Recently updated CVEs

Nov 11, 2026 UTC

Stack-based buffer overflow in Windows Credential Manager allows an authorized attacker to elevate privileges locally.

Nov 11, 2026 UTC

Heap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized attacker to elevate privileges over a network.

Nov 11, 2026 UTC

Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

Nov 11, 2026 UTC

Heap-based buffer overflow in Remote Desktop Client allows an authorized attacker to execute code locally.

Nov 11, 2026 UTC

Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.

Nov 11, 2026 UTC

Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally.

Nov 11, 2026 UTC

Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally.

Nov 11, 2026 UTC

Use after free in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.

Nov 11, 2026 UTC

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorized attacker to deny service locally.

Nov 11, 2026 UTC

Use of uninitialized resource in Windows Smart Card allows an authorized attacker to elevate privileges with a physical attack.

Nov 11, 2026 UTC

User interface (ui) misrepresentation of critical information in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

Nov 11, 2026 UTC

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

Nov 11, 2026 UTC

Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Nov 11, 2026 UTC

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Nov 11, 2026 UTC

Improper authorization in Windows Admin Center allows an authorized attacker to elevate privileges over a network.