Browse CVE records published in September 2026, with severity, affected products, CWE, KEV, and source-backed vulnerability context.
Showing 50 of 14595 matching CVEs · Page 7 of 292.
Untrusted pointer dereference in Microsoft Windows SCSI Class System File allows an unauthorized attacker to elevate privileges with a physical attack.
Published Sep 8, 2026 · Updated Oct 14, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Use after free in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Out-of-bounds read in Windows OLE DB allows an unauthorized attacker to disclose information over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
Improper authentication in Spring Cloud Azure allows an unauthorized attacker to elevate privileges over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Integer underflow (wrap or wraparound) in SQL Server allows an authorized attacker to disclose information locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Use after free in SQL Server allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to execute code locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security feature over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Missing authentication for critical function in Windows Autopilot allows an authorized attacker to perform tampering locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
Heap-based buffer overflow in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
Use after free in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
Exposure of private personal information to an unauthorized actor in Windows Biometric Service allows an authorized attacker to disclose information locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
Missing authorization in Data Sharing Service Client allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
Out-of-bounds read in Windows USB Hub Driver allows an unauthorized attacker to elevate privileges with a physical attack.
Published Sep 8, 2026 · Updated Oct 14, 2026
