Browse CVE records published in September 2026, with severity, affected products, CWE, KEV, and source-backed vulnerability context.
Showing 50 of 14596 matching CVEs · Page 9 of 292.
Use of incorrectly-resolved name or reference in Visual Studio Code allows an unauthorized attacker to disclose information over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to disclose information over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Out-of-bounds write in Microsoft Office allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Improper null termination in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Time-of-check time-of-use (toctou) race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Use after free in Windows Security App allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
Out-of-bounds read in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information with a physical attack.
Published Sep 8, 2026 · Updated Oct 14, 2026
Out-of-bounds read in Xbox allows an unauthorized attacker to disclose information with a physical attack.
Published Sep 8, 2026 · Updated Oct 14, 2026
Integer underflow (wrap or wraparound) in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Untrusted pointer dereference in Microsoft Windows SCSI Class System File allows an unauthorized attacker to elevate privileges with a physical attack.
Published Sep 8, 2026 · Updated Oct 14, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
