Recently updated CVEs

Nov 10, 2026 UTC

Creation of temporary file in directory with insecure permissions in .NET Aspire allows an authorized attacker to elevate privileges locally.

Nov 10, 2026 UTC

Improper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows an authorized attacker to execute code over a network.

Nov 10, 2026 UTC

Numeric truncation error in Windows SMB allows an authorized attacker to execute code over a network.

Nov 10, 2026 UTC

Time-of-check time-of-use (toctou) race condition in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

Nov 10, 2026 UTC

Uncontrolled resource consumption in Windows Remote Procedure Call allows an unauthorized attacker to deny service over a network.

Nov 10, 2026 UTC

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

Nov 10, 2026 UTC

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

Nov 10, 2026 UTC

Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.

Nov 10, 2026 UTC

Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.

Nov 10, 2026 UTC

Integer overflow or wraparound in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Nov 10, 2026 UTC

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Nov 10, 2026 UTC

Double free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.

Nov 10, 2026 UTC

Double free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.

Nov 10, 2026 UTC

Double free in Windows Cred SSProvider Protocol allows an unauthorized attacker to execute code over a network.

Nov 10, 2026 UTC

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Internet Information Services allows an unauthorized attacker to execute code over a network.