# Vulnerabilities published in 2026


- [CVE-2026-20837](https://insights.sbomify.com/CVE-2026-20837/): Windows Media Remote Code Execution Vulnerability (high 7.8)
- [CVE-2026-20836](https://insights.sbomify.com/CVE-2026-20836/): DirectX Graphics Kernel Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-20835](https://insights.sbomify.com/CVE-2026-20835/): Capability Access Management Service (camsvc) Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-20834](https://insights.sbomify.com/CVE-2026-20834/): Windows Spoofing Vulnerability (medium 4.6)
- [CVE-2026-20833](https://insights.sbomify.com/CVE-2026-20833/): Windows Kerberos Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-20832](https://insights.sbomify.com/CVE-2026-20832/): Windows Remote Procedure Call Interface Definition Language (IDL) Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-20831](https://insights.sbomify.com/CVE-2026-20831/): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-20830](https://insights.sbomify.com/CVE-2026-20830/): Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-2083](https://insights.sbomify.com/CVE-2026-2083/): code-projects Social Networking Site delete_post.php sql injection (medium 6.9)
- [CVE-2026-20829](https://insights.sbomify.com/CVE-2026-20829/): TPM Trustlet Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-20828](https://insights.sbomify.com/CVE-2026-20828/): Windows rndismp6.sys Information Disclosure Vulnerability (medium 4.6)
- [CVE-2026-20827](https://insights.sbomify.com/CVE-2026-20827/): Tablet Windows User Interface (TWINUI) Subsystem Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-20826](https://insights.sbomify.com/CVE-2026-20826/): Tablet Windows User Interface (TWINUI) Subsystem Information Disclosure Vulnerability (high 7.8)
- [CVE-2026-20825](https://insights.sbomify.com/CVE-2026-20825/): Windows Hyper-V Information Disclosure Vulnerability (medium 4.4)
- [CVE-2026-20824](https://insights.sbomify.com/CVE-2026-20824/): Windows Remote Assistance Security Feature Bypass Vulnerability (medium 5.5)
- [CVE-2026-20823](https://insights.sbomify.com/CVE-2026-20823/): Windows File Explorer Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-20822](https://insights.sbomify.com/CVE-2026-20822/): Windows Graphics Component Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-20821](https://insights.sbomify.com/CVE-2026-20821/): Remote Procedure Call Information Disclosure Vulnerability (medium 6.2)
- [CVE-2026-20820](https://insights.sbomify.com/CVE-2026-20820/): Windows Common Log File System Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-2082](https://insights.sbomify.com/CVE-2026-2082/): D-Link DIR-823X set_mac_clone os command injection (medium 5.1)
- [CVE-2026-20819](https://insights.sbomify.com/CVE-2026-20819/): Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-20818](https://insights.sbomify.com/CVE-2026-20818/): Windows Kernel Information Disclosure Vulnerability (medium 6.2)
- [CVE-2026-20817](https://insights.sbomify.com/CVE-2026-20817/): Windows Error Reporting Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-20816](https://insights.sbomify.com/CVE-2026-20816/): Windows Installer Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-20815](https://insights.sbomify.com/CVE-2026-20815/): Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-20814](https://insights.sbomify.com/CVE-2026-20814/): DirectX Graphics Kernel Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-20812](https://insights.sbomify.com/CVE-2026-20812/): LDAP Tampering Vulnerability (medium 6.5)
