# Vulnerabilities published in 2026 - [CVE-2026-84018](https://insights.sbomify.com/CVE-2026-84018/): Windows Print Spooler Components Elevation of Privilege Vulnerability (high 7.0) - [CVE-2026-84017](https://insights.sbomify.com/CVE-2026-84017/): Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability (high 7.5) - [CVE-2026-84016](https://insights.sbomify.com/CVE-2026-84016/): Windows EAPHost Service Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-84015](https://insights.sbomify.com/CVE-2026-84015/): Remote Access Point-to-Point Protocol (PPP) EAP-TLS Remote Code Execution Vulnerability (critical 9.8) - [CVE-2026-84014](https://insights.sbomify.com/CVE-2026-84014/): Windows Device Association Service Elevation of Privilege Vulnerability (high 7.0) - [CVE-2026-84013](https://insights.sbomify.com/CVE-2026-84013/): Windows Telephony Server Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-84012](https://insights.sbomify.com/CVE-2026-84012/): Windows Remote Desktop Services Remote Code Execution Vulnerability (high 8.1) - [CVE-2026-84011](https://insights.sbomify.com/CVE-2026-84011/): Windows SMB Client Security Feature Bypass Vulnerability (medium 5.5) - [CVE-2026-8401](https://insights.sbomify.com/CVE-2026-8401/): Sandbox escape in the Profile Backup component (critical 9.8) - [CVE-2026-84009](https://insights.sbomify.com/CVE-2026-84009/): Windows Projected File System Tampering Vulnerability (medium 4.7) - [CVE-2026-84008](https://insights.sbomify.com/CVE-2026-84008/): .NET Denial of Service Vulnerability (high 7.5) - [CVE-2026-84007](https://insights.sbomify.com/CVE-2026-84007/): Remote Desktop Gateway Service Information Disclosure Vulnerability (medium 6.5) - [CVE-2026-84003](https://insights.sbomify.com/CVE-2026-84003/): Microsoft Authentication Library (MSAL) for Node.js Spoofing Vulnerability (high 7.4) - [CVE-2026-84001](https://insights.sbomify.com/CVE-2026-84001/): Windows Key Distribution Center Denial of Service Vulnerability (high 7.5) - [CVE-2026-84000](https://insights.sbomify.com/CVE-2026-84000/): Microsoft Graphics Component Remote Code Execution Vulnerability (high 7.8) - [CVE-2026-8400](https://insights.sbomify.com/CVE-2026-8400/): Code injection in WebSphere Application Server (high 8.1) - [CVE-2026-83999](https://insights.sbomify.com/CVE-2026-83999/): Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability (high 7.0) - [CVE-2026-83998](https://insights.sbomify.com/CVE-2026-83998/): Remote Desktop Client Remote Code Execution Vulnerability (high 8.8) - [CVE-2026-83997](https://insights.sbomify.com/CVE-2026-83997/): Windows Message Queuing Remote Code Execution Vulnerability (high 8.1) - [CVE-2026-83996](https://insights.sbomify.com/CVE-2026-83996/): Windows Error Reporting Elevation of Privilege Vulnerability (high 8.8) - [CVE-2026-83995](https://insights.sbomify.com/CVE-2026-83995/): Windows NTFS Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-83992](https://insights.sbomify.com/CVE-2026-83992/): Windows Imaging Component Remote Code Execution Vulnerability (high 8.8) - [CVE-2026-83991](https://insights.sbomify.com/CVE-2026-83991/): Windows Cloud Files Mini Filter Driver Tampering Vulnerability (medium 5.5) - [CVE-2026-83990](https://insights.sbomify.com/CVE-2026-83990/): Microsoft Graphics Component Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-83989](https://insights.sbomify.com/CVE-2026-83989/): Windows Services for NFS ONCRPC XDR Driver Denial of Service Vulnerability (high 7.5) - [CVE-2026-83988](https://insights.sbomify.com/CVE-2026-83988/): Windows Biometric Service Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-83987](https://insights.sbomify.com/CVE-2026-83987/): Windows Biometric Service Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-83986](https://insights.sbomify.com/CVE-2026-83986/): Windows Biometric Service Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-83985](https://insights.sbomify.com/CVE-2026-83985/): Windows Biometric Service Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-83983](https://insights.sbomify.com/CVE-2026-83983/): Windows Biometric Service Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-83982](https://insights.sbomify.com/CVE-2026-83982/): Windows Biometric Service Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-83981](https://insights.sbomify.com/CVE-2026-83981/): Windows Biometric Service Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-83980](https://insights.sbomify.com/CVE-2026-83980/): Windows