Browse CVE records published in August 2026, with severity, affected products, CWE, KEV, and source-backed vulnerability context.
Showing 50 of 11956 matching CVEs · Page 7 of 240.
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
Published Aug 11, 2026 · Updated Oct 8, 2026
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
Published Aug 11, 2026 · Updated Oct 8, 2026
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.
Published Aug 11, 2026 · Updated Oct 8, 2026
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Numeric truncation error in Microsoft Digest Authentication allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an authorized attacker to execute code over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
Untrusted pointer dereference in Windows GDI allows an authorized attacker to disclose information locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Improper link resolution before file access ('link following') in Windows Accessibility Infrastructure (ATBroker.exe) allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Use after free in Application Information Services allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Event Logging Service allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized attacker to bypass a security feature locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Missing authentication for critical function in Windows RPC API allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Incorrect authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
Published Aug 28, 2026 · Updated Oct 8, 2026
Concurrent execution using shared resource with improper synchronization ('race condition') in Copilot Chat (Microsoft Edge) allows an authorized attacker to disclose information over a network.
Published Aug 28, 2026 · Updated Oct 8, 2026
Uncontrolled search path element in Windows Remote Help Defense allows an authorized attacker to perform spoofing locally.
Published Aug 20, 2026 · Updated Oct 8, 2026
Uncontrolled search path element in Windows Remote Help allows an authorized attacker to deny service locally.
Published Aug 20, 2026 · Updated Oct 8, 2026
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.
Published Aug 19, 2026 · Updated Oct 8, 2026
Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to disclose information over a network.
Published Aug 18, 2026 · Updated Oct 8, 2026
Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "ShieldBreak ".
Published Aug 14, 2026 · Updated Oct 8, 2026
Improper neutralization of special elements used in a command ('command injection') in Microsoft PowerShell allows an authorized attacker to execute code locally.
Published Aug 14, 2026 · Updated Oct 8, 2026
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform tampering locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
Improper link resolution before file access ('link following') in Windows Management Services allows an authorized attacker to deny service locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
