# Vulnerabilities published in 2026


- [CVE-2026-69621](https://insights.sbomify.com/CVE-2026-69621/): Role: Windows Fax Service Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69620](https://insights.sbomify.com/CVE-2026-69620/): Windows DHCP Server Remote Code Execution Vulnerability (high 8.1)
- [CVE-2026-6962](https://insights.sbomify.com/CVE-2026-6962/): Cross-site scripting in Cost of Goods: Product Cost & Profit Calculator for WooCommerce (medium 6.4)
- [CVE-2026-69619](https://insights.sbomify.com/CVE-2026-69619/): Windows exFAT File System Elevation of Privilege Vulnerability (high 8.0)
- [CVE-2026-69618](https://insights.sbomify.com/CVE-2026-69618/): Windows SMB Client Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-69617](https://insights.sbomify.com/CVE-2026-69617/): Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69616](https://insights.sbomify.com/CVE-2026-69616/): Windows Remote Desktop Services Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-69615](https://insights.sbomify.com/CVE-2026-69615/): Microsoft Office SharePoint Spoofing Vulnerability (low 3.5)
- [CVE-2026-69614](https://insights.sbomify.com/CVE-2026-69614/): Microsoft Office Access Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-69613](https://insights.sbomify.com/CVE-2026-69613/): Windows Image Acquisition Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69612](https://insights.sbomify.com/CVE-2026-69612/): Windows Error Reporting Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69611](https://insights.sbomify.com/CVE-2026-69611/): Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability (high 7.0)
- [CVE-2026-69610](https://insights.sbomify.com/CVE-2026-69610/): Windows Win32k Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-6961](https://insights.sbomify.com/CVE-2026-6961/): CVE-2026-6961: Path traversal via unsanitized FileInfo.Name in Mattermost federation sync (high 7.6)
- [CVE-2026-69609](https://insights.sbomify.com/CVE-2026-69609/): Win32k Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-69608](https://insights.sbomify.com/CVE-2026-69608/): Microsoft Windows Search Component Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69607](https://insights.sbomify.com/CVE-2026-69607/): Windows Deployment Services Remote Code Execution Vulnerability (high 7.5)
- [CVE-2026-69606](https://insights.sbomify.com/CVE-2026-69606/): Windows Shell Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69605](https://insights.sbomify.com/CVE-2026-69605/): Microsoft Install Service Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69604](https://insights.sbomify.com/CVE-2026-69604/): Windows Audio Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69603](https://insights.sbomify.com/CVE-2026-69603/): Windows Hyper-V Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-69602](https://insights.sbomify.com/CVE-2026-69602/): Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability (high 7.1)
- [CVE-2026-69601](https://insights.sbomify.com/CVE-2026-69601/): Microsoft Windows Media Foundation Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-69600](https://insights.sbomify.com/CVE-2026-69600/): Microsoft Windows Search Component Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-6960](https://insights.sbomify.com/CVE-2026-6960/): BookingPress Pro <= 5.6 - Unauthenticated Arbitrary File Upload via Signature Custom Field (critical 9.8)
- [CVE-2026-69599](https://insights.sbomify.com/CVE-2026-69599/): Remote Desktop Services Remote Code Execution Vulnerability (high 7.5)
- [CVE-2026-69598](https://insights.sbomify.com/CVE-2026-69598/): Windows iSCSI Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-69597](https://insights.sbomify.com/CVE-2026-69597/): Windows HTTP.sys Elevation of Privilege Vulnerability (high 7.1)
- [CVE-2026-69596](https://insights.sbomify.com/CVE-2026-69596/): Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69595](https://insights.sbomify.com/CVE-2026-69595/): Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-69594](https://insights.sbomify.com/CVE-2026-69594/): Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69593](https://insights.sbomify.com/CVE-2026-69593/): Windows Biometric Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69592](https://insights.sbomify.com/CVE-2026-69592/): Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69591](https://insights.sbomify.com/CVE-2026-69591/): Windows NTFS Information Disclosure Vulnerability (medium 5.7)
