| CVE-2026-125334 | MEDIUM | 5.9 | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to … | 2026-11-10 |
| CVE-2026-125335 | LOW | 3.7 | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to … | 2026-11-10 |
| CVE-2026-125336 | HIGH | 7.4 | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to … | 2026-11-10 |
| CVE-2026-126087 | HIGH | 8.8 | Untrusted search path in the cross-user process launcher in Open Job Description (OpenJD) Sessions for Python … | 2026-11-10 |
| CVE-2026-126132 | NA | N/A | When a message was forwarded inline, edited as new, or had an attachment dragged into a compose window, a spec… | 2026-11-10 |
| CVE-2026-126133 | NA | N/A | When a CalDAV or ICS calendar was accessed through an HTTP proxy that requested authentication, Thunderbird co… | 2026-11-10 |
| CVE-2026-126134 | NA | N/A | Thunderbird allowed feed subscriptions to file: URLs that point to a network share. If a user was tricked into… | 2026-11-10 |
| CVE-2026-126135 | NA | N/A | If an attacker was able to perform a man-in-the-middle attack on an SMTP or POP3 server connection using START… | 2026-11-10 |
| CVE-2026-126136 | NA | N/A | For Exchange accounts using EWS or Microsoft Graph with OAuth2 authentication, Thunderbird sent the OAuth2 acc… | 2026-11-10 |
| CVE-2026-14968 | NA | N/A | EDK2 contains vulnerabilities in
BIOS where skilled and privileged users or attackers may cause “Out-of-bounds… | 2026-11-10 |
| CVE-2026-18448 | NA | N/A | EDK2 contains a vulnerability in BIOS
where a privileged attacker may cause “Exposure of Sensitive Information… | 2026-11-10 |
| CVE-2026-40273 | MEDIUM | 4.0 | Improper Input Validation in a procnto message handler could allow an attacker with local access to send a cra… | 2026-11-10 |
| CVE-2026-40274 | MEDIUM | 4.0 | Invalid Pointer Reference in the TimerSettime() system call could allow an attacker with local access to arm a… | 2026-11-10 |
| CVE-2026-40275 | HIGH | 8.4 | Heap-based Buffer Overflow in the DCMD_PROC_EVENT handler of the procnto could allow an attacker with local ac… | 2026-11-10 |
| CVE-2026-54436 | HIGH | 7.4 | Heap-based Buffer
Overflow in the io-char library's DCMD_CHR_WAITINFO devctl() handler could
allow an attacker… | 2026-11-10 |
| CVE-2026-54437 | MEDIUM | 6.2 | Improper Input Validation in the io-char library's
DCMD_CHR_TCINJECTC devctl() handler could allow an attacker… | 2026-11-10 |
| CVE-2026-62903 | HIGH | 7.4 | Authentication bypass by capture-replay in SQL Server allows an unauthorized attacker to disclose information … | 2026-11-10 |
| CVE-2026-66801 | CRITICAL | 9.8 | Heap-based buffer overflow in Xbox allows an unauthorized attacker to execute code over a network.… | 2026-11-10 |
| CVE-2026-66813 | HIGH | 8.1 | Out-of-bounds read in SQL Server allows an unauthorized attacker to elevate privileges over a network.… | 2026-11-10 |
| CVE-2026-67372 | HIGH | 8.8 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.… | 2026-11-10 |
| CVE-2026-67374 | HIGH | 8.8 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.… | 2026-11-10 |
| CVE-2026-67375 | HIGH | 8.8 | Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.… | 2026-11-10 |
| CVE-2026-67382 | MEDIUM | 6.5 | Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a netwo… | 2026-11-10 |
| CVE-2026-67387 | HIGH | 8.8 | Untrusted pointer dereference in SQL Server allows an authorized attacker to elevate privileges over a network… | 2026-11-10 |
| CVE-2026-67391 | HIGH | 8.8 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.… | 2026-11-10 |
| CVE-2026-67632 | HIGH | 8.8 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.… | 2026-11-10 |
| CVE-2026-67637 | HIGH | 8.8 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.… | 2026-11-10 |
| CVE-2026-67646 | HIGH | 8.8 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.… | 2026-11-10 |
| CVE-2026-68783 | MEDIUM | 6.5 | Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a netwo… | 2026-11-10 |
| CVE-2026-69327 | HIGH | 7.4 | Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code locally.… | 2026-11-10 |
| CVE-2026-69565 | HIGH | 7.0 | Use after free in Remote Desktop Gateway Service allows an authorized attacker to execute code locally.… | 2026-11-10 |
| CVE-2026-69901 | HIGH | 7.5 | Origin validation error in Microsoft Teams for Android allows an unauthorized attacker to perform spoofing ove… | 2026-11-10 |
| CVE-2026-70003 | HIGH | 8.7 | Improper verification of cryptographic signature in JDBC Driver for SQL Server allows an unauthorized attacker… | 2026-11-10 |
| CVE-2026-70094 | HIGH | 8.8 | Untrusted search path in Visual Studio Code allows an unauthorized attacker to execute code over a network.… | 2026-11-10 |
| CVE-2026-70120 | HIGH | 7.0 | Use after free in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges locally.… | 2026-11-10 |
| CVE-2026-70182 | HIGH | 7.8 | Weak authentication in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.… | 2026-11-10 |
| CVE-2026-70231 | HIGH | 7.0 | Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to … | 2026-11-10 |
| CVE-2026-70240 | HIGH | 7.5 | Missing release of memory after effective lifetime in Windows Kerberos allows an unauthorized attacker to deny… | 2026-11-10 |
| CVE-2026-72998 | HIGH | 8.1 | Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.… | 2026-11-10 |
| CVE-2026-80094 | HIGH | 7.5 | Use after free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a ne… | 2026-11-10 |
| CVE-2026-80095 | CRITICAL | 9.0 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office Share… | 2026-11-10 |
| CVE-2026-81384 | HIGH | 8.1 | Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network.… | 2026-11-10 |
| CVE-2026-83563 | HIGH | 7.8 | Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally.… | 2026-11-10 |
| CVE-2026-83684 | HIGH | 7.5 | Buffer over-read in Windows iSCSI Target Service allows an unauthorized attacker to disclose information over … | 2026-11-10 |
| CVE-2026-83894 | HIGH | 7.0 | Use after free in RPC Runtime allows an authorized attacker to elevate privileges locally.… | 2026-11-10 |
| CVE-2026-83953 | MEDIUM | 5.5 | Improper neutralization of special elements used in a command ('command injection') in Github Copilot allows a… | 2026-11-10 |
| CVE-2026-84004 | MEDIUM | 5.5 | Processor optimization removal or modification of security-critical code in AMD Zen allows an authorized attac… | 2026-11-10 |
| CVE-2026-84005 | MEDIUM | 5.5 | Processor optimization removal or modification of security-critical code in AMD Zen allows an authorized attac… | 2026-11-10 |
| CVE-2026-84010 | HIGH | 7.5 | Exposed dangerous method or function in SQL Server allows an authorized attacker to elevate privileges over a … | 2026-11-10 |
| CVE-2026-85801 | HIGH | 7.8 | Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to … | 2026-11-10 |