THE LATEST / SECURITY & VULNERABILITIES
Threat News
Recent vulnerabilities and security advisories, straight from the source.
Every cached source, newest first. All entries link to the original publisher.
For severity filtering, choose All CVEs above. Scores are available for NVD entries when supplied by an assessor. A severity filter excludes unscored entries; choose “Unscored / not supplied” to see them. Severity describes technical impact, not exploitation or risk.
17,069 stories · Past 30 days · Newest first
Subscribe to this view · RSSSource updates
- NVDUp to date · Checked
- CISA · Known ExploitedUp to date · Checked
- CISA · IndustrialUp to date · Checked
- CERT-EUUp to date · Checked
Sources refresh hourly; NVD every two hours. Available stories remain readable while a source recovers.
- NVD
CVE-2026-88074 — Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to eleva…
High · CVSS 3.1 7.8 · Assessor: [email protected]
Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
CVE-2026-88074Read original ↗ (opens in a new tab) - NVD
CVE-2026-88073 — Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
High · CVSS 3.1 7.8 · Assessor: [email protected]
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-88073Read original ↗ (opens in a new tab) - NVD
CVE-2026-88072 — Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally.
High · CVSS 3.1 7.8 · Assessor: [email protected]
Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally.
CVE-2026-88072Read original ↗ (opens in a new tab) - NVD
CVE-2026-88071 — Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
High · CVSS 3.1 7.8 · Assessor: [email protected]
Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
CVE-2026-88071Read original ↗ (opens in a new tab) - NVD
CVE-2026-88070 — Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally.
High · CVSS 3.1 7.8 · Assessor: [email protected]
Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally.
CVE-2026-88070Read original ↗ (opens in a new tab) - NVD
CVE-2026-87716 — Heap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized attacker to deny service over a netwo…
High · CVSS 3.1 7.5 · Assessor: [email protected]
Heap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized attacker to deny service over a network.
CVE-2026-87716Read original ↗ (opens in a new tab) - NVD
CVE-2026-87715 — Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
High · CVSS 3.1 7.0 · Assessor: [email protected]
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-87715Read original ↗ (opens in a new tab) - NVD
CVE-2026-87714 — Missing authorization in WebDAV allows an authorized attacker to bypass a security feature over a network.
Medium · CVSS 3.1 6.5 · Assessor: [email protected]
Missing authorization in WebDAV allows an authorized attacker to bypass a security feature over a network.
CVE-2026-87714Read original ↗ (opens in a new tab) - NVD
CVE-2026-87713 — Use after free in Windows Bluetooth Port Driver allows an unauthorized attacker to elevate privileges over an adjacent netwo…
High · CVSS 3.1 7.5 · Assessor: [email protected]
Use after free in Windows Bluetooth Port Driver allows an unauthorized attacker to elevate privileges over an adjacent network.
CVE-2026-87713Read original ↗ (opens in a new tab) - NVD
CVE-2026-87712 — Use after free in Windows Quality of Service (QoS) Packet Scheduler allows an authorized attacker to elevate privileges loca…
High · CVSS 3.1 7.8 · Assessor: [email protected]
Use after free in Windows Quality of Service (QoS) Packet Scheduler allows an authorized attacker to elevate privileges locally.
CVE-2026-87712Read original ↗ (opens in a new tab) - NVD
CVE-2026-87711 — Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
High · CVSS 3.1 7.8 · Assessor: [email protected]
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-87711Read original ↗ (opens in a new tab) - NVD
CVE-2026-87710 — Improper access control in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privi…
High · CVSS 3.1 7.0 · Assessor: [email protected]
Improper access control in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.
CVE-2026-87710Read original ↗ (opens in a new tab) - NVD
CVE-2026-87709 — Improper access control in Windows Host Guardian Service allows an authorized attacker to perform tampering locally.
Medium · CVSS 3.1 5.5 · Assessor: [email protected]
Improper access control in Windows Host Guardian Service allows an authorized attacker to perform tampering locally.
CVE-2026-87709Read original ↗ (opens in a new tab) - NVD
CVE-2026-87708 — Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
High · CVSS 3.1 7.0 · Assessor: [email protected]
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-87708Read original ↗ (opens in a new tab) - NVD
CVE-2026-87707 — Heap-based buffer overflow in Windows Fax and Scan Service allows an authorized attacker to elevate privileges locally.
High · CVSS 3.1 7.8 · Assessor: [email protected]
Heap-based buffer overflow in Windows Fax and Scan Service allows an authorized attacker to elevate privileges locally.
CVE-2026-87707Read original ↗ (opens in a new tab) - NVD
CVE-2026-87706 — Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
High · CVSS 3.1 7.8 · Assessor: [email protected]
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
CVE-2026-87706Read original ↗ (opens in a new tab) - NVD
CVE-2026-87705 — Improper verification of source of a communication channel in Windows Hyper-V allows an unauthorized attacker to bypass a se…
High · CVSS 3.1 7.4 · Assessor: [email protected]
Improper verification of source of a communication channel in Windows Hyper-V allows an unauthorized attacker to bypass a security feature over an adjacent network.
CVE-2026-87705Read original ↗ (opens in a new tab) - NVD
CVE-2026-87704 — Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
High · CVSS 3.1 7.0 · Assessor: [email protected]
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-87704Read original ↗ (opens in a new tab) - NVD
CVE-2026-87702 — Integer overflow or wraparound in Windows Resource Management (MRM) allows an authorized attacker to elevate privileges loca…
High · CVSS 3.1 7.8 · Assessor: [email protected]
Integer overflow or wraparound in Windows Resource Management (MRM) allows an authorized attacker to elevate privileges locally.
CVE-2026-87702Read original ↗ (opens in a new tab) - NVD
CVE-2026-87700 — Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
High · CVSS 3.1 7.8 · Assessor: [email protected]
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-87700Read original ↗ (opens in a new tab) - NVD
CVE-2026-87699 — Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally.
High · CVSS 3.1 7.8 · Assessor: [email protected]
Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally.
CVE-2026-87699Read original ↗ (opens in a new tab) - NVD
CVE-2026-87698 — Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to disclose information loc…
Medium · CVSS 3.1 5.5 · Assessor: [email protected]
Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to disclose information locally.
CVE-2026-87698Read original ↗ (opens in a new tab) - NVD
CVE-2026-87697 — Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.
High · CVSS 3.1 8.8 · Assessor: [email protected]
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.
CVE-2026-87697Read original ↗ (opens in a new tab) - NVD
CVE-2026-87696 — Improper verification of cryptographic signature in Microsoft Exchange Server allows an authorized attacker to elevate privi…
High · CVSS 3.1 7.5 · Assessor: [email protected]
Improper verification of cryptographic signature in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-87696Read original ↗ (opens in a new tab) - NVD
CVE-2026-87695 — Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to eleva…
High · CVSS 3.1 7.8 · Assessor: [email protected]
Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.
CVE-2026-87695Read original ↗ (opens in a new tab)
Summaries are excerpts from the publishers. The default Advisories view includes CISA KEV, CISA Industrial and CERT-EU. When several scores exist, PATCHBAY shows the newest valid CVSS version, then prefers a primary assessment, NVD, and a stable assessor ordering. Open the original for all assessments. CISA Known Exploited dates indicate catalog additions. This product uses data from the NVD API but is not endorsed or certified by the NVD.