Browse CVE records published in September 2026, with severity, affected products, CWE, KEV, and source-backed vulnerability context.
Showing 50 of 14593 matching CVEs · Page 3 of 292.
Authentication bypass by capture-replay in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to perform spoofing over a network.
Published Sep 8, 2026 · Updated Oct 8, 2026
Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 8, 2026
Out-of-bounds read in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose information locally.
Published Sep 8, 2026 · Updated Oct 8, 2026
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
Published Sep 8, 2026 · Updated Oct 8, 2026
Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 8, 2026
Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to execute code locally.
Published Sep 8, 2026 · Updated Oct 8, 2026
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 8, 2026
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 8, 2026
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 8, 2026
Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 8, 2026
Out-of-bounds read in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to deny service over a network.
Published Sep 8, 2026 · Updated Oct 8, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 8, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 8, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 8, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 8, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 8, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 8, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 8, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 8, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 8, 2026
Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
Published Sep 8, 2026 · Updated Oct 8, 2026
Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 8, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 8, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 8, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 8, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 8, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 8, 2026
Incorrect calculation of buffer size in Windows iSCSI allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 8, 2026
Use after free in Windows WebClient Service allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 8, 2026
Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack.
Published Sep 8, 2026 · Updated Oct 8, 2026
Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 8, 2026
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
Published Sep 8, 2026 · Updated Oct 8, 2026
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
Published Sep 8, 2026 · Updated Oct 8, 2026
Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 8, 2026
Improper neutralization of special elements used in a command ('command injection') in Microsoft Azure CLI allows an authorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 8, 2026
Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 8, 2026
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Published Sep 8, 2026 · Updated Oct 8, 2026
Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 8, 2026
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 8, 2026
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 8, 2026
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Published Sep 8, 2026 · Updated Oct 8, 2026
Double free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Published Sep 8, 2026 · Updated Oct 8, 2026
Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Published Sep 8, 2026 · Updated Oct 8, 2026
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Published Sep 8, 2026 · Updated Oct 8, 2026
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Published Sep 8, 2026 · Updated Oct 8, 2026
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 8, 2026
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Published Sep 8, 2026 · Updated Oct 8, 2026
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 8, 2026
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Published Sep 8, 2026 · Updated Oct 8, 2026
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Published Sep 8, 2026 · Updated Oct 8, 2026
