Recently updated CVEs

Nov 11, 2026 UTC

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Nov 11, 2026 UTC

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Nov 11, 2026 UTC

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Nov 11, 2026 UTC

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

Nov 11, 2026 UTC

Heap-based buffer overflow in Windows TPM allows an authorized attacker to elevate privileges locally.

Nov 11, 2026 UTC

Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.

Nov 11, 2026 UTC

Missing authorization in Aspire allows an unauthorized attacker to bypass a security feature over a network.

Nov 11, 2026 UTC

Incorrect permission assignment for critical resource in Azure File Sync allows an authorized attacker to elevate privileges locally.

Nov 11, 2026 UTC

Untrusted pointer dereference in Windows Storage Spaces Controller allows an unauthorized attacker to execute code over a network.

Nov 11, 2026 UTC

Time-of-check time-of-use (toctou) race condition in Windows Security Account Manager allows an unauthorized attacker to bypass a security feature over a network.

Nov 11, 2026 UTC

Use of uninitialized resource in Kernel Transaction Manager allows an authorized attacker to disclose information locally.

Nov 11, 2026 UTC

Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.

Nov 11, 2026 UTC

Improper link resolution before file access ('link following') in Windows Maps allows an authorized attacker to elevate privileges locally.

Nov 11, 2026 UTC

Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally.

Nov 11, 2026 UTC

Improper link resolution before file access ('link following') in Windows iSCSI allows an unauthorized attacker to elevate privileges over a network.