# Vulnerabilities published in 2026


- [CVE-2026-69420](https://insights.sbomify.com/CVE-2026-69420/): Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-6942](https://insights.sbomify.com/CVE-2026-6942/): radare2-mcp <=1.6.0 OS Command Injection via Shell Metacharacter Bypass (critical 9.3)
- [CVE-2026-69419](https://insights.sbomify.com/CVE-2026-69419/): Azure Data Manager for Energy Remote Code Execution Vulnerability (high 8.5)
- [CVE-2026-69418](https://insights.sbomify.com/CVE-2026-69418/): Volume Manager Driver Elevation of Privilege Vulnerability (high 8.0)
- [CVE-2026-69417](https://insights.sbomify.com/CVE-2026-69417/): Microsoft Office SharePoint Spoofing Vulnerability (high 7.3)
- [CVE-2026-69416](https://insights.sbomify.com/CVE-2026-69416/): Windows DHCP Server Denial of Service Vulnerability (medium 5.7)
- [CVE-2026-69415](https://insights.sbomify.com/CVE-2026-69415/): Windows DHCP Server Elevation of Privilege Vulnerability (medium 6.8)
- [CVE-2026-69414](https://insights.sbomify.com/CVE-2026-69414/): Microsoft Defender Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69413](https://insights.sbomify.com/CVE-2026-69413/): Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69412](https://insights.sbomify.com/CVE-2026-69412/): Windows DHCP Server Remote Code Execution Vulnerability (high 8.0)
- [CVE-2026-69410](https://insights.sbomify.com/CVE-2026-69410/): Windows Win32k Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-6941](https://insights.sbomify.com/CVE-2026-6941/): radare2 < 6.1.4 Project Notes Path Traversal via Symlink (medium 6.9)
- [CVE-2026-69409](https://insights.sbomify.com/CVE-2026-69409/): Microsoft Office SharePoint Information Disclosure Vulnerability (medium 6.5)
- [CVE-2026-69408](https://insights.sbomify.com/CVE-2026-69408/): Microsoft Windows Media Foundation Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-69407](https://insights.sbomify.com/CVE-2026-69407/): Volume Manager Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69406](https://insights.sbomify.com/CVE-2026-69406/): Windows Kernel Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-69405](https://insights.sbomify.com/CVE-2026-69405/): Windows DHCP Server Denial of Service Vulnerability (medium 5.7)
- [CVE-2026-69404](https://insights.sbomify.com/CVE-2026-69404/): Windows TCP/IP Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69403](https://insights.sbomify.com/CVE-2026-69403/): Windows SMB Server Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-69402](https://insights.sbomify.com/CVE-2026-69402/): Microsoft Office SharePoint Spoofing Vulnerability (high 7.3)
- [CVE-2026-69401](https://insights.sbomify.com/CVE-2026-69401/): Audio Video Control Transport Protocol Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69400](https://insights.sbomify.com/CVE-2026-69400/): Azure Logic Apps Elevation of Privilege Vulnerability (critical 9.6)
- [CVE-2026-6940](https://insights.sbomify.com/CVE-2026-6940/): radare2 < 6.1.4 Project Deletion Path Traversal Directory Deletion (medium 6.9)
- [CVE-2026-69399](https://insights.sbomify.com/CVE-2026-69399/): Azure Arc Elevation of Privilege Vulnerability (critical 10.0)
- [CVE-2026-69398](https://insights.sbomify.com/CVE-2026-69398/): Windows Bluetooth Service Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69397](https://insights.sbomify.com/CVE-2026-69397/): Microsoft OpenSSH for Windows Remote Code Execution Vulnerability (high 7.5)
- [CVE-2026-69396](https://insights.sbomify.com/CVE-2026-69396/): Windows NDIS Elevation of Privilege Vulnerability (high 7.1)
- [CVE-2026-69395](https://insights.sbomify.com/CVE-2026-69395/): Active Directory Certificate Services (AD CS) Information Disclosure Vulnerability (medium 6.5)
- [CVE-2026-69394](https://insights.sbomify.com/CVE-2026-69394/): Windows Audio Service Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69393](https://insights.sbomify.com/CVE-2026-69393/): Windows Spaceport.sys Information Disclosure Vulnerability (medium 5.7)
- [CVE-2026-69392](https://insights.sbomify.com/CVE-2026-69392/): Windows Shell Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69391](https://insights.sbomify.com/CVE-2026-69391/): Windows Broker Infrastructure Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69390](https://insights.sbomify.com/CVE-2026-69390/): Windows Spaceport.sys Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-6939](https://insights.sbomify.com/CVE-2026-6939/): Cross-site scripting in CorvusPay WooCommerce Payment Gateway (high 7.2)
- [CVE-2026-69389](https://insights.sbomify.com/CVE-2026-69389/): Windows Storage Management Provider Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69388](https://insights.sbomify.com/CVE-2026-69388/): Windows Bluetooth Service Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69387](https://insights.sbomify.com/CVE-2026-69387/): Windows Error Reporting Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69386](https://insights.sbomify.com/CVE-2026-69386/): Microsoft Windows Media Foundation Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-69385](https://insights.sbomify.com/CVE-2026-69385/): Windows TCP/IP Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69384](https://insights.sbomify.com/CVE-2026-69384/): Virtual Hard Disk (VHD) Miniport Driver Denial of Service Vulnerability (high 7.1)
- [CVE-2026-69383](https://insights.sbomify.com/CVE-2026-69383/): Windows Shell Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69382](https://insights.sbomify.com/CVE-2026-69382/): Microsoft Exchange Server Information Disclosure Vulnerability (medium 5.9)
- [CVE-2026-69381](https://insights.sbomify.com/CVE-2026-69381/): Windows Storage Port Driver Information Disclosure Vulnerability (medium 4.6)
- [CVE-2026-69380](https://insights.sbomify.com/CVE-2026-69380/): Microsoft Exchange Server Elevation of Privilege Vulnerability (high 8.1)
- [CVE-2026-6938](https://insights.sbomify.com/CVE-2026-6938/): IBM® Db2® is vulnerable to authorization bypass when uploading to a remote object storage path with a special query (medium 6.5)
- [CVE-2026-69379](https://insights.sbomify.com/CVE-2026-69379/): Windows NTFS Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69378](https://insights.sbomify.com/CVE-2026-69378/): Microsoft Exchange Server Denial of Service Vulnerability (high 7.5)
- [CVE-2026-69377](https://insights.sbomify.com/CVE-2026-69377/): Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69376](https://insights.sbomify.com/CVE-2026-69376/): Microsoft Standard XPS Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-69375](https://insights.sbomify.com/CVE-2026-69375/): Microsoft Exchange Server Tampering Vulnerability (medium 6.5)
- [CVE-2026-69374](https://insights.sbomify.com/CVE-2026-69374/): Windows SMB Server Denial of Service Vulnerability (medium 6.5)
- [CVE-2026-69373](https://insights.sbomify.com/CVE-2026-69373/): Windows Overlay Filter Elevation of Privilege Vulnerability (medium 6.7)
- [CVE-2026-69372](https://insights.sbomify.com/CVE-2026-69372/): Windows Network File System Denial of Service Vulnerability (medium 5.7)
- [CVE-2026-69371](https://insights.sbomify.com/CVE-2026-69371/): Windows Overlay Filter Elevation of Privilege Vulnerability (high 8.0)
- [CVE-2026-69370](https://insights.sbomify.com/CVE-2026-69370/): Visual Studio Code Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-6937](https://insights.sbomify.com/CVE-2026-6937/): Missing authorization in Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin (medium 5.3)
- [CVE-2026-69369](https://insights.sbomify.com/CVE-2026-69369/): Windows DNS Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-69368](https://insights.sbomify.com/CVE-2026-69368/): Windows Overlay Filter Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69367](https://insights.sbomify.com/CVE-2026-69367/): Microsoft Standard XPS Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-69366](https://insights.sbomify.com/CVE-2026-69366/): Windows Kernel Elevation of Privilege Vulnerability (high 7.1)
- [CVE-2026-69365](https://insights.sbomify.com/CVE-2026-69365/): Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability (high 8.0)
- [CVE-2026-69364](https://insights.sbomify.com/CVE-2026-69364/): Windows Print Spooler Components Elevation of Privilege Vulnerability (high 7.1)
- [CVE-2026-69363](https://insights.sbomify.com/CVE-2026-69363/): Windows Error Reporting Elevation of Privilege Vulnerability (high 8.0)
- [CVE-2026-69362](https://insights.sbomify.com/CVE-2026-69362/): Windows Error Reporting Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69361](https://insights.sbomify.com/CVE-2026-69361/): Microsoft Exchange Server Spoofing Vulnerability (medium 6.5)
- [CVE-2026-69360](https://insights.sbomify.com/CVE-2026-69360/): Microsoft Office Word Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-6936](https://insights.sbomify.com/CVE-2026-6936/): IBM i is Affected by a Denial of Service Vulnerability [] (medium 6.5)
