| CVE-2026-85838 | HIGH | 8.8 | Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execut… | 2026-11-10 |
| CVE-2026-85839 | HIGH | 8.8 | Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execut… | 2026-11-10 |
| CVE-2026-85844 | CRITICAL | 9.8 | Authentication bypass using an alternate path or channel in Windows Kerberos allows an unauthorized attacker t… | 2026-11-10 |
| CVE-2026-85862 | HIGH | 7.0 | Double free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.… | 2026-11-10 |
| CVE-2026-85907 | MEDIUM | 4.4 | Improper authentication in Windows SSDP Service allows an authorized attacker to elevate privileges locally.… | 2026-11-10 |
| CVE-2026-85923 | HIGH | 8.8 | Authorization bypass through user-controlled key in Azure DevOps Server allows an authorized attacker to eleva… | 2026-11-10 |
| CVE-2026-85929 | HIGH | 7.8 | Incorrect permission assignment for critical resource in Windows Brokering File System allows an authorized at… | 2026-11-10 |
| CVE-2026-85942 | HIGH | 7.8 | Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate pri… | 2026-11-10 |
| CVE-2026-88111 | HIGH | 7.5 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.… | 2026-11-10 |
| CVE-2026-88176 | HIGH | 8.8 | Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over … | 2026-11-10 |
| CVE-2026-88187 | HIGH | 8.0 | Heap-based buffer overflow in Windows Bluetooth A2DP driver allows an authorized attacker to elevate privilege… | 2026-11-10 |
| CVE-2026-88211 | MEDIUM | 5.7 | Out-of-bounds read in Graphic Fonts allows an authorized attacker to disclose information over a network.… | 2026-11-10 |
| CVE-2026-88212 | HIGH | 7.5 | Use after free in Windows Network Address Translation (NAT) allows an unauthorized attacker to execute code ov… | 2026-11-10 |
| CVE-2026-88213 | HIGH | 7.8 | Numeric truncation error in Windows Bluetooth Service allows an authorized attacker to elevate privileges loca… | 2026-11-10 |
| CVE-2026-88215 | MEDIUM | 6.4 | Use after free in Windows Filtering Platform (WFP) allows an authorized attacker to elevate privileges locally… | 2026-11-10 |
| CVE-2026-88216 | HIGH | 7.5 | Time-of-check time-of-use (toctou) race condition in Windows DHCP Server allows an authorized attacker to exec… | 2026-11-10 |
| CVE-2026-88217 | MEDIUM | 5.5 | Use of uninitialized resource in Windows Graphics Kernel allows an authorized attacker to disclose information… | 2026-11-10 |
| CVE-2026-88218 | CRITICAL | 9.8 | Double free in Windows DNS allows an unauthorized attacker to execute code over a network.… | 2026-11-10 |
| CVE-2026-88220 | MEDIUM | 5.5 | Buffer over-read in Windows Performance Counters allows an authorized attacker to disclose information locally… | 2026-11-10 |
| CVE-2026-88221 | HIGH | 7.0 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges local… | 2026-11-10 |
| CVE-2026-88222 | HIGH | 8.8 | Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execut… | 2026-11-10 |
| CVE-2026-88224 | HIGH | 7.0 | Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an au… | 2026-11-10 |
| CVE-2026-88227 | HIGH | 7.8 | Heap-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized … | 2026-11-10 |
| CVE-2026-88228 | HIGH | 7.0 | Heap-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized … | 2026-11-10 |
| CVE-2026-88229 | HIGH | 8.8 | Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a netw… | 2026-11-10 |
| CVE-2026-88230 | HIGH | 7.8 | Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally.… | 2026-11-10 |
| CVE-2026-88231 | MEDIUM | 5.7 | Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information over a network.… | 2026-11-10 |
| CVE-2026-88232 | HIGH | 7.8 | Use after free in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges loca… | 2026-11-10 |
| CVE-2026-88233 | HIGH | 7.8 | Improper authorization in Windows Task Scheduler allows an authorized attacker to elevate privileges locally.… | 2026-11-10 |
| CVE-2026-88234 | CRITICAL | 9.8 | Release of invalid pointer or reference in Windows iSCSI allows an unauthorized attacker to execute code over … | 2026-11-10 |
| CVE-2026-88235 | HIGH | 7.8 | Unintended proxy or intermediary ('confused deputy') in Servicing Stack Updates allows an authorized attacker … | 2026-11-10 |
| CVE-2026-88236 | HIGH | 7.5 | Null pointer dereference in Microsoft QUIC allows an unauthorized attacker to deny service over a network.… | 2026-11-10 |
| CVE-2026-88237 | HIGH | 7.0 | Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.… | 2026-11-10 |
| CVE-2026-88238 | HIGH | 7.8 | Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate pri… | 2026-11-10 |
| CVE-2026-88239 | HIGH | 7.8 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges lo… | 2026-11-10 |
| CVE-2026-88240 | HIGH | 8.0 | Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges over an … | 2026-11-10 |
| CVE-2026-88241 | HIGH | 7.8 | Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges … | 2026-11-10 |
| CVE-2026-88242 | HIGH | 7.0 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privi… | 2026-11-10 |
| CVE-2026-88243 | CRITICAL | 9.8 | Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to execute code over a network.… | 2026-11-10 |
| CVE-2026-88244 | HIGH | 7.5 | Use after free in Windows Link Layer Topology Discovery Protocol allows an unauthorized attacker to execute co… | 2026-11-10 |
| CVE-2026-88245 | HIGH | 7.8 | Missing authentication for critical function in Windows Brokering File System allows an authorized attacker to… | 2026-11-10 |
| CVE-2026-88247 | MEDIUM | 5.5 | Use of uninitialized resource in Windows Program Compatibility Assistant Service allows an authorized attacker… | 2026-11-10 |
| CVE-2026-88249 | HIGH | 8.8 | Use after free in Windows Client for NFS allows an unauthorized attacker to execute code over a network.… | 2026-11-10 |
| CVE-2026-88822 | NA | N/A | Issue summary: QUIC, when performing automated peer detection, may allow
uninitialized stack data to leak into… | 2026-11-10 |
| CVE-2026-88823 | NA | N/A | Issue summary: The AES-GCM-SIV implementation treats a zero-length Additional
Authenticated Data (AAD) update … | 2026-11-10 |
| CVE-2026-94507 | HIGH | 7.8 | Heap-based buffer overflow in Windows DirectX allows an authorized attacker to elevate privileges locally.… | 2026-11-10 |
| CVE-2026-94511 | HIGH | 8.8 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.… | 2026-11-10 |
| CVE-2026-94513 | HIGH | 8.0 | Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.… | 2026-11-10 |
| CVE-2026-94514 | HIGH | 7.0 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel … | 2026-11-10 |
| CVE-2026-94515 | HIGH | 7.8 | Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate… | 2026-11-10 |