2026 CVE Vulnerabilities
64,935 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-69741 | MEDIUM | 5.5 | 0.4% | Sep 8, 2026 | Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally. |
| CVE-2026-69734 | MEDIUM | 6.5 | 0.9% | Sep 8, 2026 | Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose information over a n... |
| CVE-2026-69723 | MEDIUM | 5.7 | 0.9% | Sep 8, 2026 | Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attack... |
| CVE-2026-69719 | MEDIUM | 6.5 | 0.9% | Sep 8, 2026 | Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-69713 | MEDIUM | 4.4 | 0.4% | Sep 8, 2026 | Dependency on vulnerable third-party component in Windows Secure Boot allows an authorized attacker to bypass a security... |
| CVE-2026-69690 | MEDIUM | 5.4 | 0.4% | Sep 8, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allo... |
| CVE-2026-69684 | MEDIUM | 5.5 | 0.5% | Sep 8, 2026 | Generation of error message containing sensitive information in Windows Error Reporting allows an authorized attacker to... |
| CVE-2026-69679 | MEDIUM | 5.7 | 0.6% | Sep 8, 2026 | Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network. |
| CVE-2026-69674 | MEDIUM | 5.5 | 0.3% | Sep 8, 2026 | Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to ... |
| CVE-2026-69672 | MEDIUM | 5.5 | 0.4% | Sep 8, 2026 | Use of uninitialized resource in Windows DNS allows an authorized attacker to disclose information locally. |
| CVE-2026-69637 | MEDIUM | 5.7 | 0.6% | Sep 8, 2026 | Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network. |
| CVE-2026-69636 | MEDIUM | 6.5 | 1.0% | Sep 8, 2026 | Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allo... |
| CVE-2026-69627 | MEDIUM | 5.5 | 0.4% | Sep 8, 2026 | Out-of-bounds read in Windows Remote Desktop Licensing Service allows an authorized attacker to disclose information loc... |
| CVE-2026-69626 | MEDIUM | 6.5 | 0.9% | Sep 8, 2026 | Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-69624 | MEDIUM | 6.5 | 0.7% | Sep 8, 2026 | Incomplete list of disallowed inputs in Active Directory Certificate Services (AD CS) allows an authorized attacker to p... |
| CVE-2026-69618 | MEDIUM | 5.5 | 0.4% | Sep 8, 2026 | Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information locally. |
| CVE-2026-69616 | MEDIUM | 5.5 | 0.4% | Sep 8, 2026 | Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to disclose information locally. |
| CVE-2026-69615 | MEDIUM | 4.8 | 0.4% | Sep 8, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allo... |
| CVE-2026-69609 | MEDIUM | 5.5 | 0.4% | Sep 8, 2026 | Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally. |
| CVE-2026-69591 | MEDIUM | 5.7 | 0.9% | Sep 8, 2026 | Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information over a network. |
| CVE-2026-69572 | MEDIUM | 5.7 | 0.9% | Sep 8, 2026 | Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information over a network. |
| CVE-2026-69569 | MEDIUM | 5.7 | 0.9% | Sep 8, 2026 | Untrusted pointer dereference in Windows Print Spooler Components allows an authorized attacker to deny service over a n... |
| CVE-2026-69568 | MEDIUM | 5.5 | 0.4% | Sep 8, 2026 | Out-of-bounds read in Windows Storage Spaces Controller allows an authorized attacker to disclose information locally. |
| CVE-2026-69566 | MEDIUM | 6.8 | 0.4% | Sep 8, 2026 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack. |
| CVE-2026-69562 | MEDIUM | 6.5 | — | Sep 8, 2026 | Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over a network. |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now