Common Vulnerabilities and Exposures (CVE)
CVE-2026-65778
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
CVE-2026-65780
Double free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
CVE-2026-65779
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
CVE-2026-65777
Inadequate encryption strength in Windows Active Directory allows an authorized attacker to bypass a security feature over a network.
CVE-2026-65776
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-65775
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-65774
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-65773
Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-65679
Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network.
CVE-2026-65680
Improper link resolution before file access ('link following') in Microsoft OneDrive allows an authorized attacker to elevate privileges locally.
CVE-2026-65681
Null pointer dereference in Windows iSCSI Target Service allows an unauthorized attacker to deny service over a network.
CVE-2026-65673
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Entra Connect Sync allows an authorized attacker to elevate privileges locally.
CVE-2026-62882
Insufficiently protected credentials in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-64921
Missing authentication for critical function in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-64919
Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.