2026 CVE Vulnerabilities
64,935 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-77491 | MEDIUM | 5.5 | 0.4% | Sep 8, 2026 | Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally. |
| CVE-2026-77488 | MEDIUM | 5.5 | 0.3% | Sep 8, 2026 | Integer underflow (wrap or wraparound) in SQL Server allows an authorized attacker to disclose information locally. |
| CVE-2026-73029 | MEDIUM | 6.5 | 0.7% | Sep 8, 2026 | Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-73019 | MEDIUM | 4.3 | 0.8% | Sep 8, 2026 | Improper resolution of path equivalence in Windows URL Moniker allows an unauthorized attacker to bypass a security feat... |
| CVE-2026-73008 | MEDIUM | 5.5 | 0.5% | Sep 8, 2026 | Exposure of private personal information to an unauthorized actor in Windows Biometric Service allows an authorized atta... |
| CVE-2026-73004 | MEDIUM | 5.5 | 0.2% | Sep 8, 2026 | Missing authentication for critical function in Windows Autopilot allows an authorized attacker to perform tampering loc... |
| CVE-2026-72999 | MEDIUM | 6.8 | 0.3% | Sep 8, 2026 | Out-of-bounds read in Windows USB Hub Driver allows an unauthorized attacker to elevate privileges with a physical attac... |
| CVE-2026-72985 | MEDIUM | 6.8 | 0.4% | Sep 8, 2026 | Heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized attacker to elevate privileges with a ph... |
| CVE-2026-72980 | MEDIUM | 5.5 | 0.3% | Sep 8, 2026 | Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally. |
| CVE-2026-72977 | MEDIUM | 6.5 | 1.0% | Sep 8, 2026 | Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network... |
| CVE-2026-72976 | MEDIUM | 5 | 0.4% | Sep 8, 2026 | Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information locally. |
| CVE-2026-72975 | MEDIUM | 6.5 | 0.7% | Sep 8, 2026 | Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network... |
| CVE-2026-72974 | MEDIUM | 6.5 | 0.9% | Sep 8, 2026 | Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-72966 | MEDIUM | 5.5 | 0.3% | Sep 8, 2026 | Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to perform tampering loc... |
| CVE-2026-72964 | MEDIUM | 5.5 | 0.3% | Sep 8, 2026 | Missing authentication for critical function in Windows Internet Connection Sharing (ICS) allows an authorized attacker ... |
| CVE-2026-72956 | MEDIUM | 6.5 | 0.9% | Sep 8, 2026 | Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information ove... |
| CVE-2026-72945 | MEDIUM | 5.5 | 0.4% | Sep 8, 2026 | Use of uninitialized resource in Windows Task Scheduler allows an authorized attacker to disclose information locally. |
| CVE-2026-72942 | MEDIUM | 6.5 | 0.9% | Sep 8, 2026 | Out-of-bounds read in Windows Spaceport.sys allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-72939 | MEDIUM | 6.5 | 1.1% | Sep 8, 2026 | Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to deny servi... |
| CVE-2026-72938 | MEDIUM | 6.5 | 0.9% | Sep 8, 2026 | Access of resource using incompatible type ('type confusion') in Microsoft Office PowerPoint allows an unauthorized atta... |
| CVE-2026-72937 | MEDIUM | 5.5 | 0.4% | Sep 8, 2026 | Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally. |
| CVE-2026-72935 | MEDIUM | 6.7 | 0.3% | Sep 8, 2026 | Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-72931 | MEDIUM | 5.5 | 0.3% | Sep 8, 2026 | Missing release of resource after effective lifetime in Windows Secure Socket Tunneling Protocol (SSTP) allows an author... |
| CVE-2026-71350 | MEDIUM | 6.8 | 0.4% | Sep 8, 2026 | Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical atta... |
| CVE-2026-71349 | MEDIUM | 6.8 | 0.4% | Sep 8, 2026 | Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical atta... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now