- [CVE-2026-69590](https://insights.sbomify.com/CVE-2026-69590/): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-6959](https://insights.sbomify.com/CVE-2026-6959/): Nomad vulnerable to arbitrary file read/write on client host through symlink attack (medium 6.0)
- [CVE-2026-69589](https://insights.sbomify.com/CVE-2026-69589/): Windows Biometric Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69588](https://insights.sbomify.com/CVE-2026-69588/): Windows TCP/IP Denial of Service Vulnerability (high 7.5)
- [CVE-2026-69587](https://insights.sbomify.com/CVE-2026-69587/): Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability (high 7.5)
- [CVE-2026-69586](https://insights.sbomify.com/CVE-2026-69586/): Microsoft Windows PDF Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-69585](https://insights.sbomify.com/CVE-2026-69585/): Microsoft Windows Search Component Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69584](https://insights.sbomify.com/CVE-2026-69584/): Windows USB Video Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69583](https://insights.sbomify.com/CVE-2026-69583/): Windows Biometric Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69582](https://insights.sbomify.com/CVE-2026-69582/): Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69581](https://insights.sbomify.com/CVE-2026-69581/): Windows Device Association Service Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69580](https://insights.sbomify.com/CVE-2026-69580/): Windows Biometric Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-6958](https://insights.sbomify.com/CVE-2026-6958/): Acunetix 25.11.251107123 Local Privilege Escalation via wvsc.exe (high 8.5)
- [CVE-2026-69579](https://insights.sbomify.com/CVE-2026-69579/): Windows Message Queuing Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-69578](https://insights.sbomify.com/CVE-2026-69578/): Windows Kernel Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69577](https://insights.sbomify.com/CVE-2026-69577/): Microsoft Azure Attestation service and Device Health Attestation Service Information Disclosure Vulnerability (high 7.5)
- [CVE-2026-69576](https://insights.sbomify.com/CVE-2026-69576/): Graphic Fonts Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69575](https://insights.sbomify.com/CVE-2026-69575/): Windows Storage Spaces Controller Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69574](https://insights.sbomify.com/CVE-2026-69574/): Windows Device Association Service Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69573](https://insights.sbomify.com/CVE-2026-69573/): Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69572](https://insights.sbomify.com/CVE-2026-69572/): Windows SMB Client Information Disclosure Vulnerability (medium 5.7)
- [CVE-2026-69571](https://insights.sbomify.com/CVE-2026-69571/): Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-6957](https://insights.sbomify.com/CVE-2026-6957/): Path traversal in Mattermost (high 8.0)
- [CVE-2026-69569](https://insights.sbomify.com/CVE-2026-69569/): Windows Print Spooler Components Denial of Service Vulnerability (medium 5.7)
- [CVE-2026-69568](https://insights.sbomify.com/CVE-2026-69568/): Storage Spaces Controller Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-69567](https://insights.sbomify.com/CVE-2026-69567/): Windows NTFS Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69566](https://insights.sbomify.com/CVE-2026-69566/): Windows NTFS Remote Code Execution Vulnerability (medium 6.8)
- [CVE-2026-69564](https://insights.sbomify.com/CVE-2026-69564/): Windows Online Certificate Status Protocol (OCSP) Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69563](https://insights.sbomify.com/CVE-2026-69563/): Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69562](https://insights.sbomify.com/CVE-2026-69562/): Microsoft SQL Server Information Disclosure Vulnerability (medium 6.5)
- [CVE-2026-69561](https://insights.sbomify.com/CVE-2026-69561/): Windows CD-ROM Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69560](https://insights.sbomify.com/CVE-2026-69560/): Windows Work Folder Service Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-6956](https://insights.sbomify.com/CVE-2026-6956/): Reflected XSS in ATutor (medium 5.1)
