| CVE-2026-105582 | HIGH | 7.0 | Release of invalid pointer or reference in Windows DWM Core Library allows an authorized attacker to elevate p… | 2026-11-10 |
| CVE-2026-105583 | HIGH | 7.0 | Release of invalid pointer or reference in Windows DWM Core Library allows an authorized attacker to elevate p… | 2026-11-10 |
| CVE-2026-105584 | MEDIUM | 5.5 | Use of externally-controlled format string in Windows Inventory Backup allows an authorized attacker to disclo… | 2026-11-10 |
| CVE-2026-105586 | HIGH | 7.0 | Null pointer dereference in Microsoft Windows SCSI Class System File allows an authorized attacker to elevate … | 2026-11-10 |
| CVE-2026-105587 | HIGH | 7.0 | Heap-based buffer overflow in Windows OLE DB allows an authorized attacker to elevate privileges locally.… | 2026-11-10 |
| CVE-2026-105588 | MEDIUM | 6.4 | Missing authentication for critical function in Windows DHCP Server allows an authorized attacker to elevate p… | 2026-11-10 |
| CVE-2026-105589 | HIGH | 7.0 | Use after free in Windows Wireless Networking allows an authorized attacker to elevate privileges locally.… | 2026-11-10 |
| CVE-2026-105590 | MEDIUM | 5.3 | Improper certificate validation in Windows Active Directory Certificate Services allows an authorized attacker… | 2026-11-10 |
| CVE-2026-105734 | HIGH | 7.0 | Incorrect permission assignment for critical resource in Azure Local allows an authorized attacker to elevate … | 2026-11-10 |
| CVE-2026-107496 | NA | N/A | Issue summary: Encrypting a CMS message to an EC certificate whose group order
is 1 may cause CMS_encrypt() or… | 2026-11-10 |
| CVE-2026-108401 | HIGH | 8.8 | Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to execute code ov… | 2026-11-10 |
| CVE-2026-108402 | MEDIUM | 5.3 | Missing release of memory after effective lifetime in Windows Layer-2 Bridge Network Driver allows an unauthor… | 2026-11-10 |
| CVE-2026-108403 | HIGH | 7.8 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.… | 2026-11-10 |
| CVE-2026-108404 | MEDIUM | 6.8 | Heap-based buffer overflow in Windows CD-ROM Driver allows an unauthorized attacker to execute code with a phy… | 2026-11-10 |
| CVE-2026-108405 | HIGH | 7.8 | Integer overflow or wraparound in Windows CD-ROM Driver allows an authorized attacker to elevate privileges lo… | 2026-11-10 |
| CVE-2026-108406 | HIGH | 7.0 | Use after free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locall… | 2026-11-10 |
| CVE-2026-108407 | HIGH | 7.8 | Out-of-bounds read in Windows GDI allows an authorized attacker to elevate privileges locally.… | 2026-11-10 |
| CVE-2026-108408 | MEDIUM | 5.5 | Out-of-bounds read in Windows Telephony Service allows an authorized attacker to disclose information locally.… | 2026-11-10 |
| CVE-2026-108409 | MEDIUM | 5.5 | Exposure of sensitive system information to an unauthorized control sphere in Windows Overlay Filter allows an… | 2026-11-10 |
| CVE-2026-108410 | MEDIUM | 5.5 | Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information l… | 2026-11-10 |
| CVE-2026-108411 | HIGH | 8.8 | Heap-based buffer overflow in Windows ODBC Driver allows an unauthorized attacker to execute code over a netwo… | 2026-11-10 |
| CVE-2026-108412 | HIGH | 7.8 | Heap-based buffer overflow in Windows Redirected Drive Buffering allows an authorized attacker to elevate priv… | 2026-11-10 |
| CVE-2026-108413 | HIGH | 7.0 | Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.… | 2026-11-10 |
| CVE-2026-108414 | HIGH | 7.0 | Use after free in Windows Projected File System Filter Driver allows an authorized attacker to elevate privile… | 2026-11-10 |
| CVE-2026-108415 | MEDIUM | 6.8 | Untrusted pointer dereference in Windows File Server Resource Management Service allows an unauthorized attack… | 2026-11-10 |
| CVE-2026-108416 | MEDIUM | 6.8 | Untrusted pointer dereference in Windows File Server Resource Management Service allows an unauthorized attack… | 2026-11-10 |
| CVE-2026-108417 | MEDIUM | 6.5 | Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a net… | 2026-11-10 |
| CVE-2026-108418 | MEDIUM | 6.5 | Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a net… | 2026-11-10 |
| CVE-2026-108419 | MEDIUM | 6.5 | Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a net… | 2026-11-10 |
| CVE-2026-108421 | HIGH | 7.5 | Out-of-bounds read in Windows File Server Resource Management Service allows an unauthorized attacker to eleva… | 2026-11-10 |
| CVE-2026-108423 | MEDIUM | 4.7 | Out-of-bounds read in Windows WinHTTP allows an authorized attacker to disclose information locally.… | 2026-11-10 |
| CVE-2026-108424 | MEDIUM | 6.5 | Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.… | 2026-11-10 |
| CVE-2026-108425 | MEDIUM | 5.9 | Out-of-bounds read in Windows DNS allows an unauthorized attacker to disclose information over a network.… | 2026-11-10 |
| CVE-2026-108469 | MEDIUM | 6.8 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Authenticati… | 2026-11-10 |
| CVE-2026-108470 | MEDIUM | 6.5 | Insufficiently protected credentials in Microsoft Authentication Library (MSAL) for Node.js allows an unauthor… | 2026-11-10 |
| CVE-2026-109454 | CRITICAL | 9.0 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office Share… | 2026-11-10 |
| CVE-2026-109455 | MEDIUM | 6.5 | Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information o… | 2026-11-10 |
| CVE-2026-109456 | MEDIUM | 4.6 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office Share… | 2026-11-10 |
| CVE-2026-109457 | HIGH | 8.0 | Improper neutralization of special elements used in an os command ('os command injection') in Azure CLI allows… | 2026-11-10 |
| CVE-2026-109459 | HIGH | 8.1 | Heap-based buffer overflow in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute… | 2026-11-10 |
| CVE-2026-109460 | MEDIUM | 5.5 | Exposure of sensitive information to an unauthorized actor in Microsoft Entra Private Network Connector allows… | 2026-11-10 |
| CVE-2026-109462 | MEDIUM | 4.4 | Improper check for certificate revocation in Azure Firmware allows an authorized attacker to bypass a security… | 2026-11-10 |
| CVE-2026-109463 | HIGH | 8.8 | Deserialization of untrusted data in Windows DNS allows an unauthorized attacker to execute code over a networ… | 2026-11-10 |
| CVE-2026-109464 | HIGH | 8.8 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code… | 2026-11-10 |
| CVE-2026-109466 | HIGH | 8.0 | Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over … | 2026-11-10 |
| CVE-2026-109467 | CRITICAL | 9.9 | Improper authentication in Azure DevOps allows an authorized attacker to execute code over a network.… | 2026-11-10 |
| CVE-2026-109472 | HIGH | 8.8 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code… | 2026-11-10 |
| CVE-2026-109473 | HIGH | 7.8 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.… | 2026-11-10 |
| CVE-2026-109475 | HIGH | 7.5 | Stack-based buffer overflow in .NET allows an unauthorized attacker to deny service over a network.… | 2026-11-10 |
| CVE-2026-109476 | MEDIUM | 6.1 | Improper encoding or escaping of output in ASP.NET Core allows an unauthorized attacker to disclose informatio… | 2026-11-10 |