- [CVE-2026-20811](https://insights.sbomify.com/CVE-2026-20811/): Win32k Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-20810](https://insights.sbomify.com/CVE-2026-20810/): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-2081](https://insights.sbomify.com/CVE-2026-2081/): D-Link DIR-823X set_password os command injection (medium 5.1)
- [CVE-2026-20809](https://insights.sbomify.com/CVE-2026-20809/): Windows Kernel Memory Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-20808](https://insights.sbomify.com/CVE-2026-20808/): Windows File Explorer Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-20806](https://insights.sbomify.com/CVE-2026-20806/): Windows COM Server Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-20805](https://insights.sbomify.com/CVE-2026-20805/): Microsoft Windows Information Disclosure (medium 5.5, exploited in the wild)
- [CVE-2026-20804](https://insights.sbomify.com/CVE-2026-20804/): Windows Hello Tampering Vulnerability (high 7.7)
- [CVE-2026-20803](https://insights.sbomify.com/CVE-2026-20803/): Microsoft SQL Server Elevation of Privilege Vulnerability (high 7.2)
- [CVE-2026-20801](https://insights.sbomify.com/CVE-2026-20801/): Information disclosure in NxWitness VMS and Hanwha VMS Integrations (medium 5.6)
- [CVE-2026-20800](https://insights.sbomify.com/CVE-2026-20800/): Notification API Leaks Private Repository Issue Titles After Collaborator Permission Revocation (medium 6.5)
- [CVE-2026-2080](https://insights.sbomify.com/CVE-2026-2080/): UTT HiPER 810 formUser setSysAdm command injection (high 8.6)
- [CVE-2026-20799](https://insights.sbomify.com/CVE-2026-20799/): Privilege escalation in Battery Life Diagnostic Tool software (medium 5.4)
- [CVE-2026-20797](https://insights.sbomify.com/CVE-2026-20797/): Copeland XWEB and XWEB Pro Stack-based Buffer Overflow (medium 4.3)
- [CVE-2026-20796](https://insights.sbomify.com/CVE-2026-20796/): Time-of-check time-of-use vulnerability in common teams API (low 3.1)
- [CVE-2026-20795](https://insights.sbomify.com/CVE-2026-20795/): Memory corruption in Intel(R) PROSet/Wireless WiFi Software for Windows (high 7.1)
- [CVE-2026-20794](https://insights.sbomify.com/CVE-2026-20794/): Memory corruption in Intel(R) Data Center Graphics Driver for VMware ESXi software (critical 9.3)
- [CVE-2026-20793](https://insights.sbomify.com/CVE-2026-20793/): Denial of service in Intel(R) QAT software drivers for Windows (medium 4.8)
- [CVE-2026-20792](https://insights.sbomify.com/CVE-2026-20792/): Chargemap chargemap.com Improper Restriction of Excessive Authentication Attempts (high 8.7)
- [CVE-2026-20791](https://insights.sbomify.com/CVE-2026-20791/): Chargemap chargemap.com Insufficiently Protected Credentials (medium 6.9)
- [CVE-2026-2079](https://insights.sbomify.com/CVE-2026-2079/): yeqifu warehouse Menu Management MenuController.java deleteMenu improper authorization (medium 5.3)
- [CVE-2026-20789](https://insights.sbomify.com/CVE-2026-20789/): Privilege escalation in Intel(R) PROSet/Wireless WiFi Software for Windows (high 8.4)
- [CVE-2026-20787](https://insights.sbomify.com/CVE-2026-20787/): Null dereference in Intel(R) PROSet/Wireless WiFi Software for Windows (high 7.1)
- [CVE-2026-20786](https://insights.sbomify.com/CVE-2026-20786/): Memory corruption in Intel(R) NPU Driver (medium 6.9)
- [CVE-2026-20783](https://insights.sbomify.com/CVE-2026-20783/): Denial of service in Intel(R) NPU Driver (medium 6.9)
- [CVE-2026-20782](https://insights.sbomify.com/CVE-2026-20782/): Memory corruption in Intel(R) QAT software drivers for Windows (medium 6.9)
