# Vulnerabilities published in 2026


- [CVE-2026-83792](https://insights.sbomify.com/CVE-2026-83792/): Windows Device Install Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-83791](https://insights.sbomify.com/CVE-2026-83791/): Windows Virtual Input Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-83790](https://insights.sbomify.com/CVE-2026-83790/): Windows Hello Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-8379](https://insights.sbomify.com/CVE-2026-8379/): Frontend File Manager Plugin <= 23.6 - Unauthenticated Arbitrary File Download (high 7.5)
- [CVE-2026-83789](https://insights.sbomify.com/CVE-2026-83789/): Windows SMB Client Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2026-83788](https://insights.sbomify.com/CVE-2026-83788/): Windows rndismp6.sys Information Disclosure Vulnerability (medium 4.6)
- [CVE-2026-83787](https://insights.sbomify.com/CVE-2026-83787/): Windows DHCP Server Security Feature Bypass Vulnerability (medium 5.5)
- [CVE-2026-83786](https://insights.sbomify.com/CVE-2026-83786/): Windows NTFS Information Disclosure Vulnerability (medium 4.7)
- [CVE-2026-83785](https://insights.sbomify.com/CVE-2026-83785/): Windows COM+ Event System Service Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-83784](https://insights.sbomify.com/CVE-2026-83784/): Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2026-83783](https://insights.sbomify.com/CVE-2026-83783/): Windows Management Instrumentation Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-83782](https://insights.sbomify.com/CVE-2026-83782/): Windows Shell Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-83781](https://insights.sbomify.com/CVE-2026-83781/): Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-83780](https://insights.sbomify.com/CVE-2026-83780/): Windows CCFFilter Driver Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-8378](https://insights.sbomify.com/CVE-2026-8378/): Frontend File Manager Plugin <= 23.6 - Subscriber+ Stored Cross-Site Scripting via File Rename (medium 5.4)
- [CVE-2026-83779](https://insights.sbomify.com/CVE-2026-83779/): Windows Installer Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-83778](https://insights.sbomify.com/CVE-2026-83778/): Microsoft Internet Messaging API Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-83777](https://insights.sbomify.com/CVE-2026-83777/): Windows Bluetooth Service Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2026-83776](https://insights.sbomify.com/CVE-2026-83776/): Windows Bluetooth Driver Elevation of Privilege Vulnerability (medium 6.8)
- [CVE-2026-83775](https://insights.sbomify.com/CVE-2026-83775/): Windows Installer Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-83774](https://insights.sbomify.com/CVE-2026-83774/): Windows Win32 Kernel Subsystem Information Disclosure Vulnerability (medium 4.7)
- [CVE-2026-83773](https://insights.sbomify.com/CVE-2026-83773/): Windows MIDI Service Module Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-83772](https://insights.sbomify.com/CVE-2026-83772/): Cobham SATCOM VSAT7090 Maritime Satellite Router JSON Parsing mail-report.sh c_set_reports_decode command injection (critical 9.4)
- [CVE-2026-83771](https://insights.sbomify.com/CVE-2026-83771/): Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2026-83770](https://insights.sbomify.com/CVE-2026-83770/): Windows Text Shaping Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-8377](https://insights.sbomify.com/CVE-2026-8377/): Improper Authorization in Armiya Technologies' Access Control System (high 8.2)
- [CVE-2026-83769](https://insights.sbomify.com/CVE-2026-83769/): Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-83768](https://insights.sbomify.com/CVE-2026-83768/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-83767](https://insights.sbomify.com/CVE-2026-83767/): Windows Installer Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-83766](https://insights.sbomify.com/CVE-2026-83766/): Windows Hyper-V Security Feature Bypass Vulnerability (medium 4.2)
