Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-70354 |
|
Out-of-Bounds Write in Microsoft.WindowsDesktop.App.Runtime.win-arm64 (CVE-2026-70354)
out-of-bounds write in Microsoft.WindowsDesktop.App.Runtime.win-arm64 (CVE-2026-70354). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.0.30` or later.
|
| CVE-2026-70348 |
|
Vulnerability in microsoft (CVE-2026-70348)
vulnerability in microsoft (CVE-2026-70348). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-70347 |
|
Vulnerability in microsoft (CVE-2026-70347)
vulnerability in microsoft (CVE-2026-70347). Successful exploitation can lead to full system takeover.
|
| CVE-2026-70346 |
|
Vulnerability in microsoft (CVE-2026-70346)
vulnerability in microsoft (CVE-2026-70346). Successful exploitation can lead to full system takeover.
|
| CVE-2026-70345 |
|
Vulnerability in microsoft (CVE-2026-70345)
vulnerability in microsoft (CVE-2026-70345). Successful exploitation can lead to full system takeover.
|
| CVE-2026-70344 |
|
Vulnerability in microsoft (CVE-2026-70344)
vulnerability in microsoft (CVE-2026-70344). Successful exploitation can lead to full system takeover.
|
| CVE-2026-70340 |
|
Vulnerability in microsoft (CVE-2026-70340)
vulnerability in microsoft (CVE-2026-70340). Data can be tampered with by attackers.
|
| CVE-2026-70338 |
|
Code Injection in microsoft (CVE-2026-70338)
code injection in microsoft (CVE-2026-70338). Successful exploitation can lead to full system takeover.
|
| CVE-2026-70337 |
|
Vulnerability in path-traversal (CVE-2026-70337)
vulnerability in path-traversal (CVE-2026-70337). Successful exploitation can lead to full system takeover.
|
| CVE-2026-70336 |
|
Code Injection in microsoft (CVE-2026-70336)
code injection in microsoft (CVE-2026-70336). Successful exploitation can lead to full system takeover.
|
| CVE-2026-70335 |
|
OS Command Injection in microsoft (CVE-2026-70335)
OS command injection in microsoft (CVE-2026-70335). Successful exploitation can lead to full system takeover.
|
| CVE-2026-70330 |
|
Vulnerability in microsoft (CVE-2026-70330)
vulnerability in microsoft (CVE-2026-70330). Successful exploitation can lead to full system takeover.
|
| CVE-2026-70329 |
|
Vulnerability in microsoft (CVE-2026-70329)
vulnerability in microsoft (CVE-2026-70329). Successful exploitation can lead to full system takeover.
|
| CVE-2026-70328 |
|
Out-of-Bounds Read in microsoft (CVE-2026-70328)
vulnerability in microsoft (CVE-2026-70328). Confidential information can be exposed externally.
|
| CVE-2026-70327 |
|
Out-of-Bounds Read in microsoft (CVE-2026-70327)
vulnerability in microsoft (CVE-2026-70327). Confidential information can be exposed externally.
|
| CVE-2026-70326 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-70326)
SSRF in ssrf (CVE-2026-70326). Successful exploitation can lead to full system takeover.
|
| CVE-2026-70325 |
|
Vulnerability in microsoft (CVE-2026-70325)
vulnerability in microsoft (CVE-2026-70325). Confidential information can be exposed externally.
|
| CVE-2026-70324 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-70324)
SSRF in ssrf (CVE-2026-70324). Successful exploitation can lead to full system takeover.
|
| CVE-2026-70323 |
|
Vulnerability in microsoft (CVE-2026-70323)
vulnerability in microsoft (CVE-2026-70323). Confidential information can be exposed externally.
|
| CVE-2026-70322 |
|
Vulnerability in microsoft (CVE-2026-70322)
vulnerability in microsoft (CVE-2026-70322). Confidential information can be exposed externally.
|
| CVE-2026-70321 |
|
Unsafe Deserialization in deserialization (CVE-2026-70321)
vulnerability in deserialization (CVE-2026-70321). Successful exploitation can lead to full system takeover.
|
| CVE-2026-70320 |
|
Vulnerability in microsoft (CVE-2026-70320)
vulnerability in microsoft (CVE-2026-70320). Confidential information can be exposed externally.
|
| CVE-2026-70319 |
|
Vulnerability in microsoft (CVE-2026-70319)
vulnerability in microsoft (CVE-2026-70319). Confidential information can be exposed externally.
|
| CVE-2026-70318 |
|
Vulnerability in microsoft (CVE-2026-70318)
vulnerability in microsoft (CVE-2026-70318). Confidential information can be exposed externally.
|
| CVE-2026-70317 |
|
Vulnerability in microsoft (CVE-2026-70317)
vulnerability in microsoft (CVE-2026-70317). Confidential information can be exposed externally.
