{"cves":[{"cve_id":"CVE-2026-86564","summary":"A flaw was found in DPDK lib/vhost. Missing length validation before reading command_data in the virtio-net control-queue handler can cause an out-of-bounds read and a host process crash.","cvss":3.3,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":3.3,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://access.redhat.com/security/cve/CVE-2026-86564","https://bugzilla.redhat.com/show_bug.cgi?id=2529682"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T23:17:30","euvd":{"id":"EUVD-2026-74296","description":"A flaw was found in DPDK lib/vhost. Missing length validation before reading command_data in the virtio-net control-queue handler can cause an out-of-bounds read and a host process crash.","published_time":"2026-09-08T23:07:39","cvss":3.3,"cvss_version":"3.1","epss":0.0,"assigner":"redhat","references":["https://access.redhat.com/security/cve/CVE-2026-86564","https://bugzilla.redhat.com/show_bug.cgi?id=2529682"],"products":[],"vendors":[]}},{"cve_id":"CVE-2026-55250","summary":"Maravel, a PHP framework oriented towards dependency injection, prior to version 10.74.0 has a high-severity Token Replay Vulnerability arising from a structural lifecycle mismatch between stateless token validation engines and high-performance relational caching layers. Any application with low cache memory that causes premature eviction to free up memory and applications running macropay-solutions/maravel-framework that utilize tymon/jwt-auth for API token authentication and blacklist management or any other package that does the same may be affected. This architectural risk might also impact native Laravel applications utilizing cache tags under specific volatile or eviction-capped environments. tymon/jwt-auth automatically probes for cache tag support. If found, it forcefully wraps 14-day token blacklist entries (jti) inside a relational tymon.jwt tag. In environments where the O(1) Atomic Lazy Eviction model is active — either natively inside Maravel-Framework v20.x or manually backported into v10.x via the explicit DI container singletons provided in PR #104 (App\\Cache\\TaggedCache and App\\Cache\\TagSet) — a strict global tracking ceiling (Container::TAGGED_CACHE_TTL_CAP_SECONDS) of 7,200 seconds (2 hours) is enforced to secure the system against memory index bloat. This ceiling forcefully truncates the 14-day blacklist lifespan down to a maximum of 2 hours, after which individual tracking keys naturally expire and disappear from the active cache window. Furthermore, because the optimized engine implements a generational version matrix to achieve O(1) flush speeds, any programmatic or manual invocation of a tag flush or reset (e.g., Cache::tags([...])->flush()) instantly bumps the internal atomic master version pointer. This shifts the computed cryptographic composite hash (sha1($this->tags->getNamespace())) for all overlapping components, rendering the entire existing index immediately unreachable. Consequently, through either natural 2-hour expiration or an intervening tag flush execution (like the cache naturally cleaning old values to free up memory), the invalidation state records are entirely wiped out. Because the tokens' physical cryptographic signatures remain structurally valid for up to 14 days, stolen, hijacked, or legitimately logged-out tokens are instantly and silently resurrected across the entire API gateway, leaving the application critically vulnerable to widespread Token Replay Attacks. Because this issue is caused by an upstream architectural assumption within the tymon/jwt-auth package rather than a core defect inside the framework, there is no direct framework version upgrade that can safely bypass this lifecycle collision without breaking business cache recycling bounds. Maravel version 10.74.0 introduced a way to backport the new fixed tagged cache from 20.x into 10.x by resolving TagSet and TaggedCache from DI, which is how this latent architectural lifecycle vulnerability was discovered. Users must apply the decoupled configuration workaround outlined below. As a workaround, make sure that cache memory size does not generate early natural evictions from cache to free up space, deleting blacklisted jwt ids before they expire. Applications must decouple flat authentication vectors from the relational tagging subsystem. This forces token identifiers to write directly to the primary cache keyspace as flat, un-tagged key-value pairs where they securely retain their unclipped 14-day lifecycle.","cvss":8.7,"cvss_version":4.0,"cvss_v2":null,"cvss_v3":null,"cvss_v4":8.7,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://web.archive.org/web/20250620110641/https://github.com/macropay-solutions/maravel/wiki","https://web.archive.org/web/20260316211934/https://macropay-solutions.github.io/maravel-docs","https://web.archive.org/web/20260511235846/https://packagist.org/packages/macropay-solutions/maravel-framework"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T23:17:25","euvd":{"id":"EUVD-2026-74284","description":"Maravel, a PHP framework oriented towards dependency injection, prior to version 10.74.0 has a high-severity Token Replay Vulnerability arising from a structural lifecycle mismatch between stateless token validation engines and high-performance relational caching layers. Any application with low cache memory that causes premature eviction to free up memory and applications running macropay-solutions/maravel-framework that utilize tymon/jwt-auth for API token authentication and blacklist management or any other package that does the same may be affected. This architectural risk might also impact native Laravel applications utilizing cache tags under specific volatile or eviction-capped environments. tymon/jwt-auth automatically probes for cache tag support. If found, it forcefully wraps 14-day token blacklist entries (jti) inside a relational tymon.jwt tag. In environments where the O(1) Atomic Lazy Eviction model is active — either natively inside Maravel-Framework v20.x or manually backported into v10.x via the explicit DI container singletons provided in PR #104 (App\\Cache\\TaggedCache and App\\Cache\\TagSet) — a strict global tracking ceiling (Container::TAGGED_CACHE_TTL_CAP_SECONDS) of 7,200 seconds (2 hours) is enforced to secure the system against memory index bloat. This ceiling forcefully truncates the 14-day blacklist lifespan down to a maximum of 2 hours, after which individual tracking keys naturally expire and disappear from the active cache window. Furthermore, because the optimized engine implements a generational version matrix to achieve O(1) flush speeds, any programmatic or manual invocation of a tag flush or reset (e.g., Cache::tags([...])->flush()) instantly bumps the internal atomic master version pointer. This shifts the computed cryptographic composite hash (sha1($this->tags->getNamespace())) for all overlapping components, rendering the entire existing index immediately unreachable. Consequently, through either natural 2-hour expiration or an intervening tag flush execution (like the cache naturally cleaning old values to free up memory), the invalidation state records are entirely wiped out. Because the tokens' physical cryptographic signatures remain structurally valid for up to 14 days, stolen, hijacked, or legitimately logged-out tokens are instantly and silently resurrected across the entire API gateway, leaving the application critically vulnerable to widespread Token Replay Attacks. Because this issue is caused by an upstream architectural assumption within the tymon/jwt-auth package rather than a core defect inside the framework, there is no direct framework version upgrade that can safely bypass this lifecycle collision without breaking business cache recycling bounds. Maravel version 10.74.0 introduced a way to backport the new fixed tagged cache from 20.x into 10.x by resolving TagSet and TaggedCache from DI, which is how this latent architectural lifecycle vulnerability was discovered. Users must apply the decoupled configuration workaround outlined below. As a workaround, make sure that cache memory size does not generate early natural evictions from cache to free up space, deleting blacklisted jwt ids before they expire. Applications must decouple flat authentication vectors from the relational tagging subsystem. This forces token identifiers to write directly to the primary cache keyspace as flat, un-tagged key-value pairs where they securely retain their unclipped 14-day lifecycle.","published_time":"2026-09-08T22:17:35","cvss":8.7,"cvss_version":"4.0","epss":0.0,"assigner":"GitHub_M","references":["https://web.archive.org/web/20260511235846/https://packagist.org/packages/macropay-solutions/maravel-framework","https://web.archive.org/web/20250620110641/https://github.com/macropay-solutions/maravel/wiki","https://web.archive.org/web/20260316211934/https://macropay-solutions.github.io/maravel-docs"],"products":["maravel-framework"],"vendors":["macropay-solutions"]}},{"cve_id":"CVE-2026-47680","summary":"The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. In versions 0.0.17 through 1.8.4, an actor with the ability to influence the contents of a bucket referenced by a `Bucket` resource can cause source-controller to write fetched object data to paths outside the per-reconciliation working directory. The corruption surface is bounded by source-controller's own and downstream Flux controllers' digest verification: source-controller verifies stored artifact digests during reconciliation and rebuilds on divergence; consumers (kustomize-controller, helm-controller) verify the digest of fetched artifacts and reject mismatches. These checks prevent a manipulated artifact from reaching the cluster, but an attacker can still write files anywhere the source-controller pod has permission to write. Separately, a user with permission to create or update `GitRepository` resources can cause source-controller to test for the existence of paths outside the cloned repository. Because the result is exposed via the resource's status, this allows limited enumeration of file paths on the controller pod. This surface exists only on source-controller v1.6.0 and later, where the sparse-checkout feature was introduced. This vulnerability was fixed in source-controller v1.8.5. There is no in-product workaround. Users should upgrade to a patched version. As a defense-in-depth measure for the GitRepository sparse-checkout surface, a `ValidatingAdmissionPolicy` (or a third-party policy engine such as Kyverno or OPA Gatekeeper) can be deployed to reject `GitRepository` resources whose `.spec.sparseCheckout` entries contain `..` or absolute path segments.","cvss":5.3,"cvss_version":4.0,"cvss_v2":null,"cvss_v3":null,"cvss_v4":5.3,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://github.com/fluxcd/source-controller/commit/759bd6c451e7cc4327b38f42c8b671980165cb0e","https://github.com/fluxcd/source-controller/pull/2054","https://github.com/fluxcd/source-controller/security/advisories/GHSA-jjrm-hr5f-673x"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T23:17:24","euvd":null},{"cve_id":"CVE-2026-53581","summary":"OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.9 of opnsense/core and version 26.4_20 of BE/opnsense/core, a path traversal vulnerability in the NTP configuration module allows an attacker to overwrite arbitrary files on the system as the root user. By manipulating the GPS or PPS serial port parameter, an attacker with access to the NTP configuration can escape the intended directory and force the system to write user-controlled data to any file on the filesystem. Version 26.1.9 of opnsense/core and version 26.4_20 of BE/opnsense/core patch the issue.","cvss":9.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":9.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://github.com/opnsense/core/security/advisories/GHSA-872g-g543-j37m"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T23:17:24","euvd":{"id":"EUVD-2026-74293","description":"OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.9 of opnsense/core and version 26.4_20 of BE/opnsense/core, a path traversal vulnerability in the NTP configuration module allows an attacker to overwrite arbitrary files on the system as the root user. By manipulating the GPS or PPS serial port parameter, an attacker with access to the NTP configuration can escape the intended directory and force the system to write user-controlled data to any file on the filesystem. Version 26.1.9 of opnsense/core and version 26.4_20 of BE/opnsense/core patch the issue.","published_time":"2026-09-08T23:02:07","cvss":9.0,"cvss_version":"3.1","epss":0.0,"assigner":"GitHub_M","references":["https://github.com/opnsense/core/security/advisories/GHSA-872g-g543-j37m"],"products":["core","core"],"vendors":["OPNsense"]}},{"cve_id":"CVE-2026-53637","summary":"Sylius is an Open Source eCommerce Framework on Symfony. Versions 2.0.0 through 2.0.17, 2.1.0 through 2.1.14, and 2.2.0 through 2.2.5 contain an improper workflow enforcement vulnerability in the cart `FormComponent`. When an order is completed while its cart page remains open, the stale LiveComponent does not detect the order’s changed state and continues to permit cart actions, allowing an authenticated customer to modify or permanently delete an already completed order. Versions 2.0.18, 2.1.15, and 2.2.6 contain a patch. As a workaround, deployments can copy the patched `FormComponent` into the application's `src/` directory and override the `sylius_shop.twig.component.cart.form` service definition to use that class.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://github.com/Sylius/Sylius/security/advisories/GHSA-5597-7rmh-97q5"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T23:17:24","euvd":{"id":"EUVD-2026-74287","description":"Sylius is an Open Source eCommerce Framework on Symfony. Versions 2.0.0 through 2.0.17, 2.1.0 through 2.1.14, and 2.2.0 through 2.2.5 contain an improper workflow enforcement vulnerability in the cart `FormComponent`. When an order is completed while its cart page remains open, the stale LiveComponent does not detect the order’s changed state and continues to permit cart actions, allowing an authenticated customer to modify or permanently delete an already completed order. Versions 2.0.18, 2.1.15, and 2.2.6 contain a patch. As a workaround, deployments can copy the patched `FormComponent` into the application's `src/` directory and override the `sylius_shop.twig.component.cart.form` service definition to use that class.","published_time":"2026-09-08T22:31:39","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"GitHub_M","references":["https://github.com/Sylius/Sylius/security/advisories/GHSA-5597-7rmh-97q5"],"products":["Sylius","Sylius","Sylius"],"vendors":["Sylius"]}},{"cve_id":"CVE-2026-53638","summary":"Sylius is an Open Source eCommerce Framework on Symfony. Starting in version 2.0.0 and prior to version 2.0.18, 2.1.15, and 2.2.6, an authorization bypass vulnerability exists in the shop account API. The `PATCH /api/v2/shop/account/orders/{tokenValue}/payments/{paymentId}` endpoint, used by an authenticated shop customer to change the payment method of an order that has been placed but not yet paid (state `STATE_NEW`), does not validate that the chosen payment method is enabled for the order's channel. The equivalent checkout endpoint (`PATCH /api/v2/shop/orders/{tokenValue}/payments/{paymentId}`) correctly rejects out-of-channel payment methods with `HTTP 422`; the account endpoint silently accepts them and returns `HTTP 200`. An authenticated customer can therefore assign any globally enabled payment method to their own placed order, including methods that the store operator has explicitly excluded from that channel. The issue is fixed in versions: 2.0.18, 2.1.15, 2.2.6 and above. As a workaround, decorate the `Sylius\\Bundle\\ApiBundle\\Changer\\PaymentMethodChangerInterface` service in the application.","cvss":4.3,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":4.3,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://github.com/Sylius/Sylius/security/advisories/GHSA-6955-hrm5-c4qp"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T23:17:24","euvd":{"id":"EUVD-2026-74286","description":"Sylius is an Open Source eCommerce Framework on Symfony. Starting in version 2.0.0 and prior to version 2.0.18, 2.1.15, and 2.2.6, an authorization bypass vulnerability exists in the shop account API. The `PATCH /api/v2/shop/account/orders/{tokenValue}/payments/{paymentId}` endpoint, used by an authenticated shop customer to change the payment method of an order that has been placed but not yet paid (state `STATE_NEW`), does not validate that the chosen payment method is enabled for the order's channel. The equivalent checkout endpoint (`PATCH /api/v2/shop/orders/{tokenValue}/payments/{paymentId}`) correctly rejects out-of-channel payment methods with `HTTP 422`; the account endpoint silently accepts them and returns `HTTP 200`. An authenticated customer can therefore assign any globally enabled payment method to their own placed order, including methods that the store operator has explicitly excluded from that channel. The issue is fixed in versions: 2.0.18, 2.1.15, 2.2.6 and above. As a workaround, decorate the `Sylius\\Bundle\\ApiBundle\\Changer\\PaymentMethodChangerInterface` service in the application.","published_time":"2026-09-08T22:25:26","cvss":4.3,"cvss_version":"3.1","epss":0.0,"assigner":"GitHub_M","references":["https://github.com/Sylius/Sylius/security/advisories/GHSA-6955-hrm5-c4qp"],"products":["Sylius","Sylius","Sylius"],"vendors":["Sylius"]}},{"cve_id":"CVE-2026-53639","summary":"Sylius is an Open Source eCommerce Framework on Symfony. Starting in version 2.0.0 and prior to version 2.0.18, 2.1.15, and 2.2.6, the `GET /api/v2/shop/payment-requests/{hash}` and `PUT /api/v2/shop/payment-requests/{hash}` endpoints look up the payment request solely by the hash from the URL. No ownership check is performed against the authenticated customer or the underlying order. An attacker who obtains a payment request hash can read the payment request and, through the `payment` IRI in the response, recover the underlying order's `tokenValue` (which itself grants access to the full order, items, addresses, customer email, totals); and/or update the payment request payload (e.g. `target_path`, `after_path`). These fields are used by the front-end controller to redirect the user after the payment, so an attacker can flip them to an attacker-controlled URL and intercept the buyer. The hash is a UUID, so it has to be obtained out-of-band (logs, shared links, referrer headers, a co-located client), but once it is known no other credential is required, neither authentication nor knowledge of the order token. The creation endpoint `POST /api/v2/shop/orders/{tokenValue}/payment-requests` shares the same flaw: it resolves the target order solely from the `tokenValue` in the URL without verifying that the caller owns the order. The issue is fixed in versions 2.0.18, 2.1.15, and 2.2.6. As a workaround, add a query extension that filters the `GET` operation; decorate the `PUT` state provider, guard the `POST` creation endpoint with a command-bus middleware, and wire the services.","cvss":6.3,"cvss_version":4.0,"cvss_v2":null,"cvss_v3":null,"cvss_v4":6.3,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://github.com/Sylius/Sylius/security/advisories/GHSA-mr9r-h354-966r"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T23:17:24","euvd":{"id":"EUVD-2026-74285","description":"Sylius is an Open Source eCommerce Framework on Symfony. Starting in version 2.0.0 and prior to version 2.0.18, 2.1.15, and 2.2.6, the `GET /api/v2/shop/payment-requests/{hash}` and `PUT /api/v2/shop/payment-requests/{hash}` endpoints look up the payment request solely by the hash from the URL. No ownership check is performed against the authenticated customer or the underlying order. An attacker who obtains a payment request hash can read the payment request and, through the `payment` IRI in the response, recover the underlying order's `tokenValue` (which itself grants access to the full order, items, addresses, customer email, totals); and/or update the payment request payload (e.g. `target_path`, `after_path`). These fields are used by the front-end controller to redirect the user after the payment, so an attacker can flip them to an attacker-controlled URL and intercept the buyer. The hash is a UUID, so it has to be obtained out-of-band (logs, shared links, referrer headers, a co-located client), but once it is known no other credential is required, neither authentication nor knowledge of the order token. The creation endpoint `POST /api/v2/shop/orders/{tokenValue}/payment-requests` shares the same flaw: it resolves the target order solely from the `tokenValue` in the URL without verifying that the caller owns the order. The issue is fixed in versions 2.0.18, 2.1.15, and 2.2.6. As a workaround, add a query extension that filters the `GET` operation; decorate the `PUT` state provider, guard the `POST` creation endpoint with a command-bus middleware, and wire the services.","published_time":"2026-09-08T22:22:24","cvss":6.3,"cvss_version":"4.0","epss":0.0,"assigner":"GitHub_M","references":["https://github.com/Sylius/Sylius/security/advisories/GHSA-mr9r-h354-966r"],"products":["Sylius","Sylius","Sylius"],"vendors":["Sylius"]}},{"cve_id":"CVE-2026-18090","summary":"A flaw was found in gdk-pixbuf. This vulnerability allows a remote attacker to cause a heap out-of-bounds read by providing a specially crafted Apple Icon Image (.icns) file. The uncompress() function, which handles RLE-encoded ICNS icon data, fails to validate the source buffer's boundaries during decompression. This can lead to a denial of service, where the application crashes, or to information disclosure, potentially revealing sensitive data from adjacent memory.","cvss":6.1,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.1,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://access.redhat.com/security/cve/CVE-2026-18090","https://bugzilla.redhat.com/show_bug.cgi?id=2517751","https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/308"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T23:17:22","euvd":{"id":"EUVD-2026-74294","description":"A flaw was found in gdk-pixbuf. This vulnerability allows a remote attacker to cause a heap out-of-bounds read by providing a specially crafted Apple Icon Image (.icns) file. The uncompress() function, which handles RLE-encoded ICNS icon data, fails to validate the source buffer's boundaries during decompression. This can lead to a denial of service, where the application crashes, or to information disclosure, potentially revealing sensitive data from adjacent memory.","published_time":"2026-09-08T23:02:40","cvss":6.1,"cvss_version":"3.1","epss":0.0,"assigner":"redhat","references":["https://access.redhat.com/security/cve/CVE-2026-18090","https://bugzilla.redhat.com/show_bug.cgi?id=2517751","https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/308"],"products":[],"vendors":[]}},{"cve_id":"CVE-2026-86995","summary":"n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the Git node validated the repository parameter for fetch or pull, but setUpstream wrote a branch..remote value into repository configuration without validating it. A later fetch or pull resolved the remote from that configuration instead of the checked parameter. An authenticated workflow editor could therefore point Git at any local repository readable by the n8n process and receive its contents through packages/nodes-base/nodes/Git/GenericFunctions.ts. This issue is fixed in versions 1.123.76, 2.37.7 and 2.38.2.","cvss":5.3,"cvss_version":4.0,"cvss_v2":null,"cvss_v3":null,"cvss_v4":5.3,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://github.com/n8n-io/n8n/releases/tag/n8n@1.123.76","https://github.com/n8n-io/n8n/releases/tag/n8n@2.37.7","https://github.com/n8n-io/n8n/releases/tag/n8n@2.38.2","https://github.com/n8n-io/n8n/security/advisories/GHSA-qgpw-8g46-w95v"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T22:19:18","euvd":{"id":"EUVD-2026-74268","description":"n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the Git node validated the repository parameter for fetch or pull, but setUpstream wrote a branch..remote value into repository configuration without validating it. A later fetch or pull resolved the remote from that configuration instead of the checked parameter. An authenticated workflow editor could therefore point Git at any local repository readable by the n8n process and receive its contents through packages/nodes-base/nodes/Git/GenericFunctions.ts. This issue is fixed in versions 1.123.76, 2.37.7 and 2.38.2.","published_time":"2026-09-08T21:17:38","cvss":5.3,"cvss_version":"4.0","epss":0.0,"assigner":"GitHub_M","references":["https://github.com/n8n-io/n8n/security/advisories/GHSA-qgpw-8g46-w95v","https://github.com/n8n-io/n8n/releases/tag/n8n@1.123.76","https://github.com/n8n-io/n8n/releases/tag/n8n@2.37.7","https://github.com/n8n-io/n8n/releases/tag/n8n@2.38.2"],"products":["n8n","n8n","n8n"],"vendors":["n8n-io"]}},{"cve_id":"CVE-2026-86996","summary":"n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the workflow setting named This workflow can be called by was enforced by the Execute Workflow node but not when a workflow was attached to an Agent as a tool. A user able to build an Agent could invoke a restricted workflow and read its returned data. The affected path is packages/cli/src/modules/agents/tools/workflow-tool-factory.ts, where executeWorkflow omitted SubworkflowPolicyChecker.checkForProject. This issue is fixed in versions 2.37.7 and 2.38.2.","cvss":5.3,"cvss_version":4.0,"cvss_v2":null,"cvss_v3":null,"cvss_v4":5.3,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://github.com/n8n-io/n8n/releases/tag/n8n@2.37.7","https://github.com/n8n-io/n8n/releases/tag/n8n@2.38.2","https://github.com/n8n-io/n8n/security/advisories/GHSA-7hgx-277f-7vmg"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T22:19:18","euvd":{"id":"EUVD-2026-74267","description":"n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the workflow setting named This workflow can be called by was enforced by the Execute Workflow node but not when a workflow was attached to an Agent as a tool. A user able to build an Agent could invoke a restricted workflow and read its returned data. The affected path is packages/cli/src/modules/agents/tools/workflow-tool-factory.ts, where executeWorkflow omitted SubworkflowPolicyChecker.checkForProject. This issue is fixed in versions 2.37.7 and 2.38.2.","published_time":"2026-09-08T21:15:38","cvss":5.3,"cvss_version":"4.0","epss":0.0,"assigner":"GitHub_M","references":["https://github.com/n8n-io/n8n/security/advisories/GHSA-7hgx-277f-7vmg","https://github.com/n8n-io/n8n/releases/tag/n8n@2.37.7","https://github.com/n8n-io/n8n/releases/tag/n8n@2.38.2"],"products":["n8n","n8n"],"vendors":["n8n-io"]}},{"cve_id":"CVE-2026-86081","summary":"n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the Git node clone operation matched an attacker-controlled destination path against the default N8N_BLOCK_FILE_PATTERNS regular expression. The pattern ^(./).git(/.)$ allowed catastrophic backtracking and ran synchronously in the main n8n process. An authenticated workflow editor could therefore freeze the instance with one workflow execution; the affected default is declared in packages/@n8n/config/src/configs/security.config.ts. This issue is fixed in versions 1.123.76, 2.37.7 and 2.38.2.","cvss":7.1,"cvss_version":4.0,"cvss_v2":null,"cvss_v3":null,"cvss_v4":7.1,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://github.com/n8n-io/n8n/releases/tag/n8n@1.123.76","https://github.com/n8n-io/n8n/releases/tag/n8n@2.37.7","https://github.com/n8n-io/n8n/releases/tag/n8n@2.38.2","https://github.com/n8n-io/n8n/security/advisories/GHSA-j535-v25q-vx3q"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T22:19:17","euvd":{"id":"EUVD-2026-74275","description":"n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the Git node clone operation matched an attacker-controlled destination path against the default N8N_BLOCK_FILE_PATTERNS regular expression. The pattern ^(./).git(/.)$ allowed catastrophic backtracking and ran synchronously in the main n8n process. An authenticated workflow editor could therefore freeze the instance with one workflow execution; the affected default is declared in packages/@n8n/config/src/configs/security.config.ts. This issue is fixed in versions 1.123.76, 2.37.7 and 2.38.2.","published_time":"2026-09-08T21:24:20","cvss":7.1,"cvss_version":"4.0","epss":0.0,"assigner":"GitHub_M","references":["https://github.com/n8n-io/n8n/security/advisories/GHSA-j535-v25q-vx3q","https://github.com/n8n-io/n8n/releases/tag/n8n@1.123.76","https://github.com/n8n-io/n8n/releases/tag/n8n@2.37.7","https://github.com/n8n-io/n8n/releases/tag/n8n@2.38.2"],"products":["n8n","n8n","n8n"],"vendors":["n8n-io"]}},{"cve_id":"CVE-2026-86082","summary":"n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the OpenAI Chat Model node enforced credential allowed-domain restrictions for normal calls but not for the model-search dropdown. A workflow editor could set options.baseURL to an arbitrary host and make the searchModels path send the openAiApi credential there. The affected implementation is packages/@n8n/nodes-langchain/nodes/llms/LMChatOpenAi/methods/loadModels.ts, which omitted assertOpenAiCredentialAllowsUrl. This issue is fixed in versions 1.123.76, 2.37.7 and 2.38.2.","cvss":7.1,"cvss_version":4.0,"cvss_v2":null,"cvss_v3":null,"cvss_v4":7.1,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://github.com/n8n-io/n8n/releases/tag/n8n@1.123.76","https://github.com/n8n-io/n8n/releases/tag/n8n@2.37.7","https://github.com/n8n-io/n8n/releases/tag/n8n@2.38.2","https://github.com/n8n-io/n8n/security/advisories/GHSA-34ff-336r-5q23"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T22:19:17","euvd":{"id":"EUVD-2026-74274","description":"n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the OpenAI Chat Model node enforced credential allowed-domain restrictions for normal calls but not for the model-search dropdown. A workflow editor could set options.baseURL to an arbitrary host and make the searchModels path send the openAiApi credential there. The affected implementation is packages/@n8n/nodes-langchain/nodes/llms/LMChatOpenAi/methods/loadModels.ts, which omitted assertOpenAiCredentialAllowsUrl. This issue is fixed in versions 1.123.76, 2.37.7 and 2.38.2.","published_time":"2026-09-08T21:23:23","cvss":7.1,"cvss_version":"4.0","epss":0.0,"assigner":"GitHub_M","references":["https://github.com/n8n-io/n8n/security/advisories/GHSA-34ff-336r-5q23","https://github.com/n8n-io/n8n/releases/tag/n8n@1.123.76","https://github.com/n8n-io/n8n/releases/tag/n8n@2.37.7","https://github.com/n8n-io/n8n/releases/tag/n8n@2.38.2"],"products":["n8n","n8n","n8n"],"vendors":["n8n-io"]}},{"cve_id":"CVE-2026-86083","summary":"n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the legacy expression engine generated source text by calling the mutable global JSON.stringify while printing synthetic string literals and interpolating timezone data. An expression could replace JSON.stringify and cause later generated source to contain executable attacker-controlled code. The affected code-generation paths include packages/@n8n/expression-runtime/src/bridge/isolated-vm-bridge.ts and packages/@n8n/tournament/src/ExpressionBuilder.ts, and the issue does not affect the vm expression engine. This issue is fixed in versions 1.123.76, 2.37.7 and 2.38.2.","cvss":7.7,"cvss_version":4.0,"cvss_v2":null,"cvss_v3":null,"cvss_v4":7.7,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://github.com/n8n-io/n8n/releases/tag/n8n@1.123.76","https://github.com/n8n-io/n8n/releases/tag/n8n@2.37.7","https://github.com/n8n-io/n8n/releases/tag/n8n@2.38.2","https://github.com/n8n-io/n8n/security/advisories/GHSA-6xcw-7xm6-48c6"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T22:19:17","euvd":{"id":"EUVD-2026-74273","description":"n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the legacy expression engine generated source text by calling the mutable global JSON.stringify while printing synthetic string literals and interpolating timezone data. An expression could replace JSON.stringify and cause later generated source to contain executable attacker-controlled code. The affected code-generation paths include packages/@n8n/expression-runtime/src/bridge/isolated-vm-bridge.ts and packages/@n8n/tournament/src/ExpressionBuilder.ts, and the issue does not affect the vm expression engine. This issue is fixed in versions 1.123.76, 2.37.7 and 2.38.2.","published_time":"2026-09-08T21:22:40","cvss":7.7,"cvss_version":"4.0","epss":0.0,"assigner":"GitHub_M","references":["https://github.com/n8n-io/n8n/security/advisories/GHSA-6xcw-7xm6-48c6","https://github.com/n8n-io/n8n/releases/tag/n8n@1.123.76","https://github.com/n8n-io/n8n/releases/tag/n8n@2.37.7","https://github.com/n8n-io/n8n/releases/tag/n8n@2.38.2"],"products":["n8n","n8n","n8n"],"vendors":["n8n-io"]}},{"cve_id":"CVE-2026-86084","summary":"n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the public OIDC login and callback endpoints completed authentication even when OIDC was not the enabled active authentication method. An Enterprise administrator who had configured and later disabled an identity provider still exposed a working route that could issue valid sessions. The affected logic is packages/cli/src/modules/sso-oidc/oidc.service.ee.ts, including generateLoginUrl and the callback flow that lacked assertOidcLoginEnabled. This issue is fixed in versions 1.123.76, 2.37.7 and 2.38.2.","cvss":6.0,"cvss_version":4.0,"cvss_v2":null,"cvss_v3":null,"cvss_v4":6.0,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://github.com/n8n-io/n8n/releases/tag/n8n@1.123.76","https://github.com/n8n-io/n8n/releases/tag/n8n@2.37.7","https://github.com/n8n-io/n8n/releases/tag/n8n@2.38.2","https://github.com/n8n-io/n8n/security/advisories/GHSA-pf83-w3f9-8m37"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T22:19:17","euvd":{"id":"EUVD-2026-74272","description":"n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the