Veille CVE

Recherche « Microsoft access »

337 CVE

Critique 26 Élevée 229 Moyenne 80 Faible 2 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Microsoft access » ✕
  1. CVE-2026-110063 10.0 Critique

    Microsoft VM Inspector for Azure Virtual Machines

    Improper link resolution before file access ('link following') in VM Inspector for Azure Virtual Machines allows an unauthorized attacker to elevate privileges over a network.

  2. CVE-2026-114119 9.8 Critique

    Best Practice Software Bp Premier

    Best Practice Software Bp Premier before 1.14.1.1128 uses a hardcoded Microsoft SQL Server administrative password that is shared across all installations and cannot be changed without breaking the application. Attackers with network access to the database instance can authenticate as sysadmin, bypass application authentication, and execute operating system commands as SYSTEM.

  3. CVE-2026-97792 7.8 Élevée

    Microsoft Windows 11 Version 23H2 · Microsoft Windows 11 Version 24H2 · Microsoft Windows 11 Version 25H2 · Microsoft Windows 11 Version 26H2

    Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

  4. CVE-2026-97790 5.5 Moyenne

    Microsoft Windows 11 Version 24H2 · Microsoft Windows 11 Version 25H2 · Microsoft Windows 11 version 26H1 · Microsoft Windows 11 Version 26H2

    Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform tampering locally.

  5. CVE-2026-96944 5.5 Moyenne

    Microsoft Windows 11 Version 24H2 · Microsoft Windows 11 Version 25H2 · Microsoft Windows 11 version 26H1 · Microsoft Windows 11 Version 26H2

    Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally.

  6. CVE-2026-96921 5.5 Moyenne

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Access of resource using incompatible type ('type confusion') in Windows Message Queuing Queue Manager allows an authorized attacker to disclose information locally.

  7. CVE-2026-96918 7.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally.

  8. CVE-2026-96911 7.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

  9. CVE-2026-96857 5.5 Moyenne

    Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2 · Microsoft Windows 11 Version 23H2

    Files or directories accessible to external parties in Windows Projected File System allows an authorized attacker to disclose information locally.

  10. CVE-2026-96855 5.5 Moyenne

    Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2 · Microsoft Windows 11 Version 23H2

    Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.

  11. CVE-2026-96854 5.5 Moyenne

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information locally.

  12. CVE-2026-96316 5.5 Moyenne

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to perform tampering locally.

  13. CVE-2026-96245 7.5 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

  14. CVE-2026-96243 7.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Improper link resolution before file access ('link following') in Windows WalletService allows an authorized attacker to elevate privileges locally.

  15. CVE-2026-96231 7.8 Élevée

    Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime · Microsoft .NET 8.0 runtime · Microsoft .NET 9.0 runtime

    Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

  16. CVE-2026-96225 7.8 Élevée

    Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime · Microsoft .NET 8.0 runtime · Microsoft .NET 9.0 runtime

    Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

  17. CVE-2026-96220 7.8 Élevée

    Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2 · Microsoft Windows 11 Version 23H2

    Improper control of generation of code ('code injection') in Windows Assigned Access allows an authorized attacker to elevate privileges locally.

  18. CVE-2026-96218 5.5 Moyenne

    Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2 · Microsoft Windows 11 Version 23H2

    Improper access control in Windows Update Stack allows an authorized attacker to perform tampering locally.

  19. CVE-2026-94506 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024 · Microsoft 365 apps

    Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to disclose information over a network.

  20. CVE-2026-88191 7.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

  21. CVE-2026-88137 6.5 Moyenne

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Files or directories accessible to external parties in WebDAV allows an authorized attacker to disclose information over a network.

  22. CVE-2026-88135 7.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Improper access control in WebDAV allows an authorized attacker to elevate privileges locally.

  23. CVE-2026-88072 7.8 Élevée

    Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2 · Microsoft Windows 11 Version 23H2

    Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally.

