Filtered by vendor Microsoft Subscriptions
Total 30250 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-123388 1 Microsoft 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more 2026-11-12 7.8 High
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
CVE-2026-118137 1 Microsoft 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more 2026-11-12 7.8 High
Improper authorization in Windows FTP Service allows an authorized attacker to elevate privileges locally.
CVE-2026-118102 1 Microsoft 9 Microsoft Sql Server 2017 For X64-based Systems \(cu31\), Microsoft Sql Server 2019 For X64-based Systems \(cu32\), Microsoft Sql Server 2022 For X64-based Systems \(cu27\) and 6 more 2026-11-12 5.9 Medium
Use of a broken or risky cryptographic algorithm in SQL Server allows an unauthorized attacker to disclose information over a network.
CVE-2026-118292 1 Microsoft 11 365 Apps, Microsoft Office Ltsc 2021, Microsoft Office Ltsc 2024 and 8 more 2026-11-12 8.8 High
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-119398 1 Microsoft 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more 2026-11-12 7.8 High
Time-of-check time-of-use (toctou) race condition in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-118208 1 Microsoft 1 Exchange Server Se 2026-11-12 7.1 High
Improper access control in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network.
CVE-2026-119998 1 Microsoft 5 365 Apps, Microsoft Office Ltsc 2021, Microsoft Office Ltsc 2024 and 2 more 2026-11-12 6.5 Medium
Product ui does not warn user of unsafe actions in Microsoft Office allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-120001 1 Microsoft 10 365 Apps, Microsoft Office Ltsc 2021, Microsoft Office Ltsc 2024 and 7 more 2026-11-12 8.8 High
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
CVE-2026-119832 1 Microsoft 20 Windows 10 1809, Windows 10 21h2, Windows 10 21h2 and 17 more 2026-11-12 5.9 Medium
Improper access control in Windows BitLocker allows an authorized attacker to bypass a security feature with a physical attack.
CVE-2026-119818 1 Microsoft 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more 2026-11-12 7.8 High
Incorrect authorization in Windows Text Services Framework allows an authorized attacker to elevate privileges locally.
CVE-2026-119847 1 Microsoft 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more 2026-11-12 7.8 High
Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.
CVE-2026-119852 1 Microsoft 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more 2026-11-12 6.7 Medium
Missing authorization in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-119855 1 Microsoft 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more 2026-11-12 5.5 Medium
Buffer over-read in Windows COM+ Event System Service allows an authorized attacker to disclose information locally.
CVE-2026-119860 1 Microsoft 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more 2026-11-12 7 High
Use after free in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally.
CVE-2026-119861 1 Microsoft 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more 2026-11-12 7 High
Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally.
CVE-2026-119952 1 Microsoft 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more 2026-11-12 8.1 High
Observable timing discrepancy in Windows Schannel allows an unauthorized attacker to execute code over a network.
CVE-2026-119957 1 Microsoft 7 Windows Server 2016, Windows Server 2016 (server Core Installation), Windows Server 2019 and 4 more 2026-11-12 7.8 High
Double free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
CVE-2026-119958 1 Microsoft 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more 2026-11-12 9.8 Critical
Out-of-bounds write in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.
CVE-2026-119962 1 Microsoft 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more 2026-11-12 8.1 High
Double free in Windows Cred SSProvider Protocol allows an unauthorized attacker to execute code over a network.
CVE-2026-119963 1 Microsoft 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more 2026-11-12 8.1 High
Double free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.