THE LATEST / SECURITY & VULNERABILITIES
Threat News
Recent vulnerabilities and security advisories, straight from the source.
Every cached source, newest first. All entries link to the original publisher.
For severity filtering, choose All CVEs above. Scores are available for NVD entries when supplied by an assessor. A severity filter excludes unscored entries; choose “Unscored / not supplied” to see them. Severity describes technical impact, not exploitation or risk.
17,048 stories · Past 30 days · Newest first
Subscribe to this view · RSSSource updates
- NVDUp to date · Checked
- CISA · Known ExploitedUp to date · Checked
- CISA · IndustrialUp to date · Checked
- CERT-EUUp to date · Checked
Sources refresh hourly; NVD every two hours. Available stories remain readable while a source recovers.
- NVD
CVE-2026-87693 — Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
High · CVSS 3.1 7.0 · Assessor: [email protected]
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-87693Read original ↗ (opens in a new tab) - NVD
CVE-2026-87692 — Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.
High · CVSS 3.1 7.8 · Assessor: [email protected]
Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.
CVE-2026-87692Read original ↗ (opens in a new tab) - NVD
CVE-2026-87691 — Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.
High · CVSS 3.1 7.8 · Assessor: [email protected]
Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.
CVE-2026-87691Read original ↗ (opens in a new tab) - NVD
CVE-2026-86063 — Claude Code is an agentic coding tool. Prior to 2.1.179, the Claude Code and Claude Desktop plugin installation flow runs gi…
High · CVSS 4.0 7.5 · Assessor: [email protected]
Claude Code is an agentic coding tool. Prior to 2.1.179, the Claude Code and Claude Desktop plugin installation flow runs git checkout for a marketplace-pinned commit without verifying that the resulting HEAD equals the pinned 40-character SHA. An attacker who controls a plugin repository on a Git host that permits SHA-shaped branch names can create a branch named after the reviewed commit, causing checkout to select the branch tip and install attacker-controlled plugin code. Exploitation requires a user to instal…
CVE-2026-86063Read original ↗ (opens in a new tab) - NVD
CVE-2026-85945 — Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
High · CVSS 3.1 7.8 · Assessor: [email protected]
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-85945Read original ↗ (opens in a new tab) - NVD
CVE-2026-85943 — Time-of-check time-of-use (toctou) race condition in Reliable Multicast Transport Driver (RMCAST) allows an authorized attac…
High · CVSS 3.1 7.0 · Assessor: [email protected]
Time-of-check time-of-use (toctou) race condition in Reliable Multicast Transport Driver (RMCAST) allows an authorized attacker to elevate privileges locally.
CVE-2026-85943Read original ↗ (opens in a new tab) - NVD
CVE-2026-85941 — Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an a…
High · CVSS 3.1 7.0 · Assessor: [email protected]
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-85941Read original ↗ (opens in a new tab) - NVD
CVE-2026-85939 — Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature over a network.
Medium · CVSS 3.1 5.3 · Assessor: [email protected]
Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature over a network.
CVE-2026-85939Read original ↗ (opens in a new tab) - NVD
CVE-2026-85938 — Improper access control in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.
Medium · CVSS 3.1 5.5 · Assessor: [email protected]
Improper access control in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.
CVE-2026-85938Read original ↗ (opens in a new tab) - NVD
CVE-2026-85936 — Double free in Windows Shell allows an unauthorized attacker to execute code over a network.
High · CVSS 3.1 8.8 · Assessor: [email protected]
Double free in Windows Shell allows an unauthorized attacker to execute code over a network.
CVE-2026-85936Read original ↗ (opens in a new tab) - NVD
CVE-2026-85935 — Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally.
Medium · CVSS 3.1 5.5 · Assessor: [email protected]
Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally.
CVE-2026-85935Read original ↗ (opens in a new tab) - NVD
CVE-2026-85934 — Use after free in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.
High · CVSS 3.1 7.0 · Assessor: [email protected]
Use after free in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.
CVE-2026-85934Read original ↗ (opens in a new tab) - NVD
CVE-2026-85933 — Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
High · CVSS 3.1 7.8 · Assessor: [email protected]
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
CVE-2026-85933Read original ↗ (opens in a new tab) - NVD
CVE-2026-85932 — Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an auth…
Medium · CVSS 3.1 6.5 · Assessor: [email protected]
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVE-2026-85932Read original ↗ (opens in a new tab) - NVD
CVE-2026-85931 — Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a net…
High · CVSS 3.1 8.8 · Assessor: [email protected]
Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.
CVE-2026-85931Read original ↗ (opens in a new tab) - NVD
CVE-2026-85930 — Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
High · CVSS 3.1 7.0 · Assessor: [email protected]
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
CVE-2026-85930Read original ↗ (opens in a new tab) - NVD
CVE-2026-85928 — Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a…
Critical · CVSS 3.1 9.8 · Assessor: [email protected]
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.
CVE-2026-85928Read original ↗ (opens in a new tab) - NVD
CVE-2026-85927 — Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate pr…
High · CVSS 3.1 7.8 · Assessor: [email protected]
Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
CVE-2026-85927Read original ↗ (opens in a new tab) - NVD
CVE-2026-85926 — Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a net…
High · CVSS 3.1 8.1 · Assessor: [email protected]
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
CVE-2026-85926Read original ↗ (opens in a new tab) - NVD
CVE-2026-85925 — Improper restriction of communication channel to intended endpoints in Azure Key Vault allows an authorized attacker to elev…
High · CVSS 3.1 8.2 · Assessor: [email protected]
Improper restriction of communication channel to intended endpoints in Azure Key Vault allows an authorized attacker to elevate privileges over a network.
CVE-2026-85925Read original ↗ (opens in a new tab) - NVD
CVE-2026-85922 — Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network.
High · CVSS 3.1 7.4 · Assessor: [email protected]
Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-85922Read original ↗ (opens in a new tab) - NVD
CVE-2026-85920 — Time-of-check time-of-use (toctou) race condition in Windows BitLocker allows an authorized attacker to elevate privileges l…
High · CVSS 3.1 7.0 · Assessor: [email protected]
Time-of-check time-of-use (toctou) race condition in Windows BitLocker allows an authorized attacker to elevate privileges locally.
CVE-2026-85920Read original ↗ (opens in a new tab) - NVD
CVE-2026-85918 — Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges loc…
High · CVSS 3.1 7.0 · Assessor: [email protected]
Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
CVE-2026-85918Read original ↗ (opens in a new tab) - NVD
CVE-2026-85916 — Exposure of private personal information to an unauthorized actor in Azure Active Directory allows an unauthorized attacker…
Medium · CVSS 3.1 5.5 · Assessor: [email protected]
Exposure of private personal information to an unauthorized actor in Azure Active Directory allows an unauthorized attacker to disclose information locally.
CVE-2026-85916Read original ↗ (opens in a new tab) - NVD
CVE-2026-85915 — Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally.
High · CVSS 3.1 7.8 · Assessor: [email protected]
Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-85915Read original ↗ (opens in a new tab)
Summaries are excerpts from the publishers. The default Advisories view includes CISA KEV, CISA Industrial and CERT-EU. When several scores exist, PATCHBAY shows the newest valid CVSS version, then prefers a primary assessment, NVD, and a stable assessor ordering. Open the original for all assessments. CISA Known Exploited dates indicate catalog additions. This product uses data from the NVD API but is not endorsed or certified by the NVD.