public OIDC login and callback endpoints completed authentication even when OIDC was not the enabled active authentication method. An Enterprise administrator who had configured and later disabled an identity provider still exposed a working route that could issue valid sessions. The affected logic is packages/cli/src/modules/sso-oidc/oidc.service.ee.ts, including generateLoginUrl and the callback flow that lacked assertOidcLoginEnabled. This issue is fixed in versions 1.123.76, 2.37.7 and 2.38.2.","published_time":"2026-09-08T21:21:55","cvss":6.0,"cvss_version":"4.0","epss":0.0,"assigner":"GitHub_M","references":["https://github.com/n8n-io/n8n/security/advisories/GHSA-pf83-w3f9-8m37","https://github.com/n8n-io/n8n/releases/tag/n8n@1.123.76","https://github.com/n8n-io/n8n/releases/tag/n8n@2.37.7","https://github.com/n8n-io/n8n/releases/tag/n8n@2.38.2"],"products":["n8n","n8n","n8n"],"vendors":["n8n-io"]}},{"cve_id":"CVE-2026-86085","summary":"n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the /rest/roles/:slug/assignments and /rest/roles/:slug/assignments/:projectId/members endpoints checked only whether the caller could manage the role type. A caller with role:manageProject could name a project the caller could not list and obtain member names and email addresses. The affected controller is packages/cli/src/controllers/role.controller.ts, which omitted the project:list scope check. This issue is fixed in versions 2.37.7 and 2.38.2.","cvss":5.1,"cvss_version":4.0,"cvss_v2":null,"cvss_v3":null,"cvss_v4":5.1,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://github.com/n8n-io/n8n/releases/tag/n8n@2.37.7","https://github.com/n8n-io/n8n/releases/tag/n8n@2.38.2","https://github.com/n8n-io/n8n/security/advisories/GHSA-cqr2-h44g-v75v"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T22:19:17","euvd":{"id":"EUVD-2026-74271","description":"n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the /rest/roles/:slug/assignments and /rest/roles/:slug/assignments/:projectId/members endpoints checked only whether the caller could manage the role type. A caller with role:manageProject could name a project the caller could not list and obtain member names and email addresses. The affected controller is packages/cli/src/controllers/role.controller.ts, which omitted the project:list scope check. This issue is fixed in versions 2.37.7 and 2.38.2.","published_time":"2026-09-08T21:20:35","cvss":5.1,"cvss_version":"4.0","epss":0.0,"assigner":"GitHub_M","references":["https://github.com/n8n-io/n8n/security/advisories/GHSA-cqr2-h44g-v75v","https://github.com/n8n-io/n8n/releases/tag/n8n@2.37.7","https://github.com/n8n-io/n8n/releases/tag/n8n@2.38.2"],"products":["n8n","n8n"],"vendors":["n8n-io"]}},{"cve_id":"CVE-2026-86993","summary":"n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, a Log Streaming event destination could reference a generic HTTP credential and decrypt whichever credential ID it named without an ownership check. A user with a custom global role carrying Log Streaming scopes could select a credential belonging to another project and send its decrypted secret to an attacker-controlled endpoint. The affected authorization boundary is packages/cli/src/modules/log-streaming.ee/destinations/destination-credentials-access.ts and the credential:read scope. This issue is fixed in versions 1.123.76, 2.37.7 and 2.38.2.","cvss":5.9,"cvss_version":4.0,"cvss_v2":null,"cvss_v3":null,"cvss_v4":5.9,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://github.com/n8n-io/n8n/releases/tag/n8n@1.123.76","https://github.com/n8n-io/n8n/releases/tag/n8n@2.37.7","https://github.com/n8n-io/n8n/releases/tag/n8n@2.38.2","https://github.com/n8n-io/n8n/security/advisories/GHSA-pq6c-vh67-xpm3"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T22:19:17","euvd":{"id":"EUVD-2026-74270","description":"n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, a Log Streaming event destination could reference a generic HTTP credential and decrypt whichever credential ID it named without an ownership check. A user with a custom global role carrying Log Streaming scopes could select a credential belonging to another project and send its decrypted secret to an attacker-controlled endpoint. The affected authorization boundary is packages/cli/src/modules/log-streaming.ee/destinations/destination-credentials-access.ts and the credential:read scope. This issue is fixed in versions 1.123.76, 2.37.7 and 2.38.2.","published_time":"2026-09-08T21:19:53","cvss":5.9,"cvss_version":"4.0","epss":0.0,"assigner":"GitHub_M","references":["https://github.com/n8n-io/n8n/security/advisories/GHSA-pq6c-vh67-xpm3","https://github.com/n8n-io/n8n/releases/tag/n8n@1.123.76","https://github.com/n8n-io/n8n/releases/tag/n8n@2.37.7","https://github.com/n8n-io/n8n/releases/tag/n8n@2.38.2"],"products":["n8n","n8n","n8n"],"vendors":["n8n-io"]}},{"cve_id":"CVE-2026-86994","summary":"n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the /rest/active-workflows endpoint returned every active workflow ID on the instance to any member regardless of sharing. Workflow activation, deactivation, and publication push events were also broadcast to clients that could not access the affected workflow, disclosing workflow IDs, version IDs, and activation error details. The affected paths include packages/cli/src/services/active-workflows.service.ts and packages/cli/src/workflows/workflow-push-notifier.service.ts. This issue is fixed in versions 1.123.76, 2.37.7 and 2.38.2.","cvss":5.3,"cvss_version":4.0,"cvss_v2":null,"cvss_v3":null,"cvss_v4":5.3,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://github.com/n8n-io/n8n/releases/tag/n8n@1.123.76","https://github.com/n8n-io/n8n/releases/tag/n8n@2.37.7","https://github.com/n8n-io/n8n/releases/tag/n8n@2.38.2","https://github.com/n8n-io/n8n/security/advisories/GHSA-65xw-2v52-jhxc"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T22:19:17","euvd":{"id":"EUVD-2026-74269","description":"n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the /rest/active-workflows endpoint returned every active workflow ID on the instance to any member regardless of sharing. Workflow activation, deactivation, and publication push events were also broadcast to clients that could not access the affected workflow, disclosing workflow IDs, version IDs, and activation error details. The affected paths include packages/cli/src/services/active-workflows.service.ts and packages/cli/src/workflows/workflow-push-notifier.service.ts. This issue is fixed in versions 1.123.76, 2.37.7 and 2.38.2.","published_time":"2026-09-08T21:18:43","cvss":5.3,"cvss_version":"4.0","epss":0.0,"assigner":"GitHub_M","references":["https://github.com/n8n-io/n8n/security/advisories/GHSA-65xw-2v52-jhxc","https://github.com/n8n-io/n8n/releases/tag/n8n@1.123.76","https://github.com/n8n-io/n8n/releases/tag/n8n@2.37.7","https://github.com/n8n-io/n8n/releases/tag/n8n@2.38.2"],"products":["n8n","n8n","n8n"],"vendors":["n8n-io"]}},{"cve_id":"CVE-2026-81904","summary":"Concrete CMS below 9.5.3 registered view assets for every sub-block of a Stack, Container, or layout area without checking whether the requesting user could view that sub-block. An unauthenticated visitor could recover configuration values emitted by a restricted sub-block's asset registration — such as a site's configured Google Maps API key — from any public page embedding an affected Stack, Container, or layout area, despite the block-level permission restriction. Any sub-block type whose asset or header hooks output configuration values is affected.  The Concrete CMS security team gave this vulnerability a CVSS v.4.0 score of 6.3 with vector CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N. Thanks Yonatan Drori (Tenzai) for reporting.","cvss":6.3,"cvss_version":4.0,"cvss_v2":null,"cvss_v3":null,"cvss_v4":6.3,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://documentation.concretecms.org/9-x/developers/introduction/version-history/953-release-notes"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T22:19:16","euvd":{"id":"EUVD-2026-74282","description":"Concrete CMS below 9.5.3 registered view assets for every sub-block of a Stack, Container, or layout area without checking whether the requesting user could view that sub-block. An unauthenticated visitor could recover configuration values emitted by a restricted sub-block's asset registration — such as a site's configured Google Maps API key — from any public page embedding an affected Stack, Container, or layout area, despite the block-level permission restriction. Any sub-block type whose asset or header hooks output configuration values is affected.  The Concrete CMS security team gave this vulnerability a CVSS v.4.0 score of 6.3 with vector CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N. Thanks Yonatan Drori (Tenzai) for reporting.","published_time":"2026-09-08T21:55:05","cvss":6.3,"cvss_version":"4.0","epss":0.0,"assigner":"ConcreteCMS","references":["https://documentation.concretecms.org/9-x/developers/introduction/version-history/953-release-notes"],"products":["Concrete CMS "],"vendors":["Concrete CMS"]}},{"cve_id":"CVE-2026-86075","summary":"n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the OAuth Dynamic Client Registration endpoint bounded redirect_uris but accepted arbitrarily large client_name and grant_types values. An unauthenticated remote caller could repeatedly persist oversized values in oauth_clients and exhaust database storage. The affected validation is in packages/cli/src/modules/oauth-server/oauth-server.service.ts, including MAX_CLIENT_NAME_LENGTH and MAX_GRANT_TYPES. This issue is fixed in versions 2.37.7 and 2.38.2.","cvss":8.7,"cvss_version":4.0,"cvss_v2":null,"cvss_v3":null,"cvss_v4":8.7,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://github.com/n8n-io/n8n/releases/tag/n8n@2.37.7","https://github.com/n8n-io/n8n/releases/tag/n8n@2.38.2","https://github.com/n8n-io/n8n/security/advisories/GHSA-hh89-3r9w-qj3j"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T22:19:16","euvd":{"id":"EUVD-2026-74281","description":"n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the OAuth Dynamic Client Registration endpoint bounded redirect_uris but accepted arbitrarily large client_name and grant_types values. An unauthenticated remote caller could repeatedly persist oversized values in oauth_clients and exhaust database storage. The affected validation is in packages/cli/src/modules/oauth-server/oauth-server.service.ts, including MAX_CLIENT_NAME_LENGTH and MAX_GRANT_TYPES. This issue is fixed in versions 2.37.7 and 2.38.2.","published_time":"2026-09-08T21:29:38","cvss":8.7,"cvss_version":"4.0","epss":0.0,"assigner":"GitHub_M","references":["https://github.com/n8n-io/n8n/security/advisories/GHSA-hh89-3r9w-qj3j","https://github.com/n8n-io/n8n/releases/tag/n8n@2.37.7","https://github.com/n8n-io/n8n/releases/tag/n8n@2.38.2"],"products":["n8n","n8n"],"vendors":["n8n-io"]}},{"cve_id":"CVE-2026-86076","summary":"n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the expression compiler sanitizer resolved through dynamically scoped this and did not reject reserved class member names. A class field named __sanitize could rebind the sanitizer and reach the Function constructor, enabling backend code execution and editor-preview JavaScript execution. The affected AST hook is PrototypeSanitizer in packages/workflow/src/expression-sandboxing.ts. This issue is fixed in versions 1.123.76, 2.37.7 and 2.38.2.","cvss":8.7,"cvss_version":4.0,"cvss_v2":null,"cvss_v3":null,"cvss_v4":8.7,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://github.com/n8n-io/n8n/releases/tag/n8n@1.123.76","https://github.com/n8n-io/n8n/releases/tag/n8n@2.37.7","https://github.com/n8n-io/n8n/releases/tag/n8n@2.38.2","https://github.com/n8n-io/n8n/security/advisories/GHSA-hw8v-xxg5-vvvx"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T22:19:16","euvd":{"id":"EUVD-2026-74280","description":"n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the expression compiler sanitizer resolved through dynamically scoped this and did not reject reserved class member names. A class field named __sanitize could rebind the sanitizer and reach the Function constructor, enabling backend code execution and editor-preview JavaScript execution. The affected AST hook is PrototypeSanitizer in packages/workflow/src/expression-sandboxing.ts. This issue is fixed in versions 1.123.76, 2.37.7 and 2.38.2.","published_time":"2026-09-08T21:28:52","cvss":8.7,"cvss_version":"4.0","epss":0.0,"assigner":"GitHub_M","references":["https://github.com/n8n-io/n8n/security/advisories/GHSA-hw8v-xxg5-vvvx","https://github.com/n8n-io/n8n/releases/tag/n8n@1.123.76","https://github.com/n8n-io/n8n/releases/tag/n8n@2.37.7","https://github.com/n8n-io/n8n/releases/tag/n8n@2.38.2"],"products":["n8n","n8n","n8n"],"vendors":["n8n-io"]}},{"cve_id":"CVE-2026-86077","summary":"n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the /chat WebSocket route accepted a resumeToken and resumed a paused execution without checking that the target node supported chat messages. An anonymous form submitter who received that token could reuse it on the chat route to release a Send-and-Wait, non-chat HITL, or Wait approval gate. The affected authorization logic is packages/cli/src/chat/chat-execution-manager.ts, where canResumeOverChat did not gate the resume target. This issue is fixed in versions 2.37.7 and 2.38.2.","cvss":6.3,"cvss_version":4.0,"cvss_v2":null,"cvss_v3":null,"cvss_v4":6.3,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://github.com/n8n-io/n8n/releases/tag/n8n@2.37.7","https://github.com/n8n-io/n8n/releases/tag/n8n@2.38.2","https://github.com/n8n-io/n8n/security/advisories/GHSA-35jj-42hp-8gmq"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T22:19:16","euvd":{"id":"EUVD-2026-74279","description":"n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the /chat WebSocket route accepted a resumeToken and resumed a paused execution without checking that the target node supported chat messages. An anonymous form submitter who received that token could reuse it on the chat route to release a Send-and-Wait, non-chat HITL, or Wait approval gate. The affected authorization logic is packages/cli/src/chat/chat-execution-manager.ts, where canResumeOverChat did not gate the resume target. This issue is fixed in versions 2.37.7 and 2.38.2.","published_time":"2026-09-08T21:28:06","cvss":6.3,"cvss_version":"4.0","epss":0.0,"assigner":"GitHub_M","references":["https://github.com/n8n-io/n8n/security/advisories/GHSA-35jj-42hp-8gmq","https://github.com/n8n-io/n8n/releases/tag/n8n@2.37.7","https://github.com/n8n-io/n8n/releases/tag/n8n@2.38.2"],"products":["n8n","n8n"],"vendors":["n8n-io"]}},{"cve_id":"CVE-2026-86078","summary":"n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the Instance AI workflow summary used node names and connection keys from stored workflows as ordinary object keys. A workflow submitted through the REST API could contain __proto__ or constructor, causing nested writes to reach Object.prototype in the main n8n process and disrupt later requests. The affected function is summarizeWorkflowStructure in packages/@n8n/instance-ai/src/tools/workflows/summarize-workflow.ts. This issue is fixed in versions 2.37.7 and 2.38.2.","cvss":6.0,"cvss_version":4.0,"cvss_v2":null,"cvss_v3":null,"cvss_v4":6.0,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://github.com/n8n-io/n8n/releases/tag/n8n@2.37.7","https://github.com/n8n-io/n8n/releases/tag/n8n@2.38.2","https://github.com/n8n-io/n8n/security/advisories/GHSA-679f-58pq-4v2c"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T22:19:16","euvd":{"id":"EUVD-2026-74278","description":"n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the Instance AI workflow summary used node names and connection keys from stored workflows as ordinary object keys. A workflow submitted through the REST API could contain __proto__ or constructor, causing nested writes to reach Object.prototype in the main n8n process and disrupt later requests. The affected function is summarizeWorkflowStructure in packages/@n8n/instance-ai/src/tools/workflows/summarize-workflow.ts. This issue is fixed in versions 2.37.7 and 2.38.2.","published_time":"2026-09-08T21:27:21","cvss":6.0,"cvss_version":"4.0","epss":0.0,"assigner":"GitHub_M","references":["https://github.com/n8n-io/n8n/security/advisories/GHSA-679f-58pq-4v2c","https://github.com/n8n-io/n8n/releases/tag/n8n@2.37.7","https://github.com/n8n-io/n8n/releases/tag/n8n@2.38.2"],"products":["n8n","n8n"],"vendors":["n8n-io"]}},{"cve_id":"CVE-2026-86079","summary":"n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the Elasticsearch and ElasticSecurity nodes interpolated workflow-controlled index and document identifiers directly into REST request paths. An identifier containing path separators or dot segments could select another index or a cluster administration endpoint under the stored Elasticsearch credential. The affected request construction includes packages/nodes-base/nodes/Elastic/Elasticsearch/GenericFunctions.ts and the missing toPathSegment encoding. This issue is fixed in versions 1.123.76, 2.37.7 and 2.38.2.","cvss":6.3,"cvss_version":4.0,"cvss_v2":null,"cvss_v3":null,"cvss_v4":6.3,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://github.com/n8n-io/n8n/releases/tag/n8n@1.123.76","https://github.com/n8n-io/n8n/releases/tag/n8n@2.37.7","https://github.com/n8n-io/n8n/releases/tag/n8n@2.38.2","https://github.com/n8n-io/n8n/security/advisories/GHSA-f2cp-m7mv-8jpv"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T22:19:16","euvd":{"id":"EUVD-2026-74277","description":"n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the Elasticsearch and ElasticSecurity nodes interpolated workflow-controlled index and document identifiers directly into REST request paths. An identifier containing path separators or dot segments could select another index or a cluster administration endpoint under the stored Elasticsearch credential. The affected request construction includes packages/nodes-base/nodes/Elastic/Elasticsearch/GenericFunctions.ts and the missing toPathSegment encoding. This issue is fixed in versions 1.123.76, 2.37.7 and 2.38.2.","published_time":"2026-09-08T21:26:28","cvss":6.3,"cvss_version":"4.0","epss":0.0,"assigner":"GitHub_M","references":["https://github.com/n8n-io/n8n/security/advisories/GHSA-f2cp-m7mv-8jpv","https://github.com/n8n-io/n8n/releases/tag/n8n@1.123.76","https://github.com/n8n-io/n8n/releases/tag/n8n@2.37.7","https://github.com/n8n-io/n8n/releases/tag/n8n@2.38.2"],"products":["n8n","n8n","n8n"],"vendors":["n8n-io"]}},{"cve_id":"CVE-2026-86080","summary":"n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the GitHub Trigger generated a webhook secret but discarded it when GitHub returned HTTP 422 and the node reused an existing webhook. Workflow static data then retained webhookId without webhookSecret, and X-Hub-Signature-256 verification accepted deliveries without a stored secret. The affected logic includes packages/nodes-base/nodes/Github/GithubTriggerHelpers.ts and the 422 webhook reuse path. This issue is fixed in versions 1.123.76, 2.37.7 and 2.38.2.","cvss":6.3,"cvss_version":4.0,"cvss_v2":null,"cvss_v3":null,"cvss_v4":6.3,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://github.com/n8n-io/n8n/releases/tag/n8n@1.123.76","https://github.com/n8n-io/n8n/releases/tag/n8n@2.37.7","https://github.com/n8n-io/n8n/releases/tag/n8n@2.38.2","https://github.com/n8n-io/n8n/security/advisories/GHSA-5m98-cgcr-xx3q"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T22:19:16","euvd":{"id":"EUVD-2026-74276","description":"n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the GitHub Trigger generated a webhook secret but discarded it when GitHub returned HTTP 422 and the node reused an existing webhook. Workflow static data then retained webhookId without webhookSecret, and X-Hub-Signature-256 verification accepted deliveries without a stored secret. The affected logic includes packages/nodes-base/nodes/Github/GithubTriggerHelpers.ts and the 422 webhook reuse path. This issue is fixed in versions 1.123.76, 2.37.7 and 2.38.2.","published_time":"2026-09-08T21:25:48","cvss":6.3,"cvss_version":"4.0","epss":0.0,"assigner":"GitHub_M","references":["https://github.com/n8n-io/n8n/security/advisories/GHSA-5m98-cgcr-xx3q","https://github.com/n8n-io/n8n/releases/tag/n8n@1.123.76","https://github.com/n8n-io/n8n/releases/tag/n8n@2.37.7","https://github.com/n8n-io/n8n/releases/tag/n8n@2.38.2"],"products":["n8n","n8n","n8n"],"vendors":["n8n-io"]}},{"cve_id":"CVE-2026-53933","summary":"Maravel, a PHP framework oriented towards dependency injection, prior to version 10.73.1 has a side-channel information disclosure issue. When a route was compiled with dynamic placeholders (e.g., `/api/v1/users/{id}`), the raw string placeholder key was mistakenly registered into the flat static route checklist. An attacker scanning endpoints could intentionally pass the literal template syntax (e.g., `GET /api/v1/users/{id}`) to force an unexpected match against the static map. Because the dynamic tree engine was bypassed, no arguments were captured. This forced modern PHP 8+ versions to throw a native `ArgumentCountError`, resulting in a 500 Internal Server Error instead of a uniform 404 Not Found. By tracking which fuzz patterns exploded into a 500 error, a malicious actor could programmatically profile and map out internal route parameter names and controller schemas. Version 10.73.1 contains a patch. As a workaround, mitigate this side-channel leak by implementing a defensive check in a global middleware. This will reject any literal brace patterns before they reach the router engine.","cvss":6.9,"cvss_version":4.0,"cvss_v2":null,"cvss_v3":null,"cvss_v4":6.9,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://web.archive.org/web/20250620110641/https://github.com/macropay-solutions/maravel/wiki","https://web.archive.org/web/20260316211934/https://macropay-solutions.github.io/maravel-docs","https://web.archive.org/web/20260511235846/https://packagist.org/packages/macropay-solutions/maravel-framework"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T22:18:14","euvd":{"id":"EUVD-2026-74283","description":"Maravel, a PHP framework oriented towards dependency injection, prior to version 10.73.1 has a side-channel information disclosure issue. When a route was compiled with dynamic placeholders (e.g., `/api/v1/users/{id}`), the raw string placeholder key was mistakenly registered into the flat static route checklist. An attacker scanning endpoints could intentionally pass the literal template syntax (e.g., `GET /api/v1/users/{id}`) to force an unexpected match against the static map. Because the dynamic tree engine was bypassed, no arguments were captured. This forced modern PHP 8+ versions to throw a native `ArgumentCountError`, resulting in a 500 Internal Server Error instead of a uniform 404 Not Found. By tracking which fuzz patterns exploded into a 500 error, a malicious actor could programmatically profile and map out internal route parameter names and controller schemas. Version 10.73.1 contains a patch. As a workaround, mitigate this side-channel leak by implementing a defensive check in a global middleware. This will reject any literal brace patterns before they reach the router engine.","published_time":"2026-09-08T22:00:17","cvss":6.9,"cvss_version":"4.0","epss":0.0,"assigner":"GitHub_M","references":["https://web.archive.org/web/20260511235846/https://packagist.org/packages/macropay-solutions/maravel-framework","https://web.archive.org/web/20250620110641/https://github.com/macropay-solutions/maravel/wiki","https://web.archive.org/web/20260316211934/https://macropay-solutions.github.io/maravel-docs"],"products":["maravel-framework"],"vendors":["macropay-solutions"]}},{"cve_id":"CVE-2026-49153","summary":"Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":[],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T22:17:46","euvd":null},{"cve_id":"CVE-2026-49154","summary":"Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":[],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T22:17:46","euvd":null},{"cve_id":"CVE-2026-49155","summary":"Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":[],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T22:17:46","euvd":null},{"cve_id":"CVE-2026-49156","summary":"Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":[],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T22:17:46","euvd":null},{"cve_id":"CVE-2026-85981","summary":"The administrative panel of the Auth0 AD/LDAP Connector (versions 6.5.0 and earlier) listens on the local loopback interface without requiring authentication. This allows a local, low-privileged user or process on the host system to access the panel's management endpoints without credentials. Through these endpoints, a local user can read configuration details, including plaintext Active Directory service account credentials, and modify connector settings.","cvss":6.7,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.7,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://trust.okta.com/security-advisories/unauthenticated-localhost-admin-panel-in-auth0-ad-ldap-connector-cve-2026-85981"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T21:18:47","euvd":{"id":"EUVD-2026-74185","description":"The administrative panel of the Auth0 AD/LDAP Connector (versions 6.5.0 and earlier) listens on the local loopback interface without requiring authentication. This allows a local, low-privileged user or process on the host system to access the panel's management endpoints without credentials. Through these endpoints, a local user can read configuration details, including plaintext Active Directory service account credentials, and modify connector settings.","published_time":"2026-09-08T20:17:06","cvss":6.7,"cvss_version":"3.1","epss":0.0,"assigner":"Okta","references":["https://trust.okta.com/security-advisories/unauthenticated-localhost-admin-panel-in-auth0-ad-ldap-connector-cve-2026-85981"],"products":["Auth0 AD/LDAP Connector"],"vendors":["auth0"]}},{"cve_id":"CVE-2026-85982","summary":"The Auth0 AD/LDAP Connector is vulnerable to stored Cross-Site Scripting (XSS) issues due to improper HTML encoding of data in search results and updater log content displayed in the admin panel. An authenticated user with privileges to modify directory attributes, or a low-privileged local user on the host where the connector is installed, could insert script content. This script content could then execute in an administrator's browser when they view the affected search results or update logs.","cvss":9.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":9.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://trust.okta.com/security-advisories/stored-cross-site-scripting-xss-in-auth0-ad-ldap-connector-cve-2026-85982"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T21:18:47","euvd":{"id":"EUVD-2026-74186","description":"The Auth0 AD/LDAP Connector is vulnerable to stored Cross-Site Scripting (XSS) issues due to improper HTML encoding of data in search results and updater log content displayed in the admin panel. An authenticated user with privileges to modify directory attributes, or a low-privileged local user on the host where the connector is installed, could insert script content. This script content could then execute in an administrator's browser when they view the affected search results or update logs.","published_time":"2026-09-08T20:17:40","cvss":9.0,"cvss_version":"3.1","epss":0.0,"assigner":"Okta","references":["https://trust.okta.com/security-advisories/stored-cross-site-scripting-xss-in-auth0-ad-ldap-connector-cve-2026-85982"],"products":["Auth0 AD/LDAP Connector"],"vendors":["auth0"]}},{"cve_id":"CVE-2026-85983","summary":"The Auth0 AD/LDAP Connector improperly processes a configuration value during service startup. This allows a low-privileged user on the host system to modify the connector's configuration. When the service restarts, the modified configuration can lead to code execution with the privileges of the service account.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://trust.okta.com/security-advisories/local-privilege-escalation-in-auth0-ad-ldap-connector-cve-2026-85983"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T21:18:47","euvd":{"id":"EUVD-2026-74188","description":"The Auth0 AD/LDAP Connector improperly processes a configuration value during service startup. This allows a low-privileged user on the host system to modify the connector's configuration. When the service restarts, the modified configuration can lead to code execution with the privileges of the service account.","published_time":"2026-09-08T20:18:09","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"Okta","references":["https://trust.okta.com/security-advisories/local-privilege-escalation-in-auth0-ad-ldap-connector-cve-2026-85983"],"products":["Auth0 AD/LDAP Connector"],"vendors":["auth0"]}},{"cve_id":"CVE-2026-86819","summary":"Waves Central for macOS contains a local privilege escalation in the privileged helper service. The helper authorizes connecting XPC clients by comparing the caller's code-signing certificate chain for equality with its own, rather than validating the caller against a pinned code requirement (application identifier and Team ID). A local, authenticated user can execute code within the vendor-signed process, satisfy the helper's client check, and cause the helper to execute a script with root privileges. Fixed in 17.0.","cvss":8.4,"cvss_version":4.0,"cvss_v2":null,"cvss_v3":7.1,"cvss_v4":8.4,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-251-02.json","https://www.cve.org/CVERecord?id=CVE-2026-86819","https://www.waves.com/downloads/release-notes#v17"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T21:18:47","euvd":{"id":"EUVD-2026-74192","description":"Waves Central for macOS contains a local privilege escalation in the privileged helper service. The helper authorizes connecting XPC clients by comparing the caller's code-signing certificate chain for equality with its own, rather than validating the caller against a pinned code requirement (application identifier and Team ID). A local, authenticated user can execute code within the vendor-signed process, satisfy the helper's client check, and cause the helper to execute a script with root privileges. Fixed in 17.0.","published_time":"2026-09-08T20:22:57","cvss":8.4,"cvss_version":"4.0","epss":0.0,"assigner":"cisa-cg","references":["https://www.waves.com/downloads/release-notes#v17","https://www.cve.org/CVERecord?id=CVE-2026-86819","https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-251-02.json"],"products":["Waves Central"],"vendors":["Waves Audio Ltd."]}},{"cve_id":"CVE-2026-81993","summary":"Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T21:18:46","euvd":{"id":"EUVD-2026-74108","description":"Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","published_time":"2026-09-08T20:31:06","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"products":["Acrobat 2024","Adobe Acrobat","Acrobat Reader"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-81994","summary":"Acrobat Reader is affected by an Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.","cvss":8.2,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.2,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T21:18:46","euvd":{"id":"EUVD-2026-74204","description":"Acrobat Reader is affected by an Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.","published_time":"2026-09-08T20:30:55","cvss":8.2,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"products":["Acrobat 2024","Adobe Acrobat","Acrobat Reader"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-81996","summary":"Acrobat Reader is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access. Exploitation of this issue does not require user interaction. Scope is changed.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T21:18:46","euvd":{"id":"EUVD-2026-74200","description":"Acrobat Reader is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access. Exploitation of this issue does not require user interaction. Scope is changed.","published_time":"2026-09-08T20:30:52","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"products":["Acrobat Reader","Adobe Acrobat","Acrobat 2024"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-81997","summary":"Acrobat Reader is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.","cvss":6.3,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.3,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T21:18:46","euvd":{"id":"EUVD-2026-74206","description":"Acrobat Reader is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.","published_time":"2026-09-08T20:30:57","cvss":6.3,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"products":["Acrobat 2024","Acrobat Reader","Adobe Acrobat"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-82001","summary":"Acrobat Reader is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T21:18:46","euvd":{"id":"EUVD-2026-74197","description":"Acrobat Reader is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","published_time":"2026-09-08T20:30:50","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"products":["Acrobat 2024","Acrobat Reader","Adobe Acrobat"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-84685","summary":"The react-native-auth0 SDK's web platform implementation does not scope its in-memory token cache to individual user sessions when operating in a server-side rendering (SSR) environment where module state persists across HTTP requests. Under the listed preconditions, tokens cached in module memory can be retrieved across subsequent requests processed by the same server runtime.