Common Vulnerabilities and Exposures (CVE)

CVE-2026-97813

Oct 19, 2026 23:53:22 UTC

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information over a network.

CVE-2026-97812

Oct 19, 2026 23:53:22 UTC

Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.

CVE-2026-97811

Oct 19, 2026 23:53:21 UTC

Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.

CVE-2026-97810

Oct 19, 2026 23:53:21 UTC

Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

CVE-2026-97809

Oct 19, 2026 23:53:20 UTC

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-97808

Oct 19, 2026 23:53:19 UTC

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-97807

Oct 19, 2026 23:53:19 UTC

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-97806

Oct 19, 2026 23:53:18 UTC

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-97805

Oct 19, 2026 23:53:18 UTC

Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.

CVE-2026-97804

Oct 19, 2026 23:53:17 UTC

Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.

CVE-2026-97803

Oct 19, 2026 23:53:17 UTC

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-96113

Oct 19, 2026 23:53:16 UTC

Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network.

CVE-2026-96207

Oct 19, 2026 23:53:16 UTC

Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-94510

Oct 19, 2026 23:53:15 UTC

Authorization bypass through user-controlled key in Microsoft Bookings allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-88131

Oct 19, 2026 23:53:15 UTC

Deserialization of untrusted data in Microsoft Dataverse allows an unauthorized attacker to execute code over a network.