Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 483 of 1013.
- CVE-2026-62895 Azure Arc SQL Server Extension Elevation of Privilege Vulnerability
- CVE-2026-62894 Windows DWM Core Library Elevation of Privilege Vulnerability
- CVE-2026-62893 Windows Deployment Services TFTP Server Remote Code Execution Vulnerability
- CVE-2026-62892 Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability
- CVE-2026-62890 Windows GDI+ Elevation of Privilege Vulnerability
- CVE-2026-62889 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
- CVE-2026-62888 Windows DWM Core Library Elevation of Privilege Vulnerability
- CVE-2026-62887 Windows NTFS Information Disclosure Vulnerability
- CVE-2026-62886 .NET Elevation of Privilege Vulnerability
- CVE-2026-62885 Windows Win32k Elevation of Privilege Vulnerability
- CVE-2026-62883 Windows DNS Elevation of Privilege Vulnerability
- CVE-2026-62882 Microsoft Outlook Spoofing Vulnerability
- CVE-2026-62881 Windows DNS Elevation of Privilege Vulnerability
- CVE-2026-62880 Windows NTFS Elevation of Privilege Vulnerability
- CVE-2026-62879 Windows SmartScreen Tampering Vulnerability
- CVE-2026-62878 Windows DNS Server Remote Code Execution Vulnerability
- CVE-2026-62877 Windows Win32k Elevation of Privilege Vulnerability
- CVE-2026-62876 Windows Win32k Elevation of Privilege Vulnerability
- CVE-2026-62874 Azure Billing Elevation of Privilege Vulnerability
- CVE-2026-62873 Microsoft 365 Admin Center Elevation of Privilege Vulnerability
- CVE-2026-62872 .NET Framework Elevation of Privilege Vulnerability
- CVE-2026-62871 .NET Elevation of Privilege Vulnerability
- CVE-2026-62870 Microsoft Excel Remote Code Execution Vulnerability
- CVE-2026-6287 Cross-site scripting in ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin
- CVE-2026-62869 Azure Entra ID Spoofing Vulnerability
- CVE-2026-62867 Incus has an argument injection in storage volume block.create_options that leads to arbitrary command execution
- CVE-2026-62866 Dasel: Selector lexer panics on trailing whitespace in `parseCurRune`
- CVE-2026-62865 TypeBot: Arbitrary server file read via Send Email block attachment path
- CVE-2026-62862 TypeBot: Account takeover via brute-forceable 6-digit magic-link code
- CVE-2026-62861 TypeBot: Cross-tenant custom-domain removal via unbound `name` in handleDeleteCustomDomain
- CVE-2026-6286 Cross-site scripting in Booking for Appointments and Events Calendar – Amelia
- CVE-2026-62858 YOURLS: Unauthenticated File Inclusion
- CVE-2026-62857 Fedify: Server-Side Request Forgery in getNodeInfo() Allows Access to Internal Network Resources
- CVE-2026-6285 Improper Authentication in Ankaref's LIBRID/LIBREF
- CVE-2026-62845 Kamaji: SQL injection via unescaped datastore identifiers in PostgreSQL/MySQL drivers
- CVE-2026-62843 File Browser: Archive builder turns backslash filenames into path traversal (zip-slip)
- CVE-2026-62842 Microsoft Office Graphics Component Information Disclosure Vulnerability
- CVE-2026-62840 Linux Kernel Elevation of Privilege Vulnerability
- CVE-2026-6284 Horner Automation Cscape and XL4, XL7 PLC Weak password requirements
- CVE-2026-62839 Microsoft SharePoint Server Spoofing Vulnerability
- CVE-2026-62837 Microsoft SharePoint Server Information Disclosure Vulnerability
- CVE-2026-62836 Azure SQL Managed Instance Elevation of Privilege Vulnerability
- CVE-2026-62835 Azure Portal Information Disclosure Vulnerability
- CVE-2026-62834 Azure Data Factory Elevation of Privilege Vulnerability
- CVE-2026-62832 Windows User Profile Service Elevation of Privilege Vulnerability
- CVE-2026-62830 Azure SRE Agent Elevation of Privilege Vulnerability
- CVE-2026-6283 Stored XSS in DivvyDrive Information Technologies' DivvyDrive
- CVE-2026-62829 Microsoft SharePoint Server Spoofing Vulnerability
