| CVE-2026-118137 | HIGH | 7.8 | Improper authorization in Windows FTP Service allows an authorized attacker to elevate privileges locally.… | 2026-11-10 |
| CVE-2026-118138 | HIGH | 7.8 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Client … | 2026-11-10 |
| CVE-2026-118140 | MEDIUM | 5.5 | Improper access control in Windows Server for NFS allows an authorized attacker to disclose information locall… | 2026-11-10 |
| CVE-2026-118141 | HIGH | 8.8 | Stack-based buffer overflow in Windows Client for NFS allows an unauthorized attacker to execute code over a n… | 2026-11-10 |
| CVE-2026-118142 | HIGH | 7.8 | Out-of-bounds read in Windows Distributed File System (DFS) allows an authorized attacker to elevate privilege… | 2026-11-10 |
| CVE-2026-118143 | MEDIUM | 6.8 | Out-of-bounds read in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical att… | 2026-11-10 |
| CVE-2026-118144 | MEDIUM | 6.6 | Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges with a ph… | 2026-11-10 |
| CVE-2026-118145 | HIGH | 7.5 | Use after free in Windows Function Discovery SSDP Provider allows an unauthorized attacker to execute code ove… | 2026-11-10 |
| CVE-2026-118146 | HIGH | 8.8 | Incorrect authorization in Active Directory Domain Services allows an authorized attacker to execute code over… | 2026-11-10 |
| CVE-2026-118148 | HIGH | 7.5 | Improper authentication in Active Directory Domain Services allows an authorized attacker to elevate privilege… | 2026-11-10 |
| CVE-2026-118149 | HIGH | 8.8 | Improper control of generation of code ('code injection') in Microsoft Exchange Server allows an authorized at… | 2026-11-10 |
| CVE-2026-118150 | HIGH | 8.8 | Authorization bypass through user-controlled key in Microsoft Exchange Server allows an authorized attacker to… | 2026-11-10 |
| CVE-2026-118151 | HIGH | 7.2 | External control of file name or path in Microsoft Exchange Server allows an authorized attacker to elevate pr… | 2026-11-10 |
| CVE-2026-118152 | MEDIUM | 6.5 | Cross-site request forgery (csrf) in Microsoft Exchange Server allows an unauthorized attacker to perform spoo… | 2026-11-10 |
| CVE-2026-118153 | HIGH | 7.5 | Inefficient algorithmic complexity in Microsoft Exchange Server allows an unauthorized attacker to deny servic… | 2026-11-10 |
| CVE-2026-118154 | HIGH | 8.8 | Reliance on untrusted inputs in a security decision in Microsoft Exchange Server allows an authorized attacker… | 2026-11-10 |
| CVE-2026-118157 | HIGH | 7.2 | Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a ne… | 2026-11-10 |
| CVE-2026-118207 | HIGH | 8.8 | Improper input validation in Microsoft Exchange Server allows an authorized attacker to execute code over a ne… | 2026-11-10 |
| CVE-2026-118208 | HIGH | 7.1 | Improper access control in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a … | 2026-11-10 |
| CVE-2026-118213 | MEDIUM | 5.9 | Relative path traversal in Windows Deployment Services allows an unauthorized attacker to disclose information… | 2026-11-10 |
| CVE-2026-118214 | MEDIUM | 6.5 | Use of uninitialized resource in Windows Advanced Rasterization Platform allows an authorized attacker to disc… | 2026-11-10 |
| CVE-2026-118215 | HIGH | 7.8 | Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges … | 2026-11-10 |
| CVE-2026-118216 | HIGH | 8.8 | Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges … | 2026-11-10 |
| CVE-2026-118217 | HIGH | 8.8 | Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges … | 2026-11-10 |
| CVE-2026-118218 | HIGH | 8.8 | Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges … | 2026-11-10 |
| CVE-2026-118219 | HIGH | 8.8 | Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges … | 2026-11-10 |
| CVE-2026-118220 | HIGH | 7.8 | Double free in Windows Multiple Provider Router allows an authorized attacker to elevate privileges locally.… | 2026-11-10 |
| CVE-2026-118221 | HIGH | 8.8 | Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate… | 2026-11-10 |
| CVE-2026-118222 | HIGH | 7.8 | Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate… | 2026-11-10 |
| CVE-2026-118223 | HIGH | 7.8 | Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges … | 2026-11-10 |
| CVE-2026-118224 | HIGH | 7.8 | Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges … | 2026-11-10 |
| CVE-2026-118225 | HIGH | 8.8 | Inclusion of functionality from untrusted control sphere in Windows Advanced Rasterization Platform allows an … | 2026-11-10 |
| CVE-2026-118226 | HIGH | 8.8 | Stack-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevat… | 2026-11-10 |
| CVE-2026-118227 | HIGH | 8.8 | Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate… | 2026-11-10 |
| CVE-2026-118228 | HIGH | 8.8 | Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate… | 2026-11-10 |
| CVE-2026-118229 | HIGH | 8.8 | Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate… | 2026-11-10 |
| CVE-2026-118232 | HIGH | 8.8 | Out-of-bounds read in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privile… | 2026-11-10 |
| CVE-2026-118277 | HIGH | 8.8 | Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate… | 2026-11-10 |
| CVE-2026-118278 | HIGH | 8.8 | Out-of-bounds read in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privile… | 2026-11-10 |
| CVE-2026-118279 | HIGH | 8.8 | Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate… | 2026-11-10 |
| CVE-2026-118280 | HIGH | 7.8 | Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate… | 2026-11-10 |
| CVE-2026-118283 | HIGH | 8.8 | Stack-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevat… | 2026-11-10 |
| CVE-2026-118288 | HIGH | 7.0 | Incorrect permission assignment for critical resource in Azure File Sync allows an authorized attacker to elev… | 2026-11-10 |
| CVE-2026-118292 | HIGH | 8.8 | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a n… | 2026-11-10 |
| CVE-2026-118293 | HIGH | 8.8 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.… | 2026-11-10 |
| CVE-2026-118294 | HIGH | 8.8 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a ne… | 2026-11-10 |
| CVE-2026-118295 | HIGH | 8.8 | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a n… | 2026-11-10 |
| CVE-2026-118296 | HIGH | 8.8 | Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.… | 2026-11-10 |
| CVE-2026-118297 | HIGH | 8.8 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a ne… | 2026-11-10 |
| CVE-2026-118298 | HIGH | 8.8 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a ne… | 2026-11-10 |