  24. CVE-2026-87710 7.0 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Improper access control in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.

  25. CVE-2026-87709 5.5 Moyenne

    Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2 · Microsoft Windows 11 Version 23H2

    Improper access control in Windows Host Guardian Service allows an authorized attacker to perform tampering locally.

  26. CVE-2026-87698 5.5 Moyenne

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to disclose information locally.

  27. CVE-2026-85938 5.5 Moyenne

    Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2 · Microsoft Windows 11 Version 23H2

    Improper access control in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.

  28. CVE-2026-85867 7.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

  29. CVE-2026-85849 7.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.

  30. CVE-2026-85840 6.5 Moyenne

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Files or directories accessible to external parties in Windows Event Viewer allows an authorized attacker to disclose information over a network.

  31. CVE-2026-85812 5.5 Moyenne

    Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2 · Microsoft Windows 11 Version 23H2 · Microsoft Windows 11 Version 24H2

    Files or directories accessible to external parties in Windows Bind Filter Driver allows an authorized attacker to disclose information locally.

  32. CVE-2026-85809 9.8 Critique

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

  33. CVE-2026-85808 7.5 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.

  34. CVE-2026-85794 5.5 Moyenne

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information locally.

  35. CVE-2026-85792 9.8 Critique

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

  36. CVE-2026-85377 7.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Access of resource using incompatible type ('type confusion') in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.

  37. CVE-2026-85343 7.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Improper link resolution before file access ('link following') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

  38. CVE-2026-85339 8.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

  39. CVE-2026-85322 7.5 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

  40. CVE-2026-84020 7.0 Élevée

    Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2 · Microsoft Windows 11 Version 23H2 · Microsoft Windows 11 Version 24H2

    Use after free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.

  41. CVE-2026-84017 7.5 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.

  42. CVE-2026-84015 9.8 Critique

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Heap-based buffer overflow in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an unauthorized attacker to execute code over a network.

  43. CVE-2026-83933 5.5 Moyenne

    Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2 · Microsoft Windows 11 Version 23H2 · Microsoft Windows 11 Version 24H2

    Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally.

  44. CVE-2026-83927 7.8 Élevée

    Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2 · Microsoft Windows 11 Version 23H2 · Microsoft Windows 11 Version 24H2

    Improper link resolution before file access ('link following') in Windows Registry allows an authorized attacker to elevate privileges locally.

  45. CVE-2026-83864 5.5 Moyenne

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Improper access control in Windows NTFS allows an authorized attacker to disclose information locally.

  46. CVE-2026-83854 5.5 Moyenne

    Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2 · Microsoft Windows 11 Version 23H2

    Improper access control in Windows Notification allows an authorized attacker to disclose information locally.

  47. CVE-2026-83837 7.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

  48. CVE-2026-83793 7.0 Élevée

    Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2 · Microsoft Windows 11 Version 23H2 · Microsoft Windows 11 Version 24H2

    Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.

  49. CVE-2026-83763 7.8 Élevée

    Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2 · Microsoft Windows 11 Version 23H2

    Access of resource using incompatible type ('type confusion') in Windows Input System allows an authorized attacker to elevate privileges locally.

  50. CVE-2026-83704 7.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

  51. CVE-2026-83664 5.5 Moyenne

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Access of resource using incompatible type ('type confusion') in Windows Portable Device File System Driver allows an authorized attacker to disclose information locally.

  52. CVE-2026-83659 7.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally.

  53. CVE-2026-83658 5.5 Moyenne

    Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2 · Microsoft Windows 11 Version 23H2

    Improper access control in Windows Error Reporting allows an authorized attacker to disclose information locally.

  54. CVE-2026-83642 8.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Access of resource using incompatible type ('type confusion') in DNS Server allows an unauthorized attacker to execute code over a network.

  55. CVE-2026-83583 7.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Improper access control in Windows Geotag Broker allows an authorized attacker to elevate privileges locally.

