# Vulnerabilities published in 2026


- [CVE-2026-69734](https://insights.sbomify.com/CVE-2026-69734/): Microsoft Office Word Information Disclosure Vulnerability (medium 6.5)
- [CVE-2026-69733](https://insights.sbomify.com/CVE-2026-69733/): Windows Update Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69732](https://insights.sbomify.com/CVE-2026-69732/): Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability (high 8.1)
- [CVE-2026-69731](https://insights.sbomify.com/CVE-2026-69731/): HID Class Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69730](https://insights.sbomify.com/CVE-2026-69730/): Windows DNS Server Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-6973](https://insights.sbomify.com/CVE-2026-6973/): Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation (high 7.2, exploited in the wild)
- [CVE-2026-69729](https://insights.sbomify.com/CVE-2026-69729/): Windows Credential Providers Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-69727](https://insights.sbomify.com/CVE-2026-69727/): Windows Biometric Service Elevation of Privilege Vulnerability (high 8.0)
- [CVE-2026-69725](https://insights.sbomify.com/CVE-2026-69725/): Windows Hello Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69724](https://insights.sbomify.com/CVE-2026-69724/): Microsoft Office SharePoint Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-69723](https://insights.sbomify.com/CVE-2026-69723/): Windows Kernel Information Disclosure Vulnerability (medium 5.7)
- [CVE-2026-69722](https://insights.sbomify.com/CVE-2026-69722/): Microsoft Office Word Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-69721](https://insights.sbomify.com/CVE-2026-69721/): Windows iSCSI Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-69720](https://insights.sbomify.com/CVE-2026-69720/): Windows MIDI Service Module Elevation of Privileges Vulnerability (high 7.8)
- [CVE-2026-6972](https://insights.sbomify.com/CVE-2026-6972/): SKT Skill Bar <= 2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting (medium 6.4)
- [CVE-2026-69719](https://insights.sbomify.com/CVE-2026-69719/): Microsoft Office Word Information Disclosure Vulnerability (medium 6.5)
- [CVE-2026-69718](https://insights.sbomify.com/CVE-2026-69718/): Windows Update Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69717](https://insights.sbomify.com/CVE-2026-69717/): Windows Group Policy Elevation of Privilege Vulnerability (high 8.0)
- [CVE-2026-69716](https://insights.sbomify.com/CVE-2026-69716/): Microsoft Office SharePoint Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2026-69715](https://insights.sbomify.com/CVE-2026-69715/): Windows Direct Show Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-69714](https://insights.sbomify.com/CVE-2026-69714/): Windows Device Association Service Elevation of Privilege Vulnerability (high 8.0)
- [CVE-2026-69713](https://insights.sbomify.com/CVE-2026-69713/): Windows Secure Boot Security Feature Bypass Vulnerability (medium 4.4)
- [CVE-2026-69712](https://insights.sbomify.com/CVE-2026-69712/): Windows Key Distribution Center Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-69711](https://insights.sbomify.com/CVE-2026-69711/): Windows Device Association Service Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69710](https://insights.sbomify.com/CVE-2026-69710/): Windows Hello Elevation of Privilege Vulnerability (high 7.5)
- [CVE-2026-69709](https://insights.sbomify.com/CVE-2026-69709/): Windows NTFS Remote Code Execution Vulnerability (high 7.8)
- [CVE-2026-69708](https://insights.sbomify.com/CVE-2026-69708/): Windows Web Platform Storage Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69707](https://insights.sbomify.com/CVE-2026-69707/): Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69706](https://insights.sbomify.com/CVE-2026-69706/): Windows Win32k Elevation of Privilege Vulnerability (high 7.1)
- [CVE-2026-69705](https://insights.sbomify.com/CVE-2026-69705/): Windows iSCSI Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-69704](https://insights.sbomify.com/CVE-2026-69704/): Atals-Livre SQL Injection via Unsanitized GET Parameter in supp() (high 7.0)
- [CVE-2026-69703](https://insights.sbomify.com/CVE-2026-69703/): Atlas-Livre Unauthenticated Access via Admin Controllers Missing Exit (critical 9.3)
- [CVE-2026-69702](https://insights.sbomify.com/CVE-2026-69702/): SnailJob 1.7.0 Denial of Service via FuryUtil.deserialize OOM (high 7.1)
