CVE-2026-65790: Windows Message Queuing Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Browse CVE records published in August 2026, with severity, affected products, CWE, KEV, and source-backed vulnerability context.
Showing 50 of 11956 matching CVEs · Page 18 of 240.
Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Double free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Inadequate encryption strength in Windows Active Directory allows an authorized attacker to bypass a security feature over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
Improper link resolution before file access ('link following') in Microsoft OneDrive allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Null pointer dereference in Windows iSCSI Target Service allows an unauthorized attacker to deny service over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Entra Connect Sync allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Insufficiently protected credentials in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
Missing authentication for critical function in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execute code locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
Published Aug 11, 2026 · Updated Oct 8, 2026