  56. CVE-2026-83568 7.8 Élevée

    Microsoft Windows 11 Version 24H2 · Microsoft Windows 11 Version 25H2 · Microsoft Windows 11 version 26H1 · Microsoft Windows 11 Version 26H2

    Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

  57. CVE-2026-83507 5.5 Moyenne

    Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2 · Microsoft Windows 11 Version 23H2 · Microsoft Windows 11 Version 24H2

    Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally.

  58. CVE-2026-83499 7.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows Server 2012 · Microsoft Windows Server 2012 (Server Core installation)

    Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally.

  59. CVE-2026-81969 7.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows Server 2012 · Microsoft Windows Server 2012 (Server Core installation)

    Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally.

  60. CVE-2026-70299 8.8 Élevée

    Microsoft Windows 11 Version 23H2 · Microsoft Windows Server 2025 · Microsoft Windows Server 2025 (Server Core installation)

    Improper access control in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

  61. CVE-2026-70264 5.5 Moyenne

    Microsoft Windows Defender

    Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to disclose information locally.

  62. CVE-2026-70245 7.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

  63. CVE-2026-70225 7.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

  64. CVE-2026-70218 7.8 Élevée

    Microsoft Windows 11 Version 24H2 · Microsoft Windows 11 Version 25H2 · Microsoft Windows 11 version 26H1 · Microsoft Windows 11 Version 26H2

    Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally.

  65. CVE-2026-70217 4.9 Moyenne

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

  66. CVE-2026-70216 5.5 Moyenne

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally.

  67. CVE-2026-70205 7.0 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

  68. CVE-2026-70190 7.3 Élevée

    Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime · Microsoft .NET 9.0 runtime · Microsoft Visual Studio 2022 version 17.14

    Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

  69. CVE-2026-70167 8.8 Élevée

    Microsoft Windows Server 2022 · Microsoft Windows Server 2025 · Microsoft Windows Server 2025 (Server Core installation)

    Access of resource using incompatible type ('type confusion') in DNS Server allows an authorized attacker to execute code over a network.

  70. CVE-2026-70165 6.7 Moyenne

    Microsoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime · Microsoft .NET 9.0 runtime · Microsoft Visual Studio 2022 version 17.14

    Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

  71. CVE-2026-70158 8.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

  72. CVE-2026-70137 5.5 Moyenne

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to disclose information locally.

  73. CVE-2026-70084 5.5 Moyenne

    Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2 · Microsoft Windows 11 Version 23H2

    Improper access control in Windows Projected File System allows an authorized attacker to disclose information locally.

  74. CVE-2026-70057 5.5 Moyenne

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Incorrect authorization in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to bypass a security feature locally.

  75. CVE-2026-70051 7.8 Élevée

    Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2 · Microsoft Windows 11 Version 23H2

    Access of resource using incompatible type ('type confusion') in Windows SmartScreen allows an authorized attacker to elevate privileges locally.

  76. CVE-2026-70017 5.5 Moyenne

    Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2 · Microsoft Windows 11 Version 23H2

    Access of resource using incompatible type ('type confusion') in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.

  77. CVE-2026-69969 4.7 Moyenne

    Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2 · Microsoft Windows 11 Version 23H2 · Microsoft Windows 11 Version 24H2

    Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to disclose information locally.

  78. CVE-2026-69926 7.8 Élevée

    Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2 · Microsoft Windows 11 Version 23H2

    Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

  79. CVE-2026-69880 7.8 Élevée

    Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2 · Microsoft Windows 11 Version 23H2

    Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

  80. CVE-2026-69673 7.8 Élevée

    Microsoft Windows 11 Version 23H2 · Microsoft Windows 11 Version 24H2 · Microsoft Windows 11 Version 25H2 · Microsoft Windows 11 version 26H1

    Improper link resolution before file access ('link following') in Windows Update allows an authorized attacker to elevate privileges locally.