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://trust.okta.com/security-advisories/improper-cache-isolation-in-auth0-react-native-auth0-sdk-web-platform-credential-management-cve-2026-84685"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T21:18:46","euvd":{"id":"EUVD-2026-74189","description":"The react-native-auth0 SDK's web platform implementation does not scope its in-memory token cache to individual user sessions when operating in a server-side rendering (SSR) environment where module state persists across HTTP requests. Under the listed preconditions, tokens cached in module memory can be retrieved across subsequent requests processed by the same server runtime.","published_time":"2026-09-08T20:18:48","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"Okta","references":["https://trust.okta.com/security-advisories/improper-cache-isolation-in-auth0-react-native-auth0-sdk-web-platform-credential-management-cve-2026-84685"],"products":["react-native-auth0"],"vendors":["auth0"]}},{"cve_id":"CVE-2026-81985","summary":"Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T21:18:45","euvd":{"id":"EUVD-2026-74203","description":"Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","published_time":"2026-09-08T20:30:55","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"products":["Adobe Acrobat","Acrobat 2024","Acrobat Reader"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-81986","summary":"Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T21:18:45","euvd":{"id":"EUVD-2026-74209","description":"Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","published_time":"2026-09-08T20:30:59","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"products":["Acrobat Reader","Acrobat 2024","Adobe Acrobat"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-81987","summary":"Acrobat Reader is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T21:18:45","euvd":{"id":"EUVD-2026-74110","description":"Acrobat Reader is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","published_time":"2026-09-08T20:31:09","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"products":["Adobe Acrobat","Acrobat Reader","Acrobat 2024"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-81988","summary":"Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T21:18:45","euvd":{"id":"EUVD-2026-74103","description":"Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","published_time":"2026-09-08T20:31:02","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"products":["Acrobat 2024","Acrobat Reader","Adobe Acrobat"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-81989","summary":"Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T21:18:45","euvd":{"id":"EUVD-2026-74114","description":"Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","published_time":"2026-09-08T20:31:12","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"products":["Acrobat 2024","Adobe Acrobat","Acrobat Reader"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-81990","summary":"Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T21:18:45","euvd":{"id":"EUVD-2026-74111","description":"Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","published_time":"2026-09-08T20:31:10","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"products":["Acrobat 2024","Acrobat Reader","Adobe Acrobat"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-81991","summary":"Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T21:18:45","euvd":{"id":"EUVD-2026-74113","description":"Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","published_time":"2026-09-08T20:31:12","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"products":["Adobe Acrobat","Acrobat Reader","Acrobat 2024"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-81992","summary":"Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T21:18:45","euvd":{"id":"EUVD-2026-74199","description":"Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","published_time":"2026-09-08T20:30:52","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"products":["Acrobat Reader","Acrobat 2024","Adobe Acrobat"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-81976","summary":"Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T21:18:44","euvd":{"id":"EUVD-2026-74205","description":"Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","published_time":"2026-09-08T20:30:56","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"products":["Acrobat Reader","Acrobat 2024","Adobe Acrobat"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-81977","summary":"Acrobat Reader is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T21:18:44","euvd":{"id":"EUVD-2026-74102","description":"Acrobat Reader is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","published_time":"2026-09-08T20:31:01","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"products":["Acrobat 2024","Adobe Acrobat","Acrobat Reader"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-81978","summary":"Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T21:18:44","euvd":{"id":"EUVD-2026-74196","description":"Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","published_time":"2026-09-08T20:30:50","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"products":["Acrobat Reader","Adobe Acrobat","Acrobat 2024"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-81979","summary":"Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T21:18:44","euvd":{"id":"EUVD-2026-74202","description":"Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","published_time":"2026-09-08T20:30:54","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"products":["Acrobat 2024","Adobe Acrobat","Acrobat Reader"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-81980","summary":"Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T21:18:44","euvd":{"id":"EUVD-2026-74112","description":"Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","published_time":"2026-09-08T20:31:11","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"products":["Acrobat 2024","Adobe Acrobat","Acrobat Reader"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-81981","summary":"Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T21:18:44","euvd":{"id":"EUVD-2026-74208","description":"Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","published_time":"2026-09-08T20:30:59","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"products":["Acrobat 2024","Adobe Acrobat","Acrobat Reader"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-81982","summary":"Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T21:18:44","euvd":{"id":"EUVD-2026-74198","description":"Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","published_time":"2026-09-08T20:30:51","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"products":["Adobe Acrobat","Acrobat 2024","Acrobat Reader"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-81983","summary":"Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T21:18:44","euvd":{"id":"EUVD-2026-74195","description":"Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","published_time":"2026-09-08T20:30:49","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"products":["Acrobat Reader","Adobe Acrobat","Acrobat 2024"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-81984","summary":"Acrobat Reader is affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T21:18:44","euvd":{"id":"EUVD-2026-74115","description":"Acrobat Reader is affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","published_time":"2026-09-08T20:31:14","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"products":["Adobe Acrobat","Acrobat 2024","Acrobat Reader"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-80160","summary":"Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T21:18:43","euvd":{"id":"EUVD-2026-74201","description":"Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","published_time":"2026-09-08T20:30:53","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"products":["Adobe Acrobat","Acrobat 2024","Acrobat Reader"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-80161","summary":"Acrobat Reader is affected by an Access of Resource Using Incompatible Type ('Type Confusion') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T21:18:43","euvd":{"id":"EUVD-2026-74207","description":"Acrobat Reader is affected by an Access of Resource Using Incompatible Type ('Type Confusion') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","published_time":"2026-09-08T20:30:58","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"products":["Acrobat 2024","Acrobat Reader","Adobe Acrobat"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-80162","summary":"Acrobat Reader is affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T21:18:43","euvd":{"id":"EUVD-2026-74210","description":"Acrobat Reader is affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","published_time":"2026-09-08T20:31:00","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"products":["Adobe Acrobat","Acrobat 2024","Acrobat Reader"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-81192","summary":"`OpenTelemetry.Resources.Host` NuGet package, which provides OpenTelemetry resource detectors for host, is affected by an untrusted search path vulnerability on macOS. Prior to version 1.16.0-beta.2, the `host.id` resource attribute detector launches the `sh` and `ioreg` executables by bare name rather than by absolute path, so both are resolved through the `PATH` environment variable. A local attacker who is less privileged than the host application, and who can influence `PATH` or write to a directory that appears in `PATH` ahead of the system directories, can have an arbitrary binary executed in the application's security context, resulting in local code execution/privilege escalation. This vulnerability only affect macOS hosts - Linux and Windows hosts are unaffected. Version 1.16.0-beta.2 contains a patch. No known workarounds are available.","cvss":7.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://github.com/open-telemetry/opentelemetry-dotnet-contrib/pull/1631","https://github.com/open-telemetry/opentelemetry-dotnet-contrib/pull/4760","https://github.com/open-telemetry/opentelemetry-dotnet-contrib/security/advisories/GHSA-v8pv-4842-x354"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T21:18:43","euvd":{"id":"EUVD-2026-74187","description":"`OpenTelemetry.Resources.Host` NuGet package, which provides OpenTelemetry resource detectors for host, is affected by an untrusted search path vulnerability on macOS. Prior to version 1.16.0-beta.2, the `host.id` resource attribute detector launches the `sh` and `ioreg` executables by bare name rather than by absolute path, so both are resolved through the `PATH` environment variable. A local attacker who is less privileged than the host application, and who can influence `PATH` or write to a directory that appears in `PATH` ahead of the system directories, can have an arbitrary binary executed in the application's security context, resulting in local code execution/privilege escalation. This vulnerability only affect macOS hosts - Linux and Windows hosts are unaffected. Version 1.16.0-beta.2 contains a patch. No known workarounds are available.","published_time":"2026-09-08T20:18:08","cvss":7.0,"cvss_version":"3.1","epss":0.0,"assigner":"GitHub_M","references":["https://github.com/open-telemetry/opentelemetry-dotnet-contrib/security/advisories/GHSA-v8pv-4842-x354","https://github.com/open-telemetry/opentelemetry-dotnet-contrib/pull/1631","https://github.com/open-telemetry/opentelemetry-dotnet-contrib/pull/4760"],"products":["opentelemetry-dotnet-contrib"],"vendors":["open-telemetry"]}},{"cve_id":"CVE-2026-81973","summary":"Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T21:18:43","euvd":{"id":"EUVD-2026-74104","description":"Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","published_time":"2026-09-08T20:31:03","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"products":["Adobe Acrobat","Acrobat Reader","Acrobat 2024"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-81975","summary":"Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T21:18:43","euvd":{"id":"EUVD-2026-74194","description":"Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","published_time":"2026-09-08T20:30:48","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"products":["Acrobat Reader","Acrobat 2024","Adobe Acrobat"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-78742","summary":"Silverpeas Core <=6.4.6 is vulnerable to Cross Site Scripting (XSS) via the Multimedia library application introduction.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://hekk.one/posts/research/cve-2026-78742/"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T21:18:42","euvd":{"id":"EUVD-2026-74259","description":"Silverpeas Core <=6.4.6 is vulnerable to Cross Site Scripting (XSS) via the Multimedia library application introduction.","published_time":"2026-09-08T00:00:00","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"mitre","references":["https://hekk.one/posts/research/cve-2026-78742/"],"products":["n/a"],"vendors":["n/a"]}},{"cve_id":"CVE-2026-78971","summary":"In Halo <= 2.25.4, the plugin management feature allows users to install/update malicious plugins, which could let attackers execute any command with Halo process permissions.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://github.com/LING12138-sg/MyCVE-Report/issues/1","https://github.com/halo-dev/halo"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T21:18:42","euvd":{"id":"EUVD-2026-74262","description":"In Halo <= 2.25.4, the plugin management feature allows users to install/update malicious plugins, which could let attackers execute any command with Halo process permissions.","published_time":"2026-09-08T00:00:00","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"mitre","references":["https://github.com/halo-dev/halo","https://github.com/LING12138-sg/MyCVE-Report/issues/1"],"products":["n/a"],"vendors":["n/a"]}},{"cve_id":"CVE-2026-79588","summary":"U-speed WIFI4 N300 T1 Pro v1.0.0 is vulnerable to Cleartext transmission of administration credentials over HTTP.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://github.com/milkinit/cve-disclosures/tree/main/IoT/CVE-2026-79588"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T21:18:42","euvd":{"id":"EUVD-2026-74263","description":"U-speed WIFI4 N300 T1 Pro v1.0.0 is vulnerable to Cleartext transmission of administration credentials over HTTP.","published_time":"2026-09-08T00:00:00","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"mitre","references":["https://github.com/milkinit/cve-disclosures/tree/main/IoT/CVE-2026-79588"],"products":["n/a"],"vendors":["n/a"]}},{"cve_id":"CVE-2026-79907","summary":"Acrobat Reader is affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T21:18:42","euvd":{"id":"EUVD-2026-74107","description":"Acrobat Reader is affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","published_time":"2026-09-08T20:31:05","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"products":["Acrobat 2024","Acrobat Reader","Adobe Acrobat"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-79908","summary":"Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T21:18:42","euvd":{"id":"EUVD-2026-74193","description":"Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","published_time":"2026-09-08T20:30:48","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"products":["Adobe Acrobat","Acrobat Reader","Acrobat 2024"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-79909","summary":"Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T21:18:42","euvd":{"id":"EUVD-2026-74106","description":"Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","published_time":"2026-09-08T20:31:04","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"products":["Acrobat Reader","Acrobat 2024","Adobe Acrobat"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-79910","summary":"Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T21:18:42","euvd":{"id":"EUVD-2026-74109","description":"Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","published_time":"2026-09-08T20:31:08","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"products":["Adobe Acrobat","Acrobat 2024","Acrobat Reader"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-7809","summary":"Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":[],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T21:18:42","euvd":null},{"cve_id":"CVE-2026-80159","summary":"Acrobat Reader is affected by an Untrusted Search Path vulnerability that could result in privilege escalation. An attacker with high privileges could leverage this vulnerability to gain elevated access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","cvss":4.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":4.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T21:18:42","euvd":{"id":"EUVD-2026-74105","description":"Acrobat Reader is affected by an Untrusted Search Path vulnerability that could result in privilege escalation. An attacker with high privileges could leverage this vulnerability to gain elevated access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","published_time":"2026-09-08T20:31:03","cvss":4.0,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"],"products":["Acrobat 2024","Acrobat Reader","Adobe Acrobat"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-78622","summary":"The Okta Verify for Windows uninstaller does not verify whether the user data directory is a filesystem junction before deleting its contents with elevated privileges. The delete operation follows the junction target, resulting in recursive deletion of unintended directory contents.","cvss":6.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://trust.okta.com/security-advisories/improper-link-resolution-in-okta-verify-for-windows-uninstaller-data-removal-cve-2026-78622"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T21:18:41","euvd":{"id":"EUVD-2026-74184","description":"The Okta Verify for Windows uninstaller does not verify whether the user data directory is a filesystem junction before deleting its contents with elevated privileges. The delete operation follows the junction target, resulting in recursive deletion of unintended directory contents.","published_time":"2026-09-08T20:16:15","cvss":6.0,"cvss_version":"3.1","epss":0.0,"assigner":"Okta","references":["https://trust.okta.com/security-advisories/improper-link-resolution-in-okta-verify-for-windows-uninstaller-data-removal-cve-2026-78622"],"products":["Okta Verify for Windows"],"vendors":["Okta"]}},{"cve_id":"CVE-2026-78629","summary":"The Okta Hyperdrive agent plugin returns a success response without a signed SAML assertion when the organization's policy requires no MFA for a given user. The response contains only a bare boolean validation indicator with no cryptographic artifact, resulting in an unverifiable authentication verdict being delivered to the relying application.","cvss":5.6,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.6,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://trust.okta.com/security-advisories/improper-authentication-verification-in-the-okta-hyperdrive-agent-mfa-response-handling-cve-2026-78629"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T21:18:41","euvd":{"id":"EUVD-2026-74181","description":"The Okta Hyperdrive agent plugin returns a success response without a signed SAML assertion when the organization's policy requires no MFA for a given user. The response contains only a bare boolean validation indicator with no cryptographic artifact, resulting in an unverifiable authentication verdict being delivered to the relying application.","published_time":"2026-09-08T20:14:27","cvss":5.6,"cvss_version":"3.1","epss":0.0,"assigner":"Okta","references":["https://trust.okta.com/security-advisories/improper-authentication-verification-in-the-okta-hyperdrive-agent-mfa-response-handling-cve-2026-78629"],"products":["Okta Hyperdrive Agent"],"vendors":["Okta"]}},{"cve_id":"CVE-2026-78630","summary":"The Okta Access Gateway does not neutralize shell metacharacters in SNMP configuration values before a privileged script uses them to construct OS commands. An authenticated local user with access to the management interface can supply crafted values, resulting in the execution of arbitrary OS commands with root privileges.","cvss":6.7,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.7,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://trust.okta.com/security-advisories/improper-input-neutralization-in-okta-access-gateway-snmp-configuration-processing-cve-2026-78630"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T21:18:41","euvd":{"id":"EUVD-2026-74182","description":"The Okta Access Gateway does not neutralize shell metacharacters in SNMP configuration values before a privileged script uses them to construct OS commands. An authenticated local user with access to the management interface can supply crafted values, resulting in the execution of arbitrary OS commands with root privileges.","published_time":"2026-09-08T20:14:52","cvss":6.7,"cvss_version":"3.1","epss":0.0,"assigner":"Okta","references":["https://trust.okta.com/security-advisories/improper-input-neutralization-in-okta-access-gateway-snmp-configuration-processing-cve-2026-78630"],"products":["Okta Access Gateway"],"vendors":["Okta"]}},{"cve_id":"CVE-2026-78631","summary":"The Okta Hyperdrive Agent writes the decoded SAML bearer assertion to a local application log file at the default log level on every successful MFA completion. This insertion of sensitive information into the log file makes a live authentication credential readable by any local user with access to the log file.","cvss":5.3,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.3,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://trust.okta.com/security-advisories/improper-restriction-of-sensitive-information-in-okta-hyperdrive-agent-logging-cve-2026-78631"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T21:18:41","euvd":{"id":"EUVD-2026-74183","description":"The Okta Hyperdrive Agent writes the decoded SAML bearer assertion to a local application log file at the default log level on every successful MFA completion. This insertion of sensitive information into the log file makes a live authentication credential readable by any local user with access to the log file.","published_time":"2026-09-08T20:15:49","cvss":5.3,"cvss_version":"3.1","epss":0.0,"assigner":"Okta","references":["https://trust.okta.com/security-advisories/improper-restriction-of-sensitive-information-in-okta-hyperdrive-agent-logging-cve-2026-78631"],"products":["Okta Hyperdrive Agent"],"vendors":["Okta"]}},{"cve_id":"CVE-2026-78635","summary":"The Okta Privileged Access client URL handler does not insert an option terminator before appending the target value to the command-line arguments. When a scaleft:// protocol handler link contains a value beginning with a hyphen, the underlying CLI framework interprets it as a command-line flag, causing unintended modification of the SSH client's behavior.","cvss":5.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://trust.okta.com/security-advisories/improper-input-validation-in-the-okta-privileged-access-ssh-client-url-handler-argument-cve-2026-78635"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T21:18:41","euvd":{"id":"EUVD-2026-74179","description":"The Okta Privileged Access client URL handler does not insert an option terminator before appending the target value to the command-line arguments. When a scaleft:// protocol handler link contains a value beginning with a hyphen, the underlying CLI framework interprets it as a command-line flag, causing unintended modification of the SSH client's behavior.","published_time":"2026-09-08T20:14:00","cvss":5.0,"cvss_version":"3.1","epss":0.0,"assigner":"Okta","references":["https://trust.okta.com/security-advisories/improper-input-validation-in-the-okta-privileged-access-ssh-client-url-handler-argument-cve-2026-78635"],"products":["Okta Privileged Access Client"],"vendors":["Okta"]}},{"cve_id":"CVE-2026-78738","summary":"Silverpeas Core 6.4.6 is vulnerable to Cross Site Scripting (XSS) via the Document management file upload feature.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://hekk.one/posts/research/cve-2026-78738/"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T21:18:41","euvd":{"id":"EUVD-2026-74261","description":"Silverpeas Core 6.4.6 is vulnerable to Cross Site Scripting (XSS) via the Document management file upload feature.","published_time":"2026-09-08T00:00:00","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"mitre","references":["https://hekk.one/posts/research/cve-2026-78738/"],"products":["n/a"],"vendors":["n/a"]}},{"cve_id":"CVE-2026-78741","summary":"Silverpeas Core <=6.4.6 is vulnerable to Cross Site Scripting (XSS) in the wysiwyg-CKEditor image upload feature.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://hekk.one/posts/research/cve-2026-78741/"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T21:18:41","euvd":{"id":"EUVD-2026-74260","description":"Silverpeas Core <=6.4.6 is vulnerable to Cross Site Scripting (XSS) in the wysiwyg-CKEditor image upload feature.","published_time":"2026-09-08T00:00:00","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"mitre","references":["https://hekk.one/posts/research/cve-2026-78741/"],"products":["n/a"],"vendors":["n/a"]}},{"cve_id":"CVE-2026-77827","summary":"Maono Link 3.8.13 MaonoAiServices Windows service allows local privilege escalation for a standard user account via improper write privileges in 'C:\\ProgramData\\Maono'. Fixed in 4.0.80.","cvss":8.4,"cvss_version":4.0,"cvss_v2":null,"cvss_v3":7.1,"cvss_v4":8.4,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-251-01.json","https://www.cve.org/CVERecord?id=CVE-2026-77827","https://www.maono.com/products/maono-link-software"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T21:18:39","euvd":{"id":"EUVD-2026-74191","description":"Maono Link 3.8.13 MaonoAiServices Windows service allows local privilege escalation for a standard user account via improper write privileges in 'C:\\ProgramData\\Maono'. Fixed in 4.0.80.","published_time":"2026-09-08T20:22:29","cvss":8.4,"cvss_version":"4.0","epss":0.0,"assigner":"cisa-cg","references":["https://www.maono.com/products/maono-link-software","https://www.cve.org/CVERecord?id=CVE-2026-77827","https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-251-01.json"],"products":["Maono Link","Maono Link"],"vendors":["Maono"]}},{"cve_id":"CVE-2026-45219","summary":"Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":[],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T21:17:08","euvd":null},{"cve_id":"CVE-2026-45220","summary":"Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":[],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T21:17:08","euvd":null},{"cve_id":"CVE-2026-19651","summary":"IBM Enterprise Build of Quarkus 3.27.1 through 3.27.5, and 3.33.1 through 3.33.3  could allow an attacker to bypass authorization by manipulating URL query parameters due to incorrect mapping of values to untrusted query string input.","cvss":7.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://www.ibm.com/support/pages/node/7286498"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T21:17:06","euvd":{"id":"EUVD-2026-74180","description":"IBM Enterprise Build of Quarkus 3.27.1 through 3.27.5, and 3.33.1 through 3.33.3  could allow an attacker to bypass authorization by manipulating URL query parameters due to incorrect mapping of values to untrusted query string input.","published_time":"2026-09-08T20:14:12","cvss":7.4,"cvss_version":"3.1","epss":0.0,"assigner":"ibm","references":["https://www.ibm.com/support/pages/node/7286498"],"products":["Enterprise Build of Quarkus","Enterprise Build of Quarkus"],"vendors":["IBM"]}},{"cve_id":"CVE-2026-30754","summary":"A memory corruption vulnerability exists in FFmpeg before 8.1. The RTP encoding process. In the nal_send function in libavformat/rtpenc_h264_hevc.c, a negative size parameter (size=-3) is passed to memcpy when transmitting H.264/HEVC streams via RTP using a crafted input file. This was detected using AddressSanitizer.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/20746","https://gist.github.com/momo-trip/4cddf2c9e15600873de55259dac6b0e6","https://github.com/momo-trip/poc_ffmpeg"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T21:17:06","euvd":{"id":"EUVD-2026-74264","description":"A memory corruption vulnerability exists in FFmpeg before 8.1. The RTP encoding process. In the nal_send function in libavformat/rtpenc_h264_hevc.c, a negative size parameter (size=-3) is passed to memcpy when transmitting H.264/HEVC streams via RTP using a crafted input file. This was detected using AddressSanitizer.","published_time":"2026-09-08T00:00:00","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"mitre","references":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/20746","https://github.com/momo-trip/poc_ffmpeg","https://gist.github.com/momo-trip/4cddf2c9e15600873de55259dac6b0e6"],"products":["n/a"],"vendors":["n/a"]}},{"cve_id":"CVE-2026-19625","summary":"When a Quarkus application has multiple endpoints secured by individual OIDC provider tenants, such as \"/oidc-provider1\" that is secured by the OIDC Provider 1 and \"/oidc-provider2\" that is secured by the OIDC Provider 2, and an optional token introspection cache is also enabled, then a valid token issued by the OIDC Provider 1 that can be used to access \"/oidc-provider1\" can also be used to access \"/oidc-provider2\" that is secured by another OIDC Provider 2.","cvss":5.3,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.3,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://www.ibm.com/support/pages/node/7286498"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T21:17:05","euvd":{"id":"EUVD-2026-74190","description":"When a Quarkus application has multiple endpoints secured by individual OIDC provider tenants, such as \"/oidc-provider1\" that is secured by the OIDC Provider 1 and \"/oidc-provider2\" that is secured by the OIDC Provider 2, and an optional token introspection cache is also enabled, then a valid token issued by the OIDC Provider 1 that can be used to access \"/oidc-provider1\" can also be used to access \"/oidc-provider2\" that is secured by another OIDC Provider 2.","published_time":"2026-09-08T20:18:52","cvss":5.3,"cvss_version":"3.1","epss":0.0,"assigner":"ibm","references":["https://www.ibm.com/support/pages/node/7286498"],"products":["Enterprise Build of Quarkus","Enterprise Build of Quarkus"],"vendors":["IBM"]}},{"cve_id":"CVE-2026-86808","summary":"A security vulnerability has been detected in moltis-org moltis up to 20260818.10. The affected element is the function vault_unlock_handler/vault_recovery_handler of the file vault.rs. Such manipulation leads to missing authentication. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 20260819.01 is sufficient to fix this issue. The name of the patch is 3b92dd64d5648f829968cf48bf67dc3113852fef. Upgrading the affected component is advised.","cvss":5.5,"cvss_version":4.0,"cvss_v2":7.5,"cvss_v3":7.3,"cvss_v4":5.5,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://github.com/moltis-org/moltis/","https://github.com/moltis-org/moltis/commit/3b92dd64d5648f829968cf48bf67dc3113852fef","https://github.com/moltis-org/moltis/issues/1177","https://github.com/moltis-org/moltis/pull/1216","https://github.com/moltis-org/moltis/releases/tag/20260819.01","https://vuldb.com/cve/CVE-2026-86808","https://vuldb.com/submit/911081","https://vuldb.com/vuln/399813","https://vuldb.com/vuln/399813/cti"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:54","euvd":{"id":"EUVD-2026-74057","description":"A security vulnerability has been detected in moltis-org moltis up to 20260818.10. The affected element is the function vault_unlock_handler/vault_recovery_handler of the file vault.rs. Such manipulation leads to missing authentication. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 20260819.01 is sufficient to fix this issue. The name of the patch is 3b92dd64d5648f829968cf48bf67dc3113852fef. Upgrading the affected component is advised.","published_time":"2026-09-08T19:30:11","cvss":6.9,"cvss_version":"4.0","epss":0.0,"assigner":"VulDB","references":["https://vuldb.com/vuln/399813","https://vuldb.com/vuln/399813/cti","https://vuldb.com/cve/CVE-2026-86808","https://vuldb.com/submit/911081","https://github.com/moltis-org/moltis/issues/1177","https://github.com/moltis-org/moltis/pull/1216","https://github.com/moltis-org/moltis/commit/3b92dd64d5648f829968cf48bf67dc3113852fef","https://github.com/moltis-org/moltis/releases/tag/20260819.01","https://github.com/moltis-org/moltis/"],"products":["moltis","moltis","moltis","moltis","moltis","moltis","moltis","moltis","moltis","moltis","moltis"],"vendors":["moltis-org"]}},{"cve_id":"CVE-2026-86810","summary":"A vulnerability was detected in Open-Web-Analytics up to 1.9.1. The impacted element is the function checkCapabilityAndAuthenticateUser of the file Core/Controller.php of the component Controller. Performing a manipulation results in improper authentication. The attack may be initiated remotely. Upgrading to version 1.10.0 is sufficient to resolve this issue. The patch is named 6fc91c49eebdb8bfdfeed71cb50a5d97eac70f24. It is advisable to upgrade the affected component.","cvss":6.9,"cvss_version":4.0,"cvss_v2":7.5,"cvss_v3":7.3,"cvss_v4":6.9,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://github.com/Open-Web-Analytics/Open-Web-Analytics/","https://github.com/Open-Web-Analytics/Open-Web-Analytics/commit/6fc91c49eebdb8bfdfeed71cb50a5d97eac70f24","https://github.com/Open-Web-Analytics/Open-Web-Analytics/issues/959","https://github.com/Open-Web-Analytics/Open-Web-Analytics/pull/961","https://github.com/Open-Web-Analytics/Open-Web-Analytics/releases/tag/1.10.0","https://vuldb.com/cve/CVE-2026-86810","https://vuldb.com/submit/911107","https://vuldb.com/vuln/399814","https://vuldb.com/vuln/399814/cti"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:54","euvd":{"id":"EUVD-2026-74161","description":"A vulnerability was detected in Open-Web-Analytics up to 1.9.1. The impacted element is the function checkCapabilityAndAuthenticateUser of the file Core/Controller.php of the component Controller. Performing a manipulation results in improper authentication. The attack may be initiated remotely. Upgrading to version 1.10.0 is sufficient to resolve this issue. The patch is named 6fc91c49eebdb8bfdfeed71cb50a5d97eac70f24. It is advisable to upgrade the affected component.","published_time":"2026-09-08T20:00:11","cvss":6.9,"cvss_version":"4.0","epss":0.0,"assigner":"VulDB","references":["https://vuldb.com/vuln/399814","https://vuldb.com/vuln/399814/cti","https://vuldb.com/cve/CVE-2026-86810","https://vuldb.com/submit/911107","https://github.com/Open-Web-Analytics/Open-Web-Analytics/issues/959","https://github.com/Open-Web-Analytics/Open-Web-Analytics/pull/961","https://github.com/Open-Web-Analytics/Open-Web-Analytics/commit/6fc91c49eebdb8bfdfeed71cb50a5d97eac70f24","https://github.com/Open-Web-Analytics/Open-Web-Analytics/releases/tag/1.10.0","https://github.com/Open-Web-Analytics/Open-Web-Analytics/"],"products":["Open-Web-Analytics","Open-Web-Analytics"],"vendors":["n/a"]}},{"cve_id":"CVE-2026-86806","summary":"A weakness has been identified in opengeos GeoLibre up to 2.3.0. Impacted is the function _is_within_roots. This manipulation causes server-side request forgery. The attack can be initiated remotely. Upgrading to version 2.4.0 is recommended to address this issue. Patch name: b745f62e29fa37364686525a21eee5e5c0f8a369. It is recommended to upgrade the affected component.","cvss":6.9,"cvss_version":4.0,"cvss_v2":7.5,"cvss_v3":7.3,"cvss_v4":6.9,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://github.com/opengeos/GeoLibre/","https://github.com/opengeos/GeoLibre/commit/b745f62e29fa37364686525a21eee5e5c0f8a369","https://github.com/opengeos/GeoLibre/issues/1573","https://github.com/opengeos/GeoLibre/pull/1571","https://github.com/opengeos/GeoLibre/releases/tag/v2.4.0","https://vuldb.com/cve/CVE-2026-86806","https://vuldb.com/submit/911055","https://vuldb.com/vuln/399812","https://vuldb.com/vuln/399812/cti"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:53","euvd":{"id":"EUVD-2026-74051","description":"A weakness has been identified in opengeos GeoLibre up to 2.3.0. Impacted is the function _is_within_roots. This manipulation causes server-side request forgery. The attack can be initiated remotely. Upgrading to version 2.4.0 is recommended to address this issue. Patch name: b745f62e29fa37364686525a21eee5e5c0f8a369. It is recommended to upgrade the affected component.","published_time":"2026-09-08T19:15:10","cvss":6.9,"cvss_version":"4.0","epss":0.0,"assigner":"VulDB","references":["https://vuldb.com/vuln/399812","https://vuldb.com/vuln/399812/cti","https://vuldb.com/cve/CVE-2026-86806","https://vuldb.com/submit/911055","https://github.com/opengeos/GeoLibre/issues/1573","https://github.com/opengeos/GeoLibre/pull/1571","https://github.com/opengeos/GeoLibre/commit/b745f62e29fa37364686525a21eee5e5c0f8a369","https://github.com/opengeos/GeoLibre/releases/tag/v2.4.0","https://github.com/opengeos/GeoLibre/"],"products":["GeoLibre","GeoLibre","GeoLibre","GeoLibre"],"vendors":["opengeos"]}},{"cve_id":"CVE-2026-86464","summary":"In the current development version of Eclipse aeriOS, for which no official release has yet been published, the Identity Manager (IdM) deployment included insecure default configurations and credentials for security-sensitive services.\n\n\n\n\nThe Helm chart exposed the Keycloak service and its PostgreSQL backing database through Kubernetes NodePort services by default, while the Docker Compose deployment similarly exposed PostgreSQL on all network interfaces. The deployment included fixed default credentials for the Keycloak administrator and PostgreSQL database user, and the previous Helm chart configuration did not provide adequate secret management for these credentials. In addition, predefined application users with known credentials were provided for development and testing without sufficiently warning operators against their use in production environments.\n\n\n\n\nAn attacker able to reach the exposed services could use the published default credentials to obtain administrative access to the Identity Manager or direct access to its database. This could allow unauthorized access to or modification of identity-management data, including users, roles, client credentials, sessions, and cryptographic material, and could enable the creation of privileged identities or tokens accepted by other aeriOS components.\n\n\n\n\nThe issue has been addressed by generating a random Keycloak administrator password by default, managing Keycloak and PostgreSQL credentials through Kubernetes Secrets, and restricting PostgreSQL to an internal service in both the Helm chart and Docker Compose deployment. OpenLDAP is also restricted to an internal service. The predefined users intended for development and testing are retained, but the documentation now explicitly warns that their default credentials must not be used in production and that these users should be removed or their credentials changed after installation.","cvss":9.9,"cvss_version":4.0,"cvss_v2":null,"cvss_v3":null,"cvss_v4":9.9,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://github.com/eclipse-aerios/idm/commit/364a8cce1cd6be36ba8a400ad41e753052e7d34d","https://github.com/eclipse-aerios/idm/commit/c6135f3ba1d7351630973b3337850ea40caed356","https://github.com/eclipse-aerios/idm/pull/1","https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/808","https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/809","https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/829"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:52","euvd":{"id":"EUVD-2026-74075","description":"In the current development version of Eclipse aeriOS, for which no official release has yet been published, the Identity Manager (IdM) deployment included insecure default configurations and credentials for security-sensitive services.\n\n\n\n\nThe Helm chart exposed the Keycloak service and its PostgreSQL backing database through Kubernetes NodePort services by default, while the Docker Compose deployment similarly exposed PostgreSQL on all network interfaces. The deployment included fixed default credentials for the Keycloak administrator and PostgreSQL database user, and the previous Helm chart configuration did not provide adequate secret management for these credentials. In addition, predefined application users with known credentials were provided for development and testing without sufficiently warning operators against their use in production environments.\n\n\n\n\nAn attacker able to reach the exposed services could use the published default credentials to obtain administrative access to the Identity Manager or direct access to its database. This could allow unauthorized access to or modification of identity-management data, including users, roles, client credentials, sessions, and cryptographic material, and could enable the creation of privileged identities or tokens accepted by other aeriOS components.\n\n\n\n\nThe issue has been addressed by generating a random Keycloak administrator password by default, managing Keycloak and PostgreSQL credentials through Kubernetes Secrets, and restricting PostgreSQL to an internal service in both the Helm chart and Docker Compose deployment. OpenLDAP is also restricted to an internal service. The predefined users intended for development and testing are retained, but the documentation now explicitly warns that their default credentials must not be used in production and that these users should be removed or their credentials changed after installation.","published_time":"2026-09-08T19:43:28","cvss":9.9,"cvss_version":"4.0","epss":0.0,"assigner":"eclipse","references":["https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/808","https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/809","https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/829","https://github.com/eclipse-aerios/idm/pull/1","https://github.com/eclipse-aerios/idm/commit/364a8cce1cd6be36ba8a400ad41e753052e7d34d","https://github.com/eclipse-aerios/idm/commit/c6135f3ba1d7351630973b3337850ea40caed356"],"products":["Eclipse aeriOS"],"vendors":["Eclipse Foundation"]}},{"cve_id":"CVE-2026-84197","summary":"In Eclipse Ditto's Node.js JavaScript client, all released versions of @eclipse-ditto/ditto-javascript-client-node from 2.0.0 to 3.9.0 and of its predecessor package @eclipse-ditto/ditto-javascript-client-node_1.0 from 1.0.0 to 2.1.0, the WebSocket transport hard-codes rejectUnauthorized: false when creating the underlying ws WebSocket. Certificate chain and hostname validation are therefore disabled for every wss:// connection, and no builder option, constructor argument or environment variable lets an application turn validation back on. An attacker in a position to intercept the connection can present an arbitrary certificate, complete the TLS handshake, read the credentials that the configured authentication provider sends in the Authorization header of the WebSocket upgrade request, and read, alter or inject Ditto Protocol messages for the lifetime of the connection. The Java client, the browser/DOM JavaScript client and the HTTP transport of the Node.js client are not affected.","cvss":9.2,"cvss_version":4.0,"cvss_v2":null,"cvss_v3":null,"cvss_v4":9.2,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/660"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:51","euvd":{"id":"EUVD-2026-74162","description":"In Eclipse Ditto's Node.js JavaScript client, all released versions of @eclipse-ditto/ditto-javascript-client-node from 2.0.0 to 3.9.0 and of its predecessor package @eclipse-ditto/ditto-javascript-client-node_1.0 from 1.0.0 to 2.1.0, the WebSocket transport hard-codes rejectUnauthorized: false when creating the underlying ws WebSocket. Certificate chain and hostname validation are therefore disabled for every wss:// connection, and no builder option, constructor argument or environment variable lets an application turn validation back on. An attacker in a position to intercept the connection can present an arbitrary certificate, complete the TLS handshake, read the credentials that the configured authentication provider sends in the Authorization header of the WebSocket upgrade request, and read, alter or inject Ditto Protocol messages for the lifetime of the connection. The Java client, the browser/DOM JavaScript client and the HTTP transport of the Node.js client are not affected.","published_time":"2026-09-08T20:01:22","cvss":9.2,"cvss_version":"4.0","epss":0.0,"assigner":"eclipse","references":["https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/660"],"products":["Eclipse Ditto","Eclipse Ditto","Eclipse Ditto"],"vendors":["Eclipse Foundation"]}},{"cve_id":"CVE-2026-84869","summary":"A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host confirmation in certain circumstances. ScreenConnect servers are not impacted.","cvss":9.9,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":9.9,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://github.com/ConnectWise-Advisories/Disclosures/tree/main/CVE-2026-84869","https://www.connectwise.com/company/trust/advisories","https://www.connectwise.com/company/trust/security-bulletins/2026-09-08-screenconnect-bulletin"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:51","euvd":{"id":"EUVD-2026-74053","description":"A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host confirmation in certain circumstances. ScreenConnect servers are not impacted.","published_time":"2026-09-08T19:29:33","cvss":9.9,"cvss_version":"3.1","epss":0.0,"assigner":"ConnectWise","references":["https://www.connectwise.com/company/trust/security-bulletins/2026-09-08-screenconnect-bulletin","https://github.com/ConnectWise-Advisories/Disclosures/tree/main/CVE-2026-84869","https://www.connectwise.com/company/trust/advisories"],"products":["ScreenConnect"],"vendors":["ConnectWise"]}},{"cve_id":"CVE-2026-84942","summary":"Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authenticated actor with dashboard write permissions to execute arbitrary JavaScript in the context of other users' browser sessions by saving a crafted Vega visualization. The checkForFunctionProperty validation routine failed to recurse into arrays of objects, allowing a function property nested inside an array to bypass validation.","cvss":6.3,"cvss_version":4.0,"cvss_v2":null,"cvss_v3":8.7,"cvss_v4":6.3,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://aws.amazon.com/security/security-bulletins/2026-102-aws/","https://github.com/opensearch-project/OpenSearch-Dashboards/releases/tag/2.19.5","https://github.com/opensearch-project/OpenSearch-Dashboards/releases/tag/3.6.0"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:51","euvd":{"id":"EUVD-2026-74074","description":"Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authenticated actor with dashboard write permissions to execute arbitrary JavaScript in the context of other users' browser sessions by saving a crafted Vega visualization. The checkForFunctionProperty validation routine failed to recurse into arrays of objects, allowing a function property nested inside an array to bypass validation.","published_time":"2026-09-08T19:41:25","cvss":6.3,"cvss_version":"4.0","epss":0.0,"assigner":"AMZN","references":["https://github.com/opensearch-project/OpenSearch-Dashboards/releases/tag/3.6.0","https://github.com/opensearch-project/OpenSearch-Dashboards/releases/tag/2.19.5","https://aws.amazon.com/security/security-bulletins/2026-102-aws/"],"products":["OpenSearch Dashboards"],"vendors":["OpenSearch"]}},{"cve_id":"CVE-2026-85484","summary":"HTML::FormHandler versions before 0.410002 for Perl render option group labels and radio button labels into HTML without escaping.\n\nThe Select, RadioGroup, CheckboxGroup and HorizCheckboxGroup widgets render a group label unescaped, Select into a label attribute and the other three into element content. RadioGroup also renders each radio button's own label unescaped.\n\nAny application whose option list is built from data rather than literals, using options_from, an options_fieldname method, or the DBIC model, allows attacker-influenced text in a label that can override the options or embed JavaScript in rendered pages.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://github.com/gshank/html-formhandler/commit/49b562e0fed5146fc1a372c5fa8a879876b8841d.patch","https://metacpan.org/release/ABRAXXA/HTML-FormHandler-0.410002/changes","http://www.openwall.com/lists/oss-security/2026/09/08/16"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:51","euvd":{"id":"EUVD-2026-74167","description":"HTML::FormHandler versions before 0.410002 for Perl render option group labels and radio button labels into HTML without escaping.\n\nThe Select, RadioGroup, CheckboxGroup and HorizCheckboxGroup widgets render a group label unescaped, Select into a label attribute and the other three into element content. RadioGroup also renders each radio button's own label unescaped.\n\nAny application whose option list is built from data rather than literals, using options_from, an options_fieldname method, or the DBIC model, allows attacker-influenced text in a label that can override the options or embed JavaScript in rendered pages.","published_time":"2026-09-08T20:08:49","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"CPANSec","references":["https://metacpan.org/release/ABRAXXA/HTML-FormHandler-0.410002/changes","https://github.com/gshank/html-formhandler/commit/49b562e0fed5146fc1a372c5fa8a879876b8841d.patch"],"products":[],"vendors":[]}},{"cve_id":"CVE-2026-85485","summary":"HTML::FormHandler versions before 0.410002 for Perl render some error messages into HTML without escaping.\n\nThe Table form layout and the Bootstrap 2 and 3 wrappers splice each error string straight into the surrounding markup. Version 0.410000, the fix for CVE-2026-19872, escaped the equivalent values in the other layouts and wrappers, and 0.410002 extended that to these three.\n\nError messages that contain attacker-influenced content such as rejected field values could embed JavaScript in rendered pages.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://github.com/gshank/html-formhandler/commit/2ea9e138dbfe231e317c13936abe6583217c807f.patch","https://metacpan.org/release/ABRAXXA/HTML-FormHandler-0.410002/changes"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:51","euvd":{"id":"EUVD-2026-74169","description":"HTML::FormHandler versions before 0.410002 for Perl render some error messages into HTML without escaping.\n\nThe Table form layout and the Bootstrap 2 and 3 wrappers splice each error string straight into the surrounding markup. Version 0.410000, the fix for CVE-2026-19872, escaped the equivalent values in the other layouts and wrappers, and 0.410002 extended that to these three.\n\nError messages that contain attacker-influenced content such as rejected field values could embed JavaScript in rendered pages.","published_time":"2026-09-08T20:09:08","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"CPANSec","references":["https://metacpan.org/release/ABRAXXA/HTML-FormHandler-0.410002/changes","https://github.com/gshank/html-formhandler/commit/2ea9e138dbfe231e317c13936abe6583217c807f.patch"],"products":[],"vendors":[]}},{"cve_id":"CVE-2026-85630","summary":"HTML::FormHandler versions before 0.410002 for Perl render field attributes into HTML without escaping using the process_attrs method.\n\nAny application with fields or field labels where some attributes are built from data rather than literals allows attacker-influenced text in an attribute value that can override the field attributes or embed JavaScript in rendered pages.\n\nFor example, the RadioGroup widget uses the process_attrs method via the render_option and wrap_radio methods.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://github.com/gshank/html-formhandler/commit/a887271e91d755e6486a9f433ae932deb1d2c4a6.patch","https://metacpan.org/release/ABRAXXA/HTML-FormHandler-0.410002/changes","http://www.openwall.com/lists/oss-security/2026/09/08/18"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:51","euvd":{"id":"EUVD-2026-74170","description":"HTML::FormHandler versions before 0.410002 for Perl render field attributes into HTML without escaping using the process_attrs method.\n\nAny application with fields or field labels where some attributes are built from data rather than literals allows attacker-influenced text in an attribute value that can override the field attributes or embed JavaScript in rendered pages.\n\nFor example, the RadioGroup widget uses the process_attrs method via the render_option and wrap_radio methods.","published_time":"2026-09-08T20:09:38","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"CPANSec","references":["https://metacpan.org/release/ABRAXXA/HTML-FormHandler-0.410002/changes","https://github.com/gshank/html-formhandler/commit/a887271e91d755e6486a9f433ae932deb1d2c4a6.patch"],"products":[],"vendors":[]}},{"cve_id":"CVE-2026-82007","summary":"Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/photoshop/apsb26-130.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:49","euvd":{"id":"EUVD-2026-74060","description":"Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","published_time":"2026-09-08T19:32:52","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/photoshop/apsb26-130.html"],"products":["Photoshop 2026","Photoshop 2025"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-82005","summary":"Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/photoshop/apsb26-130.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:48","euvd":{"id":"EUVD-2026-74061","description":"Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","published_time":"2026-09-08T19:32:53","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/photoshop/apsb26-130.html"],"products":["Photoshop 2026","Photoshop 2025"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-82006","summary":"Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/photoshop/apsb26-130.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:48","euvd":{"id":"EUVD-2026-74059","description":"Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","published_time":"2026-09-08T19:32:51","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/photoshop/apsb26-130.html"],"products":["Photoshop 2026","Photoshop 2025"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-79905","summary":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:39","euvd":{"id":"EUVD-2026-74212","description":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.","published_time":"2026-09-08T19:55:52","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5 LTS","Adobe Experience Manager 6.5","Adobe Experience Manager as a Cloud Service"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-78626","summary":"The Okta Access Gateway improperly handles input sanitization and regular expression evaluation within its Protected Rule authorization check, resulting in an authorization bypass when an administrator has explicitly configured a Protected Rule policy on one or more application resources.","cvss":8.1,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.1,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://trust.okta.com/security-advisories/improper-input-sanitization-in-okta-access-gateway-protected-rules-cve-2026-78626"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:38","euvd":{"id":"EUVD-2026-74174","description":"The Okta Access Gateway improperly handles input sanitization and regular expression evaluation within its Protected Rule authorization check, resulting in an authorization bypass when an administrator has explicitly configured a Protected Rule policy on one or more application resources.","published_time":"2026-09-08T20:11:08","cvss":8.1,"cvss_version":"3.1","epss":0.0,"assigner":"Okta","references":["https://trust.okta.com/security-advisories/improper-input-sanitization-in-okta-access-gateway-protected-rules-cve-2026-78626"],"products":["Okta Access Gateway"],"vendors":["Okta"]}},{"cve_id":"CVE-2026-78627","summary":"The Okta Hyperdrive Integration installer does not mask the OAuth client secret when passed as an MSI property. The credential is recorded in plaintext in the installer log, the Application Event Log, and the process command line, all of which are readable by an authenticated local user on the workstation.","cvss":7.3,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.3,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://trust.okta.com/security-advisories/improper-credential-protection-in-okta-hyperdrive-integration-installer-logging-cve-2026-78627"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:38","euvd":{"id":"EUVD-2026-74176","description":"The Okta Hyperdrive Integration installer does not mask the OAuth client secret when passed as an MSI property. The credential is recorded in plaintext in the installer log, the Application Event Log, and the process command line, all of which are readable by an authenticated local user on the workstation.","published_time":"2026-09-08T20:12:16","cvss":7.3,"cvss_version":"3.1","epss":0.0,"assigner":"Okta","references":["https://trust.okta.com/security-advisories/improper-credential-protection-in-okta-hyperdrive-integration-installer-logging-cve-2026-78627"],"products":["Okta Hyperdrive Integration Plugin"],"vendors":["Okta"]}},{"cve_id":"CVE-2026-78834","summary":"A code execution vulnerability exists in CMSimple 5.22 in the CoAuthors plugin. An authenticated low-privileged user who can modify page content and provide controlled imported content can trigger server-side execution by referencing crafted external or uploaded text content through the affected content import feature.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://gist.github.com/AEQ3/574cb644306776a9ff1a0de30b085e62","https://github.com/AEQ3/CVE/issues/1"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:38","euvd":{"id":"EUVD-2026-74265","description":"A code execution vulnerability exists in CMSimple 5.22 in the CoAuthors plugin. An authenticated low-privileged user who can modify page content and provide controlled imported content can trigger server-side execution by referencing crafted external or uploaded text content through the affected content import feature.","published_time":"2026-09-08T00:00:00","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"mitre","references":["https://github.com/AEQ3/CVE/issues/1","https://gist.github.com/AEQ3/574cb644306776a9ff1a0de30b085e62"],"products":["n/a"],"vendors":["n/a"]}},{"cve_id":"CVE-2026-78623","summary":"The Okta Access Gateway does not sanitize SAML assertion values before interpolating them into database queries in the advanced mode datastore configuration. The unsanitized values are substituted directly into the query string prior to preparation, resulting in unintended SQL execution against the configured backend database.","cvss":7.7,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.7,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://trust.okta.com/security-advisories/improper-handling-of-saml-assertion-attributes-in-okta-access-gateway-advanced-mode-datastores-cve-2026-78623"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:37","euvd":{"id":"EUVD-2026-74165","description":"The Okta Access Gateway does not sanitize SAML assertion values before interpolating them into database queries in the advanced mode datastore configuration. The unsanitized values are substituted directly into the query string prior to preparation, resulting in unintended SQL execution against the configured backend database.","published_time":"2026-09-08T20:08:11","cvss":7.7,"cvss_version":"3.1","epss":0.0,"assigner":"Okta","references":["https://trust.okta.com/security-advisories/improper-handling-of-saml-assertion-attributes-in-okta-access-gateway-advanced-mode-datastores-cve-2026-78623"],"products":["Okta Access Gateway"],"vendors":["Okta"]}},{"cve_id":"CVE-2026-78624","summary":"The Okta Access Gateway backup restore function does not validate the filename embedded in an encrypted backup payload. This results in writing file contents to unintended locations on the appliance filesystem.","cvss":4.9,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":4.9,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://trust.okta.com/security-advisories/improper-path-validation-in-okta-access-gateway-backup-and-restore-functionality-cve-2026-78624"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:37","euvd":{"id":"EUVD-2026-74172","description":"The Okta Access Gateway backup restore function does not validate the filename embedded in an encrypted backup payload. This results in writing file contents to unintended locations on the appliance filesystem.","published_time":"2026-09-08T20:10:15","cvss":4.9,"cvss_version":"3.1","epss":0.0,"assigner":"Okta","references":["https://trust.okta.com/security-advisories/improper-path-validation-in-okta-access-gateway-backup-and-restore-functionality-cve-2026-78624"],"products":["Okta Access Gateway"],"vendors":["Okta"]}},{"cve_id":"CVE-2026-78625","summary":"The Okta Access Gateway does not sanitize dashboard label values before writing them into generated PHP configuration files. The generated file is automatically included during authentication requests, resulting in execution with the privileges of the web server process.","cvss":6.7,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.7,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://trust.okta.com/security-advisories/insufficient-validation-of-dashboard-application-labels-in-okta-access-gateway-dashboard-site-configuration-cve-2026-78625"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:37","euvd":{"id":"EUVD-2026-74173","description":"The Okta Access Gateway does not sanitize dashboard label values before writing them into generated PHP configuration files. The generated file is automatically included during authentication requests, resulting in execution with the privileges of the web server process.","published_time":"2026-09-08T20:10:43","cvss":6.7,"cvss_version":"3.1","epss":0.0,"assigner":"Okta","references":["https://trust.okta.com/security-advisories/insufficient-validation-of-dashboard-application-labels-in-okta-access-gateway-dashboard-site-configuration-cve-2026-78625"],"products":["Okta Access Gateway"],"vendors":["Okta"]}},{"cve_id":"CVE-2026-78552","summary":"The Okta Access Gateway does not apply its Lua directive restriction to the application-level custom configuration field. The field is interpolated directly into the nginx server block without inspection, resulting in execution of injected directives.","cvss":6.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://trust.okta.com/security-advisories/validation-bypass-in-okta-access-gateway-custom-directives-cve-2026-78552"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:36","euvd":{"id":"EUVD-2026-74168","description":"The Okta Access Gateway does not apply its Lua directive restriction to the application-level custom configuration field. The field is interpolated directly into the nginx server block without inspection, resulting in execution of injected directives.","published_time":"2026-09-08T20:08:58","cvss":6.0,"cvss_version":"3.1","epss":0.0,"assigner":"Okta","references":["https://trust.okta.com/security-advisories/validation-bypass-in-okta-access-gateway-custom-directives-cve-2026-78552"],"products":["Okta Access Gateway"],"vendors":["Okta"]}},{"cve_id":"CVE-2026-78560","summary":"The Okta Access Gateway includes an optional pass-through authentication source that accepts user identity from a client-supplied HTTP header without cryptographic validation. In architectures where this optional source is enabled without an upstream reverse proxy or firewall configured to sanitize and enforce client headers, an unauthenticated user can supply an arbitrary identity value to initiate a session.","cvss":4.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":4.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://trust.okta.com/security-advisories/improper-authentication-validation-in-okta-access-gateway-pass-through-authentication-source-cve-2026-78560"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:36","euvd":{"id":"EUVD-2026-74171","description":"The Okta Access Gateway includes an optional pass-through authentication source that accepts user identity from a client-supplied HTTP header without cryptographic validation. In architectures where this optional source is enabled without an upstream reverse proxy or firewall configured to sanitize and enforce client headers, an unauthenticated user can supply an arbitrary identity value to initiate a session.","published_time":"2026-09-08T20:09:46","cvss":4.8,"cvss_version":"3.1","epss":0.0,"assigner":"Okta","references":["https://trust.okta.com/security-advisories/improper-authentication-validation-in-okta-access-gateway-pass-through-authentication-source-cve-2026-78560"],"products":["Okta Access Gateway"],"vendors":["Okta"]}},{"cve_id":"CVE-2026-78574","summary":"The Okta Hyperdrive Integration plugin resolves a required assembly using a registry path within the current user's hive without integrity verification. The referenced path is loaded via Assembly.LoadFrom without signature validation, resulting in an unverified assembly executing within the context of the host process or elevated installer.","cvss":7.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://trust.okta.com/security-advisories/improper-assembly-resolution-in-okta-hyperdrive-integration-plugin-registry-handling-cve-2026-78574"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:36","euvd":{"id":"EUVD-2026-74175","description":"The Okta Hyperdrive Integration plugin resolves a required assembly using a registry path within the current user's hive without integrity verification. The referenced path is loaded via Assembly.LoadFrom without signature validation, resulting in an unverified assembly executing within the context of the host process or elevated installer.","published_time":"2026-09-08T20:11:43","cvss":7.5,"cvss_version":"3.1","epss":0.0,"assigner":"Okta","references":["https://trust.okta.com/security-advisories/improper-assembly-resolution-in-okta-hyperdrive-integration-plugin-registry-handling-cve-2026-78574"],"products":["Okta Hyperdrive Integration Plugin"],"vendors":["Okta"]}},{"cve_id":"CVE-2026-78579","summary":"The Okta Access Gateway does not sanitize SAML assertion attribute values before interpolating them into LDAP search filters in the LDAP datastore configuration. The raw values are substituted directly into the filter string and passed to the LDAP search operation, resulting in modification of the intended query logic.","cvss":6.