Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 812 of 1013.
- CVE-2026-20837 Windows Media Remote Code Execution Vulnerability
- CVE-2026-20836 DirectX Graphics Kernel Elevation of Privilege Vulnerability
- CVE-2026-20835 Capability Access Management Service (camsvc) Information Disclosure Vulnerability
- CVE-2026-20834 Windows Spoofing Vulnerability
- CVE-2026-20833 Windows Kerberos Information Disclosure Vulnerability
- CVE-2026-20832 Windows Remote Procedure Call Interface Definition Language (IDL) Elevation of Privilege Vulnerability
- CVE-2026-20831 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- CVE-2026-20830 Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability
- CVE-2026-2083 code-projects Social Networking Site delete_post.php sql injection
- CVE-2026-20829 TPM Trustlet Information Disclosure Vulnerability
- CVE-2026-20828 Windows rndismp6.sys Information Disclosure Vulnerability
- CVE-2026-20827 Tablet Windows User Interface (TWINUI) Subsystem Information Disclosure Vulnerability
- CVE-2026-20826 Tablet Windows User Interface (TWINUI) Subsystem Information Disclosure Vulnerability
- CVE-2026-20825 Windows Hyper-V Information Disclosure Vulnerability
- CVE-2026-20824 Windows Remote Assistance Security Feature Bypass Vulnerability
- CVE-2026-20823 Windows File Explorer Information Disclosure Vulnerability
- CVE-2026-20822 Windows Graphics Component Elevation of Privilege Vulnerability
- CVE-2026-20821 Remote Procedure Call Information Disclosure Vulnerability
- CVE-2026-20820 Windows Common Log File System Driver Elevation of Privilege Vulnerability
- CVE-2026-2082 D-Link DIR-823X set_mac_clone os command injection
- CVE-2026-20819 Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability
- CVE-2026-20818 Windows Kernel Information Disclosure Vulnerability
- CVE-2026-20817 Windows Error Reporting Service Elevation of Privilege Vulnerability
- CVE-2026-20816 Windows Installer Elevation of Privilege Vulnerability
- CVE-2026-20815 Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability
- CVE-2026-20814 DirectX Graphics Kernel Elevation of Privilege Vulnerability
- CVE-2026-20812 LDAP Tampering Vulnerability
- CVE-2026-20811 Win32k Elevation of Privilege Vulnerability
- CVE-2026-20810 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- CVE-2026-2081 D-Link DIR-823X set_password os command injection
- CVE-2026-20809 Windows Kernel Memory Elevation of Privilege Vulnerability
- CVE-2026-20808 Windows File Explorer Elevation of Privilege Vulnerability
- CVE-2026-20806 Windows COM Server Information Disclosure Vulnerability
- CVE-2026-20805 Microsoft Windows Information Disclosure
- CVE-2026-20804 Windows Hello Tampering Vulnerability
- CVE-2026-20803 Microsoft SQL Server Elevation of Privilege Vulnerability
- CVE-2026-20801 Information disclosure in NxWitness VMS and Hanwha VMS Integrations
- CVE-2026-20800 Notification API Leaks Private Repository Issue Titles After Collaborator Permission Revocation
- CVE-2026-2080 UTT HiPER 810 formUser setSysAdm command injection
- CVE-2026-20799 Privilege escalation in Battery Life Diagnostic Tool software
- CVE-2026-20797 Copeland XWEB and XWEB Pro Stack-based Buffer Overflow
- CVE-2026-20796 Time-of-check time-of-use vulnerability in common teams API
- CVE-2026-20795 Memory corruption in Intel(R) PROSet/Wireless WiFi Software for Windows
- CVE-2026-20794 Memory corruption in Intel(R) Data Center Graphics Driver for VMware ESXi software
- CVE-2026-20793 Denial of service in Intel(R) QAT software drivers for Windows
- CVE-2026-20792 Chargemap chargemap.com Improper Restriction of Excessive Authentication Attempts
- CVE-2026-20791 Chargemap chargemap.com Insufficiently Protected Credentials
- CVE-2026-2079 yeqifu warehouse Menu Management MenuController.java deleteMenu improper authorization
- CVE-2026-20789 Privilege escalation in Intel(R) PROSet/Wireless WiFi Software for Windows
- CVE-2026-20787 Null dereference in Intel(R) PROSet/Wireless WiFi Software for Windows
- CVE-2026-20786 Memory corruption in Intel(R) NPU Driver
- CVE-2026-20783 Denial of service in Intel(R) NPU Driver
- CVE-2026-20782 Memory corruption in Intel(R) QAT software drivers for Windows