  81. CVE-2026-62687 5.5 Moyenne

    Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2 · Microsoft Windows 11 Version 23H2 · Microsoft Windows 11 Version 24H2

    Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to disclose information locally.

  82. CVE-2026-110112 8.1 Élevée

    Finsys dockhand

    Dockhand before 1.0.50 contains a privilege escalation vulnerability that allows users from another tenant to gain admin access because OIDC iss, aud, nonce and exp claims are not validated. Attackers with admin rights in another tenant of a shared provider like Microsoft Entra ID can recreate the mapped admin group and log in as Dockhand administrators.

  83. CVE-2026-108135 7.0 Élevée

    Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2 · Microsoft Windows 11 Version 23H2 · Microsoft Windows 11 Version 24H2

    Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to elevate privileges locally.

  84. CVE-2026-105733 8.8 Élevée

    Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2 · Microsoft Windows 11 Version 23H2 · Microsoft Windows 11 Version 24H2

    Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally.

  85. CVE-2026-105717 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024 · Microsoft 365 apps

    Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

  86. CVE-2026-105716 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024 · Microsoft 365 apps

    Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

  87. CVE-2026-105714 7.5 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024 · Microsoft 365 apps

    Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

  88. CVE-2026-105598 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024 · Microsoft 365 apps

    Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

  89. CVE-2026-105597 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024 · Microsoft 365 apps

    Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

  90. CVE-2026-105596 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024 · Microsoft 365 apps

    Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

  91. CVE-2026-105595 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024 · Microsoft 365 apps

    Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

  92. CVE-2026-105593 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024 · Microsoft 365 apps

    Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

  93. CVE-2026-105592 7.5 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024 · Microsoft 365 apps

    Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

  94. CVE-2026-105591 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024 · Microsoft 365 apps

    Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

  95. CVE-2026-105007 8.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior to copying memory to it. To exploit the vulnerability, in a local attack scenario, an attacker could run a specially crafted application to elevate the attacker's privilege level. An attacker who successfully exploited this vulnerability could run processes in an elevated context. However, an attacker must first gain access to the local system with the ability to execute a malicious application in order to exploit this vulnerability. The security update addresses the vulnerability by changing how ndis.sys validates buffer length.

  96. CVE-2026-103558 7.5 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.

  97. CVE-2026-102869 8.8 Élevée

    Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 · Microsoft .NET Framework 3.5 AND 4.7.2 · Microsoft .NET Framework 3.5 AND 4.8 · Microsoft .NET Framework 3.5 AND 4.8.1

    Access of resource using incompatible type ('type confusion') in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.

  98. CVE-2026-102860 8.8 Élevée

    Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper access control in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  99. CVE-2026-102850 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024 · Microsoft 365 apps

    Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

  100. CVE-2026-102849 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024 · Microsoft 365 apps

    Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

  101. CVE-2026-102216 7.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Access of resource using incompatible type ('type confusion') in Windows StateRepository API allows an authorized attacker to elevate privileges locally.

  102. CVE-2026-102204 7.8 Élevée

    Microsoft Windows Subsystem for Linux (WSL2)

    Improper link resolution before file access ('link following') in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.

  103. CVE-2026-102203 8.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Access of resource using incompatible type ('type confusion') in RPC Runtime allows an unauthorized attacker to execute code over a network.

  104. CVE-2026-102202 7.8 Élevée

    Microsoft Windows 11 Version 23H2 · Microsoft Windows 11 Version 24H2 · Microsoft Windows 11 Version 25H2 · Microsoft Windows 11 version 26H1

    Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

  105. CVE-2026-96765 7.2 Élevée

    WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN)

    The WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id_token' parameter in all versions up to, and including, 44.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The payload is stored in the wpo365_errors transient for up to three days by submitting a crafted unauthenticated request with a forged id_token whose base64url-decoded unique_name or iss claim contains malicious HTML, requiring no prior authentication or user interaction beyond an administrator later visiting the WPO365 wizard page.