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://trust.okta.com/security-advisories/improper-input-sanitization-in-okta-access-gateway-ldap-datastore-filter-interpolation-cve-2026-78579"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:36","euvd":{"id":"EUVD-2026-74177","description":"The Okta Access Gateway does not sanitize SAML assertion attribute values before interpolating them into LDAP search filters in the LDAP datastore configuration. The raw values are substituted directly into the filter string and passed to the LDAP search operation, resulting in modification of the intended query logic.","published_time":"2026-09-08T20:12:53","cvss":6.8,"cvss_version":"3.1","epss":0.0,"assigner":"Okta","references":["https://trust.okta.com/security-advisories/improper-input-sanitization-in-okta-access-gateway-ldap-datastore-filter-interpolation-cve-2026-78579"],"products":["Okta Access Gateway"],"vendors":["Okta"]}},{"cve_id":"CVE-2026-78620","summary":"The Okta Access Gateway Kerberos configuration handler does not validate file paths specified in event payloads before writing file contents. The path from the event payload is used directly as the write destination, resulting in files being written to unintended locations on the appliance filesystem.","cvss":5.9,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.9,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://trust.okta.com/security-advisories/improper-path-validation-in-okta-access-gateway-kerberos-configuration-handling-cve-2026-78620"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:36","euvd":{"id":"EUVD-2026-74178","description":"The Okta Access Gateway Kerberos configuration handler does not validate file paths specified in event payloads before writing file contents. The path from the event payload is used directly as the write destination, resulting in files being written to unintended locations on the appliance filesystem.","published_time":"2026-09-08T20:13:23","cvss":5.9,"cvss_version":"3.1","epss":0.0,"assigner":"Okta","references":["https://trust.okta.com/security-advisories/improper-path-validation-in-okta-access-gateway-kerberos-configuration-handling-cve-2026-78620"],"products":["Okta Access Gateway"],"vendors":["Okta"]}},{"cve_id":"CVE-2026-78545","summary":"The Okta Access Gateway does not sanitize the application label field before including it in the generated nginx configuration file. The unsanitized value is interpolated into an nginx server block directive, resulting in execution of injected directives.","cvss":6.6,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.6,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://trust.okta.com/security-advisories/improper-input-sanitization-in-okta-access-gateway-application-label-configuration-cve-2026-78545/"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:35","euvd":{"id":"EUVD-2026-74163","description":"The Okta Access Gateway does not sanitize the application label field before including it in the generated nginx configuration file. The unsanitized value is interpolated into an nginx server block directive, resulting in execution of injected directives.","published_time":"2026-09-08T20:05:36","cvss":6.6,"cvss_version":"3.1","epss":0.0,"assigner":"Okta","references":["https://trust.okta.com/security-advisories/improper-input-sanitization-in-okta-access-gateway-application-label-configuration-cve-2026-78545/"],"products":["Okta Access Gateway"],"vendors":["Okta"]}},{"cve_id":"CVE-2026-78550","summary":"The Okta Access Gateway management console passes user-supplied input to eval() without sanitization during an authenticated administrator SSH session. As a result, the unsanitized input is executed directly, leading to code execution with the privileges of the management console.","cvss":6.6,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.6,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://trust.okta.com/security-advisories/improper-input-handling-in-okta-access-gateway-management-console-exception-handler-cve-2026-78550"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:35","euvd":{"id":"EUVD-2026-74164","description":"The Okta Access Gateway management console passes user-supplied input to eval() without sanitization during an authenticated administrator SSH session. As a result, the unsanitized input is executed directly, leading to code execution with the privileges of the management console.","published_time":"2026-09-08T20:06:27","cvss":6.6,"cvss_version":"3.1","epss":0.0,"assigner":"Okta","references":["https://trust.okta.com/security-advisories/improper-input-handling-in-okta-access-gateway-management-console-exception-handler-cve-2026-78550"],"products":["Okta Access Gateway"],"vendors":["Okta"]}},{"cve_id":"CVE-2026-76002","summary":"ColdFusion is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Scope is changed.","cvss":6.1,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.1,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/coldfusion/apsb26-119.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:24","euvd":{"id":"EUVD-2026-74073","description":"ColdFusion is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Scope is changed.","published_time":"2026-09-08T19:37:49","cvss":6.1,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/coldfusion/apsb26-119.html"],"products":["ColdFusion 2025","ColdFusion 2023"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-76190","summary":"ColdFusion is affected by an Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.","cvss":8.6,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.6,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/coldfusion/apsb26-119.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:24","euvd":{"id":"EUVD-2026-74068","description":"ColdFusion is affected by an Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.","published_time":"2026-09-08T19:37:46","cvss":8.6,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/coldfusion/apsb26-119.html"],"products":["ColdFusion 2023","ColdFusion 2025"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-76199","summary":"Photoshop Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.","cvss":8.6,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.6,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/photoshop/apsb26-130.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:24","euvd":{"id":"EUVD-2026-74062","description":"Photoshop Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.","published_time":"2026-09-08T19:32:53","cvss":8.6,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/photoshop/apsb26-130.html"],"products":["Photoshop 2026","Photoshop 2025"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75991","summary":"Illustrator is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.","cvss":8.6,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.6,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/illustrator/apsb26-131.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:23","euvd":{"id":"EUVD-2026-74056","description":"Illustrator is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.","published_time":"2026-09-08T19:29:57","cvss":8.6,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/illustrator/apsb26-131.html"],"products":["Illustrator Desktop 2025","Illustrator Desktop 2026"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75992","summary":"Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/illustrator/apsb26-131.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:23","euvd":{"id":"EUVD-2026-74054","description":"Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","published_time":"2026-09-08T19:29:55","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/illustrator/apsb26-131.html"],"products":["Illustrator Desktop 2025","Illustrator Desktop 2026"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75993","summary":"ColdFusion is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.","cvss":8.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/coldfusion/apsb26-119.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:23","euvd":{"id":"EUVD-2026-74066","description":"ColdFusion is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.","published_time":"2026-09-08T19:37:44","cvss":8.5,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/coldfusion/apsb26-119.html"],"products":["ColdFusion 2023","ColdFusion 2025"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75998","summary":"ColdFusion is affected by an Improper Access Control vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not require user interaction.","cvss":7.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/coldfusion/apsb26-119.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:23","euvd":{"id":"EUVD-2026-74070","description":"ColdFusion is affected by an Improper Access Control vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not require user interaction.","published_time":"2026-09-08T19:37:47","cvss":7.5,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/coldfusion/apsb26-119.html"],"products":["ColdFusion 2023","ColdFusion 2025"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75999","summary":"ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. The vulnerable component is restricted to an administrative network zone by default. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.","cvss":8.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/coldfusion/apsb26-119.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:23","euvd":{"id":"EUVD-2026-74067","description":"ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. The vulnerable component is restricted to an administrative network zone by default. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.","published_time":"2026-09-08T19:37:45","cvss":8.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/coldfusion/apsb26-119.html"],"products":["ColdFusion 2025","ColdFusion 2023"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-76000","summary":"ColdFusion is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/coldfusion/apsb26-119.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:23","euvd":{"id":"EUVD-2026-74071","description":"ColdFusion is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.","published_time":"2026-09-08T19:37:48","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/coldfusion/apsb26-119.html"],"products":["ColdFusion 2025","ColdFusion 2023"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75742","summary":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:22","euvd":{"id":"EUVD-2026-74124","description":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.","published_time":"2026-09-08T19:56:36","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5 LTS","Adobe Experience Manager 6.5","Adobe Experience Manager as a Cloud Service"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75746","summary":"ColdFusion is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.","cvss":9.1,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":9.1,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/coldfusion/apsb26-119.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:22","euvd":{"id":"EUVD-2026-74072","description":"ColdFusion is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.","published_time":"2026-09-08T19:37:49","cvss":9.1,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/coldfusion/apsb26-119.html"],"products":["ColdFusion 2023","ColdFusion 2025"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75771","summary":"Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/photoshop/apsb26-130.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:22","euvd":{"id":"EUVD-2026-74065","description":"Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","published_time":"2026-09-08T19:32:56","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/photoshop/apsb26-130.html"],"products":["Photoshop 2025","Photoshop 2026"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75862","summary":"Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/photoshop/apsb26-130.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:22","euvd":{"id":"EUVD-2026-74063","description":"Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","published_time":"2026-09-08T19:32:54","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/photoshop/apsb26-130.html"],"products":["Photoshop 2025","Photoshop 2026"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75863","summary":"Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/photoshop/apsb26-130.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:22","euvd":{"id":"EUVD-2026-74058","description":"Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","published_time":"2026-09-08T19:32:51","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/photoshop/apsb26-130.html"],"products":["Photoshop 2025","Photoshop 2026"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75990","summary":"Illustrator is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.","cvss":8.6,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.6,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/illustrator/apsb26-131.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:22","euvd":{"id":"EUVD-2026-74055","description":"Illustrator is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.","published_time":"2026-09-08T19:29:56","cvss":8.6,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/illustrator/apsb26-131.html"],"products":["Illustrator Desktop 2026","Illustrator Desktop 2025"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75734","summary":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:21","euvd":{"id":"EUVD-2026-74155","description":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.","published_time":"2026-09-08T19:57:02","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5 LTS","Adobe Experience Manager 6.5","Adobe Experience Manager as a Cloud Service"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75735","summary":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:21","euvd":{"id":"EUVD-2026-74141","description":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.","published_time":"2026-09-08T19:56:51","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5","Adobe Experience Manager 6.5 LTS"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75736","summary":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:21","euvd":{"id":"EUVD-2026-74216","description":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.","published_time":"2026-09-08T19:55:55","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5 LTS","Adobe Experience Manager 6.5"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75737","summary":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:21","euvd":{"id":"EUVD-2026-74225","description":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.","published_time":"2026-09-08T19:56:03","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5 LTS","Adobe Experience Manager 6.5","Adobe Experience Manager as a Cloud Service"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75738","summary":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:21","euvd":{"id":"EUVD-2026-74241","description":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.","published_time":"2026-09-08T19:56:16","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5 LTS","Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75739","summary":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:21","euvd":{"id":"EUVD-2026-74122","description":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.","published_time":"2026-09-08T19:56:34","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5","Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5 LTS"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75740","summary":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:21","euvd":{"id":"EUVD-2026-74253","description":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.","published_time":"2026-09-08T19:56:24","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5 LTS","Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75741","summary":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:21","euvd":{"id":"EUVD-2026-74137","description":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.","published_time":"2026-09-08T19:56:48","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5","Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5 LTS"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75722","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:20","euvd":{"id":"EUVD-2026-74238","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:56:13","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5 LTS","Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75724","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:20","euvd":{"id":"EUVD-2026-74220","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:55:59","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5","Adobe Experience Manager 6.5 LTS","Adobe Experience Manager as a Cloud Service"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75725","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:20","euvd":{"id":"EUVD-2026-74255","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:56:26","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5","Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5 LTS"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75726","summary":"Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page.","cvss":3.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":3.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:20","euvd":{"id":"EUVD-2026-74145","description":"Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page.","published_time":"2026-09-08T19:56:54","cvss":3.5,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5 LTS","Adobe Experience Manager 6.5"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75727","summary":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:20","euvd":{"id":"EUVD-2026-74234","description":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.","published_time":"2026-09-08T19:56:10","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5","Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5 LTS"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75729","summary":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:20","euvd":{"id":"EUVD-2026-74135","description":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.","published_time":"2026-09-08T19:56:45","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5","Adobe Experience Manager 6.5 LTS"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75730","summary":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:20","euvd":{"id":"EUVD-2026-74153","description":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.","published_time":"2026-09-08T19:57:00","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5 LTS","Adobe Experience Manager 6.5"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75731","summary":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:20","euvd":{"id":"EUVD-2026-74244","description":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.","published_time":"2026-09-08T19:56:18","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5 LTS","Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75733","summary":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:20","euvd":{"id":"EUVD-2026-74258","description":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.","published_time":"2026-09-08T19:56:28","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5 LTS","Adobe Experience Manager 6.5","Adobe Experience Manager as a Cloud Service"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75713","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:19","euvd":{"id":"EUVD-2026-74123","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:56:35","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5","Adobe Experience Manager 6.5 LTS"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75714","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:19","euvd":{"id":"EUVD-2026-74218","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:55:57","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5 LTS","Adobe Experience Manager 6.5"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75715","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:19","euvd":{"id":"EUVD-2026-74149","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:56:57","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5","Adobe Experience Manager 6.5 LTS","Adobe Experience Manager as a Cloud Service"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75716","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:19","euvd":{"id":"EUVD-2026-74249","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:56:21","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5","Adobe Experience Manager 6.5 LTS"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75717","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:19","euvd":{"id":"EUVD-2026-74213","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:55:53","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5","Adobe Experience Manager 6.5 LTS","Adobe Experience Manager as a Cloud Service"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75718","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:19","euvd":{"id":"EUVD-2026-74236","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:56:12","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5 LTS","Adobe Experience Manager 6.5"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75719","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:19","euvd":{"id":"EUVD-2026-74152","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:57:00","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5","Adobe Experience Manager 6.5 LTS","Adobe Experience Manager as a Cloud Service"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75720","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:19","euvd":{"id":"EUVD-2026-74211","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:55:52","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5 LTS","Adobe Experience Manager 6.5"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75704","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:18","euvd":{"id":"EUVD-2026-74127","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:56:40","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5","Adobe Experience Manager 6.5 LTS","Adobe Experience Manager as a Cloud Service"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75705","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:18","euvd":{"id":"EUVD-2026-74139","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:56:49","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5","Adobe Experience Manager 6.5 LTS","Adobe Experience Manager as a Cloud Service"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75706","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:18","euvd":{"id":"EUVD-2026-74154","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:57:01","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5 LTS","Adobe Experience Manager 6.5","Adobe Experience Manager as a Cloud Service"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75707","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:18","euvd":{"id":"EUVD-2026-74151","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:56:59","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5 LTS","Adobe Experience Manager 6.5","Adobe Experience Manager as a Cloud Service"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75708","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:18","euvd":{"id":"EUVD-2026-74126","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:56:39","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5 LTS","Adobe Experience Manager 6.5","Adobe Experience Manager as a Cloud Service"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75709","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:18","euvd":{"id":"EUVD-2026-74117","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:56:31","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5","Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5 LTS"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75710","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:18","euvd":{"id":"EUVD-2026-74251","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:56:23","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5 LTS","Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75711","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:18","euvd":{"id":"EUVD-2026-74226","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:56:05","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5","Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5 LTS"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75712","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:18","euvd":{"id":"EUVD-2026-74230","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:56:07","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5","Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5 LTS"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75692","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:17","euvd":{"id":"EUVD-2026-74219","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:55:58","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5","Adobe Experience Manager 6.5 LTS"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75693","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:17","euvd":{"id":"EUVD-2026-74215","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:55:54","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5","Adobe Experience Manager 6.5 LTS","Adobe Experience Manager as a Cloud Service"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75694","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:17","euvd":{"id":"EUVD-2026-74138","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:56:49","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5 LTS","Adobe Experience Manager 6.5","Adobe Experience Manager as a Cloud Service"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75695","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:17","euvd":{"id":"EUVD-2026-74235","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:56:11","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5","Adobe Experience Manager 6.5 LTS"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75696","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:17","euvd":{"id":"EUVD-2026-74222","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:56:01","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5","Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5 LTS"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75700","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:17","euvd":{"id":"EUVD-2026-74228","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:56:06","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5","Adobe Experience Manager 6.5 LTS"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75701","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:17","euvd":{"id":"EUVD-2026-74221","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:56:00","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5 LTS","Adobe Experience Manager 6.5"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75702","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:17","euvd":{"id":"EUVD-2026-74229","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:56:07","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5","Adobe Experience Manager 6.5 LTS","Adobe Experience Manager as a Cloud Service"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75679","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:16","euvd":{"id":"EUVD-2026-74136","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:56:47","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5 LTS","Adobe Experience Manager 6.5"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75680","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:16","euvd":{"id":"EUVD-2026-74233","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:56:09","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5","Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5 LTS"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75681","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:16","euvd":{"id":"EUVD-2026-74224","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:56:02","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5","Adobe Experience Manager 6.5 LTS"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75683","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:16","euvd":{"id":"EUVD-2026-74247","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:56:20","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5 LTS","Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75685","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:16","euvd":{"id":"EUVD-2026-74134","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:56:45","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5 LTS","Adobe Experience Manager 6.5"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75687","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:16","euvd":{"id":"EUVD-2026-74157","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:57:03","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5","Adobe Experience Manager 6.5 LTS","Adobe Experience Manager as a Cloud Service"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75690","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:16","euvd":{"id":"EUVD-2026-74150","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:56:58","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5 LTS","Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75691","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:16","euvd":{"id":"EUVD-2026-74256","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:56:27","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5","Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5 LTS"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75668","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:15","euvd":{"id":"EUVD-2026-74250","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:56:22","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5 LTS","Adobe Experience Manager 6.5","Adobe Experience Manager as a Cloud Service"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75669","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:15","euvd":{"id":"EUVD-2026-74252","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:56:24","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5 LTS","Adobe Experience Manager 6.5","Adobe Experience Manager as a Cloud Service"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75670","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:15","euvd":{"id":"EUVD-2026-74214","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:55:54","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5","Adobe Experience Manager 6.5 LTS"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75671","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:15","euvd":{"id":"EUVD-2026-74131","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:56:43","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5","Adobe Experience Manager 6.5 LTS","Adobe Experience Manager as a Cloud Service"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75672","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:15","euvd":{"id":"EUVD-2026-74156","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:57:03","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5","Adobe Experience Manager 6.5 LTS","Adobe Experience Manager as a Cloud Service"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75674","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:15","euvd":{"id":"EUVD-2026-74118","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:56:31","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5","Adobe Experience Manager 6.5 LTS"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75675","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:15","euvd":{"id":"EUVD-2026-74231","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:56:08","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5","Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5 LTS"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75677","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:15","euvd":{"id":"EUVD-2026-74133","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:56:44","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5 LTS","Adobe Experience Manager 6.5"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75678","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:15","euvd":{"id":"EUVD-2026-74159","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:57:05","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5 LTS","Adobe Experience Manager 6.5","Adobe Experience Manager as a Cloud Service"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75651","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:14","euvd":{"id":"EUVD-2026-74237","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:56:12","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5","Adobe Experience Manager 6.5 LTS","Adobe Experience Manager as a Cloud Service"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75652","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:14","euvd":{"id":"EUVD-2026-74116","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:56:30","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5","Adobe Experience Manager 6.5 LTS"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75657","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:14","euvd":{"id":"EUVD-2026-74217","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:55:57","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5","Adobe Experience Manager 6.5 LTS"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75659","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:14","euvd":{"id":"EUVD-2026-74239","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:56:14","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5","Adobe Experience Manager 6.5 LTS","Adobe Experience Manager as a Cloud Service"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75660","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:14","euvd":{"id":"EUVD-2026-74143","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:56:52","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5","Adobe Experience Manager 6.5 LTS"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75661","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:14","euvd":{"id":"EUVD-2026-74257","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:56:28","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5","Adobe Experience Manager 6.5 LTS"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75666","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:14","euvd":{"id":"EUVD-2026-74121","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:56:33","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5 LTS","Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75667","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:14","euvd":{"id":"EUVD-2026-74130","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:56:42","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5","Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5 LTS"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75637","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:13","euvd":{"id":"EUVD-2026-74140","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:56:50","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5 LTS","Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75639","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:13","euvd":{"id":"EUVD-2026-74245","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:56:19","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5","Adobe Experience Manager 6.5 LTS","Adobe Experience Manager as a Cloud Service"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75640","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:13","euvd":{"id":"EUVD-2026-74147","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:56:55","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5 LTS","Adobe Experience Manager 6.5"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75642","summary":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:13","euvd":{"id":"EUVD-2026-74132","description":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.","published_time":"2026-09-08T19:56:43","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5","Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5 LTS"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75643","summary":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:13","euvd":{"id":"EUVD-2026-74146","description":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.","published_time":"2026-09-08T19:56:54","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5 LTS","Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75644","summary":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:13","euvd":{"id":"EUVD-2026-74128","description":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.","published_time":"2026-09-08T19:56:41","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5 LTS","Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75646","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:13","euvd":{"id":"EUVD-2026-74148","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:56:56","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5","Adobe Experience Manager 6.5 LTS","Adobe Experience Manager as a Cloud Service"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75647","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:13","euvd":{"id":"EUVD-2026-74254","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:56:26","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5","Adobe Experience Manager 6.5 LTS"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75629","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:12","euvd":{"id":"EUVD-2026-74240","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:56:14","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5","Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5 LTS"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75631","summary":"Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/photoshop/apsb26-130.