# Vulnerabilities published in 2026


- [CVE-2026-70320](https://insights.sbomify.com/CVE-2026-70320/): Powerpoint Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-7032](https://insights.sbomify.com/CVE-2026-7032/): Tenda F456 SafeEmailFilter buffer overflow (high 8.7)
- [CVE-2026-70319](https://insights.sbomify.com/CVE-2026-70319/): Microsoft Office Word Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-70318](https://insights.sbomify.com/CVE-2026-70318/): Microsoft Excel Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-70317](https://insights.sbomify.com/CVE-2026-70317/): Microsoft Office Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-70316](https://insights.sbomify.com/CVE-2026-70316/): Powerpoint Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-70315](https://insights.sbomify.com/CVE-2026-70315/): Microsoft Office Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-70314](https://insights.sbomify.com/CVE-2026-70314/): Microsoft Office Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-70313](https://insights.sbomify.com/CVE-2026-70313/): Microsoft PowerPoint Remote Code Execution Vulnerability (high 7.8)
- [CVE-2026-70312](https://insights.sbomify.com/CVE-2026-70312/): Powerpoint Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-70311](https://insights.sbomify.com/CVE-2026-70311/): Microsoft Office Word Remote Code Execution Vulnerability (high 7.8)
- [CVE-2026-70310](https://insights.sbomify.com/CVE-2026-70310/): Microsoft Word Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-7031](https://insights.sbomify.com/CVE-2026-7031/): Tenda F456 SafeMacFilter fromSafeMacFilter buffer overflow (high 8.7)
- [CVE-2026-70309](https://insights.sbomify.com/CVE-2026-70309/): Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability (medium 5.4)
- [CVE-2026-70307](https://insights.sbomify.com/CVE-2026-70307/): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-70306](https://insights.sbomify.com/CVE-2026-70306/): Microsoft Office SharePoint Spoofing Vulnerability (critical 9.3)
- [CVE-2026-70304](https://insights.sbomify.com/CVE-2026-70304/): Windows DNS Elevation of Privilege Vulnerability (medium 6.7)
- [CVE-2026-70303](https://insights.sbomify.com/CVE-2026-70303/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-70302](https://insights.sbomify.com/CVE-2026-70302/): Microsoft Office Word Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-70301](https://insights.sbomify.com/CVE-2026-70301/): Microsoft Office Word Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-70300](https://insights.sbomify.com/CVE-2026-70300/): Microsoft Office Word Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-7030](https://insights.sbomify.com/CVE-2026-7030/): Tenda F456 RouteStatic fromRouteStatic buffer overflow (high 8.7)
- [CVE-2026-70299](https://insights.sbomify.com/CVE-2026-70299/): Windows Bind Filter Driver Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2026-70298](https://insights.sbomify.com/CVE-2026-70298/): Microsoft Office SharePoint Information Disclosure Vulnerability (medium 6.5)
- [CVE-2026-70297](https://insights.sbomify.com/CVE-2026-70297/): Skype for Business Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-70296](https://insights.sbomify.com/CVE-2026-70296/): Windows Imaging Component Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-70295](https://insights.sbomify.com/CVE-2026-70295/): Win32k Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-70294](https://insights.sbomify.com/CVE-2026-70294/): Win32k Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-70293](https://insights.sbomify.com/CVE-2026-70293/): Win32k Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-70292](https://insights.sbomify.com/CVE-2026-70292/): Win32k Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-70291](https://insights.sbomify.com/CVE-2026-70291/): Microsoft Office Outlook Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-70290](https://insights.sbomify.com/CVE-2026-70290/): Win32k Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-7029](https://insights.sbomify.com/CVE-2026-7029/): Tenda F456 addressNat fromaddressNat buffer overflow (high 8.7)