- [CVE-2026-20781](https://insights.sbomify.com/CVE-2026-20781/): CloudCharge cloudcharge.se Missing Authentication for Critical Function (critical 9.3)
- [CVE-2026-20780](https://insights.sbomify.com/CVE-2026-20780/): Denial of service in Intel(R) PROSet/Wireless WiFi Software for Windows (medium 6.9)
- [CVE-2026-2078](https://insights.sbomify.com/CVE-2026-2078/): yeqifu warehouse Permission Management PermissionController.java deletePermission improper authorization (medium 5.3)
- [CVE-2026-20779](https://insights.sbomify.com/CVE-2026-20779/): Gitea TOTP single-use enforcement defect allows OTP replay (high 7.1)
- [CVE-2026-20778](https://insights.sbomify.com/CVE-2026-20778/): Memory corruption in Intel(R) PROSet/Wireless WiFi Software for Windows (high 7.0)
- [CVE-2026-20777](https://insights.sbomify.com/CVE-2026-20777/): Memory corruption in libbiosig (high 8.1)
- [CVE-2026-20776](https://insights.sbomify.com/CVE-2026-20776/): Denial of service in Intel(R) PROSet/Wireless WiFi Software (high 8.3)
- [CVE-2026-20775](https://insights.sbomify.com/CVE-2026-20775/): Denial of service in Intel(R) TDX modules (medium 6.8)
- [CVE-2026-20773](https://insights.sbomify.com/CVE-2026-20773/): Improper Authorization in PingFederate Administrative Expression Evaluation Endpoint (high 8.5)
- [CVE-2026-20772](https://insights.sbomify.com/CVE-2026-20772/): Privilege escalation in Intel(R) Connectivity Performance Suite software installers (medium 5.4)
- [CVE-2026-20771](https://insights.sbomify.com/CVE-2026-20771/): Null dereference in Intel(R) QAT software drivers for Windows (medium 6.9)
- [CVE-2026-20770](https://insights.sbomify.com/CVE-2026-20770/): Security feature bypass in Cluster Management Toolkit for Kubernetes software (medium 5.4)
- [CVE-2026-2077](https://insights.sbomify.com/CVE-2026-2077/): yeqifu warehouse Role Management RoleController.java deleteRole improper authorization (medium 5.3)
- [CVE-2026-20769](https://insights.sbomify.com/CVE-2026-20769/): Denial of service in Intel(R) NPU Driver (medium 6.9)
- [CVE-2026-20767](https://insights.sbomify.com/CVE-2026-20767/): Privilege escalation in Intel(R) QAT software drivers for Windows (high 8.5)
- [CVE-2026-20766](https://insights.sbomify.com/CVE-2026-20766/): Milesight Cameras Heap-based Buffer Overflow (high 8.6)
- [CVE-2026-20765](https://insights.sbomify.com/CVE-2026-20765/): Privilege escalation in Intel(R) TDX Guest software (medium 4.6)
- [CVE-2026-20764](https://insights.sbomify.com/CVE-2026-20764/): Copeland XWEB and XWEB Pro OS Command Injection (high 8.0)
- [CVE-2026-20763](https://insights.sbomify.com/CVE-2026-20763/): Privilege escalation in Intel(R) TDX Guest software (medium 4.6)
- [CVE-2026-20761](https://insights.sbomify.com/CVE-2026-20761/): EnOcean SmartServer IoT Command Injection (high 8.1)
- [CVE-2026-20760](https://insights.sbomify.com/CVE-2026-20760/): Privilege escalation in Intel(R) Processors (medium 6.8)
- [CVE-2026-2076](https://insights.sbomify.com/CVE-2026-2076/): yeqifu warehouse User Management Endpoint UserController.java deleteUser improper authorization (medium 5.3)
- [CVE-2026-20759](https://insights.sbomify.com/CVE-2026-20759/): Command injection in Multiple Network Cameras TRIFORA 3 series (high 8.7)
- [CVE-2026-20757](https://insights.sbomify.com/CVE-2026-20757/): Denial of service in Command Centre Server (low 2.5)
- [CVE-2026-20755](https://insights.sbomify.com/CVE-2026-20755/): Security feature bypass in LLM Scaler software (medium 5.4)
