THE LATEST / SECURITY & VULNERABILITIES
Threat News
Recent vulnerabilities and security advisories, straight from the source.
Every cached source, newest first. All entries link to the original publisher.
For severity filtering, choose All CVEs above. Scores are available for NVD entries when supplied by an assessor. A severity filter excludes unscored entries; choose “Unscored / not supplied” to see them. Severity describes technical impact, not exploitation or risk.
17,008 stories · Past 30 days · Newest first
Subscribe to this view · RSSSource updates
- NVDUp to date · Checked
- CISA · Known ExploitedUp to date · Checked
- CISA · IndustrialUp to date · Checked
- CERT-EUUp to date · Checked
Sources refresh hourly; NVD every two hours. Available stories remain readable while a source recovers.
- NVD
CVE-2026-97810 — Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to el…
High · CVSS 3.1 7.0 · Assessor: [email protected]
Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
CVE-2026-97810Read original ↗ (opens in a new tab) - NVD
CVE-2026-97809 — Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
High · CVSS 3.1 7.8 · Assessor: [email protected]
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-97809Read original ↗ (opens in a new tab) - NVD
CVE-2026-97808 — Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
High · CVSS 3.1 7.0 · Assessor: [email protected]
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-97808Read original ↗ (opens in a new tab) - NVD
CVE-2026-97807 — Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
High · CVSS 3.1 7.8 · Assessor: [email protected]
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-97807Read original ↗ (opens in a new tab) - NVD
CVE-2026-97806 — Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
High · CVSS 3.1 7.8 · Assessor: [email protected]
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-97806Read original ↗ (opens in a new tab) - NVD
CVE-2026-97805 — Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.
Critical · CVSS 3.1 9.8 · Assessor: [email protected]
Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.
CVE-2026-97805Read original ↗ (opens in a new tab) - NVD
CVE-2026-97804 — Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.
High · CVSS 3.1 7.8 · Assessor: [email protected]
Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.
CVE-2026-97804Read original ↗ (opens in a new tab) - NVD
CVE-2026-97803 — Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
High · CVSS 3.1 7.8 · Assessor: [email protected]
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-97803Read original ↗ (opens in a new tab) - NVD
CVE-2026-97801 — Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering over a…
High · CVSS 3.1 7.5 · Assessor: [email protected]
Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering over a network.
CVE-2026-97801Read original ↗ (opens in a new tab) - NVD
CVE-2026-97800 — Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate p…
High · CVSS 3.1 7.8 · Assessor: [email protected]
Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally.
CVE-2026-97800Read original ↗ (opens in a new tab) - NVD
CVE-2026-97799 — Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privilege…
High · CVSS 3.1 7.8 · Assessor: [email protected]
Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVE-2026-97799Read original ↗ (opens in a new tab) - NVD
CVE-2026-97798 — Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an auth…
High · CVSS 3.1 7.8 · Assessor: [email protected]
Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-97798Read original ↗ (opens in a new tab) - NVD
CVE-2026-97794 — Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to el…
High · CVSS 3.1 7.8 · Assessor: [email protected]
Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
CVE-2026-97794Read original ↗ (opens in a new tab) - NVD
CVE-2026-97793 — Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privil…
High · CVSS 3.1 7.0 · Assessor: [email protected]
Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally.
CVE-2026-97793Read original ↗ (opens in a new tab) - NVD
CVE-2026-97792 — Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to eleva…
High · CVSS 3.1 7.8 · Assessor: [email protected]
Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
CVE-2026-97792Read original ↗ (opens in a new tab) - NVD
CVE-2026-97790 — Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys)…
Medium · CVSS 3.1 5.5 · Assessor: [email protected]
Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform tampering locally.
CVE-2026-97790Read original ↗ (opens in a new tab) - NVD
CVE-2026-97789 — Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
High · CVSS 3.1 7.5 · Assessor: [email protected]
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-97789Read original ↗ (opens in a new tab) - NVD
CVE-2026-97788 — Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose informati…
High · CVSS 3.1 7.5 · Assessor: [email protected]
Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network.
CVE-2026-97788Read original ↗ (opens in a new tab) - NVD
CVE-2026-97787 — Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Container Isolation F…
High · CVSS 3.1 7.0 · Assessor: [email protected]
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
CVE-2026-97787Read original ↗ (opens in a new tab) - NVD
CVE-2026-97783 — Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows a…
Medium · CVSS 3.1 6.1 · Assessor: [email protected]
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-97783Read original ↗ (opens in a new tab) - NVD
CVE-2026-97782 — Observable discrepancy in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network.
Medium · CVSS 3.1 6.8 · Assessor: [email protected]
Observable discrepancy in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network.
CVE-2026-97782Read original ↗ (opens in a new tab) - NVD
CVE-2026-97781 — Improper neutralization of special elements used in a command ('command injection') in Microsoft Office OneNote allows an un…
High · CVSS 3.1 8.8 · Assessor: [email protected]
Improper neutralization of special elements used in a command ('command injection') in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network.
CVE-2026-97781Read original ↗ (opens in a new tab) - NVD
CVE-2026-97780 — Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
High · CVSS 3.1 8.8 · Assessor: [email protected]
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97780Read original ↗ (opens in a new tab) - NVD
CVE-2026-97779 — Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
Medium · CVSS 3.1 6.5 · Assessor: [email protected]
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-97779Read original ↗ (opens in a new tab) - NVD
CVE-2026-97778 — Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
High · CVSS 3.1 8.8 · Assessor: [email protected]
Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97778Read original ↗ (opens in a new tab)
Summaries are excerpts from the publishers. The default Advisories view includes CISA KEV, CISA Industrial and CERT-EU. When several scores exist, PATCHBAY shows the newest valid CVSS version, then prefers a primary assessment, NVD, and a stable assessor ordering. Open the original for all assessments. CISA Known Exploited dates indicate catalog additions. This product uses data from the NVD API but is not endorsed or certified by the NVD.