- CVE-2026-62828 Microsoft Edge for Android (Chromium-based) Tampering Vulnerability
- CVE-2026-62827 Microsoft SharePoint Server Elevation of Privilege Vulnerability
- CVE-2026-62826 Microsoft SharePoint Server Spoofing Vulnerability
- CVE-2026-62825 Azure Key Vault Elevation of Privilege Vulnerability
- CVE-2026-62824 Remote Desktop Client Remote Code Execution Vulnerability
- CVE-2026-62823 Windows DHCP Server Remote Code Execution Vulnerability
- CVE-2026-62822 Windows GDI+ Remote Code Execution Vulnerability
- CVE-2026-62820 Windows DNS Server Remote Code Execution Vulnerability
- CVE-2026-6282 Path traversal in Home Storage Hub T20
- CVE-2026-62819 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- CVE-2026-62818 Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability
- CVE-2026-62817 Windows DNS Server Remote Code Execution Vulnerability
- CVE-2026-62816 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
- CVE-2026-62815 Microsoft QUIC Remote Code Execution Vulnerability
- CVE-2026-62814 Windows DHCP Server Information Disclosure Vulnerability
- CVE-2026-62813 Windows Active Directory Domain Services Remote Code Execution Vulnerability
- CVE-2026-62812 Windows DHCP Server Elevation of Privilege Vulnerability
- CVE-2026-62811 Windows HTTP.sys Elevation of Privilege Vulnerability
- CVE-2026-62810 Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability
- CVE-2026-6281 Command injection in Home Storage Hub T20
- CVE-2026-62807 Windows DHCP Server Elevation of Privilege Vulnerability
- CVE-2026-62804 Microsoft Word Remote Code Execution Vulnerability
- CVE-2026-62803 Windows DHCP Server Elevation of Privilege Vulnerability
- CVE-2026-62801 Microsoft PowerShell Security Feature Bypass Vulnerability
- CVE-2026-62800 Windows SMBv3 Server Remote Code Execution Vulnerability
- CVE-2026-6280 Improper Access Control in Nomysoft Informatics' Nomysem
- CVE-2026-62799 Windows SMB Client Elevation of Privilege Vulnerability
- CVE-2026-62798 Win32k Information Disclosure Vulnerability
- CVE-2026-62797 Windows NTFS Elevation of Privilege Vulnerability
- CVE-2026-62796 Windows NTFS Information Disclosure Vulnerability
- CVE-2026-62795 Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability
- CVE-2026-62793 Windows NTFS Information Disclosure Vulnerability
- CVE-2026-62792 Windows TCP/IP Remote Code Execution Vulnerability
- CVE-2026-62790 Windows SMBv3 Server Remote Code Execution Vulnerability
- CVE-2026-6279 Code injection in Avada (Fusion) Builder
- CVE-2026-62788 Windows Kernel Elevation of Privilege Vulnerability
- CVE-2026-62787 Windows DNS Server Remote Code Execution Vulnerability
- CVE-2026-62786 Win32k Information Disclosure Vulnerability
- CVE-2026-62785 Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability
- CVE-2026-62784 Microsoft Local Security Authority Server (lsasrv) Remote Code Execution Vulnerability
- CVE-2026-62783 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
- CVE-2026-62782 Windows SMB Client Information Disclosure Vulnerability
- CVE-2026-62781 RPC Runtime Library Remote Code Execution Vulnerability
- CVE-2026-62780 Windows Kernel Elevation of Privilege Vulnerability
- CVE-2026-62779 Windows Schannel Elevation of Privilege Vulnerability
- CVE-2026-62778 Windows DNS Elevation of Privilege Vulnerability
- CVE-2026-62777 Windows License Manager Elevation of Privilege Vulnerability
- CVE-2026-62776 Windows DHCP Server Elevation of Privilege Vulnerability
- CVE-2026-62775 Windows Container Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability
- CVE-2026-62774 Windows Graphics Kernel Elevation of Privilege Vulnerability
- CVE-2026-62773 Windows Kerberos Elevation of Privilege Vulnerability
- CVE-2026-62772 Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability