Full List

Search

Recent Vulnerabilities

• CVE-2026-97810 • published on October 13, 2026 Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
• CVE-2026-97809 • published on October 13, 2026 Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
• CVE-2026-97808 • published on October 13, 2026 Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
• CVE-2026-97807 • published on October 13, 2026 Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
• CVE-2026-97806 • published on October 13, 2026 Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
• CVE-2026-97805 • published on October 13, 2026 Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.
• CVE-2026-97804 • published on October 13, 2026 Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.
• CVE-2026-97803 • published on October 13, 2026 Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
• CVE-2026-97801 • published on October 13, 2026 Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering over a network.
• CVE-2026-97800 • published on October 13, 2026 Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally.
• CVE-2026-97799 • published on October 13, 2026 Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally.
• CVE-2026-97798 • published on October 13, 2026 Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
• CVE-2026-97794 • published on October 13, 2026 Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
• CVE-2026-97793 • published on October 13, 2026 Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally.
• CVE-2026-97792 • published on October 13, 2026 Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
• CVE-2026-97791 • published on October 9, 2026 In Apache CXF, STSTokenValidator checks whether a SAML assertion is signed by a trusted certificate before deciding to send it to the STS. That result was stored in one object shared by all requests, so one request could read another's result. A remote, unauthenticated attacker could send a forged assertion signed with an untrusted certificate while legitimate requests were being processed, and it could be accepted as trusted without ever reaching the STS. Only services that use STSTokenValidator to validate SAML tokens without alwaysValidateToSts set are affected.  Users are recommended to upgrade to versions 4.2.4 or 4.1.9 or 3.6.13, which fix this issue.
• CVE-2026-97790 • published on October 13, 2026 Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform tampering locally.
• CVE-2026-97789 • published on October 13, 2026 Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
• CVE-2026-97788 • published on October 13, 2026 Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network.
• CVE-2026-97787 • published on October 13, 2026 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.