- [CVE-2026-83765](https://insights.sbomify.com/CVE-2026-83765/): Windows DWM Core Library Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-83764](https://insights.sbomify.com/CVE-2026-83764/): Windows Clipboard User Service Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-83763](https://insights.sbomify.com/CVE-2026-83763/): Windows Input System Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-83762](https://insights.sbomify.com/CVE-2026-83762/): Win32k Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-83761](https://insights.sbomify.com/CVE-2026-83761/): Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-83760](https://insights.sbomify.com/CVE-2026-83760/): Microsoft Bluetooth Driver Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-8376](https://insights.sbomify.com/CVE-2026-8376/): Memory corruption in perl:perl (high 7.3)
- [CVE-2026-83759](https://insights.sbomify.com/CVE-2026-83759/): Windows Encrypting File System (EFS) Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-83758](https://insights.sbomify.com/CVE-2026-83758/): Windows Error Reporting Remote Code Execution Vulnerability (high 7.8)
- [CVE-2026-83757](https://insights.sbomify.com/CVE-2026-83757/): Win32k Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-83756](https://insights.sbomify.com/CVE-2026-83756/): Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-83755](https://insights.sbomify.com/CVE-2026-83755/): Win32k Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-83754](https://insights.sbomify.com/CVE-2026-83754/): Microsoft OpenSSH for Windows Remote Code Execution Vulnerability (high 7.5)
- [CVE-2026-83753](https://insights.sbomify.com/CVE-2026-83753/): Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-83752](https://insights.sbomify.com/CVE-2026-83752/): Windows Installer Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-83751](https://insights.sbomify.com/CVE-2026-83751/): Windows MIDI Service Module Elevation of Privileges Vulnerability (high 7.0)
- [CVE-2026-83750](https://insights.sbomify.com/CVE-2026-83750/): Windows Error Reporting Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-83749](https://insights.sbomify.com/CVE-2026-83749/): Windows Overlay Filter Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-83748](https://insights.sbomify.com/CVE-2026-83748/): Windows Error Reporting Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-83747](https://insights.sbomify.com/CVE-2026-83747/): Windows Error Reporting Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-83746](https://insights.sbomify.com/CVE-2026-83746/): Skype for Business Elevation of Privilege Vulnerability (high 8.1)
- [CVE-2026-83745](https://insights.sbomify.com/CVE-2026-83745/): Denial of service in Apache Thrift (high 8.7)
- [CVE-2026-83744](https://insights.sbomify.com/CVE-2026-83744/): invoiceninja Invoice Ninja invoices Endpoint Purify.php isHostSafe server-side request forgery (medium 5.3)
- [CVE-2026-83743](https://insights.sbomify.com/CVE-2026-83743/): invoiceninja Invoice Ninja Vendor Portal Profile Update profile authorization (medium 5.3)
- [CVE-2026-83742](https://insights.sbomify.com/CVE-2026-83742/): wstrncat() unsigned integer underflow leads to an off-by-one null write in wolfSSH on non-Windows platforms (medium 5.3)
- [CVE-2026-83741](https://insights.sbomify.com/CVE-2026-83741/): Internet Explorer Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-83740](https://insights.sbomify.com/CVE-2026-83740/): Windows Hello Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-8374](https://insights.sbomify.com/CVE-2026-8374/): Misuse and Misconfiguration of Cryptographic Algorithm in Bluetooth Communication (high 8.5)
- [CVE-2026-83739](https://insights.sbomify.com/CVE-2026-83739/): Windows Bluetooth Service Remote Code Execution Vulnerability (high 7.5)
- [CVE-2026-83738](https://insights.sbomify.com/CVE-2026-83738/): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-83737](https://insights.sbomify.com/CVE-2026-83737/): Windows NTFS Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-83736](https://insights.sbomify.com/CVE-2026-83736/): Windows Kernel Elevation of Privilege Vulnerability (medium 5.5)
- [CVE-2026-83735](https://insights.sbomify.com/CVE-2026-83735/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-83733](https://insights.sbomify.com/CVE-2026-83733/): Windows Print Spooler Components Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-83732](https://insights.sbomify.com/CVE-2026-83732/): Win32k Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-83728](https://insights.sbomify.com/CVE-2026-83728/): Windows Hyper-V Spoofing Vulnerability (high 8.8)