  106. CVE-2026-101207 8.8 Élevée

    Dell OpenManage Integration

    Dell OpenManage Integration with Microsoft Windows Admin Center, versions prior to 3.7.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.

  107. CVE-2026-105798 8.7 Élevée

    microsoft simplechat

    SimpleChat is a secure AI conversation application with personal and group workspaces for document-grounded interactions. Prior to 0.261.029, POST /api/group_documents/upload stores an attacker-controlled group document filename that group_workspaces.html later interpolates into inline Share event handlers. The escapeGroupHtml function leaves apostrophes unchanged, while escapeHtml produces an HTML entity that the browser decodes before JavaScript evaluation, so either path permits the filename to terminate the handler string. An authenticated group Owner, Admin, or DocumentManager can persist script that executes in the SimpleChat origin when another group member clicks Share, allowing access to victim-visible data and actions with the victim session. This issue is fixed in version 0.261.029.

  108. CVE-2026-105793 9.1 Critique

    microsoft UFO

    Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the press_key tool in ufo/client/mcp/http_servers/mobile_mcp_server.py accepts a free-form key_code parameter and passes it to `adb shell input keyevent`. The adb client joins the arguments into a remote command string that the Android shell reparses, allowing an authenticated Mobile MCP caller to execute additional commands as the Android shell user on an authorized connected device. Exploitation requires a valid UFO_MCP_API_KEY, adb on the host, and a reachable authorized device, and it does not establish host operating-system execution, Android root execution, or access beyond the Android shell-user privileges. This issue is fixed in version 3.0.9.

  109. CVE-2026-105791 7.5 Élevée

    microsoft UFO

    Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the run_shell tool in the CommandLineExecutor component of ufo/client/mcp/local_servers/cli_mcp_server.py validates only the first token of the bash_command parameter and permits explorer.exe. On Windows, explorer.exe delegates its following path argument to ShellExecute, so an attacker-influenced agent call can launch an arbitrary executable or script as the desktop user even though the subprocess uses shell=False. Exploitation depends on a user running an affected agent workflow and on inducing the tool call, but successful execution can access or modify that user's files, tokens, and sessions. This issue is fixed in version 3.0.9.

  110. CVE-2026-105790 6.4 Moyenne

    microsoft UFO

    Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, authenticated device registration through /api/devices can supply a permitted attacker-controlled WebSocket endpoint while aip/transport/websocket.py applies pinned_addresses only to the initial destination. The pinned websockets.connect() client follows cross-origin redirects and opens a new TCP connection before Galaxy performs its post-handshake peer-IP validation, allowing WebSocket upgrade requests to internal hosts reachable from the server. The confirmed impact is the internal connection and handshake request, and does not establish arbitrary HTTP methods, response-body disclosure, a completed AIP session, or cloud metadata access. This issue is fixed in version 3.0.9.

  111. CVE-2026-105788 8.8 Élevée

    microsoft UFO

    Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.10, the type_text and launch_app tools in ufo/client/mcp/http_servers/mobile_mcp_server.py pass the authenticated caller-controlled text and package_name parameters into adb shell command argument positions without comprehensive validation. The adb client joins those arguments into a remote command string that the Android shell reparses, allowing shell metacharacters to execute additional commands on an authorized connected device as the Android shell user. Exploitation requires a valid Mobile MCP API key and a reachable device authorized for ADB, and it does not establish host operating-system execution, Android root execution, or access beyond the Android shell-user privileges. This issue is fixed in version 3.0.10.

