LiveActive security incident?Get immediate response

CVE archive

August 2026

Browse CVE records published in August 2026, with severity, affected products, CWE, KEV, and source-backed vulnerability context.

Search all CVEs Known exploited

Showing 50 of 11956 matching CVEs · Page 5 of 240.

High · CVSS 7

CVE-2026-62788: Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Published Aug 11, 2026 · Updated Oct 8, 2026

Medium · CVSS 5.5

CVE-2026-62786: Win32k Information Disclosure Vulnerability

Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.

Published Aug 11, 2026 · Updated Oct 8, 2026

High · CVSS 8.8

CVE-2026-62800: Windows SMBv3 Server Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network.

Published Aug 11, 2026 · Updated Oct 8, 2026

High · CVSS 8.1

CVE-2026-62781: RPC Runtime Library Remote Code Execution Vulnerability

Heap-based buffer overflow in RPC Runtime allows an unauthorized attacker to execute code over a network.

Published Aug 11, 2026 · Updated Oct 8, 2026

Medium · CVSS 6.5

CVE-2026-62782: Windows SMB Client Information Disclosure Vulnerability

Out-of-bounds read in Windows SMB Client allows an unauthorized attacker to disclose information over a network.

Published Aug 11, 2026 · Updated Oct 8, 2026

High · CVSS 7

CVE-2026-62780: Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Published Aug 11, 2026 · Updated Oct 8, 2026

High · CVSS 8.1

CVE-2026-62778: Windows DNS Elevation of Privilege Vulnerability

Use after free in Windows DNS allows an unauthorized attacker to elevate privileges over a network.

Published Aug 11, 2026 · Updated Oct 8, 2026

High · CVSS 7.8

CVE-2026-62776: Windows DHCP Server Elevation of Privilege Vulnerability

Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.

Published Aug 11, 2026 · Updated Oct 8, 2026

High · CVSS 7.8

CVE-2026-62799: Windows SMB Client Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally.

Published Aug 11, 2026 · Updated Oct 8, 2026

Medium · CVSS 5.5

CVE-2026-62775: Windows Container Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability

Incorrect authorization in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to disclose information locally.

Published Aug 11, 2026 · Updated Oct 8, 2026

High · CVSS 7.8

CVE-2026-62770: Windows Shell Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Shell allows an authorized attacker to elevate privileges locally.

Published Aug 11, 2026 · Updated Oct 8, 2026

High · CVSS 7.8

CVE-2026-62768: Windows Installer Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

Published Aug 11, 2026 · Updated Oct 8, 2026

High · CVSS 7.8

CVE-2026-62761: Windows DHCP Server Elevation of Privilege Vulnerability

Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.

Published Aug 11, 2026 · Updated Oct 8, 2026

High · CVSS 7.8

CVE-2026-62771: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

Published Aug 11, 2026 · Updated Oct 8, 2026

Medium · CVSS 6.7

CVE-2026-62769: Windows DNS Elevation of Privilege Vulnerability

Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.

Published Aug 11, 2026 · Updated Oct 8, 2026

High · CVSS 7.8

CVE-2026-62752: Windows Kerberos Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.

Published Aug 11, 2026 · Updated Oct 8, 2026

High · CVSS 7.8

CVE-2026-62751: Windows Projected File System Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges locally.

Published Aug 11, 2026 · Updated Oct 8, 2026

High · CVSS 7

CVE-2026-62749: Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Published Aug 11, 2026 · Updated Oct 8, 2026

High · CVSS 7.8

CVE-2026-62741: Windows HTTP.sys Elevation of Privilege Vulnerability

Integer underflow (wrap or wraparound) in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

Published Aug 11, 2026 · Updated Oct 8, 2026

Medium · CVSS 5.3

CVE-2026-62757: Windows Schannel Security Feature Bypass Vulnerability

Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to bypass a security feature over a network.

Published Aug 11, 2026 · Updated Oct 8, 2026

High · CVSS 7.8

CVE-2026-62736: Windows DHCP Client Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally.

Published Aug 11, 2026 · Updated Oct 8, 2026

High · CVSS 7

CVE-2026-62734: Windows Telephony Service Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

Published Aug 11, 2026 · Updated Oct 8, 2026

High · CVSS 7.8

CVE-2026-62732: Windows Telephony Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

Published Aug 11, 2026 · Updated Oct 8, 2026

Medium · CVSS 5.5

CVE-2026-62730: Windows Wired AutoConfig Service Information Disclosure Vulnerability

Buffer over-read in Windows Wired AutoConfig Service allows an authorized attacker to disclose information locally.

Published Aug 11, 2026 · Updated Oct 8, 2026

Medium · CVSS 5.5

CVE-2026-62743: Win32k Information Disclosure Vulnerability

Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.

