2026 CVE Vulnerabilities

43,246 CVEs published in 2026.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2026-62692HIGH7.8Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locall...
CVE-2026-62690HIGH7Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notification...
CVE-2026-62688HIGH7.8Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
CVE-2026-61939HIGH7Use after free in Winlogon allows an authorized attacker to elevate privileges locally.
CVE-2026-61938HIGH7Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-61937HIGH7.8Integer overflow or wraparound in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
CVE-2026-61934HIGH7.8Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-61932HIGH7.8Access of resource using incompatible type ('type confusion') in Windows DWM Core Library allows an authorized attacker ...
CVE-2026-61930HIGH7.8Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-61929HIGH7Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-61927HIGH7Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-61926HIGH7.8Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-61925HIGH7.8Incorrect authorization in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-61923HIGH7.8Heap-based buffer overflow in Windows Display Enhancement Service allows an authorized attacker to elevate privileges lo...
CVE-2026-61367HIGH7.8Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate...
CVE-2026-61366HIGH7Double free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.
CVE-2026-61365HIGH7.8Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate...
CVE-2026-61364HIGH7.8Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate...
CVE-2026-61363HIGH7.5Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-61361HIGH7Use after free in Windows DHCP Client allows an authorized attacker to execute code locally.
CVE-2026-61359HIGH7.8Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
CVE-2026-61358HIGH7.8Improper link resolution before file access ('link following') in Windows Accessibility Infrastructure (ATBroker.exe) al...
CVE-2026-61357HIGH7.8Use after free in Application Information Services allows an authorized attacker to elevate privileges locally.
CVE-2026-61356HIGH7.8Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate...
CVE-2026-61355HIGH7.8Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.

Check if your code is affected by 2026 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now