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:12","euvd":{"id":"EUVD-2026-74064","description":"Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","published_time":"2026-09-08T19:32:55","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/photoshop/apsb26-130.html"],"products":["Photoshop 2025","Photoshop 2026"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75635","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:12","euvd":{"id":"EUVD-2026-74125","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:56:36","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5","Adobe Experience Manager 6.5 LTS","Adobe Experience Manager as a Cloud Service"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-75636","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:12","euvd":{"id":"EUVD-2026-74129","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:56:41","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5","Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5 LTS"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-72626","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:01","euvd":{"id":"EUVD-2026-74246","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:56:19","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5 LTS","Adobe Experience Manager 6.5","Adobe Experience Manager as a Cloud Service"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-72627","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:18:01","euvd":{"id":"EUVD-2026-74120","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:56:33","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5 LTS","Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-71565","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:17:59","euvd":{"id":"EUVD-2026-74158","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:57:04","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5","Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5 LTS"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-71356","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:17:58","euvd":{"id":"EUVD-2026-74223","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:56:02","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5","Adobe Experience Manager 6.5 LTS","Adobe Experience Manager as a Cloud Service"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-71357","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:17:58","euvd":{"id":"EUVD-2026-74160","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:57:05","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5","Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5 LTS"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-71388","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:17:58","euvd":{"id":"EUVD-2026-74248","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:56:21","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5 LTS","Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-71440","summary":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:17:58","euvd":{"id":"EUVD-2026-74227","description":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.","published_time":"2026-09-08T19:56:05","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5 LTS","Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-52486","summary":"An issue in OpenDDS 3.33.x allows a local attacker to cause a denial of service via the verify function in the SIgnedDocument module","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://gist.github.com/lkloliver/31a58b0b613a5f4d82dd183b353bbdf2","https://github.com/OpenDDS/OpenDDS/tree/master/dds/DCPS/security/SSL/SignedDocument.cpp"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:17:34","euvd":{"id":"EUVD-2026-74266","description":"An issue in OpenDDS 3.33.x allows a local attacker to cause a denial of service via the verify function in the SIgnedDocument module","published_time":"2026-09-08T00:00:00","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"mitre","references":["https://github.com/OpenDDS/OpenDDS/tree/master/dds/DCPS/security/SSL/SignedDocument.cpp","https://gist.github.com/lkloliver/31a58b0b613a5f4d82dd183b353bbdf2"],"products":["n/a"],"vendors":["n/a"]}},{"cve_id":"CVE-2026-48273","summary":"ColdFusion is affected by an Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.","cvss":9.9,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":9.9,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/coldfusion/apsb26-119.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:17:33","euvd":{"id":"EUVD-2026-74069","description":"ColdFusion is affected by an Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.","published_time":"2026-09-08T19:37:46","cvss":9.9,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/coldfusion/apsb26-119.html"],"products":["ColdFusion 2025","ColdFusion 2023"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-49883","summary":"In checkReadPermission of PermissionsManager.java, there is a possible way to monitor sensitive device state data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":10.0,"cvss_version":4.0,"cvss_v2":null,"cvss_v3":null,"cvss_v4":10.0,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/wear/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:17:33","euvd":{"id":"EUVD-2026-74050","description":"In checkReadPermission of PermissionsManager.java, there is a possible way to monitor sensitive device state data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T19:10:22","cvss":10.0,"cvss_version":"4.0","epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/wear/2026/2026-09-01"],"products":["Android Wear","Android Wear","Android Wear"],"vendors":["Google"]}},{"cve_id":"CVE-2026-28659","summary":"In MicroXR Blobstore, there is a possible way to access other app's files due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":10.0,"cvss_version":4.0,"cvss_v2":null,"cvss_v3":null,"cvss_v4":10.0,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/xr/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:17:32","euvd":{"id":"EUVD-2026-74052","description":"In MicroXR Blobstore, there is a possible way to access other app's files due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T19:20:33","cvss":10.0,"cvss_version":"4.0","epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/xr/2026/2026-09-01"],"products":["Android XR"],"vendors":["Google"]}},{"cve_id":"CVE-2026-27227","summary":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:17:31","euvd":{"id":"EUVD-2026-74232","description":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.","published_time":"2026-09-08T19:56:09","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5 LTS","Adobe Experience Manager 6.5"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-19479","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:17:29","euvd":{"id":"EUVD-2026-74142","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:56:52","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5 LTS","Adobe Experience Manager 6.5","Adobe Experience Manager as a Cloud Service"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-19612","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:17:29","euvd":{"id":"EUVD-2026-74144","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:56:53","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5","Adobe Experience Manager 6.5 LTS","Adobe Experience Manager as a Cloud Service"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-19644","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:17:29","euvd":{"id":"EUVD-2026-74119","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:56:32","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5 LTS","Adobe Experience Manager 6.5"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-19713","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:17:29","euvd":{"id":"EUVD-2026-74242","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:56:16","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5 LTS","Adobe Experience Manager 6.5"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-19872","summary":"HTML::FormHandler versions before 0.410000 for Perl allow cross-site scripting via a submitted value rendered unescaped in an error message.\n\nThe wrappers and renderers that emit a form's errors interpolate the error string straight into HTML with no escaping. Two of the library's own messages, no_match and not_allowed, splice the submitted value into that string, and a failing type constraint puts the rejected value into the message it builds, which _apply_actions hands to add_error.\n\nA field declared with a check regexp, a check list or a type constraint reaches those messages, with no custom validator and no non-default configuration. Errors rendered through an application's own escaping template layer rather than the library's rendering roles are not affected.\n\nA request over the network that submits markup to such a field gets it back live inside the error span, running script in the victim's origin. Re-rendering a rejected value later gives the stored variant.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://github.com/gshank/html-formhandler/commit/2574fdb4561f5c32d44cfbfbb3188345d49eb5a2.patch","https://metacpan.org/release/ABRAXXA/HTML-FormHandler-0.410000/changes","http://www.openwall.com/lists/oss-security/2026/09/08/15"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:17:29","euvd":{"id":"EUVD-2026-74166","description":"HTML::FormHandler versions before 0.410000 for Perl allow cross-site scripting via a submitted value rendered unescaped in an error message.\n\nThe wrappers and renderers that emit a form's errors interpolate the error string straight into HTML with no escaping. Two of the library's own messages, no_match and not_allowed, splice the submitted value into that string, and a failing type constraint puts the rejected value into the message it builds, which _apply_actions hands to add_error.\n\nA field declared with a check regexp, a check list or a type constraint reaches those messages, with no custom validator and no non-default configuration. Errors rendered through an application's own escaping template layer rather than the library's rendering roles are not affected.\n\nA request over the network that submits markup to such a field gets it back live inside the error span, running script in the victim's origin. Re-rendering a rejected value later gives the stored variant.","published_time":"2026-09-08T20:08:21","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"CPANSec","references":["https://github.com/gshank/html-formhandler/commit/2574fdb4561f5c32d44cfbfbb3188345d49eb5a2.patch","https://metacpan.org/release/ABRAXXA/HTML-FormHandler-0.410000/changes"],"products":[],"vendors":[]}},{"cve_id":"CVE-2026-19232","summary":"Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. A low-privileged attacker could exploit this vulnerability to gain elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed.","cvss":9.9,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":9.9,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:17:28","euvd":{"id":"EUVD-2026-74243","description":"Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. A low-privileged attacker could exploit this vulnerability to gain elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed.","published_time":"2026-09-08T19:56:17","cvss":9.9,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5","Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5 LTS"],"vendors":["Adobe"]}},{"cve_id":"CVE-2025-64866","summary":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:17:27","euvd":{"id":"EUVD-2025-210863","description":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.","published_time":"2026-09-08T19:56:38","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5","Adobe Experience Manager 6.5 LTS"],"vendors":["Adobe"]}},{"cve_id":"CVE-2025-64868","summary":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:17:27","euvd":{"id":"EUVD-2025-210869","description":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.","published_time":"2026-09-08T19:56:04","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5","Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5 LTS"],"vendors":["Adobe"]}},{"cve_id":"CVE-2025-64584","summary":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:17:26","euvd":{"id":"EUVD-2025-210871","description":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.","published_time":"2026-09-08T19:56:25","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5","Adobe Experience Manager 6.5 LTS","Adobe Experience Manager as a Cloud Service"],"vendors":["Adobe"]}},{"cve_id":"CVE-2025-64588","summary":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:17:26","euvd":{"id":"EUVD-2025-210867","description":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.","published_time":"2026-09-08T19:55:56","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5","Adobe Experience Manager 6.5 LTS","Adobe Experience Manager as a Cloud Service"],"vendors":["Adobe"]}},{"cve_id":"CVE-2025-64589","summary":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:17:26","euvd":{"id":"EUVD-2025-210862","description":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.","published_time":"2026-09-08T19:56:37","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5","Adobe Experience Manager 6.5 LTS"],"vendors":["Adobe"]}},{"cve_id":"CVE-2025-64610","summary":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:17:26","euvd":{"id":"EUVD-2025-210872","description":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.","published_time":"2026-09-08T19:56:29","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5 LTS","Adobe Experience Manager 6.5","Adobe Experience Manager as a Cloud Service"],"vendors":["Adobe"]}},{"cve_id":"CVE-2025-64618","summary":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:17:26","euvd":{"id":"EUVD-2025-210870","description":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.","published_time":"2026-09-08T19:56:15","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5 LTS","Adobe Experience Manager 6.5","Adobe Experience Manager as a Cloud Service"],"vendors":["Adobe"]}},{"cve_id":"CVE-2025-64830","summary":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:17:26","euvd":{"id":"EUVD-2025-210865","description":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.","published_time":"2026-09-08T19:56:46","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5 LTS","Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5"],"vendors":["Adobe"]}},{"cve_id":"CVE-2025-64838","summary":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:17:26","euvd":{"id":"EUVD-2025-210866","description":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.","published_time":"2026-09-08T19:56:57","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5","Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5 LTS"],"vendors":["Adobe"]}},{"cve_id":"CVE-2025-64854","summary":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:17:26","euvd":{"id":"EUVD-2025-210864","description":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.","published_time":"2026-09-08T19:56:38","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager as a Cloud Service","Adobe Experience Manager 6.5","Adobe Experience Manager 6.5 LTS"],"vendors":["Adobe"]}},{"cve_id":"CVE-2025-64542","summary":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","cvss":5.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T20:17:25","euvd":{"id":"EUVD-2025-210868","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.","published_time":"2026-09-08T19:55:59","cvss":5.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html"],"products":["Adobe Experience Manager 6.5","Adobe Experience Manager 6.5 LTS","Adobe Experience Manager as a Cloud Service"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-86675","summary":"A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This affects an unknown part of the file /pages/us_edit.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used.","cvss":2.1,"cvss_version":4.0,"cvss_v2":6.5,"cvss_v3":6.3,"cvss_v4":2.1,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://github.com/ltranquility/submit_repository/issues/12","https://itsourcecode.com/","https://vuldb.com/cve/CVE-2026-86675","https://vuldb.com/submit/909979","https://vuldb.com/vuln/399765","https://vuldb.com/vuln/399765/cti"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:20:17","euvd":{"id":"EUVD-2026-74042","description":"A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This affects an unknown part of the file /pages/us_edit.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used.","published_time":"2026-09-08T18:30:07","cvss":5.3,"cvss_version":"4.0","epss":0.0,"assigner":"VulDB","references":["https://vuldb.com/vuln/399765","https://vuldb.com/vuln/399765/cti","https://vuldb.com/cve/CVE-2026-86675","https://vuldb.com/submit/909979","https://github.com/ltranquility/submit_repository/issues/12","https://itsourcecode.com/"],"products":["Sales and Inventory System"],"vendors":["itsourcecode"]}},{"cve_id":"CVE-2026-86716","summary":"A vulnerability was determined in Cesanta mJS up to 1.26. Affected is the function skip_spaces_and_comments of the file src/mjs_tok.c. Executing a manipulation can lead to heap-based buffer overflow. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.","cvss":5.5,"cvss_version":4.0,"cvss_v2":7.5,"cvss_v3":7.3,"cvss_v4":5.5,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://github.com/cesanta/mjs/","https://github.com/cesanta/mjs/issues/324","https://vuldb.com/cve/CVE-2026-86716","https://vuldb.com/submit/910881","https://vuldb.com/submit/910882","https://vuldb.com/vuln/399773","https://vuldb.com/vuln/399773/cti"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:20:17","euvd":{"id":"EUVD-2026-73943","description":"A vulnerability was determined in Cesanta mJS up to 1.26. Affected is the function skip_spaces_and_comments of the file src/mjs_tok.c. Executing a manipulation can lead to heap-based buffer overflow. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.","published_time":"2026-09-08T18:45:05","cvss":6.9,"cvss_version":"4.0","epss":0.0,"assigner":"VulDB","references":["https://vuldb.com/vuln/399773","https://vuldb.com/vuln/399773/cti","https://vuldb.com/cve/CVE-2026-86716","https://vuldb.com/submit/910881","https://vuldb.com/submit/910882","https://github.com/cesanta/mjs/issues/324","https://github.com/cesanta/mjs/"],"products":["mJS","mJS","mJS","mJS","mJS","mJS","mJS","mJS","mJS","mJS","mJS","mJS","mJS","mJS","mJS","mJS","mJS","mJS","mJS","mJS","mJS","mJS","mJS","mJS","mJS","mJS","mJS"],"vendors":["Cesanta"]}},{"cve_id":"CVE-2026-86804","summary":"A vulnerability was identified in seakee CPA-Manager-Plus up to 1.11.10. This vulnerability affects the function CPAResource of the file apps/manager-server/internal/http/controller/proxy/handler.go of the component HTTP Handler. The manipulation leads to improper authorization. It is possible to initiate the attack remotely. Upgrading to version 1.11.11 is able to resolve this issue. The identifier of the patch is 842eec791377ddcbea5cd639bc065eaa4801d656. It is suggested to upgrade the affected component.","cvss":6.9,"cvss_version":4.0,"cvss_v2":5.0,"cvss_v3":5.3,"cvss_v4":6.9,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://github.com/seakee/CPA-Manager-Plus/","https://github.com/seakee/CPA-Manager-Plus/commit/842eec791377ddcbea5cd639bc065eaa4801d656","https://github.com/seakee/CPA-Manager-Plus/issues/462","https://github.com/seakee/CPA-Manager-Plus/pull/463","https://github.com/seakee/CPA-Manager-Plus/releases/tag/v1.11.11","https://vuldb.com/cve/CVE-2026-86804","https://vuldb.com/submit/911036","https://vuldb.com/vuln/399810","https://vuldb.com/vuln/399810/cti"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:20:17","euvd":{"id":"EUVD-2026-74049","description":"A vulnerability was identified in seakee CPA-Manager-Plus up to 1.11.10. This vulnerability affects the function CPAResource of the file apps/manager-server/internal/http/controller/proxy/handler.go of the component HTTP Handler. The manipulation leads to improper authorization. It is possible to initiate the attack remotely. Upgrading to version 1.11.11 is able to resolve this issue. The identifier of the patch is 842eec791377ddcbea5cd639bc065eaa4801d656. It is suggested to upgrade the affected component.","published_time":"2026-09-08T19:00:11","cvss":6.9,"cvss_version":"4.0","epss":0.0,"assigner":"VulDB","references":["https://vuldb.com/vuln/399810","https://vuldb.com/vuln/399810/cti","https://vuldb.com/cve/CVE-2026-86804","https://vuldb.com/submit/911036","https://github.com/seakee/CPA-Manager-Plus/issues/462","https://github.com/seakee/CPA-Manager-Plus/pull/463","https://github.com/seakee/CPA-Manager-Plus/commit/842eec791377ddcbea5cd639bc065eaa4801d656","https://github.com/seakee/CPA-Manager-Plus/releases/tag/v1.11.11","https://github.com/seakee/CPA-Manager-Plus/"],"products":["CPA-Manager-Plus","CPA-Manager-Plus","CPA-Manager-Plus","CPA-Manager-Plus","CPA-Manager-Plus","CPA-Manager-Plus","CPA-Manager-Plus","CPA-Manager-Plus","CPA-Manager-Plus","CPA-Manager-Plus","CPA-Manager-Plus"],"vendors":["seakee"]}},{"cve_id":"CVE-2026-86674","summary":"A vulnerability was found in ningzichun Student Management System up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected by this vulnerability is the function session_start of the file login.php. The manipulation results in session fixiation. The attack can be launched remotely. The exploit has been made public and could be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The project was informed of the problem early through an issue report but has not responded yet.","cvss":2.1,"cvss_version":4.0,"cvss_v2":7.5,"cvss_v3":6.3,"cvss_v4":2.1,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://github.com/ningzichun/student-management-system/issues/16","https://vuldb.com/cve/CVE-2026-86674","https://vuldb.com/submit/908933","https://vuldb.com/vuln/399763","https://vuldb.com/vuln/399763/cti"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:20:16","euvd":{"id":"EUVD-2026-74039","description":"A vulnerability was found in ningzichun Student Management System up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected by this vulnerability is the function session_start of the file login.php. The manipulation results in session fixiation. The attack can be launched remotely. The exploit has been made public and could be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The project was informed of the problem early through an issue report but has not responded yet.","published_time":"2026-09-08T18:15:06","cvss":5.3,"cvss_version":"4.0","epss":0.0,"assigner":"VulDB","references":["https://vuldb.com/vuln/399763","https://vuldb.com/vuln/399763/cti","https://vuldb.com/cve/CVE-2026-86674","https://vuldb.com/submit/908933","https://github.com/ningzichun/student-management-system/issues/16"],"products":["Student Management System"],"vendors":["ningzichun"]}},{"cve_id":"CVE-2026-86477","summary":"Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":[],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:20:14","euvd":null},{"cve_id":"CVE-2026-85384","summary":"A stack-based buffer overflow vulnerability exists in the httpd component of RE210 AC750 due to improper bounds checking in the splitString function when processing an uploaded configuration file. An authenticated attacker on the local network can upload a crafted configuration file to trigger the overflow, leading to remote code execution.\n\n\n\n\n\nSuccessful exploitation may allow unauthorized access to sensitive information, modification of device configuration and network behavior, or disruption of device availability.","cvss":8.5,"cvss_version":4.0,"cvss_v2":null,"cvss_v3":null,"cvss_v4":8.5,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://www.tp-link.com/en/support/faq/3562/"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:20:07","euvd":{"id":"EUVD-2026-73942","description":"A stack-based buffer overflow vulnerability exists in the httpd component of RE210 AC750 due to improper bounds checking in the splitString function when processing an uploaded configuration file. An authenticated attacker on the local network can upload a crafted configuration file to trigger the overflow, leading to remote code execution.\n\n\n\n\n\nSuccessful exploitation may allow unauthorized access to sensitive information, modification of device configuration and network behavior, or disruption of device availability.","published_time":"2026-09-08T18:43:58","cvss":8.5,"cvss_version":"4.0","epss":0.0,"assigner":"TPLink","references":["https://www.tp-link.com/en/support/faq/3562/"],"products":["RE210 AC750","RE210 AC750"],"vendors":["TP-Link Systems Inc."]}},{"cve_id":"CVE-2026-82536","summary":"Roo-Code through 3.54.0 contains an auto-approve bypass vulnerability in the shell command parsing logic that allows attackers to execute denied shell commands by exploiting the omission of the bash pipe operator from the command parser's operator token set. Attackers can craft a command line with an allowlisted prefix followed by the stderr-redirecting pipe operator and a denied command, causing the parser to approve the full pipeline while bash executes the denied component with the agent's auto-execute privileges on the developer's machine.","cvss":7.7,"cvss_version":4.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":7.7,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://github.com/7rah/oss-cve/blob/main/roocode-group04-pipe-both-operator.md","https://www.vulncheck.com/advisories/roo-code-auto-approve-bypass-via-shell-command-pipe-operator"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:20:00","euvd":{"id":"EUVD-2026-74040","description":"Roo-Code through 3.54.0 contains an auto-approve bypass vulnerability in the shell command parsing logic that allows attackers to execute denied shell commands by exploiting the omission of the bash pipe operator from the command parser's operator token set. Attackers can craft a command line with an allowlisted prefix followed by the stderr-redirecting pipe operator and a denied command, causing the parser to approve the full pipeline while bash executes the denied component with the agent's auto-execute privileges on the developer's machine.","published_time":"2026-09-08T18:17:06","cvss":7.7,"cvss_version":"4.0","epss":0.0,"assigner":"VulnCheck","references":["https://github.com/7rah/oss-cve/blob/main/roocode-group04-pipe-both-operator.md","https://www.vulncheck.com/advisories/roo-code-auto-approve-bypass-via-shell-command-pipe-operator"],"products":["Roo-Code"],"vendors":["RooCodeInc"]}},{"cve_id":"CVE-2026-82537","summary":"Roo-Code through 3.54.0 contains an auto-approve bypass vulnerability that allows attackers to execute denied shell commands by exploiting a word-boundary mismatch in comment handling between the approval gate's shell parser and bash. Attackers can craft a command string with an allowlisted word immediately followed by a hash character, separator, and denied command to pass the approval gate while bash executes the denied command with the agent's auto-execute privileges on the developer's machine.","cvss":7.7,"cvss_version":4.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":7.7,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://github.com/7rah/oss-cve/blob/main/roocode-group06-comment-boundary.md","https://www.vulncheck.com/advisories/roo-code-auto-approve-bypass-via-shell-parser-word-boundary-mismatch"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:20:00","euvd":{"id":"EUVD-2026-74041","description":"Roo-Code through 3.54.0 contains an auto-approve bypass vulnerability that allows attackers to execute denied shell commands by exploiting a word-boundary mismatch in comment handling between the approval gate's shell parser and bash. Attackers can craft a command string with an allowlisted word immediately followed by a hash character, separator, and denied command to pass the approval gate while bash executes the denied command with the agent's auto-execute privileges on the developer's machine.","published_time":"2026-09-08T18:17:34","cvss":7.7,"cvss_version":"4.0","epss":0.0,"assigner":"VulnCheck","references":["https://github.com/7rah/oss-cve/blob/main/roocode-group06-comment-boundary.md","https://www.vulncheck.com/advisories/roo-code-auto-approve-bypass-via-shell-parser-word-boundary-mismatch"],"products":["Roo-Code"],"vendors":["RooCodeInc"]}},{"cve_id":"CVE-2026-82004","summary":"Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.","cvss":10.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":10.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/campaign/apsb26-142.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:19:59","euvd":{"id":"EUVD-2026-73944","description":"Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.","published_time":"2026-09-08T18:53:01","cvss":10.0,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/campaign/apsb26-142.html"],"products":["Adobe Campaign Classic"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-79721","summary":"Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a maliciously crafted model artifact to execute arbitrary code on an end user's system when loaded by the project.","cvss":8.6,"cvss_version":4.0,"cvss_v2":null,"cvss_v3":null,"cvss_v4":8.6,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://www.hiddenlayer.com/sai-security-advisory/2026-09-mlflow"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:19:51","euvd":{"id":"EUVD-2026-74038","description":"Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a maliciously crafted model artifact to execute arbitrary code on an end user's system when loaded by the project.","published_time":"2026-09-08T18:10:27","cvss":8.6,"cvss_version":"4.0","epss":0.0,"assigner":"HiddenLayer","references":["https://www.hiddenlayer.com/sai-security-advisory/2026-09-mlflow"],"products":["MLflow"],"vendors":["mlflow"]}},{"cve_id":"CVE-2026-77774","summary":"Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interaction. Scope is changed.","cvss":8.6,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.6,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/magento/apsb26-138.