- [CVE-2026-70289](https://insights.sbomify.com/CVE-2026-70289/): Windows Win32k Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-70288](https://insights.sbomify.com/CVE-2026-70288/): Win32k Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-70287](https://insights.sbomify.com/CVE-2026-70287/): Microsoft Office Word Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-70286](https://insights.sbomify.com/CVE-2026-70286/): Windows Graphics Component Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-70285](https://insights.sbomify.com/CVE-2026-70285/): Windows Win32k Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-70284](https://insights.sbomify.com/CVE-2026-70284/): Win32k Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-70283](https://insights.sbomify.com/CVE-2026-70283/): Windows Win32k Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-70282](https://insights.sbomify.com/CVE-2026-70282/): Microsoft Office Outlook Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-70281](https://insights.sbomify.com/CVE-2026-70281/): Microsoft Office Outlook Information Disclosure Vulnerability (high 7.5)
- [CVE-2026-70280](https://insights.sbomify.com/CVE-2026-70280/): Windows Hello Security Feature Bypass Vulnerability (medium 4.4)
- [CVE-2026-7028](https://insights.sbomify.com/CVE-2026-7028/): CodeAstro Online Job Portal All Jobs delete-jobs.php sql injection (medium 5.1)
- [CVE-2026-70279](https://insights.sbomify.com/CVE-2026-70279/): Microsoft Exchange Server Spoofing Vulnerability (critical 9.3)
- [CVE-2026-70278](https://insights.sbomify.com/CVE-2026-70278/): Microsoft Windows Media Foundation Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-70277](https://insights.sbomify.com/CVE-2026-70277/): Windows Fast FAT File System Driver Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-70276](https://insights.sbomify.com/CVE-2026-70276/): Microsoft Office Click-To-Run Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-70275](https://insights.sbomify.com/CVE-2026-70275/): Windows CD-ROM File System Driver Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-70274](https://insights.sbomify.com/CVE-2026-70274/): Windows Bind Filter Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-70273](https://insights.sbomify.com/CVE-2026-70273/): Windows Win32k Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-70272](https://insights.sbomify.com/CVE-2026-70272/): Windows Installer Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-70271](https://insights.sbomify.com/CVE-2026-70271/): Windows Win32k Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-70270](https://insights.sbomify.com/CVE-2026-70270/): Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability (medium 5.5)
- [CVE-2026-7027](https://insights.sbomify.com/CVE-2026-7027/): D-Link DSL-2740R Wireless Setup Section cross site scripting (medium 4.8)
- [CVE-2026-70269](https://insights.sbomify.com/CVE-2026-70269/): Microsoft Office Word Remote Code Execution Vulnerability (high 8.1)
- [CVE-2026-70268](https://insights.sbomify.com/CVE-2026-70268/): Microsoft Office Word Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-70267](https://insights.sbomify.com/CVE-2026-70267/): Microsoft Office SharePoint Remote Code Execution Vulnerability (high 7.2)
- [CVE-2026-70266](https://insights.sbomify.com/CVE-2026-70266/): Microsoft Office SharePoint Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2026-70264](https://insights.sbomify.com/CVE-2026-70264/): Microsoft Defender Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-70263](https://insights.sbomify.com/CVE-2026-70263/): Microsoft Office Word Information Disclosure Vulnerability (medium 6.5)
- [CVE-2026-70262](https://insights.sbomify.com/CVE-2026-70262/): WebDAV Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2026-70261](https://insights.sbomify.com/CVE-2026-70261/): Microsoft Trace Data Helper Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-70260](https://insights.sbomify.com/CVE-2026-70260/): Microsoft Trace Data Helper Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-7026](https://insights.sbomify.com/CVE-2026-7026/): D-Link DGS-3420 System Information Settings cross site scripting (medium 6.8)
- [CVE-2026-70259](https://insights.sbomify.com/CVE-2026-70259/): Microsoft Office SharePoint Information Disclosure Vulnerability (medium 6.5)