  112. CVE-2026-105763 9.6 Critique

    twentyhq twenty

    Twenty is an open-source CRM (customer relationship management) platform. From 1.20.10 until 2.7.0, the /metadata GraphQL connectedAccounts query returned connectionParameters from ConnectedAccountDTO for every connected account in a workspace, including plaintext IMAP, SMTP, and CalDAV passwords, because the field was not hidden and the lookup did not enforce the calling user's identity or account visibility. A normal workspace member could obtain other members' external-service credentials and use them to access mail or calendars and potentially reset third-party accounts. Google and Microsoft OAuth-only workspaces were not affected. This issue is fixed in version 2.7.0.

  113. CVE-2026-104808 1.9 Faible

    Mitel MiVoice Office 400

    DigitalCanion has discovered a stored Cross-Site Scripting (XSS) vulnerability that allows an authenticated malicious user to inject persistent JavaScript or HTML content, resulting in a denial-of-service condition within the web application. The specific flaw exists within the web portal listening on TCP port 443, under Configuration → Users → Users List. The vulnerability occurs in the “Microsoft Exchange mailbox” field, which fails to properly validate or sanitize user-supplied input before storing and rendering it. By injecting malicious JavaScript into this field, an attacker can cause the payload to execute whenever the affected user properties are accessed. This can prevent access to the affected user properties and result in a denial-of-service condition within the application's user-management functionality.

  114. CVE-2026-100681 5.4 Moyenne

    budibase server

    Budibase before 3.45.0 contains an unauthenticated server-side request forgery and credential exfiltration vulnerability in the Microsoft Teams webhook endpoint that accepts forged Bot Framework activities with arbitrary serviceUrl values. Attackers can submit a crafted POST request to inject an attacker-controlled serviceUrl that is persisted and used for all subsequent bot replies, causing the server to send live Microsoft OAuth access tokens in Authorization headers to the attacker's host and enabling blind internal network access.

  115. CVE-2026-100550 5.4 Moyenne

    OpenClaw

    OpenClaw (npm package 'openclaw') before 2026.8.1 contains an access-control bypass in the Microsoft Teams integration. When groupPolicy is set to allowlist, a missing or unsupported configured access group produces a denied group-resolution result that is not rejected by the final message-admission check, so a Teams member who is not on the allowlist can still trigger the configured agent despite the administrator's group boundary. The impact depends on the conversations, tools, and data available to that agent. The issue is fixed in version 2026.8.1.

  116. CVE-2026-63208 5.1 Moyenne

    zammad

    Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, when a Microsoft Graph request fails, Zammad logs the error including the authentication token used to access the mailbox. The system attempts to hide this token in the log, but the masking is incomplete: for the token format Microsoft uses (JWT), only the first part is hidden, while the remaining parts remain readable in plain text. A Zammad admin with Microsoft Graph channel access can view these logs and see the partial token, which may reveal sensitive claims such as the account scope, tenant, or timing, and could assist in reconstructing the full token while it is still valid. This issue is fixed in version 7.1.2.

  117. CVE-2026-63205 5.1 Moyenne

    zammad

    Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, when creating or updating an email signature, Zammad processes inline images referenced in the signature body. If a signature body contains an HTML img tag pointing to any existing attachment, the system copies that attachment into a new signature-owned record, without checking whether the user has permission to access the original attachment. The newly created copy is then downloadable by the same channel-admin user, because attachment access is determined by the copy's owner (the signature), not the original object (e.g., a ticket or knowledge-base article). This allows a user with any of the admin.channel_email, admin.channel_google, admin.channel_microsoft365, or admin.channel_microsoft_graph permissions to read attachments they would otherwise be denied access to, such as ticket attachments belonging to groups they are not a member of. This issue is fixed in version 7.1.2.

  118. CVE-2026-92254 6.9 Moyenne

    Watchdog Anti-Virus

    Missing Authorization in the IOCTL handlers of the wsdkd.sys kernel drivers in Watchdog WatchDog Antivirus 1.8.640 (driver versions 1.3.0.0 and earlier) on Microsoft Windows allows local, low-privileged attackers to delete arbitrary files with SYSTEM privileges, bypassing NTFS access controls and potentially disabling security products or destabilizing the operating system, via crafted IOCTL requests sent to the \Device\wsdk device.