Biometric Service Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-8398](https://insights.sbomify.com/CVE-2026-8398/): Daemon Tools Lite Embedded Malicious Code (critical 9.3, exploited in the wild) - [CVE-2026-83979](https://insights.sbomify.com/CVE-2026-83979/): Windows Biometric Service Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-83978](https://insights.sbomify.com/CVE-2026-83978/): Windows Biometric Service Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-83977](https://insights.sbomify.com/CVE-2026-83977/): Windows Biometric Service Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-83976](https://insights.sbomify.com/CVE-2026-83976/): Windows Biometric Service Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-83975](https://insights.sbomify.com/CVE-2026-83975/): Windows Biometric Service Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-83974](https://insights.sbomify.com/CVE-2026-83974/): Windows Biometric Service Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-83973](https://insights.sbomify.com/CVE-2026-83973/): Windows Biometric Service Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-83972](https://insights.sbomify.com/CVE-2026-83972/): Windows Biometric Service Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-83971](https://insights.sbomify.com/CVE-2026-83971/): Windows Biometric Service Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-83970](https://insights.sbomify.com/CVE-2026-83970/): Windows Biometric Service Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-83969](https://insights.sbomify.com/CVE-2026-83969/): Windows Biometric Service Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-83968](https://insights.sbomify.com/CVE-2026-83968/): Windows Biometric Service Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-83967](https://insights.sbomify.com/CVE-2026-83967/): Windows Biometric Service Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-83966](https://insights.sbomify.com/CVE-2026-83966/): Substance3D - Sampler | Out-of-bounds Write (CWE-787) (high 7.8) - [CVE-2026-83965](https://insights.sbomify.com/CVE-2026-83965/): Substance3D - Sampler | Stack-based Buffer Overflow (CWE-121) (high 7.8) - [CVE-2026-83964](https://insights.sbomify.com/CVE-2026-83964/): Adobe Connect | Improper Certificate Validation (CWE-295) (medium 6.2) - [CVE-2026-83963](https://insights.sbomify.com/CVE-2026-83963/): Substance3D - Modeler | Out-of-bounds Write (CWE-787) (high 7.8) - [CVE-2026-83962](https://insights.sbomify.com/CVE-2026-83962/): Substance3D - Modeler | Stack-based Buffer Overflow (CWE-121) (high 7.8) - [CVE-2026-83961](https://insights.sbomify.com/CVE-2026-83961/): ColdFusion | Improper Authentication (CWE-287) (high 7.1) - [CVE-2026-83960](https://insights.sbomify.com/CVE-2026-83960/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2026-8396](https://insights.sbomify.com/CVE-2026-8396/): XXE in Netcad's NetGIS (high 7.5) - [CVE-2026-83959](https://insights.sbomify.com/CVE-2026-83959/): Substance3D - Sampler | Heap-based Buffer Overflow (CWE-122) (high 7.8) - [CVE-2026-83958](https://insights.sbomify.com/CVE-2026-83958/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2026-83955](https://insights.sbomify.com/CVE-2026-83955/): Windows Biometric Service Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-83954](https://insights.sbomify.com/CVE-2026-83954/): Windows Biometric Service Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-83952](https://insights.sbomify.com/CVE-2026-83952/): Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-83951](https://insights.sbomify.com/CVE-2026-83951/): Microsoft Office Word Information Disclosure Vulnerability (medium 5.5) - [CVE-2026-83949](https://insights.sbomify.com/CVE-2026-83949/): Microsoft Office Word Information Disclosure Vulnerability (medium 5.5) - [CVE-2026-83948](https://insights.sbomify.com/CVE-2026-83948/): Microsoft Azure CLI Remote Code Execution Vulnerability (high 8.0) - [CVE-2026-83947](https://insights.sbomify.com/CVE-2026-83947/): Azure Event Grid Spoofing Vulnerability (high 7.7) - [CVE-2026-83946](https://insights.sbomify.com/CVE-2026-83946/): Azure Portal Spoofing Vulnerability (high 8.2) - [CVE-2026-83945](https://insights.sbomify.com/CVE-2026-83945/): Microsoft SQL Server Remote Code Execution Vulnerability (medium 6.6) - [CVE-2026-83944](https://insights.sbomify.com/CVE-2026-83944/): Azure Logic Apps Elevation of Privilege