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:19:44","euvd":{"id":"EUVD-2026-74031","description":"Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interaction. Scope is changed.","published_time":"2026-09-08T18:08:13","cvss":8.6,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/magento/apsb26-138.html"],"products":["Adobe Commerce","Adobe Commerce B2B","Magento Open Source"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-76202","summary":"Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access to sensitive information. Exploitation of this issue does not require user interaction.","cvss":8.2,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.2,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/magento/apsb26-138.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:19:41","euvd":{"id":"EUVD-2026-74032","description":"Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access to sensitive information. Exploitation of this issue does not require user interaction.","published_time":"2026-09-08T18:08:14","cvss":8.2,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/magento/apsb26-138.html"],"products":["Adobe Commerce B2B","Magento Open Source","Adobe Commerce"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-77108","summary":"Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access to sensitive information. Exploitation of this issue does not require user interaction.","cvss":7.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/magento/apsb26-138.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:19:41","euvd":{"id":"EUVD-2026-74033","description":"Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access to sensitive information. Exploitation of this issue does not require user interaction.","published_time":"2026-09-08T18:08:15","cvss":7.5,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/magento/apsb26-138.html"],"products":["Adobe Commerce B2B","Adobe Commerce","Magento Open Source"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-77109","summary":"Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access to restricted resources. Exploitation of this issue does not require user interaction. Scope is changed.","cvss":8.6,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.6,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/magento/apsb26-138.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:19:41","euvd":{"id":"EUVD-2026-74035","description":"Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access to restricted resources. Exploitation of this issue does not require user interaction. Scope is changed.","published_time":"2026-09-08T18:08:16","cvss":8.6,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/magento/apsb26-138.html"],"products":["Magento Open Source","Adobe Commerce","Adobe Commerce B2B"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-77110","summary":"Adobe Commerce is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a Security feature bypass. An attacker with high privileges could leverage this vulnerability to access unauthorized files or directories outside the intended restrictions, causing a limited disruption to availability. Exploitation of this issue does not require user interaction. Scope is changed.","cvss":7.6,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.6,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/magento/apsb26-138.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:19:41","euvd":{"id":"EUVD-2026-74034","description":"Adobe Commerce is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a Security feature bypass. An attacker with high privileges could leverage this vulnerability to access unauthorized files or directories outside the intended restrictions, causing a limited disruption to availability. Exploitation of this issue does not require user interaction. Scope is changed.","published_time":"2026-09-08T18:08:15","cvss":7.6,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/magento/apsb26-138.html"],"products":["Adobe Commerce","Adobe Commerce B2B","Magento Open Source"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-77111","summary":"Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker with high privileges could leverage this vulnerability to bypass security measures and gain unauthorized write access, causing a limited disruption to availability. Exploitation of this issue does not require user interaction. Scope is changed.","cvss":8.7,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.7,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/magento/apsb26-138.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:19:41","euvd":{"id":"EUVD-2026-74030","description":"Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker with high privileges could leverage this vulnerability to bypass security measures and gain unauthorized write access, causing a limited disruption to availability. Exploitation of this issue does not require user interaction. Scope is changed.","published_time":"2026-09-08T18:08:12","cvss":8.7,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/magento/apsb26-138.html"],"products":["Magento Open Source","Adobe Commerce B2B","Adobe Commerce"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-76200","summary":"Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field, potentially gaining elevated access or control over the victim's account or session. Scope is changed.","cvss":9.3,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":9.3,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/magento/apsb26-138.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:19:40","euvd":{"id":"EUVD-2026-74037","description":"Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field, potentially gaining elevated access or control over the victim's account or session. Scope is changed.","published_time":"2026-09-08T18:08:17","cvss":9.3,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/magento/apsb26-138.html"],"products":["Adobe Commerce","Magento Open Source","Adobe Commerce B2B"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-76201","summary":"Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field, potentially gaining elevated access or control over the victim's account or session. Scope is changed.","cvss":9.3,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":9.3,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/magento/apsb26-138.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:19:40","euvd":{"id":"EUVD-2026-74036","description":"Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field, potentially gaining elevated access or control over the victim's account or session. Scope is changed.","published_time":"2026-09-08T18:08:17","cvss":9.3,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/magento/apsb26-138.html"],"products":["Adobe Commerce B2B","Magento Open Source","Adobe Commerce"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-69646","summary":"Improper verification of cryptographic signature in Skype for Business allows an unauthorized attacker to perform spoofing over an adjacent network.","cvss":8.3,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.3,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69646"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:19:04","euvd":{"id":"EUVD-2026-73939","description":"Improper verification of cryptographic signature in Skype for Business allows an unauthorized attacker to perform spoofing over an adjacent network.","published_time":"2026-09-08T18:33:11","cvss":8.3,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69646"],"products":["Skype for Business Server 2019 CU8","Skype for Business Server Subscription Edition CU1","Skype for Business Server 2015 CU13"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69642","summary":"Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allows an unauthorized attacker to perform spoofing over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69642"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:19:03","euvd":{"id":"EUVD-2026-73938","description":"Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allows an unauthorized attacker to perform spoofing over a network.","published_time":"2026-09-08T18:33:10","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69642"],"products":["Skype for Business Server Subscription Edition CU1","Skype for Business Server 2019 CU8","Skype for Business Server 2015 CU13"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-66305","summary":"Use of client-side authentication in Skype for Business allows an authorized attacker to perform spoofing over a network.","cvss":7.1,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.1,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66305"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:18:08","euvd":{"id":"EUVD-2026-73937","description":"Use of client-side authentication in Skype for Business allows an authorized attacker to perform spoofing over a network.","published_time":"2026-09-08T18:32:29","cvss":7.1,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66305"],"products":["Skype for Business Server 2015 CU13","Skype for Business Server 2019 CU8","Skype for Business Server Subscription Edition CU1"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-66306","summary":"Generation of error message containing sensitive information in Skype for Business allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66306"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:18:08","euvd":{"id":"EUVD-2026-73934","description":"Generation of error message containing sensitive information in Skype for Business allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T18:30:36","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66306"],"products":["Skype for Business Server 2015 CU13","Skype for Business Server Subscription Edition CU1","Skype for Business Server 2019 CU8"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-66307","summary":"Integer underflow (wrap or wraparound) in Skype for Business allows an unauthorized attacker to deny service over a network.","cvss":7.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66307"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:18:08","euvd":{"id":"EUVD-2026-73941","description":"Integer underflow (wrap or wraparound) in Skype for Business allows an unauthorized attacker to deny service over a network.","published_time":"2026-09-08T18:39:44","cvss":7.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66307"],"products":["Skype for Business Server 2019 CU8","Skype for Business Server 2015 CU13","Skype for Business Server Subscription Edition CU1"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-66308","summary":"Out-of-bounds read in Skype for Business allows an authorized attacker to deny service over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66308"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:18:08","euvd":{"id":"EUVD-2026-73935","description":"Out-of-bounds read in Skype for Business allows an authorized attacker to deny service over a network.","published_time":"2026-09-08T18:30:36","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66308"],"products":["Skype for Business Server 2015 CU13","Skype for Business Server Subscription Edition CU1","Skype for Business Server 2019 CU8"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-63523","summary":"Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allows an unauthorized attacker to perform spoofing over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63523"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:18:07","euvd":{"id":"EUVD-2026-73936","description":"Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allows an unauthorized attacker to perform spoofing over a network.","published_time":"2026-09-08T18:32:28","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63523"],"products":["Skype for Business Server Subscription Edition CU1","Skype for Business Server 2019 CU8","Skype for Business Server 2015 CU13"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-66302","summary":"External control of file name or path in Skype for Business allows an unauthorized attacker to execute code over a network.","cvss":9.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":9.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66302"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:18:07","euvd":{"id":"EUVD-2026-74044","description":"External control of file name or path in Skype for Business allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T18:30:35","cvss":9.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66302"],"products":["Skype for Business Server 2015 CU13","Skype for Business Server 2019 CU8","Skype for Business Server Subscription Edition CU1"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-66303","summary":"Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66303"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:18:07","euvd":{"id":"EUVD-2026-73940","description":"Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a network.","published_time":"2026-09-08T18:39:43","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66303"],"products":["Skype for Business Server Subscription Edition CU1","Skype for Business Server 2019 CU8","Skype for Business Server 2015 CU13"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-66304","summary":"Server-side request forgery (ssrf) in Skype for Business allows an unauthorized attacker to disclose information over a network.","cvss":7.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66304"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:18:07","euvd":{"id":"EUVD-2026-74043","description":"Server-side request forgery (ssrf) in Skype for Business allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T18:30:33","cvss":7.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66304"],"products":["Skype for Business Server Subscription Edition CU1","Skype for Business Server 2015 CU13","Skype for Business Server 2019 CU8"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-58846","summary":"In kvm_iommu_map_sg of iommu.c, there is a possible use after free due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://android.googlesource.com/kernel/common/+/ad34d15396568919a8ddd306ce2120e76d111b7c","https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:18:03","euvd":{"id":"EUVD-2026-74026","description":"In kvm_iommu_map_sg of iommu.c, there is a possible use after free due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:06:04","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"google_android","references":["https://android.googlesource.com/kernel/common/+/ad34d15396568919a8ddd306ce2120e76d111b7c","https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-58848","summary":"In multiple functions of alloc.c, there is a possible unauthorized read/write access due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":7.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://android.googlesource.com/kernel/common/+/8f68185b8289dbe43e96f3d2b036c81c83cc58aa","https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:18:03","euvd":{"id":"EUVD-2026-74027","description":"In multiple functions of alloc.c, there is a possible unauthorized read/write access due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:06:05","cvss":7.0,"cvss_version":"3.1","epss":0.0,"assigner":"google_android","references":["https://android.googlesource.com/kernel/common/+/8f68185b8289dbe43e96f3d2b036c81c83cc58aa","https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-58874","summary":"In multiple functions of SmsController.java, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:18:03","euvd":{"id":"EUVD-2026-74028","description":"In multiple functions of SmsController.java, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:06:07","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-58941","summary":"In multiple functions of iommu.c, there is a possible out of bounds read/write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://android.googlesource.com/kernel/common/+/6bc773e9c9f8ec6c5c431934462badbbb7d21767","https://android.googlesource.com/kernel/common/+/ba7833622fc3581c388d0da922aaab529aec43b3","https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:18:03","euvd":{"id":"EUVD-2026-74029","description":"In multiple functions of iommu.c, there is a possible out of bounds read/write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:06:08","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"google_android","references":["https://android.googlesource.com/kernel/common/+/6bc773e9c9f8ec6c5c431934462badbbb7d21767","https://android.googlesource.com/kernel/common/+/ba7833622fc3581c388d0da922aaab529aec43b3","https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-58820","summary":"In multiple locations, there is a possible memory safety issue due to integer overflow. This could lead to local escalation of privilege with no additional execution privileges required.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:18:02","euvd":{"id":"EUVD-2026-74022","description":"In multiple locations, there is a possible memory safety issue due to integer overflow. This could lead to local escalation of privilege with no additional execution privileges required.","published_time":"2026-09-08T18:06:00","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-58822","summary":"In multiple functions of ftsmooth.c, there is a possible memory safety issue due to improper casting. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":9.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":9.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:18:02","euvd":{"id":"EUVD-2026-74023","description":"In multiple functions of ftsmooth.c, there is a possible memory safety issue due to improper casting. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:06:01","cvss":9.8,"cvss_version":"3.1","epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-58823","summary":"In stpropnci_process_std of stpropnci_std.cc, there is a possible memory safety issue due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:18:02","euvd":{"id":"EUVD-2026-74024","description":"In stpropnci_process_std of stpropnci_std.cc, there is a possible memory safety issue due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:06:02","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-58839","summary":"In forEachLine of MountRegistry.cpp, there is a possible out of bounds read due to a buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:18:02","euvd":{"id":"EUVD-2026-74025","description":"In forEachLine of MountRegistry.cpp, there is a possible out of bounds read due to a buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:06:03","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-55273","summary":"In AppendCommentLine of AnnotationProcessor.cpp, there is a possible supply chain risk due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:18:01","euvd":{"id":"EUVD-2026-74017","description":"In AppendCommentLine of AnnotationProcessor.cpp, there is a possible supply chain risk due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:05:55","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-55277","summary":"In checkUiccListenConfigNeeded of RoutingManager.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":8.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:18:01","euvd":{"id":"EUVD-2026-74018","description":"In checkUiccListenConfigNeeded of RoutingManager.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:05:56","cvss":8.0,"cvss_version":"3.1","epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-55285","summary":"In openLogicalChannel of multiple files, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:18:01","euvd":{"id":"EUVD-2026-74019","description":"In openLogicalChannel of multiple files, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:05:57","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-55290","summary":"In setTo of ResourceTypes.cpp, there is a possible out-of-bounds heap read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:18:01","euvd":{"id":"EUVD-2026-74020","description":"In setTo of ResourceTypes.cpp, there is a possible out-of-bounds heap read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:05:58","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-55294","summary":"In ihevcd_get_tu_data_size of ihevcd_utils.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:18:01","euvd":{"id":"EUVD-2026-74021","description":"In ihevcd_get_tu_data_size of ihevcd_utils.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:05:59","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-55256","summary":"In parsePartHeaders of multiple files, there is a possible persistent denial of service due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:18:00","euvd":{"id":"EUVD-2026-74016","description":"In parsePartHeaders of multiple files, there is a possible persistent denial of service due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:05:54","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-49918","summary":"In multiple functions, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:59","euvd":{"id":"EUVD-2026-74011","description":"In multiple functions, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:05:48","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-49919","summary":"In tt_face_colr_blend_layer of ttcolr.c, there is a possible remote code execution due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:59","euvd":{"id":"EUVD-2026-74012","description":"In tt_face_colr_blend_layer of ttcolr.c, there is a possible remote code execution due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:05:50","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-49921","summary":"In multiple locations, there is a possible memory safety issue due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":9.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":9.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:59","euvd":{"id":"EUVD-2026-74013","description":"In multiple locations, there is a possible memory safety issue due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:05:51","cvss":9.8,"cvss_version":"3.1","epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-49927","summary":"In multiple locations, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:59","euvd":{"id":"EUVD-2026-74014","description":"In multiple locations, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:05:52","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-49932","summary":"In parseParts of PduParser.java, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:59","euvd":{"id":"EUVD-2026-74015","description":"In parseParts of PduParser.java, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:05:53","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-45528","summary":"In getManageSpaceActivityIntent of StorageManagerService.java, there is a possible LaunchAnyWhere chain due to an unsafe PendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:58","euvd":{"id":"EUVD-2026-74003","description":"In getManageSpaceActivityIntent of StorageManagerService.java, there is a possible LaunchAnyWhere chain due to an unsafe PendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.","published_time":"2026-09-08T18:05:40","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-45531","summary":"In read_boot_region of fsck.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:58","euvd":{"id":"EUVD-2026-74004","description":"In read_boot_region of fsck.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:05:41","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-49879","summary":"In multiple functions of rw_t3t.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:58","euvd":{"id":"EUVD-2026-74005","description":"In multiple functions of rw_t3t.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:05:42","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-49881","summary":"In serviceClassExists of InCallController.java, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:58","euvd":{"id":"EUVD-2026-74006","description":"In serviceClassExists of InCallController.java, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:05:43","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-49882","summary":"In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible memory safety issue due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:58","euvd":{"id":"EUVD-2026-74007","description":"In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible memory safety issue due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:05:44","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-49884","summary":"In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:58","euvd":{"id":"EUVD-2026-74008","description":"In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:05:45","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-49887","summary":"In maybeRemoveInvalidInstallerPackageName of InstallRepository.kt, there is a possible unauthorized app update due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:58","euvd":{"id":"EUVD-2026-74009","description":"In maybeRemoveInvalidInstallerPackageName of InstallRepository.kt, there is a possible unauthorized app update due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:05:46","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-49895","summary":"In get_eht_operation_channel_width of ieee802_11_common.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:58","euvd":{"id":"EUVD-2026-74010","description":"In get_eht_operation_channel_width of ieee802_11_common.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:05:47","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-28671","summary":"In updateInternal of MediaProvider.java, there is a possible expose contents of files due to a race condition. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:57","euvd":{"id":"EUVD-2026-73996","description":"In updateInternal of MediaProvider.java, there is a possible expose contents of files due to a race condition. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:05:32","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-45515","summary":"In a2dp_vendor_opus_decoder_decode_packet of a2dp_vendor_opus_decoder.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:57","euvd":{"id":"EUVD-2026-73997","description":"In a2dp_vendor_opus_decoder_decode_packet of a2dp_vendor_opus_decoder.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:05:33","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-45519","summary":"In screenArgsForPermissionCheckIfAny of multiple locations there is a possible risk of unauthorized access due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:57","euvd":{"id":"EUVD-2026-73998","description":"In screenArgsForPermissionCheckIfAny of multiple locations there is a possible risk of unauthorized access due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:05:34","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-45520","summary":"In onAttach of BiometricsSettingsBase.java, there is a possible authentication bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:57","euvd":{"id":"EUVD-2026-73999","description":"In onAttach of BiometricsSettingsBase.java, there is a possible authentication bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:05:35","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-45521","summary":"In openFile of AppFuseBridge.java, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:57","euvd":{"id":"EUVD-2026-74000","description":"In openFile of AppFuseBridge.java, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:05:37","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-45525","summary":"In multiple locations, there is a possible improper data sanitization due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:57","euvd":{"id":"EUVD-2026-74001","description":"In multiple locations, there is a possible improper data sanitization due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:05:38","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-45527","summary":"In convertCleanApertureToRect of HeifCleanAperture.cpp, there is a possible way to cause a temporary denial of service due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:57","euvd":{"id":"EUVD-2026-74002","description":"In convertCleanApertureToRect of HeifCleanAperture.cpp, there is a possible way to cause a temporary denial of service due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:05:39","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-28656","summary":"In multiple functions of DeviceAdminAdd.java, there is a possible way to an overlay due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/wear/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:56","euvd":{"id":"EUVD-2026-73987","description":"In multiple functions of DeviceAdminAdd.java, there is a possible way to an overlay due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.","published_time":"2026-09-08T18:05:22","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/wear/2026/2026-09-01"],"products":["Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-28657","summary":"In onActivityResult of AppWidgetConfigActivityProxy.java, there is a possible unauthorized URI permission grant due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:56","euvd":{"id":"EUVD-2026-73988","description":"In onActivityResult of AppWidgetConfigActivityProxy.java, there is a possible unauthorized URI permission grant due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:05:24","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-28658","summary":"In findMetaAuthUid of AccountsDb.java, there is a possible frp bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:56","euvd":{"id":"EUVD-2026-73989","description":"In findMetaAuthUid of AccountsDb.java, there is a possible frp bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:05:25","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-28660","summary":"In getAllSessions of multiple files, there is a possible confused deputy due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:56","euvd":{"id":"EUVD-2026-73990","description":"In getAllSessions of multiple files, there is a possible confused deputy due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:05:26","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-28662","summary":"In p2p_process_prov_disc_bootstrap_req of p2p_pd.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:56","euvd":{"id":"EUVD-2026-73991","description":"In p2p_process_prov_disc_bootstrap_req of p2p_pd.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:05:27","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-28663","summary":"In buildIntentSenderForUser of LauncherAppsService.java, there is a possible way to launch an activity from the background due to BAL Bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:56","euvd":{"id":"EUVD-2026-73992","description":"In buildIntentSenderForUser of LauncherAppsService.java, there is a possible way to launch an activity from the background due to BAL Bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:05:28","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-28664","summary":"In WriteImageToDisk of runtime_image.cc, there is a possible file tampering due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:56","euvd":{"id":"EUVD-2026-73993","description":"In WriteImageToDisk of runtime_image.cc, there is a possible file tampering due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:05:29","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-28666","summary":"In multiple functions of LocalImageResolver.java, there is a possible Remote Persistent Denial of Service due to a DNG image rendering check bypass. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:56","euvd":{"id":"EUVD-2026-73994","description":"In multiple functions of LocalImageResolver.java, there is a possible Remote Persistent Denial of Service due to a DNG image rendering check bypass. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:05:30","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-28668","summary":"In LimitRealloc of malloc_limit.cpp, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:56","euvd":{"id":"EUVD-2026-73995","description":"In LimitRealloc of malloc_limit.cpp, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:05:31","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-28634","summary":"In handleUssdRequest of PhoneInterfaceManager.java, there is a possible way to send a USSD request without permission due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:55","euvd":{"id":"EUVD-2026-73977","description":"In handleUssdRequest of PhoneInterfaceManager.java, there is a possible way to send a USSD request without permission due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:05:12","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-28636","summary":"In setupLayout of PickActivity.java, there is a possible bypass of the \"Install unknown apps\" security restriction due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:55","euvd":{"id":"EUVD-2026-73978","description":"In setupLayout of PickActivity.java, there is a possible bypass of the \"Install unknown apps\" security restriction due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:05:13","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-28638","summary":"In multiple functions of XmpDataParser.java, there is a possible improper data sanitization due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:55","euvd":{"id":"EUVD-2026-73979","description":"In multiple functions of XmpDataParser.java, there is a possible improper data sanitization due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:05:14","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-28639","summary":"In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:55","euvd":{"id":"EUVD-2026-73980","description":"In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:05:15","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-28642","summary":"In executeRequest of ActivityStarter.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:55","euvd":{"id":"EUVD-2026-73981","description":"In executeRequest of ActivityStarter.