| CVE-2026-113823 | HIGH | 7.5 | Improper limitation of a pathname to a restricted directory ('path traversal') in Azure CycleCloud allows an u… | 2026-11-10 |
| CVE-2026-113825 | HIGH | 7.5 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Ser… | 2026-11-10 |
| CVE-2026-113842 | HIGH | 7.0 | Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally.… | 2026-11-10 |
| CVE-2026-113843 | HIGH | 7.8 | Improper authentication in Windows Remote Access Connection Manager allows an authorized attacker to elevate p… | 2026-11-10 |
| CVE-2026-113844 | MEDIUM | 5.5 | Improper access control in Windows NTFS allows an authorized attacker to perform tampering locally.… | 2026-11-10 |
| CVE-2026-113847 | HIGH | 7.8 | Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locall… | 2026-11-10 |
| CVE-2026-113848 | HIGH | 7.8 | Null pointer dereference in Windows NTFS allows an unauthorized attacker to execute code locally.… | 2026-11-10 |
| CVE-2026-113855 | HIGH | 7.5 | Use of uninitialized resource in Windows DNS allows an unauthorized attacker to execute code over an adjacent … | 2026-11-10 |
| CVE-2026-113856 | HIGH | 7.8 | Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.… | 2026-11-10 |
| CVE-2026-113859 | HIGH | 7.5 | Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over an adjacent network.… | 2026-11-10 |
| CVE-2026-113860 | HIGH | 7.0 | Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.… | 2026-11-10 |
| CVE-2026-113861 | HIGH | 7.5 | Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.… | 2026-11-10 |
| CVE-2026-113862 | HIGH | 8.1 | Use after free in Windows Network Address Translation (NAT) allows an unauthorized attacker to execute code ov… | 2026-11-10 |
| CVE-2026-113863 | HIGH | 8.8 | Heap-based buffer overflow in Windows DHCP Client allows an unauthorized attacker to elevate privileges over a… | 2026-11-10 |
| CVE-2026-113864 | MEDIUM | 6.4 | Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.… | 2026-11-10 |
| CVE-2026-113865 | HIGH | 7.8 | Time-of-check time-of-use (toctou) race condition in Windows Hyper-V allows an authorized attacker to elevate … | 2026-11-10 |
| CVE-2026-114146 | CRITICAL | 9.0 | Incorrect authorization in ASP.NET Core allows an authorized attacker to elevate privileges over a network.… | 2026-11-10 |
| CVE-2026-114147 | HIGH | 7.5 | Missing release of memory after effective lifetime in ASP.NET Core allows an unauthorized attacker to deny ser… | 2026-11-10 |
| CVE-2026-114149 | HIGH | 7.5 | Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a netwo… | 2026-11-10 |
| CVE-2026-114150 | MEDIUM | 5.9 | Use of uninitialized resource in ASP.NET Core allows an unauthorized attacker to disclose information over a n… | 2026-11-10 |
| CVE-2026-114151 | HIGH | 8.8 | Deserialization of untrusted data in Visual Studio allows an unauthorized attacker to execute code over a netw… | 2026-11-10 |
| CVE-2026-114152 | HIGH | 8.8 | Stack-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.… | 2026-11-10 |
| CVE-2026-114154 | HIGH | 7.5 | Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a netwo… | 2026-11-10 |
| CVE-2026-114155 | HIGH | 7.5 | Time-of-check time-of-use (toctou) race condition in .NET allows an authorized attacker to elevate privileges … | 2026-11-10 |
| CVE-2026-114156 | MEDIUM | 6.5 | Improper input validation in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a … | 2026-11-10 |
| CVE-2026-114157 | HIGH | 7.5 | Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core al… | 2026-11-10 |
| CVE-2026-114158 | HIGH | 8.8 | Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.… | 2026-11-10 |
| CVE-2026-114159 | HIGH | 8.8 | Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.… | 2026-11-10 |
| CVE-2026-114160 | CRITICAL | 9.8 | No cwe for this issue in Azure Managed Grafana allows an unauthorized attacker to elevate privileges over a ne… | 2026-11-10 |
| CVE-2026-114161 | HIGH | 7.8 | Improper limitation of a pathname to a restricted directory ('path traversal') in Azure CycleCloud allows an a… | 2026-11-10 |
| CVE-2026-114162 | CRITICAL | 9.1 | Incorrect authorization in Microsoft Graph allows an authorized attacker to elevate privileges over a network.… | 2026-11-10 |
| CVE-2026-114164 | HIGH | 8.8 | Integer underflow (wrap or wraparound) in Microsoft Windows Codecs Library allows an unauthorized attacker to … | 2026-11-10 |
| CVE-2026-114165 | HIGH | 7.8 | Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code… | 2026-11-10 |
| CVE-2026-114166 | MEDIUM | 5.5 | Buffer over-read in Windows Raw Image Extension allows an unauthorized attacker to disclose information locall… | 2026-11-10 |
| CVE-2026-114167 | HIGH | 7.8 | Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code… | 2026-11-10 |
| CVE-2026-114169 | HIGH | 8.8 | Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over… | 2026-11-10 |
| CVE-2026-114170 | HIGH | 7.8 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.… | 2026-11-10 |
| CVE-2026-114171 | HIGH | 8.8 | User interface (ui) misrepresentation of critical information in Visual Studio Code allows an unauthorized att… | 2026-11-10 |
| CVE-2026-115559 | NA | N/A | IMAP4.starttls() wraps the socket in TLS but leaves self._readbuf, imaplib's own read-ahead buffer, untouched.… | 2026-11-10 |
| CVE-2026-116697 | MEDIUM | 5.9 | Null pointer dereference in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to de… | 2026-11-10 |
| CVE-2026-116698 | HIGH | 7.5 | Use after free in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over … | 2026-11-10 |
| CVE-2026-116699 | MEDIUM | 6.5 | Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execut… | 2026-11-10 |
| CVE-2026-116700 | MEDIUM | 6.6 | Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges wi… | 2026-11-10 |
| CVE-2026-116706 | HIGH | 7.5 | Use after free in Windows Link Layer Topology Discovery Protocol allows an unauthorized attacker to execute co… | 2026-11-10 |
| CVE-2026-116707 | HIGH | 7.0 | Use after free in Windows Link Layer Topology Discovery Protocol allows an authorized attacker to elevate priv… | 2026-11-10 |
| CVE-2026-116710 | HIGH | 8.1 | Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a n… | 2026-11-10 |
| CVE-2026-116714 | HIGH | 7.8 | Incorrect authorization in Windows AppX Deployment Service allows an authorized attacker to elevate privileges… | 2026-11-10 |
| CVE-2026-116717 | HIGH | 8.8 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.… | 2026-11-10 |
| CVE-2026-116718 | HIGH | 7.5 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a net… | 2026-11-10 |
| CVE-2026-116719 | HIGH | 8.8 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a net… | 2026-11-10 |