handler
HighCVSS 8.2No exploitmongodb · mongodb server1 day ago
- CVE-2026-12080628Monitor
Authorization role-graph corruption via no-op cleanup filters in dropAllRolesFromDatabase
HighCVSS 7.0No exploitmongodb · mongodb server1 day ago
- CVE-2026-12080730Monitor
Privilege escalation via fail-open user lookup in X.509 cluster-membership guard
HighCVSS 7.5No exploitmongodb · mongodb server1 day ago
- CVE-2026-12080836Monitor
Certificate Validation Bypass via IPv6 trust-result skip in macOS TLS client
CriticalCVSS 9.1No exploitmongodb · mongodb server1 day ago
- CVE-2026-12081028Monitor
Uncontrolled Resource Consumption in MongoDB Server Aggregation Framework via Internal Expression Leads to Denial of Service
HighCVSS 7.1No exploitmongodb · mongodb server1 day ago
- CVE-2026-12081332Monitor
Plaintext storage of encrypted fields via duplicate keys in client-side encryption schema parsing
HighCVSS 8.2No exploitmongodb · mongodb server1 day ago
- CVE-2026-12081430Monitor
MultiUpdateCoordinator state replay lets a shard administrator create a persistent cluster root user
HighCVSS 7.5No exploitmongodb · mongodb server1 day ago
- CVE-2026-12081534Monitor
Incorrect Authorization Check in MongoDB Server Localhost Exception Leads to Unauthorized Administrative Access
HighCVSS 8.6No exploitmongodb · mongodb server1 day ago
- CVE-2026-12097628Monitor
Security Advisory 0216
HighCVSS 7.0No exploitarista networks · eos1 day ago
- CVE-2026-12097728Monitor
Security Advisory 0217
HighCVSS 7.1No exploitarista networks · eos1 day ago
- CVE-2026-12098234Monitor
Security Advisory 0207
HighCVSS 8.7No exploitarista networks · eos1 day ago
- CVE-2026-12128730Monitor
Security Advisory 0221
HighCVSS 7.7No exploitarista networks · eos1 day ago
- CVE-2026-12128937Monitor
Security Advisory 0208
CriticalCVSS 9.3No exploitarista networks · eos1 day ago
- CVE-2026-12129033Monitor
Security Advisory 0209
HighCVSS 8.3No exploitarista networks · eos1 day ago
- CVE-2026-12129133Monitor
Security Advisory 0222
HighCVSS 8.3No exploitarista networks · eos1 day ago
- CVE-2026-12129233Monitor
Security Advisory 0222
HighCVSS 8.3No exploitarista networks · eos1 day ago
- CVE-2026-12129536Monitor
Security Advisory 0223
CriticalCVSS 9.2No exploitarista networks · eos1 day ago
- CVE-2026-12136835Monitor
Security Advisory 0206
HighCVSS 8.9No exploitarista networks · eos1 day ago
- CVE-2026-12137036Monitor
Security Advisory 0224
CriticalCVSS 9.2No exploitarista networks · eos1 day ago
- CVE-2026-12137134Monitor
Security Advisory 0218
HighCVSS 8.7No exploitarista networks · eos1 day ago
- CVE-2026-12152938Monitor
A origin validation error vulnerability in Fortinet FortiClientMac 7.4.0 through 7.4.7, FortiClientWindows 7.4.0 through 7.4.7, FortiClientW
CriticalCVSS 9.6No exploitfortinet · forticlientmac1 day ago
- CVE-2026-12533733Monitor
Winter CMS: ImportExportController AJAX handlers bypass granular import/export permission gate
HighCVSS 8.3No exploitwintercms · winter1 day ago
- CVE-2026-2624835Monitor
A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 5.0.0 through
HighCVSS 8.8No exploitfortinet · fortisandbox1 day ago
- CVE-2026-5007730Monitor
Vulnerabilities in the QNX Virtual Machine (QVM) affect QNX Hypervisor and QNX Hypervisor for Safety
HighCVSS 7.7No exploitblackberry ltd · qnx hypervisor1 day ago