- [CVE-2026-6970](https://insights.sbomify.com/CVE-2026-6970/): authd Denial of Service and Local Privilege Escalation (high 7.3)
- [CVE-2026-69694](https://insights.sbomify.com/CVE-2026-69694/): Windows IP Address Management (IPAM) Service Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69693](https://insights.sbomify.com/CVE-2026-69693/): Windows Device Association Broker Service Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69692](https://insights.sbomify.com/CVE-2026-69692/): Windows Audio Service Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69691](https://insights.sbomify.com/CVE-2026-69691/): Windows Spaceport.sys Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69690](https://insights.sbomify.com/CVE-2026-69690/): Microsoft Office SharePoint Spoofing Vulnerability (medium 4.6)
- [CVE-2026-69689](https://insights.sbomify.com/CVE-2026-69689/): Windows Win32k Elevation of Privilege Vulnerability (high 8.0)
- [CVE-2026-69688](https://insights.sbomify.com/CVE-2026-69688/): Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability (high 7.1)
- [CVE-2026-69687](https://insights.sbomify.com/CVE-2026-69687/): Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69686](https://insights.sbomify.com/CVE-2026-69686/): Microsoft Office Word Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-69685](https://insights.sbomify.com/CVE-2026-69685/): Windows Kerberos Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69684](https://insights.sbomify.com/CVE-2026-69684/): Windows Error Reporting Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-69683](https://insights.sbomify.com/CVE-2026-69683/): Microsoft Office SharePoint Information Disclosure Vulnerability (medium 6.5)
- [CVE-2026-69682](https://insights.sbomify.com/CVE-2026-69682/): Windows Host Guardian Service Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69681](https://insights.sbomify.com/CVE-2026-69681/): Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability (high 8.0)
- [CVE-2026-69680](https://insights.sbomify.com/CVE-2026-69680/): Windows DNS Spoofing Vulnerability (high 8.1)
- [CVE-2026-6968](https://insights.sbomify.com/CVE-2026-6968/): Multiple Path Traversal Variants in awslabs/tough (high 7.1)
- [CVE-2026-69679](https://insights.sbomify.com/CVE-2026-69679/): Windows DHCP Server Denial of Service Vulnerability (medium 5.7)
- [CVE-2026-69678](https://insights.sbomify.com/CVE-2026-69678/): Microsoft Office PowerPoint Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-69676](https://insights.sbomify.com/CVE-2026-69676/): Windows Kerberos Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-69675](https://insights.sbomify.com/CVE-2026-69675/): Windows Network File System Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-69674](https://insights.sbomify.com/CVE-2026-69674/): Windows Modern Device Management (MDM) Security Feature Bypass Vulnerability (medium 5.5)
- [CVE-2026-69673](https://insights.sbomify.com/CVE-2026-69673/): Windows Update Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69672](https://insights.sbomify.com/CVE-2026-69672/): Windows DNS Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-69671](https://insights.sbomify.com/CVE-2026-69671/): Microsoft Office Word Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-6967](https://insights.sbomify.com/CVE-2026-6967/): Missing Delegated Metadata Validation in awslabs/tough (high 7.1)
- [CVE-2026-69669](https://insights.sbomify.com/CVE-2026-69669/): Windows Kernel Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-69665](https://insights.sbomify.com/CVE-2026-69665/): Misconfiguration in SKYMEC IT Manager (high 8.5)
- [CVE-2026-69664](https://insights.sbomify.com/CVE-2026-69664/): httpd parks a request worker indefinitely on a malformed chunk size sent after the headers (high 8.7)
- [CVE-2026-69662](https://insights.sbomify.com/CVE-2026-69662/): Toptech TMS7 and TopHAT Eval Injection (low 2.1)
- [CVE-2026-6966](https://insights.sbomify.com/CVE-2026-6966/): Signature Threshold Bypass in awslabs/tough Delegated Roles (high 7.0)
- [CVE-2026-69659](https://insights.sbomify.com/CVE-2026-69659/): Memory exhaustion via unbounded deserialization of keyset pagination cursors in Ash.Page.Keyset (medium 5.9)
- [CVE-2026-69658](https://insights.sbomify.com/CVE-2026-69658/): Ebyte NA111-M Cleartext Transmission of Sensitive Information (critical 9.3)
- [CVE-2026-69657](https://insights.sbomify.com/CVE-2026-69657/): Hardcoded credentials in XING CPTrans-ME-X (critical 9.3)