Published Aug 11, 2026 · Updated Oct 8, 2026

High · CVSS 7.8

CVE-2026-62733: Windows Win32k Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.

Published Aug 11, 2026 · Updated Oct 8, 2026

High · CVSS 7

CVE-2026-62728: Windows Common Log File System Driver Elevation of Privilege Vulnerability

Time-of-check time-of-use (toctou) race condition in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

Published Aug 11, 2026 · Updated Oct 8, 2026

High · CVSS 7

CVE-2026-62726: Windows Telephony Service Elevation of Privilege Vulnerability

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

Published Aug 11, 2026 · Updated Oct 8, 2026

High · CVSS 7

CVE-2026-62725: Windows Telephony Service Elevation of Privilege Vulnerability

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

Published Aug 11, 2026 · Updated Oct 8, 2026

High · CVSS 7.8

CVE-2026-62721: Windows User-Mode Power Service (UMPS) Elevation of Privilege Vulnerability

Insufficient granularity of access control in User-Mode Power Service (UMPS) allows an authorized attacker to elevate privileges locally.

Published Aug 11, 2026 · Updated Oct 8, 2026

High · CVSS 7.8

CVE-2026-62717: Windows Message Queuing Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.

Published Aug 11, 2026 · Updated Oct 8, 2026

Medium · CVSS 6.5

CVE-2026-62714: Windows DHCP Server Information Disclosure Vulnerability

Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.

Published Aug 11, 2026 · Updated Oct 8, 2026

Medium · CVSS 6.5

CVE-2026-62720: Windows DHCP Server Information Disclosure Vulnerability

Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.

Published Aug 11, 2026 · Updated Oct 8, 2026

High · CVSS 7.8

CVE-2026-62711: Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

Published Aug 11, 2026 · Updated Oct 8, 2026

High · CVSS 7.8

CVE-2026-62710: Windows Device Association Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

Published Aug 11, 2026 · Updated Oct 8, 2026

Medium · CVSS 5.5

CVE-2026-62709: Windows GDI+ Information Disclosure Vulnerability

Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally.

Published Aug 11, 2026 · Updated Oct 8, 2026

Medium · CVSS 6.4

CVE-2026-62708: Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.

Published Aug 11, 2026 · Updated Oct 8, 2026

High · CVSS 7.8

CVE-2026-62701: Windows Telephony Service Elevation of Privilege Vulnerability

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

Published Aug 11, 2026 · Updated Oct 8, 2026

High · CVSS 7.8

CVE-2026-62700: Windows NTFS Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

Published Aug 11, 2026 · Updated Oct 8, 2026

High · CVSS 7.8

CVE-2026-62698: Microsoft Digest Authentication Elevation of Privilege Vulnerability

Numeric truncation error in Microsoft Digest Authentication allows an authorized attacker to elevate privileges locally.

Published Aug 11, 2026 · Updated Oct 8, 2026

High · CVSS 7

CVE-2026-61938: Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Published Aug 11, 2026 · Updated Oct 8, 2026

High · CVSS 7

CVE-2026-61929: Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Published Aug 11, 2026 · Updated Oct 8, 2026

Medium · CVSS 6.5

CVE-2026-61921: Windows Remote Desktop Client Information Disclosure Vulnerability

Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

Published Aug 11, 2026 · Updated Oct 8, 2026

Medium · CVSS 6.5

CVE-2026-61918: Windows Remote Desktop Client Information Disclosure Vulnerability

Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

Published Aug 11, 2026 · Updated Oct 8, 2026

High · CVSS 7.8

CVE-2026-61926: Windows USB Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

Published Aug 11, 2026 · Updated Oct 8, 2026

Medium · CVSS 6.6

CVE-2026-61920: Windows DNS Server Remote Code Execution Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an authorized attacker to execute code over a network.

Published Aug 11, 2026 · Updated Oct 8, 2026

Medium · CVSS 5.5

CVE-2026-61360: Windows GDI Information Disclosure Vulnerability

Untrusted pointer dereference in Windows GDI allows an authorized attacker to disclose information locally.

Published Aug 11, 2026 · Updated Oct 8, 2026

High · CVSS 7.8

CVE-2026-61358: Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability

Improper link resolution before file access ('link following') in Windows Accessibility Infrastructure (ATBroker.exe) allows an authorized attacker to elevate privileges locally.

Published Aug 11, 2026 · Updated Oct 8, 2026

High · CVSS 7.8

CVE-2026-61357: Application Information Services Elevation of Privilege Vulnerability

Use after free in Application Information Services allows an authorized attacker to elevate privileges locally.

Published Aug 11, 2026 · Updated Oct 8, 2026

High · CVSS 7.8

CVE-2026-61365: Windows Remote Desktop Services Elevation of Privilege Vulnerability

Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

Published Aug 11, 2026 · Updated Oct 8, 2026