- CVE-2026-20781 CloudCharge cloudcharge.se Missing Authentication for Critical Function
- CVE-2026-20780 Denial of service in Intel(R) PROSet/Wireless WiFi Software for Windows
- CVE-2026-2078 yeqifu warehouse Permission Management PermissionController.java deletePermission improper authorization
- CVE-2026-20779 Gitea TOTP single-use enforcement defect allows OTP replay
- CVE-2026-20778 Memory corruption in Intel(R) PROSet/Wireless WiFi Software for Windows
- CVE-2026-20777 Memory corruption in libbiosig
- CVE-2026-20776 Denial of service in Intel(R) PROSet/Wireless WiFi Software
- CVE-2026-20775 Denial of service in Intel(R) TDX modules
- CVE-2026-20773 Improper Authorization in PingFederate Administrative Expression Evaluation Endpoint
- CVE-2026-20772 Privilege escalation in Intel(R) Connectivity Performance Suite software installers
- CVE-2026-20771 Null dereference in Intel(R) QAT software drivers for Windows
- CVE-2026-20770 Security feature bypass in Cluster Management Toolkit for Kubernetes software
- CVE-2026-2077 yeqifu warehouse Role Management RoleController.java deleteRole improper authorization
- CVE-2026-20769 Denial of service in Intel(R) NPU Driver
- CVE-2026-20767 Privilege escalation in Intel(R) QAT software drivers for Windows
- CVE-2026-20766 Milesight Cameras Heap-based Buffer Overflow
- CVE-2026-20765 Privilege escalation in Intel(R) TDX Guest software
- CVE-2026-20764 Copeland XWEB and XWEB Pro OS Command Injection
- CVE-2026-20763 Privilege escalation in Intel(R) TDX Guest software
- CVE-2026-20761 EnOcean SmartServer IoT Command Injection
- CVE-2026-20760 Privilege escalation in Intel(R) Processors
- CVE-2026-2076 yeqifu warehouse User Management Endpoint UserController.java deleteUser improper authorization
- CVE-2026-20759 Command injection in Multiple Network Cameras TRIFORA 3 series
- CVE-2026-20757 Denial of service in Command Centre Server
- CVE-2026-20755 Security feature bypass in LLM Scaler software
- CVE-2026-20754 Denial of service in Intel(R) NPU Drivers
- CVE-2026-20753 Integer overflow in Slim Bootloader may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable local code execution. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (high) impacts.
- CVE-2026-20752 Auth bypass in Intel(R) PROSet/Wireless WiFi Software
- CVE-2026-20751 Memory corruption in Intel(R) Data Center Graphics Driver for VMware ESXi software
- CVE-2026-20750 Gitea Organization Projects Cross-Organization Authorization Bypass via Project ID (IDOR)
- CVE-2026-2075 yeqifu warehouse Role-Permission Binding RoleController.java saveRolePermission access control
- CVE-2026-20749 Memory corruption in Intel(R) PROSet/Wireless WiFi Software
- CVE-2026-20748 Everon api.everon.io Insufficient Session Expiration
- CVE-2026-20747 Denial of service in Intel(R) PROSet/Wireless WiFi Software
- CVE-2026-20746 PingDirectory copying of virtual attributes leads to memory exhaustion
- CVE-2026-20745 Memory corruption in Intel(R) PROSet/Wireless WiFi Software for Windows
- CVE-2026-20744 Hydro-Québec Le Circuit Electrique charging station backend Improper Access Control
- CVE-2026-20742 Copeland XWEB and XWEB Pro OS Command Injection
- CVE-2026-20741 Missing authorization in Intel(R) PROSet/Wireless WiFi Software
- CVE-2026-2074 O2OA HTTP POST Request check xml external entity reference
- CVE-2026-20739 Denial of service in Intel(R) PROSet/Wireless WiFi Software for Windows
- CVE-2026-20738 Memory corruption in Intel(R) QuickAssist Adapter 8960 software
- CVE-2026-20737 Information disclosure in Intel(R) PROSet/Wireless WiFi Software for Windows
- CVE-2026-20736 Gitea Web Attachment Deletion: Cross-Repository Unauthorized Deletion via Missing Repo Ownership Check
- CVE-2026-20734 Information disclosure in Intel(R) Active Management Technology (Intel(R) AMT), and some Intel(R) Standard Manageability may allow an information disclosure. System software adversary with a privileged user combined with a low complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
- CVE-2026-20733 CloudCharge cloudcharge.se Insufficiently Protected Credentials
- CVE-2026-20732 BIG-IP Configuration utility vulnerability