- [CVE-2026-69654](https://insights.sbomify.com/CVE-2026-69654/): Windows Accounts Control Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69652](https://insights.sbomify.com/CVE-2026-69652/): Windows Win32k Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69651](https://insights.sbomify.com/CVE-2026-69651/): .NET Denial of Service Vulnerability (high 7.5)
- [CVE-2026-69650](https://insights.sbomify.com/CVE-2026-69650/): Windows Key Distribution Center Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-6965](https://insights.sbomify.com/CVE-2026-6965/): Missing authorization in Tutor LMS – eLearning and online course solution (medium 5.3)
- [CVE-2026-69649](https://insights.sbomify.com/CVE-2026-69649/): Raw Image Extension Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-69648](https://insights.sbomify.com/CVE-2026-69648/): Windows Notification Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69646](https://insights.sbomify.com/CVE-2026-69646/): Skype for Business Spoofing Vulnerability (high 8.3)
- [CVE-2026-69645](https://insights.sbomify.com/CVE-2026-69645/): Windows Message Queuing Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69644](https://insights.sbomify.com/CVE-2026-69644/): Windows iSCSI Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-69643](https://insights.sbomify.com/CVE-2026-69643/): Windows Spaceport.sys Elevation of Privilege Vulnerability (high 8.0)
- [CVE-2026-69642](https://insights.sbomify.com/CVE-2026-69642/): Skype for Business Spoofing Vulnerability (medium 6.5)
- [CVE-2026-69641](https://insights.sbomify.com/CVE-2026-69641/): Microsoft Exchange Server Elevation of Privilege Vulnerability (critical 9.1)
- [CVE-2026-69640](https://insights.sbomify.com/CVE-2026-69640/): Windows Key Distribution Center Security Feature Bypass Vulnerability (medium 5.3)
- [CVE-2026-6964](https://insights.sbomify.com/CVE-2026-6964/): Missing authorization in Video Conferencing with Zoom (medium 5.3)
- [CVE-2026-69639](https://insights.sbomify.com/CVE-2026-69639/): Windows libarchive Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-69638](https://insights.sbomify.com/CVE-2026-69638/): Windows NTFS Remote Code Execution Vulnerability (high 8.4)
- [CVE-2026-69637](https://insights.sbomify.com/CVE-2026-69637/): Windows DHCP Server Denial of Service Vulnerability (medium 5.7)
- [CVE-2026-69636](https://insights.sbomify.com/CVE-2026-69636/): Microsoft Office SharePoint Information Disclosure Vulnerability (medium 6.5)
- [CVE-2026-69635](https://insights.sbomify.com/CVE-2026-69635/): Windows Installer Elevation of Privilege Vulnerability (medium 6.6)
- [CVE-2026-69634](https://insights.sbomify.com/CVE-2026-69634/): Windows iSCSI Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-69633](https://insights.sbomify.com/CVE-2026-69633/): Windows Update Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69632](https://insights.sbomify.com/CVE-2026-69632/): Microsoft Office Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-69631](https://insights.sbomify.com/CVE-2026-69631/): Windows DNS Denial of Service Vulnerability (high 7.5)
- [CVE-2026-69630](https://insights.sbomify.com/CVE-2026-69630/): Windows Win32k Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-6963](https://insights.sbomify.com/CVE-2026-6963/): Missing authorization in WP Mail Gateway (high 8.8)
- [CVE-2026-69629](https://insights.sbomify.com/CVE-2026-69629/): Microsoft Office Outlook Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-69628](https://insights.sbomify.com/CVE-2026-69628/): Windows iSCSI Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-69627](https://insights.sbomify.com/CVE-2026-69627/): Windows Remote Desktop Licensing Service Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-69626](https://insights.sbomify.com/CVE-2026-69626/): Microsoft Office Information Disclosure Vulnerability (medium 6.5)
- [CVE-2026-69625](https://insights.sbomify.com/CVE-2026-69625/): Connected User Experiences and Telemetry Elevation of Privilege Vulnerability (high 8.0)
- [CVE-2026-69624](https://insights.sbomify.com/CVE-2026-69624/): Active Directory Certificate Services (AD CS) Tampering Vulnerability (medium 6.5)
- [CVE-2026-69623](https://insights.sbomify.com/CVE-2026-69623/): Windows HTTP Print Provider Remote Code Execution Vulnerability (high 8.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/434/