- [CVE-2026-69559](https://insights.sbomify.com/CVE-2026-69559/): Microsoft Teams for Android Information Disclosure Vulnerability (medium 5.8)
- [CVE-2026-69558](https://insights.sbomify.com/CVE-2026-69558/): Microsoft Partner Center Information Disclosure Vulnerability (high 8.6)
- [CVE-2026-69556](https://insights.sbomify.com/CVE-2026-69556/): Microsoft Office Word Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-69555](https://insights.sbomify.com/CVE-2026-69555/): Azure Arc Elevation of Privilege Vulnerability (critical 10.0)
- [CVE-2026-69554](https://insights.sbomify.com/CVE-2026-69554/): Microsoft Windows Search Component Tampering Vulnerability (medium 5.5)
- [CVE-2026-69553](https://insights.sbomify.com/CVE-2026-69553/): Windows Hyper-V Elevation of Privilege Vulnerability (high 7.1)
- [CVE-2026-69552](https://insights.sbomify.com/CVE-2026-69552/): Windows Print Spooler Components Information Disclosure Vulnerability (medium 5.7)
- [CVE-2026-69551](https://insights.sbomify.com/CVE-2026-69551/): Windows DNS Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-69550](https://insights.sbomify.com/CVE-2026-69550/): Windows App for Mac Information Disclosure Vulnerability (medium 6.5)
- [CVE-2026-69549](https://insights.sbomify.com/CVE-2026-69549/): Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability (high 7.0)
- [CVE-2026-69548](https://insights.sbomify.com/CVE-2026-69548/): Windows RNDIS Information Disclosure Vulnerability (medium 4.6)
- [CVE-2026-69547](https://insights.sbomify.com/CVE-2026-69547/): Windows DHCP Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-69546](https://insights.sbomify.com/CVE-2026-69546/): Windows Active Directory Domain Services Remote Code Execution Vulnerability (high 8.1)
- [CVE-2026-69544](https://insights.sbomify.com/CVE-2026-69544/): Windows SMB Client Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69543](https://insights.sbomify.com/CVE-2026-69543/): Azure Virtual Machines Elevation of Privilege Vulnerability (high 8.5)
- [CVE-2026-69542](https://insights.sbomify.com/CVE-2026-69542/): Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69541](https://insights.sbomify.com/CVE-2026-69541/): Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability (high 7.8)
- [CVE-2026-69540](https://insights.sbomify.com/CVE-2026-69540/): Windows Audio Service Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-6954](https://insights.sbomify.com/CVE-2026-6954/): Multiple vulnerabilities in Intermark IT's WebControl CMS (medium 5.1)
- [CVE-2026-69539](https://insights.sbomify.com/CVE-2026-69539/): Remote Desktop Services Remote Code Execution Vulnerability (high 7.5)
- [CVE-2026-69538](https://insights.sbomify.com/CVE-2026-69538/): Windows Spaceport.sys Remote Code Execution Vulnerability (high 7.8)
- [CVE-2026-69536](https://insights.sbomify.com/CVE-2026-69536/): Remote Desktop Services Remote Code Execution Vulnerability (high 7.1)
- [CVE-2026-69535](https://insights.sbomify.com/CVE-2026-69535/): Windows Spaceport.sys Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69534](https://insights.sbomify.com/CVE-2026-69534/): Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69532](https://insights.sbomify.com/CVE-2026-69532/): Windows NTFS Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69531](https://insights.sbomify.com/CVE-2026-69531/): Microsoft Windows Speech Tampering Vulnerability (medium 5.5)
- [CVE-2026-69530](https://insights.sbomify.com/CVE-2026-69530/): Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability (high 8.1)
- [CVE-2026-6953](https://insights.sbomify.com/CVE-2026-6953/): Multiple vulnerabilities in Intermark IT's WebControl CMS (medium 5.1)
- [CVE-2026-69529](https://insights.sbomify.com/CVE-2026-69529/): Microsoft Office Access Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-69528](https://insights.sbomify.com/CVE-2026-69528/): Windows Shell Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69527](https://insights.sbomify.com/CVE-2026-69527/): Windows USB Mass Storage Class Driver Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-69525](https://insights.sbomify.com/CVE-2026-69525/): Remote Desktop Services Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-69524](https://insights.sbomify.com/CVE-2026-69524/): Windows Active Directory Domain Services Remote Code Execution Vulnerability (high 8.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/435/