Vulnerability (critical 10.0) - [CVE-2026-83943](https://insights.sbomify.com/CVE-2026-83943/): Azure API Center Information Disclosure Vulnerability (high 8.7) - [CVE-2026-83942](https://insights.sbomify.com/CVE-2026-83942/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-83941](https://insights.sbomify.com/CVE-2026-83941/): Entra ID Elevation of Privilege Vulnerability (critical 9.9) - [CVE-2026-83940](https://insights.sbomify.com/CVE-2026-83940/): Windows Device Association Service Elevation of Privilege Vulnerability (high 7.0) - [CVE-2026-83939](https://insights.sbomify.com/CVE-2026-83939/): Windows Secure Kernel Mode Elevation of Privilege Vulnerability (high 8.2) - [CVE-2026-83938](https://insights.sbomify.com/CVE-2026-83938/): Azure Kubernetes Configuration Service Elevation of Privilege Vulnerability (critical 10.0) - [CVE-2026-83935](https://insights.sbomify.com/CVE-2026-83935/): Microsoft XML Remote Code Execution Vulnerability (critical 9.8) - [CVE-2026-83934](https://insights.sbomify.com/CVE-2026-83934/): Windows GDI+ Remote Code Execution Vulnerability (high 8.8) - [CVE-2026-83933](https://insights.sbomify.com/CVE-2026-83933/): Windows Update Orchestrator Service Information Disclosure Vulnerability (medium 5.5) - [CVE-2026-83932](https://insights.sbomify.com/CVE-2026-83932/): Windows Group Policy Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-83931](https://insights.sbomify.com/CVE-2026-83931/): Windows Hyper-V Remote Code Execution Vulnerability (high 7.8) - [CVE-2026-83930](https://insights.sbomify.com/CVE-2026-83930/): Windows Update Orchestrator Service Elevation of Privilege Vulnerability (high 7.0) - [CVE-2026-83929](https://insights.sbomify.com/CVE-2026-83929/): Windows GDI Remote Code Execution Vulnerability (high 8.8) - [CVE-2026-83928](https://insights.sbomify.com/CVE-2026-83928/): Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability (high 8.8) - [CVE-2026-83927](https://insights.sbomify.com/CVE-2026-83927/): Windows Registry Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-83926](https://insights.sbomify.com/CVE-2026-83926/): Windows Hello Security Feature Bypass Vulnerability (medium 4.4) - [CVE-2026-83925](https://insights.sbomify.com/CVE-2026-83925/): Windows Kernel Information Disclosure Vulnerability (medium 4.7) - [CVE-2026-83924](https://insights.sbomify.com/CVE-2026-83924/): Windows Kernel Elevation of Privilege Vulnerability (high 7.0) - [CVE-2026-83923](https://insights.sbomify.com/CVE-2026-83923/): Microsoft OpenSSH for Windows Remote Code Execution Vulnerability (high 8.8) - [CVE-2026-83922](https://insights.sbomify.com/CVE-2026-83922/): Windows Direct Composition Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-83921](https://insights.sbomify.com/CVE-2026-83921/): Windows Search Service Elevation of Privilege Vulnerability (high 7.0) - [CVE-2026-83920](https://insights.sbomify.com/CVE-2026-83920/): Windows Search Service Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-83919](https://insights.sbomify.com/CVE-2026-83919/): Microsoft Internet Messaging API Remote Code Execution Vulnerability (high 7.8) - [CVE-2026-83918](https://insights.sbomify.com/CVE-2026-83918/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-83917](https://insights.sbomify.com/CVE-2026-83917/): Windows ALPC Elevation of Privilege Vulnerability (high 7.0) - [CVE-2026-83916](https://insights.sbomify.com/CVE-2026-83916/): Windows Error Reporting Remote Code Execution Vulnerability (high 7.0) - [CVE-2026-83915](https://insights.sbomify.com/CVE-2026-83915/): Windows Diagnostic Policy Service Elevation of Privilege Vulnerability (high 7.0) - [CVE-2026-83914](https://insights.sbomify.com/CVE-2026-83914/): Microsoft XML Remote Code Execution Vulnerability (high 8.1) - [CVE-2026-83913](https://insights.sbomify.com/CVE-2026-83913/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-83912](https://insights.sbomify.com/CVE-2026-83912/): Windows Direct Composition Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-83911](https://insights.sbomify.com/CVE-2026-83911/): Windows Storage Elevation of Privilege Vulnerability (high 7.0) - [CVE-2026-83910](https://insights.sbomify.com/CVE-2026-83910/): RPC Runtime Library Remote Code Execution Vulnerability (critical 9.8) - [CVE-2026-8391](https://insights.sbomify.com/CVE-2026-8391/): Other issue in the JavaScript Engine component (medium 5.3) --- From sbomify Insights: https://insights.sbomify.com/years/2026/page/319/