CVE-2026-62xxx records
Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.
814 records · Page 2 of 9
Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network.
UpdatedImproper authorization in Azure Portal allows an unauthorized attacker to disclose information over a network.
UpdatedImproper verification of cryptographic signature in Azure Data Factory allows an unauthorized attacker to elevate privileges over a network.
UpdatedImproper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally.
UpdatedMissing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.
UpdatedImproper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
UpdatedImproper input validation in Microsoft Edge for Android allows an unauthorized attacker to perform tampering over a network.
UpdatedImproper authentication in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
UpdatedImproper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
UpdatedImproper authentication in Azure Key Vault allows an unauthorized attacker to elevate privileges over a network.
UpdatedStack-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
UpdatedHeap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over an adjacent network.
UpdatedInteger overflow or wraparound in Windows GDI+ allows an unauthorized attacker to execute code over a network.
UpdatedConcurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an unauthorized attacker to execute code over a network.
Updated- CVE-2026-62819: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability 8.1 High
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
Updated Use after free in Active Directory Certificate Services (AD CS) allows an authorized attacker to execute code over a network.
UpdatedOut-of-bounds write in Windows DNS allows an unauthorized attacker to execute code over an adjacent network.
UpdatedHeap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network.
UpdatedUse after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.
UpdatedInteger underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
Updated- CVE-2026-62813: Windows Active Directory Domain Services Remote Code Execution Vulnerability 7.5 High
Use after free in Active Directory Domain Services allows an authorized attacker to execute code over a network.
Updated Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
Updated- CVE-2026-62810: Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability 7.8 High
Heap-based buffer overflow in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally.
Updated Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
UpdatedExternal control of file name or path in Microsoft Office Word allows an unauthorized attacker to execute code locally.
UpdatedImproper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
UpdatedImproper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network.
UpdatedHeap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network.
UpdatedHeap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally.
UpdatedUntrusted pointer dereference in Windows Win32K allows an authorized attacker to disclose information locally.
UpdatedHeap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
UpdatedOut-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
UpdatedUse after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.
UpdatedBuffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.
UpdatedStack-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
UpdatedHeap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network.
UpdatedUse after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
UpdatedUse after free in Windows DNS allows an authorized attacker to execute code over a network.
UpdatedOut-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.
UpdatedHeap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.
UpdatedHeap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to execute code over a network.
Updated- CVE-2026-62783: Windows Remote Access Connection Manager Elevation of Privilege Vulnerability 7.8 High
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
Updated Out-of-bounds read in Windows SMB Client allows an unauthorized attacker to disclose information over a network.
UpdatedHeap-based buffer overflow in RPC Runtime allows an unauthorized attacker to execute code over a network.
UpdatedUse after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
UpdatedUse after free in Windows Schannel allows an authorized attacker to elevate privileges locally.
UpdatedUse after free in Windows DNS allows an unauthorized attacker to elevate privileges over a network.
UpdatedMissing authentication for critical function in Windows License Manager allows an authorized attacker to elevate privileges locally.
UpdatedImproper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
UpdatedIncorrect authorization in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to disclose information locally.
UpdatedUse after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
UpdatedUse after free in Windows Kerberos allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
Updated- CVE-2026-62771: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability 7.8 High
Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
Updated Heap-based buffer overflow in Windows Shell allows an authorized attacker to elevate privileges locally.
UpdatedNumeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
UpdatedStack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
UpdatedDouble free in Windows Kerberos allows an authorized attacker to elevate privileges locally.
UpdatedAccess of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
UpdatedImproper Handling of Insufficient Privileges vulnerability in Apache Accumulo. An authenticated, but low-privileged user without system permissions may issue a remote command to gracefully shutdown system components (compaction-coordinator, compactor, gc, manager, monitor, tserver, or sserver), leading to a denial of service. This issue affects Apache Accumulo 2.1.4 and 2.1.5. Users are recommen
UpdatedNull pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.
UpdatedImproper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
UpdatedAuthentication bypass by spoofing in Windows Netlogon allows an unauthorized attacker to perform spoofing over an adjacent network.
Updated- CVE-2026-62758: Windows Remote Access Connection Manager Elevation of Privilege Vulnerability 7.8 High
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
Updated Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to bypass a security feature over a network.
UpdatedStack-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.
UpdatedInteger overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges locally.
UpdatedPartial string comparison in Windows HTTP Protocol Stack allows an unauthorized attacker to perform tampering over an adjacent network.
UpdatedUse after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
UpdatedConcurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
UpdatedBuffer over-read in Windows Win32K allows an authorized attacker to disclose information locally.
UpdatedInteger underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
UpdatedHeap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
UpdatedOut-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.
UpdatedInteger underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
UpdatedInteger underflow (wrap or wraparound) in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
UpdatedUse of uninitialized resource in Windows Imaging Component allows an authorized attacker to disclose information locally.
UpdatedHeap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
UpdatedOut-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.
UpdatedUntrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
UpdatedConcurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
UpdatedOut-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
UpdatedBuffer over-read in Windows Wired AutoConfig Service allows an authorized attacker to disclose information locally.
UpdatedConcurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
UpdatedTime-of-check time-of-use (toctou) race condition in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
UpdatedConcurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
UpdatedUse after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
UpdatedUse after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
UpdatedUse after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
UpdatedUse after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows Brokering File System allows an authorized attacker to elevate privileges locally.
Updated- CVE-2026-62721: Windows User-Mode Power Service (UMPS) Elevation of Privilege Vulnerability 7.8 High
Insufficient granularity of access control in User-Mode Power Service (UMPS) allows an authorized attacker to elevate privileges locally.
Updated