CVE-2026-70xxx records
Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.
844 records · Page 7 of 9
Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to execute code over a network.
UpdatedOut-of-bounds write in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
UpdatedOut-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
UpdatedOut-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
UpdatedUse of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
UpdatedOut-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
UpdatedHeap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
UpdatedUse of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
UpdatedHeap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
UpdatedTime-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
UpdatedHeap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
UpdatedHeap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
UpdatedUse of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
UpdatedIncorrect authorization in Windows Win32K allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
UpdatedOut-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
UpdatedIncorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature locally.
UpdatedImproper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
UpdatedHeap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.
UpdatedOut-of-bounds read in Windows Fast FAT Driver allows an unauthorized attacker to disclose information locally.
UpdatedUse after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
UpdatedUntrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network.
UpdatedUse after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
UpdatedUse after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
UpdatedUse after free in Windows Installer allows an authorized attacker to elevate privileges locally.
UpdatedUse after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
Updated- CVE-2026-70270: Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability 5.5 Medium
Untrusted pointer dereference in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally.
Updated Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
UpdatedHeap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
UpdatedInclusion of functionality from untrusted control sphere in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
UpdatedImproper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
UpdatedImproper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to disclose information locally.
UpdatedOut-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
UpdatedHeap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a network.
UpdatedExposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.
UpdatedExposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.
UpdatedServer-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
UpdatedHeap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
UpdatedHeap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
UpdatedHeap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
UpdatedHeap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
UpdatedOut-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
UpdatedUse after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
Updated- CVE-2026-70252: Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability 7.0 High
Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
Updated Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
UpdatedUse after free in Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network.
UpdatedUse after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
UpdatedNull pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.
UpdatedOut-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute code locally.
UpdatedIncorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
Updated- CVE-2026-70245: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability 7.8 High
Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
Updated Out-of-bounds read in DNS Server allows an unauthorized attacker to disclose information over a network.
UpdatedUse after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
UpdatedUse after free in Windows Kerberos allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
Updated- CVE-2026-70237: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability 7.0 High
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
Updated Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
UpdatedImproper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally.
UpdatedBuffer over-read in Desktop Window Manager allows an authorized attacker to disclose information locally.
UpdatedHeap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
UpdatedExposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.
UpdatedUse after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
Updated- CVE-2026-70229: Windows Active Directory Domain Services Remote Code Execution Vulnerability 8.1 High
Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.
Updated Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
UpdatedOut-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.
Updated- CVE-2026-70225: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability 7.8 High
Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
Updated Use after free in Windows Console Driver allows an authorized attacker to elevate privileges locally.
UpdatedRelative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
UpdatedOut-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
UpdatedInsufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally.
UpdatedImproper access control in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
UpdatedInsufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally.
UpdatedUse after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
UpdatedOut-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
UpdatedOrigin validation error in Microsoft Power Apps allows an authorized attacker to execute code over a network.
UpdatedImproper restriction of communication channel to intended endpoints in Windows Security Center allows an authorized attacker to elevate privileges locally.
UpdatedOut-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
UpdatedHeap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to elevate privileges over a network.
UpdatedUse after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
UpdatedOut-of-bounds read in Windows HTTP.sys allows an authorized attacker to disclose information locally.
UpdatedHeap-based buffer overflow in Network Policy Server (NPS) allows an authorized attacker to execute code over a network.
UpdatedOut-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
Updated- CVE-2026-70205: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability 7.0 High
Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
Updated Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.
UpdatedServer-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
UpdatedOut-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service locally.
UpdatedImproper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.
UpdatedExposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.
UpdatedUse after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
UpdatedOut-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.
UpdatedInefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Updated- CVE-2026-70195: Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability 4.7 Medium
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information locally.
Updated Improper certificate validation in .NET Framework allows an unauthorized attacker to bypass a security feature over a network.
UpdatedImproper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.
UpdatedInconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.
UpdatedUse after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
Updated