Common Vulnerabilities and Exposures (CVE)

CVE-2026-83509

Oct 17, 2026 03:55:52 UTC

Untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.

CVE-2026-83505

Oct 17, 2026 03:55:51 UTC

Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.

CVE-2026-83510

Oct 17, 2026 03:55:50 UTC

Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.

CVE-2026-70222

Oct 17, 2026 03:55:50 UTC

Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally.

CVE-2026-83873

Oct 17, 2026 03:55:49 UTC

Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally.

CVE-2026-83876

Oct 17, 2026 03:55:48 UTC

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.

CVE-2026-85936

Oct 17, 2026 03:55:47 UTC

Double free in Windows Shell allows an unauthorized attacker to execute code over a network.

CVE-2026-83579

Oct 17, 2026 03:55:46 UTC

Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges locally.

CVE-2026-83584

Oct 17, 2026 03:55:46 UTC

Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally.

CVE-2026-70051

Oct 17, 2026 03:55:45 UTC

Access of resource using incompatible type ('type confusion') in Windows SmartScreen allows an authorized attacker to elevate privileges locally.

CVE-2026-85851

Oct 17, 2026 03:55:44 UTC

Use after free in Windows SmartScreen allows an authorized attacker to elevate privileges locally.

CVE-2026-88127

Oct 17, 2026 03:55:43 UTC

Use after free in Windows SMB Server allows an authorized attacker to elevate privileges locally.

CVE-2026-101950

Oct 17, 2026 03:55:42 UTC

A Heap-based Buffer Overflow vulnerability in the SVR component of Juniper Networks Junos OS on SRX Series allows an unauthenticated network attacker to cause a denial of service and potentially compromise confidentiality and integrity via ...

CVE-2026-103946

Oct 17, 2026 03:55:41 UTC

An SQL injection vulnerability could allow an authenticated user to read or modify data stored by Nessus.

CVE-2026-108452

Oct 17, 2026 03:55:40 UTC

Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.