- [CVE-2026-20754](https://insights.sbomify.com/CVE-2026-20754/): Denial of service in Intel(R) NPU Drivers (medium 6.9)
- [CVE-2026-20753](https://insights.sbomify.com/CVE-2026-20753/): Integer overflow in Slim Bootloader may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable local code execution. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (high) impacts. (high 8.7)
- [CVE-2026-20752](https://insights.sbomify.com/CVE-2026-20752/): Auth bypass in Intel(R) PROSet/Wireless WiFi Software (medium 6.7)
- [CVE-2026-20751](https://insights.sbomify.com/CVE-2026-20751/): Memory corruption in Intel(R) Data Center Graphics Driver for VMware ESXi software (high 8.3)
- [CVE-2026-20750](https://insights.sbomify.com/CVE-2026-20750/): Gitea Organization Projects Cross-Organization Authorization Bypass via Project ID (IDOR) (critical 9.1)
- [CVE-2026-2075](https://insights.sbomify.com/CVE-2026-2075/): yeqifu warehouse Role-Permission Binding RoleController.java saveRolePermission access control (medium 5.3)
- [CVE-2026-20749](https://insights.sbomify.com/CVE-2026-20749/): Memory corruption in Intel(R) PROSet/Wireless WiFi Software (high 7.2)
- [CVE-2026-20748](https://insights.sbomify.com/CVE-2026-20748/): Everon api.everon.io Insufficient Session Expiration (medium 6.9)
- [CVE-2026-20747](https://insights.sbomify.com/CVE-2026-20747/): Denial of service in Intel(R) PROSet/Wireless WiFi Software (high 7.1)
- [CVE-2026-20746](https://insights.sbomify.com/CVE-2026-20746/): PingDirectory copying of virtual attributes leads to memory exhaustion (medium 6.3)
- [CVE-2026-20745](https://insights.sbomify.com/CVE-2026-20745/): Memory corruption in Intel(R) PROSet/Wireless WiFi Software for Windows (high 7.1)
- [CVE-2026-20744](https://insights.sbomify.com/CVE-2026-20744/): Hydro-Québec Le Circuit Electrique charging station backend Improper Access Control (critical 9.3)
- [CVE-2026-20742](https://insights.sbomify.com/CVE-2026-20742/): Copeland XWEB and XWEB Pro OS Command Injection (high 8.0)
- [CVE-2026-20741](https://insights.sbomify.com/CVE-2026-20741/): Missing authorization in Intel(R) PROSet/Wireless WiFi Software (high 8.3)
- [CVE-2026-2074](https://insights.sbomify.com/CVE-2026-2074/): O2OA HTTP POST Request check xml external entity reference (medium 5.3)
- [CVE-2026-20739](https://insights.sbomify.com/CVE-2026-20739/): Denial of service in Intel(R) PROSet/Wireless WiFi Software for Windows (high 7.1)
- [CVE-2026-20738](https://insights.sbomify.com/CVE-2026-20738/): Memory corruption in Intel(R) QuickAssist Adapter 8960 software (high 8.5)
- [CVE-2026-20737](https://insights.sbomify.com/CVE-2026-20737/): Information disclosure in Intel(R) PROSet/Wireless WiFi Software for Windows (medium 6.3)
- [CVE-2026-20736](https://insights.sbomify.com/CVE-2026-20736/): Gitea Web Attachment Deletion: Cross-Repository Unauthorized Deletion via Missing Repo Ownership Check (high 7.5)
- [CVE-2026-20734](https://insights.sbomify.com/CVE-2026-20734/): Information disclosure in Intel(R) Active Management Technology (Intel(R) AMT), and some Intel(R) Standard Manageability may allow an information disclosure. System software adversary with a privileged user combined with a low complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts. (medium 5.6)
- [CVE-2026-20733](https://insights.sbomify.com/CVE-2026-20733/): CloudCharge cloudcharge.se Insufficiently Protected Credentials (medium 6.9)
- [CVE-2026-20732](https://insights.sbomify.com/CVE-2026-20732/): BIG-IP Configuration utility vulnerability (low 2.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/812/