Browse CVE records published in August 2026, with severity, affected products, CWE, KEV, and source-backed vulnerability context.
Showing 50 of 11956 matching CVEs · Page 19 of 240.
Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Incorrect authorization in .NET Framework allows an authorized attacker to elevate privileges over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Integer overflow or wraparound in Windows GDI+ allows an unauthorized attacker to execute code over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
Stack-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over an adjacent network.
Published Aug 11, 2026 · Updated Oct 8, 2026
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
Published Aug 11, 2026 · Updated Oct 8, 2026
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
Published Aug 3, 2026 · Updated Oct 8, 2026
Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
Published Aug 3, 2026 · Updated Oct 8, 2026
Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
Heap-based buffer overflow in RPC Runtime allows an unauthorized attacker to execute code over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
Out-of-bounds read in Windows SMB Client allows an unauthorized attacker to disclose information over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Use after free in Windows DNS allows an unauthorized attacker to elevate privileges over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Incorrect authorization in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to disclose information locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Heap-based buffer overflow in Windows Shell allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Integer underflow (wrap or wraparound) in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to bypass a security feature over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Buffer over-read in Windows Wired AutoConfig Service allows an authorized attacker to disclose information locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Time-of-check time-of-use (toctou) race condition in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