- [CVE-2026-69359](https://insights.sbomify.com/CVE-2026-69359/): Active Directory Domain Services Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69358](https://insights.sbomify.com/CVE-2026-69358/): Remote Desktop Client Remote Code Execution Vulnerability (high 7.1)
- [CVE-2026-69357](https://insights.sbomify.com/CVE-2026-69357/): Windows NDIS Elevation of Privilege Vulnerability (high 7.1)
- [CVE-2026-69356](https://insights.sbomify.com/CVE-2026-69356/): Microsoft Exchange Server Spoofing Vulnerability (critical 9.3)
- [CVE-2026-69355](https://insights.sbomify.com/CVE-2026-69355/): Microsoft Exchange Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-69354](https://insights.sbomify.com/CVE-2026-69354/): Windows Error Reporting Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69353](https://insights.sbomify.com/CVE-2026-69353/): Windows Text Shaping Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-69352](https://insights.sbomify.com/CVE-2026-69352/): Windows Biometric Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69351](https://insights.sbomify.com/CVE-2026-69351/): Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-69350](https://insights.sbomify.com/CVE-2026-69350/): Windows Overlay Filter Elevation of Privilege Vulnerability (medium 6.7)
- [CVE-2026-6935](https://insights.sbomify.com/CVE-2026-6935/): Multiple Vulnerabilities in IBM Concert Software (high 7.8)
- [CVE-2026-69349](https://insights.sbomify.com/CVE-2026-69349/): Windows Management Instrumentation Information Disclosure Vulnerability (medium 5.7)
- [CVE-2026-69348](https://insights.sbomify.com/CVE-2026-69348/): Windows Win32k Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69347](https://insights.sbomify.com/CVE-2026-69347/): Windows Fast FAT Driver Remote Code Execution Vulnerability (high 7.4)
- [CVE-2026-69346](https://insights.sbomify.com/CVE-2026-69346/): Windows Print Spooler Components Elevation of Privilege Vulnerability (high 8.0)
- [CVE-2026-69345](https://insights.sbomify.com/CVE-2026-69345/): Microsoft Standard XPS Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-69344](https://insights.sbomify.com/CVE-2026-69344/): Windows Print Spooler Components Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-69343](https://insights.sbomify.com/CVE-2026-69343/): Windows Overlay Filter Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-69342](https://insights.sbomify.com/CVE-2026-69342/): Windows DHCP Server Denial of Service Vulnerability (high 7.5)
- [CVE-2026-69341](https://insights.sbomify.com/CVE-2026-69341/): Windows Image Acquisition Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69340](https://insights.sbomify.com/CVE-2026-69340/): Windows NTFS Elevation of Privilege Vulnerability (high 7.1)
- [CVE-2026-69339](https://insights.sbomify.com/CVE-2026-69339/): Windows MIDI Service Module Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-69338](https://insights.sbomify.com/CVE-2026-69338/): Remote Desktop Gateway Service Elevation of Privilege Vulnerability (high 7.1)
- [CVE-2026-69337](https://insights.sbomify.com/CVE-2026-69337/): Windows Registry Elevation of Privilege Vulnerability (high 7.1)
- [CVE-2026-69336](https://insights.sbomify.com/CVE-2026-69336/): Microsoft Standard XPS Elevation of Privilege Vulnerability (high 7.1)
- [CVE-2026-69335](https://insights.sbomify.com/CVE-2026-69335/): Windows Win32k Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69334](https://insights.sbomify.com/CVE-2026-69334/): Windows Volume Manager Extension Driver Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-69333](https://insights.sbomify.com/CVE-2026-69333/): Windows Win32k Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69332](https://insights.sbomify.com/CVE-2026-69332/): Windows NTFS Elevation of Privilege Vulnerability (high 8.0)
- [CVE-2026-69331](https://insights.sbomify.com/CVE-2026-69331/): Windows Remote Access Connection Manager Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-6933](https://insights.sbomify.com/CVE-2026-6933/): File upload in Premmerce Dev Tools (high 8.8)
- [CVE-2026-69329](https://insights.sbomify.com/CVE-2026-69329/): BranchCache Denial of Service Vulnerability (high 7.5)
- [CVE-2026-69328](https://insights.sbomify.com/CVE-2026-69328/): Windows Storage Elevation of Privilege Vulnerability (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/437/