- [CVE-2026-83727](https://insights.sbomify.com/CVE-2026-83727/): Windows Overlay Filter Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-83726](https://insights.sbomify.com/CVE-2026-83726/): Windows DWM Core Library Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-83725](https://insights.sbomify.com/CVE-2026-83725/): Microsoft Windows Search Component Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-83724](https://insights.sbomify.com/CVE-2026-83724/): Windows Management Instrumentation Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-83723](https://insights.sbomify.com/CVE-2026-83723/): Windows Event Logging Service Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-83722](https://insights.sbomify.com/CVE-2026-83722/): Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-83721](https://insights.sbomify.com/CVE-2026-83721/): Win32k Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-83720](https://insights.sbomify.com/CVE-2026-83720/): Windows Kerberos Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-83719](https://insights.sbomify.com/CVE-2026-83719/): Servicing Stack Updates Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-83718](https://insights.sbomify.com/CVE-2026-83718/): Windows Installer Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-83717](https://insights.sbomify.com/CVE-2026-83717/): Windows Installer Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-83716](https://insights.sbomify.com/CVE-2026-83716/): Windows Hyper-V Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-83715](https://insights.sbomify.com/CVE-2026-83715/): Windows Error Reporting Tampering Vulnerability (high 7.1)
- [CVE-2026-83714](https://insights.sbomify.com/CVE-2026-83714/): HTTP.sys Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-83713](https://insights.sbomify.com/CVE-2026-83713/): Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-83712](https://insights.sbomify.com/CVE-2026-83712/): Windows NTFS Remote Code Execution Vulnerability (high 7.8)
- [CVE-2026-83711](https://insights.sbomify.com/CVE-2026-83711/): Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability (critical 10.0)
- [CVE-2026-83710](https://insights.sbomify.com/CVE-2026-83710/): Windows Device Association Service Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-83709](https://insights.sbomify.com/CVE-2026-83709/): Windows NTLM Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-83708](https://insights.sbomify.com/CVE-2026-83708/): Windows Installer Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-83707](https://insights.sbomify.com/CVE-2026-83707/): Windows Event Tracing Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-83706](https://insights.sbomify.com/CVE-2026-83706/): Windows NTFS Elevation of Privilege Vulnerability (medium 6.7)
- [CVE-2026-83705](https://insights.sbomify.com/CVE-2026-83705/): HTTP.sys Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-83704](https://insights.sbomify.com/CVE-2026-83704/): Microsoft Windows Search Component Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-83703](https://insights.sbomify.com/CVE-2026-83703/): Windows Wi-Fi Driver Denial of Service Vulnerability (medium 6.5)
- [CVE-2026-83702](https://insights.sbomify.com/CVE-2026-83702/): Windows Installer Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-83701](https://insights.sbomify.com/CVE-2026-83701/): Windows Now Playing Session Manager Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-83700](https://insights.sbomify.com/CVE-2026-83700/): Windows Now Playing Session Manager Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-8370](https://insights.sbomify.com/CVE-2026-8370/): Automic Automation Agent Unix privilege escalation (high 8.5)
- [CVE-2026-83699](https://insights.sbomify.com/CVE-2026-83699/): Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-83698](https://insights.sbomify.com/CVE-2026-83698/): Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-83697](https://insights.sbomify.com/CVE-2026-83697/): Windows Modern Device Management (MDM) Tampering Vulnerability (medium 4.7)
- [CVE-2026-83696](https://insights.sbomify.com/CVE-2026-83696/): Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-83695](https://insights.sbomify.com/CVE-2026-83695/): Windows Event Logging Service Information Disclosure Vulnerability (medium 5.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/321/