- [CVE-2026-70258](https://insights.sbomify.com/CVE-2026-70258/): Microsoft Windows Media Foundation Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-70257](https://insights.sbomify.com/CVE-2026-70257/): Microsoft Office Outlook Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-70256](https://insights.sbomify.com/CVE-2026-70256/): Microsoft Office Outlook Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-70255](https://insights.sbomify.com/CVE-2026-70255/): Desktop Window Manager Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-70254](https://insights.sbomify.com/CVE-2026-70254/): Microsoft Office Excel Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-70253](https://insights.sbomify.com/CVE-2026-70253/): Windows Win32k Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-70252](https://insights.sbomify.com/CVE-2026-70252/): Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability (high 7.0)
- [CVE-2026-70251](https://insights.sbomify.com/CVE-2026-70251/): Microsoft Office SharePoint Elevation of Privilege Vulnerability (high 7.5)
- [CVE-2026-70250](https://insights.sbomify.com/CVE-2026-70250/): Windows DHCP Client Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-7025](https://insights.sbomify.com/CVE-2026-7025/): Typecho Ping Back Service Endpoint Service.php sendPingHandle server-side request forgery (medium 6.9)
- [CVE-2026-70249](https://insights.sbomify.com/CVE-2026-70249/): Windows Win32k Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-70248](https://insights.sbomify.com/CVE-2026-70248/): Windows Hyper-V Denial of Service Vulnerability (medium 6.5)
- [CVE-2026-70247](https://insights.sbomify.com/CVE-2026-70247/): HTTP.sys Remote Code Execution Vulnerability (high 7.8)
- [CVE-2026-70246](https://insights.sbomify.com/CVE-2026-70246/): Microsoft Office SharePoint Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2026-70245](https://insights.sbomify.com/CVE-2026-70245/): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-70244](https://insights.sbomify.com/CVE-2026-70244/): Windows DNS Server Information Disclosure Vulnerability (medium 6.5)
- [CVE-2026-70243](https://insights.sbomify.com/CVE-2026-70243/): Windows Kernel Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-70242](https://insights.sbomify.com/CVE-2026-70242/): Microsoft Office Outlook Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-70241](https://insights.sbomify.com/CVE-2026-70241/): Windows Kerberos Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-7024](https://insights.sbomify.com/CVE-2026-7024/): rawchen sims deleteFileServlet Endpoint DeleteFileServlet.java path traversal (medium 5.3)
- [CVE-2026-70238](https://insights.sbomify.com/CVE-2026-70238/): Windows Storage Spaces Controller Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-70237](https://insights.sbomify.com/CVE-2026-70237/): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-70236](https://insights.sbomify.com/CVE-2026-70236/): Windows Win32k Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-70235](https://insights.sbomify.com/CVE-2026-70235/): Windows Event Tracing Spoofing Vulnerability (medium 5.5)
- [CVE-2026-70234](https://insights.sbomify.com/CVE-2026-70234/): Desktop Window Manager Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-70233](https://insights.sbomify.com/CVE-2026-70233/): Windows Common Log File System Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-70232](https://insights.sbomify.com/CVE-2026-70232/): Windows Kernel Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-70230](https://insights.sbomify.com/CVE-2026-70230/): Windows Audio Service Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-7023](https://insights.sbomify.com/CVE-2026-7023/): ByteDance coze-studio databaseTool database_impl.go ExecuteSQL sql injection (medium 5.3)
- [CVE-2026-70229](https://insights.sbomify.com/CVE-2026-70229/): Windows Active Directory Domain Services Remote Code Execution Vulnerability (high 8.1)
- [CVE-2026-70228](https://insights.sbomify.com/CVE-2026-70228/): Desktop Window Manager Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-70227](https://insights.sbomify.com/CVE-2026-70227/): Windows Device Association Service Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-70225](https://insights.sbomify.com/CVE-2026-70225/): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-70223](https://insights.sbomify.com/CVE-2026-70223/): Windows Console Driver Elevation of Privilege Vulnerability (high 7.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/429/