CVE watch

CVE-2026-83640 published: Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.

CVE-2026-83639 published: Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83638 published: Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-83637 published: Out-of-bounds read in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

CVE-2026-83635 published: Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network.

CVE-2026-83634 published: Double free in Windows BitLocker allows an authorized attacker to elevate privileges locally.

CVE-2026-83588 published: Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-83587 published: Untrusted pointer dereference in Windows Core Messaging allows an authorized attacker to elevate privileges locally.

CVE-2026-83586 published: Weak authentication in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83585 published: Use of externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-83584 published: Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally.

CVE-2026-83583 published: Improper access control in Windows Geotag Broker allows an authorized attacker to elevate privileges locally.

CVE-2026-100217 published: Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally.

CVE-2026-100216 published: Stack-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.

CVE-2026-100215 published: Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally.

CVE-2026-100214 published: Deserialization of untrusted data in Dynamics Business Central allows an authorized attacker to execute code over a network.

CVE-2026-100212 published: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-100211 published: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-100210 published: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-100209 published: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.