# Vulnerabilities published in 2026 - [CVE-2026-7012](https://insights.sbomify.com/CVE-2026-7012/): MaxSite CMS Redirect Plugin cross site scripting (medium 4.8) - [CVE-2026-70119](https://insights.sbomify.com/CVE-2026-70119/): Windows DNS Remote Code Execution Vulnerability (medium 6.5) - [CVE-2026-70118](https://insights.sbomify.com/CVE-2026-70118/): Windows Audio Service Elevation of Privilege Vulnerability (high 7.0) - [CVE-2026-70117](https://insights.sbomify.com/CVE-2026-70117/): Windows Win32k Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-70116](https://insights.sbomify.com/CVE-2026-70116/): Windows Resilient File System (ReFS) Security Feature Bypass Vulnerability (medium 4.2) - [CVE-2026-70115](https://insights.sbomify.com/CVE-2026-70115/): Microsoft Windows Search Component Elevation of Privilege Vulnerability (high 7.0) - [CVE-2026-70114](https://insights.sbomify.com/CVE-2026-70114/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-70113](https://insights.sbomify.com/CVE-2026-70113/): Windows Client for NFS Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-70112](https://insights.sbomify.com/CVE-2026-70112/): Windows Spaceport.sys Remote Code Execution Vulnerability (high 7.8) - [CVE-2026-70111](https://insights.sbomify.com/CVE-2026-70111/): Windows Kernel Elevation of Privilege Vulnerability (high 8.1) - [CVE-2026-70110](https://insights.sbomify.com/CVE-2026-70110/): Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-7011](https://insights.sbomify.com/CVE-2026-7011/): MaxSite CMS Antispam Plugin plugin_antispam cross site scripting (medium 4.8) - [CVE-2026-70109](https://insights.sbomify.com/CVE-2026-70109/): Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-70108](https://insights.sbomify.com/CVE-2026-70108/): Windows Win32k Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-70106](https://insights.sbomify.com/CVE-2026-70106/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-70105](https://insights.sbomify.com/CVE-2026-70105/): Microsoft Word Information Disclosure Vulnerability (medium 6.5) - [CVE-2026-70104](https://insights.sbomify.com/CVE-2026-70104/): Windows Win32k Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-70103](https://insights.sbomify.com/CVE-2026-70103/): Windows Error Reporting Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-70102](https://insights.sbomify.com/CVE-2026-70102/): Windows Spaceport.sys Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-7010](https://insights.sbomify.com/CVE-2026-7010/): HTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP request lines or control field header values (medium 6.5) - [CVE-2026-70098](https://insights.sbomify.com/CVE-2026-70098/): Visual Studio Code Remote Code Execution Vulnerability (high 8.8) - [CVE-2026-70097](https://insights.sbomify.com/CVE-2026-70097/): Windows Virtualization-Based Security (VBS) Enclave Spoofing Vulnerability (medium 5.6) - [CVE-2026-70096](https://insights.sbomify.com/CVE-2026-70096/): Windows Rich Text Edit Control Remote Code Execution Vulnerability (critical 9.8) - [CVE-2026-70095](https://insights.sbomify.com/CVE-2026-70095/): Windows iSCSI Remote Code Execution Vulnerability (high 7.5) - [CVE-2026-70093](https://insights.sbomify.com/CVE-2026-70093/): Windows Rich Text Edit Control Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-70092](https://insights.sbomify.com/CVE-2026-70092/): Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-70091](https://insights.sbomify.com/CVE-2026-70091/): Windows DNS Denial of Service Vulnerability (medium 5.9) - [CVE-2026-70090](https://insights.sbomify.com/CVE-2026-70090/): Windows Netlogon Information Disclosure Vulnerability (medium 5.5) - [CVE-2026-7009](https://insights.sbomify.com/CVE-2026-7009/): OCSP stapling bypass with Apple SecTrust (medium 5.3) - [CVE-2026-70089](https://insights.sbomify.com/CVE-2026-70089/): Windows GDI Remote Code Execution Vulnerability (high 8.8) - [CVE-2026-70087](https://insights.sbomify.com/CVE-2026-70087/): Role: DNS Server Security Feature Bypass Vulnerability (medium 5.5) - [CVE-2026-70086](https://insights.sbomify.com/CVE-2026-70086/): Microsoft Windows Search Component Elevation of Privilege Vulnerability (high 7.0) - [CVE-2026-70085](https://insights.sbomify.com/CVE-2026-70085/): Role: DNS Server Tampering Vulnerability (medium 5.5) - [CVE-2026-70084](https://insights.sbomify.com/CVE-2026-70084/): Windows Projected File System Information Disclosure Vulnerability (medium 5.5) - [CVE-2026-70083](https://insights.sbomify.com/CVE-2026-70083/): Role: DNS Server Tampering Vulnerability (medium 5.5) - [CVE-2026-70082](https://insights.sbomify.com/CVE-2026-70082/): Windows DNS Denial of Service Vulnerability (high 7.5) - [CVE-2026-70079](https://insights.sbomify.com/CVE-2026-70079/): Windows DNS Denial of Service Vulnerability (high 7.5) - [CVE-2026-70077](https://insights.sbomify.com/CVE-2026-70077/): Windows Kernel Information Disclosure Vulnerability (medium 4.7) - [CVE-2026-70076](https://insights.sbomify.com/CVE-2026-70076/): Windows Win32k Elevation of Privilege Vulnerability (high 7.0) - [CVE-2026-70075](https://insights.sbomify.com/CVE-2026-70075/): Windows Virtualization-Based Security (VBS) Enclave Security Feature Bypass Vulnerability (medium 4.4) - [CVE-2026-70074](https://insights.sbomify.com/CVE-2026-70074/): Windows DNS Information Disclosure Vulnerability (medium 5.5) - [CVE-2026-70072](https://insights.sbomify.com/CVE-2026-70072/): Windows Netlogon Denial of Service Vulnerability (medium 6.5) - [CVE-2026-70071](https://insights.sbomify.com/CVE-2026-70071/): Role: DNS Server Tampering Vulnerability (medium 5.5) - [CVE-2026-7007](https://insights.sbomify.com/CVE-2026-7007/): Division by zero in Zephyr ext2 superblock parsing allows DoS via crafted filesystem image (medium 4.6) - [CVE-2026-70069](https://insights.sbomify.com/CVE-2026-70069/): Windows DHCP Server Remote Code Execution Vulnerability (high 8.8) - [CVE-2026-70068](https://insights.sbomify.com/CVE-2026-70068/): Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability (high 8.8) - [CVE-2026-70067](https://insights.sbomify.com/CVE-2026-70067/): Windows Win32k Elevation of Privilege Vulnerability (high 7.0) - [CVE-2026-70066](https://insights.sbomify.com/CVE-2026-70066/): Windows DHCP Server Elevation of Privilege Vulnerability (high 7.0) - [CVE-2026-70065](https://insights.sbomify.com/CVE-2026-70065/): Windows DHCP Server Denial of Service Vulnerability (high 7.5) - [CVE-2026-70064](https://insights.sbomify.com/CVE-2026-70064/): Windows Kerberos Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-70063](https://insights.sbomify.com/CVE-2026-70063/): Windows Kernel Information Disclosure Vulnerability (medium 4.7) - [CVE-2026-70062](https://insights.sbomify.com/CVE-2026-70062/): Windows libarchive Remote Code Execution Vulnerability (high 8.1) - [CVE-2026-70060](https://insights.sbomify.com/CVE-2026-70060/): Windows Win32k Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-7006](https://insights.sbomify.com/CVE-2026-7006/): Sublime Text 4192/3207 Local Privilege Escalation via Update Staging Mechanism (high 7.0) - [CVE-2026-70059](https://insights.sbomify.com/CVE-2026-70059/): Windows OLE Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-70058](https://insights.sbomify.com/CVE-2026-70058/): Windows DHCP Server Remote Code Execution Vulnerability (high 7.5) - [CVE-2026-70057](https://insights.sbomify.com/CVE-2026-70057/): Windows Routing and Remote Access Service (RRAS) Security Feature Bypass Vulnerability (medium 5.5) - [CVE-2026-70056](https://insights.sbomify.com/CVE-2026-70056/): Windows Update Service Elevation of Privilege Vulnerability (high 7.0) - [CVE-2026-70055](https://insights.sbomify.com/CVE-2026-70055/): Windows Cryptographic Services Information Disclosure Vulnerability (medium 5.5) - [CVE-2026-70054](https://insights.sbomify.com/CVE-2026-70054/): Windows NetBIOS Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-70052](https://insights.sbomify.com/CVE-2026-70052/): Microsoft PowerShell Remote Code Execution Vulnerability (high 7.8) - [CVE-2026-70051](https://insights.sbomify.com/CVE-2026-70051/): Windows SmartScreen Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-70049](https://insights.sbomify.com/CVE-2026-70049/): Microsoft Configuration Manager Elevation of Privilege Vulnerability (high 8.0) - [CVE-2026-70048](https://insights.sbomify.com/CVE-2026-70048/): Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-70045](https://insights.sbomify.com/CVE-2026-70045/): Windows Work Folders Elevation of Privilege Vulnerability (high 7.0) - [CVE-2026-70044](https://insights.sbomify.com/CVE-2026-70044/): Microsoft Windows Media Foundation Information Disclosure Vulnerability (medium 5.5) - [CVE-2026-70041](https://insights.sbomify.com/CVE-2026-70041/): Windows CD-ROM Driver Information Disclosure Vulnerability (medium 