THE LATEST / SECURITY & VULNERABILITIES
Threat News
Recent vulnerabilities and security advisories, straight from the source.
Every cached source, newest first. All entries link to the original publisher.
For severity filtering, choose All CVEs above. Scores are available for NVD entries when supplied by an assessor. A severity filter excludes unscored entries; choose “Unscored / not supplied” to see them. Severity describes technical impact, not exploitation or risk.
17,045 stories · Past 30 days · Newest first
Subscribe to this view · RSSSource updates
- NVDUp to date · Checked
- CISA · Known ExploitedUp to date · Checked
- CISA · IndustrialUp to date · Checked
- CERT-EUUp to date · Checked
Sources refresh hourly; NVD every two hours. Available stories remain readable while a source recovers.
- NVD
CVE-2026-85372 — Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
High · CVSS 3.1 7.0 · Assessor: [email protected]
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-85372Read original ↗ (opens in a new tab) - NVD
CVE-2026-85371 — Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.
High · CVSS 3.1 8.1 · Assessor: [email protected]
Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.
CVE-2026-85371Read original ↗ (opens in a new tab) - NVD
CVE-2026-85370 — Use after free in WebDAV allows an authorized attacker to elevate privileges locally.
High · CVSS 3.1 7.0 · Assessor: [email protected]
Use after free in WebDAV allows an authorized attacker to elevate privileges locally.
CVE-2026-85370Read original ↗ (opens in a new tab) - NVD
CVE-2026-85369 — Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
High · CVSS 3.1 8.8 · Assessor: [email protected]
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
CVE-2026-85369Read original ↗ (opens in a new tab) - NVD
CVE-2026-85368 — Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
High · CVSS 3.1 7.8 · Assessor: [email protected]
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
CVE-2026-85368Read original ↗ (opens in a new tab) - NVD
CVE-2026-85367 — Use after free in Windows Cash Drawer Protocol Provider allows an authorized attacker to elevate privileges locally.
High · CVSS 3.1 7.0 · Assessor: [email protected]
Use after free in Windows Cash Drawer Protocol Provider allows an authorized attacker to elevate privileges locally.
CVE-2026-85367Read original ↗ (opens in a new tab) - NVD
CVE-2026-85366 — Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
High · CVSS 3.1 7.8 · Assessor: [email protected]
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-85366Read original ↗ (opens in a new tab) - NVD
CVE-2026-85365 — Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.
High · CVSS 3.1 7.0 · Assessor: [email protected]
Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.
CVE-2026-85365Read original ↗ (opens in a new tab) - NVD
CVE-2026-85364 — Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
High · CVSS 3.1 7.0 · Assessor: [email protected]
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-85364Read original ↗ (opens in a new tab) - NVD
CVE-2026-85363 — Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network.
High · CVSS 3.1 8.8 · Assessor: [email protected]
Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-85363Read original ↗ (opens in a new tab) - NVD
CVE-2026-85362 — Release of invalid pointer or reference in Windows Management Instrumentation allows an authorized attacker to elevate privi…
High · CVSS 3.1 7.0 · Assessor: [email protected]
Release of invalid pointer or reference in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
CVE-2026-85362Read original ↗ (opens in a new tab) - NVD
CVE-2026-85361 — Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
High · CVSS 3.1 7.0 · Assessor: [email protected]
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-85361Read original ↗ (opens in a new tab) - NVD
CVE-2026-85359 — Improper control of generation of code ('code injection') in Windows Performance Monitor allows an authorized attacker to el…
High · CVSS 3.1 7.8 · Assessor: [email protected]
Improper control of generation of code ('code injection') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.
CVE-2026-85359Read original ↗ (opens in a new tab) - NVD
CVE-2026-85358 — Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
High · CVSS 3.1 7.8 · Assessor: [email protected]
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-85358Read original ↗ (opens in a new tab) - NVD
CVE-2026-85357 — Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Phone Service allows…
High · CVSS 3.1 7.0 · Assessor: [email protected]
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Phone Service allows an authorized attacker to elevate privileges locally.
CVE-2026-85357Read original ↗ (opens in a new tab) - NVD
CVE-2026-85356 — Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
High · CVSS 3.1 7.8 · Assessor: [email protected]
Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-85356Read original ↗ (opens in a new tab) - NVD
CVE-2026-85355 — Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an authorized attac…
High · CVSS 3.1 7.0 · Assessor: [email protected]
Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-85355Read original ↗ (opens in a new tab) - NVD
CVE-2026-85354 — Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
High · CVSS 3.1 7.0 · Assessor: [email protected]
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-85354Read original ↗ (opens in a new tab) - NVD
CVE-2026-85353 — Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a networ…
High · CVSS 3.1 7.5 · Assessor: [email protected]
Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network.
CVE-2026-85353Read original ↗ (opens in a new tab) - NVD
CVE-2026-85352 — Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
High · CVSS 3.1 7.0 · Assessor: [email protected]
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVE-2026-85352Read original ↗ (opens in a new tab) - NVD
CVE-2026-85343 — Improper link resolution before file access ('link following') in Windows Hyper-V allows an authorized attacker to elevate p…
High · CVSS 3.1 7.8 · Assessor: [email protected]
Improper link resolution before file access ('link following') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
CVE-2026-85343Read original ↗ (opens in a new tab) - NVD
CVE-2026-85342 — Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
High · CVSS 3.1 7.0 · Assessor: [email protected]
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVE-2026-85342Read original ↗ (opens in a new tab) - NVD
CVE-2026-85341 — Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
High · CVSS 3.1 7.8 · Assessor: [email protected]
Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-85341Read original ↗ (opens in a new tab) - NVD
CVE-2026-85340 — Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
High · CVSS 3.1 7.8 · Assessor: [email protected]
Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
CVE-2026-85340Read original ↗ (opens in a new tab) - NVD
CVE-2026-85339 — Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to…
High · CVSS 3.1 8.8 · Assessor: [email protected]
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
CVE-2026-85339Read original ↗ (opens in a new tab)
Summaries are excerpts from the publishers. The default Advisories view includes CISA KEV, CISA Industrial and CERT-EU. When several scores exist, PATCHBAY shows the newest valid CVSS version, then prefers a primary assessment, NVD, and a stable assessor ordering. Open the original for all assessments. CISA Known Exploited dates indicate catalog additions. This product uses data from the NVD API but is not endorsed or certified by the NVD.