|
| CVE-2026-70316 |
|
Vulnerability in microsoft (CVE-2026-70316)
vulnerability in microsoft (CVE-2026-70316). Confidential information can be exposed externally.
|
| CVE-2026-70315 |
|
Out-of-Bounds Read in microsoft (CVE-2026-70315)
vulnerability in microsoft (CVE-2026-70315). Confidential information can be exposed externally.
|
| CVE-2026-70314 |
|
Vulnerability in microsoft (CVE-2026-70314)
vulnerability in microsoft (CVE-2026-70314). Confidential information can be exposed externally.
|
| CVE-2026-70313 |
|
Vulnerability in microsoft (CVE-2026-70313)
vulnerability in microsoft (CVE-2026-70313). Successful exploitation can lead to full system takeover.
|
| CVE-2026-70312 |
|
Vulnerability in microsoft (CVE-2026-70312)
vulnerability in microsoft (CVE-2026-70312). Confidential information can be exposed externally.
|
| CVE-2026-70311 |
|
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
|
| CVE-2026-70310 |
|
Out-of-Bounds Read in microsoft (CVE-2026-70310)
vulnerability in microsoft (CVE-2026-70310). Confidential information can be exposed externally.
|
| CVE-2026-70307 |
|
Use-After-Free in microsoft (CVE-2026-70307)
vulnerability in microsoft (CVE-2026-70307). Successful exploitation can lead to full system takeover.
|
| CVE-2026-70306 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2026-70306)
cross-site scripting in microsoft (CVE-2026-70306). Confidential information can be exposed externally.
|
| CVE-2026-70304 |
|
Vulnerability in microsoft (CVE-2026-70304)
vulnerability in microsoft (CVE-2026-70304). Successful exploitation can lead to full system takeover.
|
| CVE-2026-70130 |
|
Vulnerability in microsoft (CVE-2026-70130)
vulnerability in microsoft (CVE-2026-70130). Successful exploitation can lead to full system takeover.
|
| CVE-2026-69320 |
|
OS Command Injection in microsoft (CVE-2026-69320)
OS command injection in microsoft (CVE-2026-69320). Successful exploitation can lead to full system takeover.
|
| CVE-2026-69306 |
|
Vulnerability in microsoft (CVE-2026-69306)
vulnerability in microsoft (CVE-2026-69306). Confidential information can be exposed externally.
|
| CVE-2026-69278 |
|
Vulnerability in microsoft (CVE-2026-69278)
vulnerability in microsoft (CVE-2026-69278). Successful exploitation can lead to full system takeover.
|
| CVE-2026-68821 |
|
Privilege Escalation in microsoft (CVE-2026-68821)
vulnerability in microsoft (CVE-2026-68821). Successful exploitation can lead to full system takeover.
|
| CVE-2026-68820 KEV |
|
[KEV] Use-After-Free in Microsoft windows-10-1607 (CVE-2026-68820)
vulnerability in Microsoft windows-10-1607 (CVE-2026-68820). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2026-68819 |
|
Vulnerability in microsoft (CVE-2026-68819)
vulnerability in microsoft (CVE-2026-68819). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-68817 |
|
Vulnerability in microsoft (CVE-2026-68817)
vulnerability in microsoft (CVE-2026-68817). Successful exploitation can lead to full system takeover.
|
| CVE-2026-69223 |
|
SSRF (Server-Side Request Forgery) in apache (CVE-2026-69223)
SSRF in apache (CVE-2026-69223). Confidential information can be exposed externally.
|
| CVE-2026-68816 |
|
Vulnerability in microsoft (CVE-2026-68816)
vulnerability in microsoft (CVE-2026-68816). Successful exploitation can lead to full system takeover.
|
| CVE-2026-68815 |
|
Vulnerability in microsoft (CVE-2026-68815)
vulnerability in microsoft (CVE-2026-68815). Successful exploitation can lead to full system takeover.
|
| CVE-2026-68814 |
|
Out-of-Bounds Read in microsoft (CVE-2026-68814)
vulnerability in microsoft (CVE-2026-68814). Successful exploitation can lead to full system takeover.
|
| CVE-2026-68813 |
|
Out-of-Bounds Read in microsoft (CVE-2026-68813)
vulnerability in microsoft (CVE-2026-68813). Confidential information can be exposed externally.
|
| CVE-2026-68812 |
|
Vulnerability in microsoft (CVE-2026-68812)
vulnerability in microsoft (CVE-2026-68812). Successful exploitation can lead to full system takeover.
|
| CVE-2026-68811 |
|
Vulnerability in microsoft (CVE-2026-68811)
vulnerability in microsoft (CVE-2026-68811). Successful exploitation can lead to full system takeover.
|