5.5) - [CVE-2026-70038](https://insights.sbomify.com/CVE-2026-70038/): Windows iSCSI Remote Code Execution Vulnerability (high 8.1) - [CVE-2026-70035](https://insights.sbomify.com/CVE-2026-70035/): .NET Framework Remote Code Execution Vulnerability (high 8.8) - [CVE-2026-70033](https://insights.sbomify.com/CVE-2026-70033/): Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability (high 7.5) - [CVE-2026-70031](https://insights.sbomify.com/CVE-2026-70031/): Windows iSCSI Denial of Service Vulnerability (high 7.5) - [CVE-2026-70027](https://insights.sbomify.com/CVE-2026-70027/): Windows Subsystem for Linux Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-70026](https://insights.sbomify.com/CVE-2026-70026/): Windows Secure Kernel Mode Elevation of Privilege Vulnerability (high 7.0) - [CVE-2026-70025](https://insights.sbomify.com/CVE-2026-70025/): Windows Netlogon Denial of Service Vulnerability (medium 5.3) - [CVE-2026-70024](https://insights.sbomify.com/CVE-2026-70024/): Windows Internet Information Services Remote Code Execution Vulnerability (critical 9.8) - [CVE-2026-70023](https://insights.sbomify.com/CVE-2026-70023/): Windows Hyper-V Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-70021](https://insights.sbomify.com/CVE-2026-70021/): Windows Direct Composition Elevation of Privilege Vulnerability (high 7.0) - [CVE-2026-7002](https://insights.sbomify.com/CVE-2026-7002/): KLiK SocialMediaWebsite Private Message get_message_ajax.php sql injection (medium 6.9) - [CVE-2026-70019](https://insights.sbomify.com/CVE-2026-70019/): Windows Compressed Folder Information Disclosure Vulnerability (medium 6.5) - [CVE-2026-70017](https://insights.sbomify.com/CVE-2026-70017/): Windows Secure Kernel Mode Information Disclosure Vulnerability (medium 5.5) - [CVE-2026-70015](https://insights.sbomify.com/CVE-2026-70015/): Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-70014](https://insights.sbomify.com/CVE-2026-70014/): Windows Cryptographic Services Remote Code Execution Vulnerability (high 7.5) - [CVE-2026-70013](https://insights.sbomify.com/CVE-2026-70013/): Windows iSCSI Remote Code Execution Vulnerability (high 8.1) - [CVE-2026-70012](https://insights.sbomify.com/CVE-2026-70012/): Remote Desktop Client Remote Code Execution Vulnerability (high 7.5) - [CVE-2026-70011](https://insights.sbomify.com/CVE-2026-70011/): Windows IP Over USB Service Information Disclosure Vulnerability (medium 5.5) - [CVE-2026-70010](https://insights.sbomify.com/CVE-2026-70010/): Windows NTFS Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-7001](https://insights.sbomify.com/CVE-2026-7001/): Datacom DM4100 Ethernet Configuration cross site scripting (medium 4.8) - [CVE-2026-70009](https://insights.sbomify.com/CVE-2026-70009/): Azure Arc Elevation of Privilege Vulnerability (critical 9.3) - [CVE-2026-70008](https://insights.sbomify.com/CVE-2026-70008/): Windows IP Over USB Service Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-70007](https://insights.sbomify.com/CVE-2026-70007/): .NET Framework Remote Code Execution Vulnerability (high 8.8) - [CVE-2026-70006](https://insights.sbomify.com/CVE-2026-70006/): Remote Desktop Client Remote Code Execution Vulnerability (high 7.5) - [CVE-2026-70005](https://insights.sbomify.com/CVE-2026-70005/): Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability (medium 5.9) - [CVE-2026-70004](https://insights.sbomify.com/CVE-2026-70004/): Remote Desktop Client Remote Code Execution Vulnerability (high 7.5) - [CVE-2026-7000](https://insights.sbomify.com/CVE-2026-7000/): Datacom DM4100 VLAN Page cross site scripting (medium 4.8) - [CVE-2026-69999](https://insights.sbomify.com/CVE-2026-69999/): Windows Update Information Disclosure Vulnerability (medium 5.5) - [CVE-2026-69998](https://insights.sbomify.com/CVE-2026-69998/): Remote Desktop Client Remote Code Execution Vulnerability (high 7.5) - [CVE-2026-69997](https://insights.sbomify.com/CVE-2026-69997/): Remote Desktop Client Remote Code Execution Vulnerability (high 7.5) - [CVE-2026-69996](https://insights.sbomify.com/CVE-2026-69996/): Remote Desktop Client Remote Code Execution Vulnerability (high 7.5) - [CVE-2026-69995](https://insights.sbomify.com/CVE-2026-69995/): Remote Desktop Client Remote Code Execution Vulnerability (high 7.5) - [CVE-2026-69994](https://insights.sbomify.com/CVE-2026-69994/): Remote Desktop Client Remote Code Execution Vulnerability (high 7.5) --- From sbomify Insights: https://insights.sbomify.com/years/2026/page/431/