Common Vulnerabilities and Exposures (CVE)

CVE-2026-96225

Oct 19, 2026 23:51:25 UTC

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

CVE-2026-96231

Oct 19, 2026 23:51:25 UTC

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

CVE-2026-85363

Oct 19, 2026 23:51:24 UTC

Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-84008

Oct 19, 2026 23:51:24 UTC

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

CVE-2026-83520

Oct 19, 2026 23:51:23 UTC

Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.

CVE-2026-70035

Oct 19, 2026 23:51:23 UTC

Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network.

CVE-2026-70007

Oct 19, 2026 23:51:22 UTC

Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network.

CVE-2026-96206

Oct 19, 2026 23:51:22 UTC

Use of uninitialized resource in Windows Subsystem for Linux allows an authorized attacker to disclose information locally.

CVE-2026-96188

Oct 19, 2026 23:51:21 UTC

External control of system or configuration setting in Microsoft PowerToys allows an authorized attacker to elevate privileges locally.

CVE-2026-96186

Oct 19, 2026 23:51:21 UTC

Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.

CVE-2026-96044

Oct 19, 2026 23:51:20 UTC

No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

CVE-2026-70343

Oct 19, 2026 23:51:20 UTC

Heap-based buffer overflow in Microsoft MPEG-2 Video Extension allows an unauthorized attacker to execute code over a network.

CVE-2026-94520

Oct 19, 2026 23:51:19 UTC

Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network.

CVE-2026-94512

Oct 19, 2026 23:51:19 UTC

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVE-2026-88207

Oct 19, 2026 23:51:18 UTC

Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.