  119. CVE-2026-83944 9.1 Critique

    Microsoft Azure Logic Apps

    Improper access control in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.

  120. CVE-2026-83999 7.0 Élevée

    Microsoft Windows 11 Version 24H2 · Microsoft Windows 11 Version 25H2 · Microsoft Windows 11 version 26H1 · Microsoft Windows Server 2025

    Improper link resolution before file access ('link following') in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to elevate privileges locally.

  121. CVE-2026-81963 7.8 Élevée Exploitée

    Microsoft Windows 11 Version 23H2 · Microsoft Windows 11 Version 24H2 · Microsoft Windows 11 Version 25H2 · Microsoft Windows 11 version 26H1

    Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.

  122. CVE-2026-81401 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  123. CVE-2026-78516 4.3 Moyenne

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally.

  124. CVE-2026-77890 7.5 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows Server 2012 · Microsoft Windows Server 2012 (Server Core installation)

    Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

  125. CVE-2026-77889 7.5 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows Server 2012 · Microsoft Windows Server 2012 (Server Core installation)

    Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

  126. CVE-2026-77888 7.5 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows Server 2012 · Microsoft Windows Server 2012 (Server Core installation)

    Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

  127. CVE-2026-77499 7.5 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows Server 2012 · Microsoft Windows Server 2012 (Server Core installation)

    Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

  128. CVE-2026-77494 7.5 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows Server 2012 · Microsoft Windows Server 2012 (Server Core installation)

    Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

  129. CVE-2026-77487 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.

  130. CVE-2026-77480 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network.

  131. CVE-2026-73028 8.8 Élevée

    Microsoft SQL Server 2017 (CU 31) · Microsoft SQL Server 2017 (GDR) · Microsoft SQL Server 2019 (CU 32) · Microsoft SQL Server 2019 (GDR)

    Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.

  132. CVE-2026-72966 5.5 Moyenne

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to perform tampering locally.

  133. CVE-2026-72959 8.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

  134. CVE-2026-72950 9.8 Critique

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

  135. CVE-2026-72939 6.5 Moyenne

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to deny service over a network.

  136. CVE-2026-72938 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Access of resource using incompatible type ('type confusion') in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

  137. CVE-2026-71353 7.0 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.

  138. CVE-2026-71352 8.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Integer underflow (wrap or wraparound) in Windows Remote Access Connection Manager allows an authorized attacker to execute code over a network.

  139. CVE-2026-71351 7.0 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.

  140. CVE-2026-71343 7.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to execute code locally.

  141. CVE-2026-71342 7.0 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

  142. CVE-2026-71333 7.0 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

  143. CVE-2026-70584 7.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Access of resource using incompatible type ('type confusion') in Windows Core Messaging allows an authorized attacker to elevate privileges locally.

  144. CVE-2026-70570 8.1 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

  145. CVE-2026-70563 8.1 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Improper link resolution before file access ('link following') in Windows Shell allows an unauthorized attacker to perform spoofing over a network.

  146. CVE-2026-69852 7.5 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

  147. CVE-2026-69778 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Access 2016 · Microsoft Access 2016 (32-bit edition) · Microsoft Office 2016

    Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

  148. CVE-2026-69771 4.7 Moyenne

    Microsoft Windows 11 Version 23H2 · Microsoft Windows 11 Version 24H2 · Microsoft Windows 11 Version 25H2 · Microsoft Windows 11 version 26H1

    Improper link resolution before file access ('link following') in Windows Container Manager Service allows an authorized attacker to bypass a security feature locally.

  149. CVE-2026-69614 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Access 2016 · Microsoft Access 2016 (32-bit edition) · Microsoft Office 2019

    Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

  150. CVE-2026-69590 9.8 Critique

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine