Vulnerabilities

Summary — last 7 days

New vulnerabilities3,351▲ 378 vs. last week

Critical / high1,495▲ 137 vs. last week

New active exploitation (KEV)7▼ 3 vs. last week

Unscored (no CVSS)592▲ 120 vs. last week

3,068 results, sorted by published date (most recent first)

CVE	Status	Severity	EPSS	Active exploitation	Affected technologies	Published ▼	Modified	Description
CVE-2026-83973	Analyzed	High (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	9/8/2026	9/12/2026	Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83972	Analyzed	High (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	9/8/2026	9/12/2026	Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83971	Analyzed	High (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	9/8/2026	9/12/2026	Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83970	Analyzed	High (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	9/8/2026	9/12/2026	Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83969	Analyzed	High (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	9/8/2026	9/10/2026	Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83968	Analyzed	High (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	9/8/2026	9/10/2026	Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83967	Analyzed	High (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	9/8/2026	9/12/2026	Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83955	Analyzed	High (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	9/8/2026	9/10/2026	Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83954	Analyzed	High (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	9/8/2026	9/12/2026	Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83942	Analyzed	High (7.8)	0.30%	—	Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2 Microsoft Windows 11 23h2+6	9/8/2026	9/10/2026	Missing authorization in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-83940	Analyzed	High (7)	0.26%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	9/8/2026	9/10/2026	Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVE-2026-81355	Analyzed	High (7.8)	0.20%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+9	9/8/2026	9/24/2026	Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to execute code locally.
CVE-2026-81354	Analyzed	High (8.2)	0.35%	—	Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2 Microsoft Windows 11 23h2+4	9/8/2026	9/10/2026	Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally.
CVE-2026-80096	Analyzed	High (8.8)	0.91%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+9	9/8/2026	9/24/2026	Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network.
CVE-2026-80093	Analyzed	High (7)	0.32%	—	Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2 Microsoft Windows 11 23h2+6	9/8/2026	9/10/2026	Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-80075	Analyzed	High (7.8)	0.33%	—	Microsoft Windows 10 21h2 Microsoft Windows 10 22h2 Microsoft Windows 11 24h2 Microsoft Windows 11 25h2+1	9/8/2026	9/24/2026	Heap-based buffer overflow in Windows Work Folders allows an authorized attacker to elevate privileges locally.
CVE-2026-78516	Modified	Medium (4.3)	0.52%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+9	9/8/2026	9/25/2026	Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally.
CVE-2026-78508	Analyzed	Medium (4.6)	0.47%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+9	9/8/2026	9/24/2026	Out-of-bounds read in Windows CD-ROM Driver allows an unauthorized attacker to disclose information with a physical attack.
CVE-2026-78455	Analyzed	Medium (4.3)	0.52%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+6	9/8/2026	9/11/2026	Out-of-bounds read in Xbox allows an unauthorized attacker to disclose information with a physical attack.
CVE-2026-78454	Analyzed	Medium (5.5)	0.40%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+6	9/8/2026	9/11/2026	Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally.
CVE-2026-78453	Analyzed	Medium (6.5)	0.92%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+9	9/8/2026	9/24/2026	Integer underflow (wrap or wraparound) in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information over a network.
CVE-2026-78452	Analyzed	Medium (4.6)	0.47%	—	Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2 Microsoft Windows 11 23h2+6	9/8/2026	9/11/2026	Out-of-bounds read in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information with a physical attack.
CVE-2026-78451	Analyzed	Medium (6.8)	0.44%	—	Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2 Microsoft Windows 11 23h2+6	9/8/2026	9/11/2026	Untrusted pointer dereference in Microsoft Windows SCSI Class System File allows an unauthorized attacker to elevate privileges with a physical attack.
CVE-2026-78449	Analyzed	High (8.1)	0.71%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+9	9/8/2026	9/24/2026	Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.
CVE-2026-78448	Analyzed	High (7.8)	0.33%	—	Microsoft Windows 10 1607 Microsoft Windows 10 1809 Microsoft Windows 10 21h2 Microsoft Windows 10 22h2+8	9/8/2026	9/12/2026	Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.