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:05:16","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-28644","summary":"In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:55","euvd":{"id":"EUVD-2026-73982","description":"In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:05:17","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-28650","summary":"In setHiddenWhileSuspended of WindowState.java, there is a possible overlay bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:55","euvd":{"id":"EUVD-2026-73983","description":"In setHiddenWhileSuspended of WindowState.java, there is a possible overlay bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:05:18","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-28652","summary":"In multiple functions of RangingServiceImpl.java, there is a possible MITM due to a missing permission check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:55","euvd":{"id":"EUVD-2026-73984","description":"In multiple functions of RangingServiceImpl.java, there is a possible MITM due to a missing permission check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:05:19","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-28653","summary":"In multiple functions of rw_t3t.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:55","euvd":{"id":"EUVD-2026-73985","description":"In multiple functions of rw_t3t.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:05:20","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-28655","summary":"In multiple functions of RemoteViews.java, there is a possible background activity launch bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:55","euvd":{"id":"EUVD-2026-73986","description":"In multiple functions of RemoteViews.java, there is a possible background activity launch bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:05:21","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-28620","summary":"In multiple locations, there is a possible unauthorized URI access due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:54","euvd":{"id":"EUVD-2026-73968","description":"In multiple locations, there is a possible unauthorized URI access due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:05:02","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-28622","summary":"In getQueryBuilderInternal of MediaProvider.java, there is a possible way to retrieve location metadata due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:54","euvd":{"id":"EUVD-2026-73969","description":"In getQueryBuilderInternal of MediaProvider.java, there is a possible way to retrieve location metadata due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:05:03","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-28623","summary":"In writeToParcel of BleRssiRangingCapabilities.java, there is a possible way to obtain the Bluetooth MAC address due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:54","euvd":{"id":"EUVD-2026-73970","description":"In writeToParcel of BleRssiRangingCapabilities.java, there is a possible way to obtain the Bluetooth MAC address due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:05:04","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-28624","summary":"In multiple locations, there is a possible read/write access to files without the proper permissions due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:54","euvd":{"id":"EUVD-2026-73971","description":"In multiple locations, there is a possible read/write access to files without the proper permissions due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:05:05","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-28626","summary":"In onCreate of SetupPassthroughActivity.java, there is a possible way to launch arbitrary activity due to Intent redirection . This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:54","euvd":{"id":"EUVD-2026-73972","description":"In onCreate of SetupPassthroughActivity.java, there is a possible way to launch arbitrary activity due to Intent redirection . This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.","published_time":"2026-09-08T18:05:06","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-28627","summary":"In btm_sec_encrypt_change of btm_sec.cc, there is a possible downgrade attack due to a logic error in the code. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:54","euvd":{"id":"EUVD-2026-73973","description":"In btm_sec_encrypt_change of btm_sec.cc, there is a possible downgrade attack due to a logic error in the code. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:05:07","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-28630","summary":"In onCreate of ContactsPickerActivity.kt, there is a possible misleading UI due to a tapjacking/overlay attack. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:54","euvd":{"id":"EUVD-2026-73974","description":"In onCreate of ContactsPickerActivity.kt, there is a possible misleading UI due to a tapjacking/overlay attack. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:05:08","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-28631","summary":"In buildMiniResolver of IntentForwarderActivity.java, there is a possible consent bypass due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:54","euvd":{"id":"EUVD-2026-73975","description":"In buildMiniResolver of IntentForwarderActivity.java, there is a possible consent bypass due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:05:10","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-28633","summary":"In initForUserNoTracing of VoiceInteractionManagerService.java, there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:54","euvd":{"id":"EUVD-2026-73976","description":"In initForUserNoTracing of VoiceInteractionManagerService.java, there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:05:11","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-28609","summary":"In read of MatroskaExtractor.cpp, there is a possible out-of-bounds write due to improper casting. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:53","euvd":{"id":"EUVD-2026-73960","description":"In read of MatroskaExtractor.cpp, there is a possible out-of-bounds write due to improper casting. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:04:54","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-28611","summary":"In multiple functions of NfcService.java, there is a possible silent payment session hijacking enablement due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:53","euvd":{"id":"EUVD-2026-73961","description":"In multiple functions of NfcService.java, there is a possible silent payment session hijacking enablement due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:04:55","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-28612","summary":"In resolveActivity of ActivityStarter.java, there is a possible way to perform Intent Redirection attacks due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:53","euvd":{"id":"EUVD-2026-73962","description":"In resolveActivity of ActivityStarter.java, there is a possible way to perform Intent Redirection attacks due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:04:56","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-28613","summary":"In initAppLinkTypeAndIntent of ChannelImpl.java, there is a possible launch an arbitrary intent due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:53","euvd":{"id":"EUVD-2026-73963","description":"In initAppLinkTypeAndIntent of ChannelImpl.java, there is a possible launch an arbitrary intent due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.","published_time":"2026-09-08T18:04:57","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-28614","summary":"In onCreate of SlicePermissionActivity.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:53","euvd":{"id":"EUVD-2026-73964","description":"In onCreate of SlicePermissionActivity.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:04:58","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-28616","summary":"In Setup Wizard, there is a possible way to force connection to a malicious network due to confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:53","euvd":{"id":"EUVD-2026-73965","description":"In Setup Wizard, there is a possible way to force connection to a malicious network due to confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:04:59","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-28617","summary":"In add of WifiNetworkSuggestionsManager.java, there is a possible persistent DOS due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:53","euvd":{"id":"EUVD-2026-73966","description":"In add of WifiNetworkSuggestionsManager.java, there is a possible persistent DOS due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:05:00","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-28618","summary":"In dec_frm_prepare of oapv.c, there is a possible OOB write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:53","euvd":{"id":"EUVD-2026-73967","description":"In dec_frm_prepare of oapv.c, there is a possible OOB write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:05:01","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-28593","summary":"In getItemList of SettingsFragment.java, there is a possible user interaction bypass due to misleading or insufficient UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:52","euvd":{"id":"EUVD-2026-73950","description":"In getItemList of SettingsFragment.java, there is a possible user interaction bypass due to misleading or insufficient UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:04:43","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-28594","summary":"In multiple locations, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:52","euvd":{"id":"EUVD-2026-73951","description":"In multiple locations, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:04:44","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-28596","summary":"In parseInterventionFromXml of GameManagerService.java, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:52","euvd":{"id":"EUVD-2026-73952","description":"In parseInterventionFromXml of GameManagerService.java, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:04:45","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-28599","summary":"In addCreatorToken of ActivityManagerService.java, there is a possible Intent Redirection Bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:52","euvd":{"id":"EUVD-2026-73953","description":"In addCreatorToken of ActivityManagerService.java, there is a possible Intent Redirection Bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:04:46","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-28600","summary":"In onCreate of PaymentDefaultDialog.java, there is a possible way to change default payment app due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:52","euvd":{"id":"EUVD-2026-73954","description":"In onCreate of PaymentDefaultDialog.java, there is a possible way to change default payment app due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:04:47","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-28602","summary":"In setClipboardAccessNotificationsEnabledForUser of ClipboardService.java, there is a possible mult-iuser isolation due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:52","euvd":{"id":"EUVD-2026-73955","description":"In setClipboardAccessNotificationsEnabledForUser of ClipboardService.java, there is a possible mult-iuser isolation due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:04:48","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-28603","summary":"In assertSafeToStartCustomActivity of AppRestrictionsFragment.java, there is a possible read/write access to private files due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:52","euvd":{"id":"EUVD-2026-73956","description":"In assertSafeToStartCustomActivity of AppRestrictionsFragment.java, there is a possible read/write access to private files due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:04:49","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-28604","summary":"In multiple locations, there is a possible use after free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:52","euvd":{"id":"EUVD-2026-73957","description":"In multiple locations, there is a possible use after free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:04:50","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-28606","summary":"In handleBondStateChanged of AdapterService.java, there is a possible way to skip pairing due to a logic error in the code. This could lead to remote escalation of privilege without user consent with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:52","euvd":{"id":"EUVD-2026-73958","description":"In handleBondStateChanged of AdapterService.java, there is a possible way to skip pairing due to a logic error in the code. This could lead to remote escalation of privilege without user consent with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:04:51","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-28607","summary":"In multiple functions in multiple locations, there is a possible background activity launch bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:52","euvd":{"id":"EUVD-2026-73959","description":"In multiple functions in multiple locations, there is a possible background activity launch bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:04:52","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-28572","summary":"In onCreate of InstallLaunch.kt, there is a possible misleading UI due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:51","euvd":{"id":"EUVD-2026-73945","description":"In onCreate of InstallLaunch.kt, there is a possible misleading UI due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:04:35","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-28582","summary":"In onCreate of ConfirmDeviceCredentialActivity.java, there is a possible unauthorized access to and modification of device credentials due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:51","euvd":{"id":"EUVD-2026-73946","description":"In onCreate of ConfirmDeviceCredentialActivity.java, there is a possible unauthorized access to and modification of device credentials due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:04:39","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-28583","summary":"In validate_camera_metadata_structure of camera_metadata.c, there is a possible out of bounds write due to a logical error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:51","euvd":{"id":"EUVD-2026-73947","description":"In validate_camera_metadata_structure of camera_metadata.c, there is a possible out of bounds write due to a logical error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:04:40","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-28584","summary":"In createSessionInternal of PackageInstallerService.java, there is a possible way to permanently DoS the device due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:51","euvd":{"id":"EUVD-2026-73948","description":"In createSessionInternal of PackageInstallerService.java, there is a possible way to permanently DoS the device due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:04:41","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-28590","summary":"In multiple locations, there is a possible improper encryption key validation due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:51","euvd":{"id":"EUVD-2026-73949","description":"In multiple locations, there is a possible improper encryption key validation due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:04:42","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-0084","summary":"In multiple functions of HostEmulationManager.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:50","euvd":{"id":"EUVD-2026-74048","description":"In multiple functions of HostEmulationManager.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:04:34","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-0054","summary":"In isCallerAllowed of WalletContextualLocationsService.kt, there is a possible way to get wallet information due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:49","euvd":{"id":"EUVD-2026-74046","description":"In isCallerAllowed of WalletContextualLocationsService.kt, there is a possible way to get wallet information due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:04:32","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-0065","summary":"In areBackgroundActivityStartsAllowed of BackgroundLaunchProcessController.java, there is a possible unintended way to launch activities in the background due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.","cvss":null,"cvss_version":null,"cvss_v2":null,"cvss_v3":null,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T19:17:49","euvd":{"id":"EUVD-2026-74047","description":"In areBackgroundActivityStartsAllowed of BackgroundLaunchProcessController.java, there is a possible unintended way to launch activities in the background due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.","published_time":"2026-09-08T18:04:33","cvss":0.0,"cvss_version":null,"epss":0.0,"assigner":"google_android","references":["https://source.android.com/docs/security/bulletin/2026/2026-09-01"],"products":["Android","Android","Android","Android"],"vendors":["Google"]}},{"cve_id":"CVE-2026-9216","summary":"An insufficient input validation vulnerability in the listed NETGEAR RAX series models allows a network-adjacent attacker having network access (such as WiFi credentials) to crash the router's management UI. There is no confidentiality or integrity impact. A crash of the router's management UI does not impact the availability of the router's core services like WiFi network.","cvss":3.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":3.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://www.netgear.com/support/product/rax30","https://www.netgear.com/support/product/rax35","https://www.netgear.com/support/product/rax38","https://www.netgear.com/support/product/rax40","https://www.netgear.com/support/product/raxe300"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:21:18","euvd":{"id":"EUVD-2026-73164","description":"An insufficient input validation vulnerability in the listed NETGEAR RAX series models allows a network-adjacent attacker having network access (such as WiFi credentials) to crash the router's management UI. There is no confidentiality or integrity impact. A crash of the router's management UI does not impact the availability of the router's core services like WiFi network.","published_time":"2026-09-08T17:09:12","cvss":3.5,"cvss_version":"3.1","epss":0.0,"assigner":"NETGEAR","references":["https://www.netgear.com/support/product/rax30","https://www.netgear.com/support/product/rax35","https://www.netgear.com/support/product/rax38","https://www.netgear.com/support/product/rax40","https://www.netgear.com/support/product/raxe300"],"products":["RAX38","RAX30","RAXE300","RAX40","RAX35"],"vendors":["Netgear"]}},{"cve_id":"CVE-2026-86669","summary":"A vulnerability was detected in aircheng-org iWebShop-5 up to 5.15. This affects the function Login of the file controllers/systemseller.php. Performing a manipulation of the argument Name results in improper authentication. It is possible to initiate the attack remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.","cvss":5.5,"cvss_version":4.0,"cvss_v2":7.5,"cvss_v3":7.3,"cvss_v4":5.5,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://github.com/aircheng-org/iWebShop-5/","https://github.com/aircheng-org/iWebShop-5/issues/6","https://vuldb.com/cve/CVE-2026-86669","https://vuldb.com/submit/908927","https://vuldb.com/vuln/399760","https://vuldb.com/vuln/399760/cti"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:21:17","euvd":{"id":"EUVD-2026-73449","description":"A vulnerability was detected in aircheng-org iWebShop-5 up to 5.15. This affects the function Login of the file controllers/systemseller.php. Performing a manipulation of the argument Name results in improper authentication. It is possible to initiate the attack remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.","published_time":"2026-09-08T17:15:06","cvss":6.9,"cvss_version":"4.0","epss":0.0,"assigner":"VulDB","references":["https://vuldb.com/vuln/399760","https://vuldb.com/vuln/399760/cti","https://vuldb.com/cve/CVE-2026-86669","https://vuldb.com/submit/908927","https://github.com/aircheng-org/iWebShop-5/issues/6","https://github.com/aircheng-org/iWebShop-5/"],"products":["iWebShop-5","iWebShop-5","iWebShop-5","iWebShop-5","iWebShop-5","iWebShop-5","iWebShop-5","iWebShop-5","iWebShop-5","iWebShop-5","iWebShop-5","iWebShop-5","iWebShop-5","iWebShop-5","iWebShop-5","iWebShop-5"],"vendors":["aircheng-org"]}},{"cve_id":"CVE-2026-86670","summary":"A flaw has been found in aircheng-org iWebShop-5 up to 5.15. This impacts an unknown function of the file controllers/admin.php of the component Authentication Storage. Executing a manipulation of the argument Password can lead to password hash with insufficient computational effort. It is possible to launch the attack remotely. A high complexity level is associated with this attack. The exploitability is said to be difficult. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.","cvss":2.9,"cvss_version":4.0,"cvss_v2":2.6,"cvss_v3":3.7,"cvss_v4":2.9,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://github.com/aircheng-org/iWebShop-5/","https://github.com/aircheng-org/iWebShop-5/issues/7","https://vuldb.com/cve/CVE-2026-86670","https://vuldb.com/submit/908928","https://vuldb.com/vuln/399761","https://vuldb.com/vuln/399761/cti"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:21:17","euvd":{"id":"EUVD-2026-73927","description":"A flaw has been found in aircheng-org iWebShop-5 up to 5.15. This impacts an unknown function of the file controllers/admin.php of the component Authentication Storage. Executing a manipulation of the argument Password can lead to password hash with insufficient computational effort. It is possible to launch the attack remotely. A high complexity level is associated with this attack. The exploitability is said to be difficult. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.","published_time":"2026-09-08T17:30:14","cvss":6.3,"cvss_version":"4.0","epss":0.0,"assigner":"VulDB","references":["https://vuldb.com/vuln/399761","https://vuldb.com/vuln/399761/cti","https://vuldb.com/cve/CVE-2026-86670","https://vuldb.com/submit/908928","https://github.com/aircheng-org/iWebShop-5/issues/7","https://github.com/aircheng-org/iWebShop-5/"],"products":["iWebShop-5","iWebShop-5","iWebShop-5","iWebShop-5","iWebShop-5","iWebShop-5","iWebShop-5","iWebShop-5","iWebShop-5","iWebShop-5","iWebShop-5","iWebShop-5","iWebShop-5","iWebShop-5","iWebShop-5","iWebShop-5"],"vendors":["aircheng-org"]}},{"cve_id":"CVE-2026-86672","summary":"A vulnerability has been found in ningzichun Student Management System up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected is an unknown function of the file example.7z of the component Backup Handler. The manipulation leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.","cvss":5.5,"cvss_version":4.0,"cvss_v2":5.0,"cvss_v3":5.3,"cvss_v4":5.5,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://github.com/ningzichun/student-management-system/issues/14","https://vuldb.com/cve/CVE-2026-86672","https://vuldb.com/submit/908930","https://vuldb.com/vuln/399762","https://vuldb.com/vuln/399762/cti"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:21:17","euvd":{"id":"EUVD-2026-73933","description":"A vulnerability has been found in ningzichun Student Management System up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected is an unknown function of the file example.7z of the component Backup Handler. The manipulation leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.","published_time":"2026-09-08T17:45:07","cvss":6.9,"cvss_version":"4.0","epss":0.0,"assigner":"VulDB","references":["https://vuldb.com/vuln/399762","https://vuldb.com/vuln/399762/cti","https://vuldb.com/cve/CVE-2026-86672","https://vuldb.com/submit/908930","https://github.com/ningzichun/student-management-system/issues/14"],"products":["Student Management System"],"vendors":["ningzichun"]}},{"cve_id":"CVE-2026-86673","summary":"A vulnerability was determined in ningzichun Student Management System up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected by this issue is the function mysqli_connect of the file config/database.php of the component Database Connection. This manipulation causes hard-coded credentials. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The project was informed of the problem early through an issue report but has not responded yet.","cvss":5.5,"cvss_version":4.0,"cvss_v2":7.5,"cvss_v3":7.3,"cvss_v4":5.5,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://github.com/ningzichun/student-management-system/issues/15","https://vuldb.com/cve/CVE-2026-86673","https://vuldb.com/submit/908932","https://vuldb.com/vuln/399764","https://vuldb.com/vuln/399764/cti"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:21:17","euvd":{"id":"EUVD-2026-74045","description":"A vulnerability was determined in ningzichun Student Management System up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected by this issue is the function mysqli_connect of the file config/database.php of the component Database Connection. This manipulation causes hard-coded credentials. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The project was informed of the problem early through an issue report but has not responded yet.","published_time":"2026-09-08T18:00:08","cvss":6.9,"cvss_version":"4.0","epss":0.0,"assigner":"VulDB","references":["https://vuldb.com/vuln/399764","https://vuldb.com/vuln/399764/cti","https://vuldb.com/cve/CVE-2026-86673","https://vuldb.com/submit/908932","https://github.com/ningzichun/student-management-system/issues/15"],"products":["Student Management System"],"vendors":["ningzichun"]}},{"cve_id":"CVE-2026-9215","summary":"A cross site request forgery (CSRF) vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering techniques on a router administrator to tamper with router configuration and disrupt router operations with active assistance from the router administrator. There is no confidentiality impact due to this vulnerability.","cvss":6.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://www.netgear.com/support/product/xr1000","https://www.netgear.com/support/product/xr1000v2","https://www.netgear.com/support/product/xr500"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:21:17","euvd":{"id":"EUVD-2026-73163","description":"A cross site request forgery (CSRF) vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering techniques on a router administrator to tamper with router configuration and disrupt router operations with active assistance from the router administrator. There is no confidentiality impact due to this vulnerability.","published_time":"2026-09-08T17:06:47","cvss":6.4,"cvss_version":"3.1","epss":0.0,"assigner":"NETGEAR","references":["https://www.netgear.com/support/product/xr500","https://www.netgear.com/support/product/xr1000","https://www.netgear.com/support/product/xr1000v2"],"products":["XR500","XR1000","XR1000v2"],"vendors":["Netgear"]}},{"cve_id":"CVE-2026-85880","summary":"Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":true,"propose_action":"Microsoft Windows Advanced Local Procedure Call contains a heap-based buffer overflow vulnerability that allows an attacker to elevate privileges locally.","ransomware_campaign":"Unknown","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85880","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-85880"],"vendor":"microsoft","product":"windows_10_1607","version":null,"published_time":"2026-09-08T18:21:14","euvd":{"id":"EUVD-2026-73365","description":"Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:14:21","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85880"],"products":["Windows Server 2012 R2 (Server Core installation)","Windows Server 2016","Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows 10 Version 22H2","Windows Server 2022","Windows Server 2016 (Server Core installation)","Windows Server 2019 (Server Core installation)","Windows 10 Version 21H2","Windows Server 2019","Windows 10 Version 1607","Windows Server 2012 R2","Windows 10 Version 1809"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-85880","summary":"Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":true,"propose_action":"Microsoft Windows Advanced Local Procedure Call contains a heap-based buffer overflow vulnerability that allows an attacker to elevate privileges locally.","ransomware_campaign":"Unknown","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85880","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-85880"],"vendor":"microsoft","product":"windows_10_1809","version":null,"published_time":"2026-09-08T18:21:14","euvd":{"id":"EUVD-2026-73365","description":"Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:14:21","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85880"],"products":["Windows Server 2012 R2 (Server Core installation)","Windows Server 2016","Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows 10 Version 22H2","Windows Server 2022","Windows Server 2016 (Server Core installation)","Windows Server 2019 (Server Core installation)","Windows 10 Version 21H2","Windows Server 2019","Windows 10 Version 1607","Windows Server 2012 R2","Windows 10 Version 1809"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-85880","summary":"Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":true,"propose_action":"Microsoft Windows Advanced Local Procedure Call contains a heap-based buffer overflow vulnerability that allows an attacker to elevate privileges locally.","ransomware_campaign":"Unknown","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85880","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-85880"],"vendor":"microsoft","product":"windows_10_21h2","version":null,"published_time":"2026-09-08T18:21:14","euvd":{"id":"EUVD-2026-73365","description":"Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:14:21","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85880"],"products":["Windows Server 2012 R2 (Server Core installation)","Windows Server 2016","Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows 10 Version 22H2","Windows Server 2022","Windows Server 2016 (Server Core installation)","Windows Server 2019 (Server Core installation)","Windows 10 Version 21H2","Windows Server 2019","Windows 10 Version 1607","Windows Server 2012 R2","Windows 10 Version 1809"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-85880","summary":"Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":true,"propose_action":"Microsoft Windows Advanced Local Procedure Call contains a heap-based buffer overflow vulnerability that allows an attacker to elevate privileges locally.","ransomware_campaign":"Unknown","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85880","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-85880"],"vendor":"microsoft","product":"windows_10_22h2","version":null,"published_time":"2026-09-08T18:21:14","euvd":{"id":"EUVD-2026-73365","description":"Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:14:21","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85880"],"products":["Windows Server 2012 R2 (Server Core installation)","Windows Server 2016","Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows 10 Version 22H2","Windows Server 2022","Windows Server 2016 (Server Core installation)","Windows Server 2019 (Server Core installation)","Windows 10 Version 21H2","Windows Server 2019","Windows 10 Version 1607","Windows Server 2012 R2","Windows 10 Version 1809"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-85880","summary":"Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":true,"propose_action":"Microsoft Windows Advanced Local Procedure Call contains a heap-based buffer overflow vulnerability that allows an attacker to elevate privileges locally.","ransomware_campaign":"Unknown","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85880","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-85880"],"vendor":"microsoft","product":"windows_server_2012","version":null,"published_time":"2026-09-08T18:21:14","euvd":{"id":"EUVD-2026-73365","description":"Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:14:21","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85880"],"products":["Windows Server 2012 R2 (Server Core installation)","Windows Server 2016","Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows 10 Version 22H2","Windows Server 2022","Windows Server 2016 (Server Core installation)","Windows Server 2019 (Server Core installation)","Windows 10 Version 21H2","Windows Server 2019","Windows 10 Version 1607","Windows Server 2012 R2","Windows 10 Version 1809"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-85880","summary":"Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":true,"propose_action":"Microsoft Windows Advanced Local Procedure Call contains a heap-based buffer overflow vulnerability that allows an attacker to elevate privileges locally.","ransomware_campaign":"Unknown","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85880","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-85880"],"vendor":"microsoft","product":"windows_server_2016","version":null,"published_time":"2026-09-08T18:21:14","euvd":{"id":"EUVD-2026-73365","description":"Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:14:21","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85880"],"products":["Windows Server 2012 R2 (Server Core installation)","Windows Server 2016","Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows 10 Version 22H2","Windows Server 2022","Windows Server 2016 (Server Core installation)","Windows Server 2019 (Server Core installation)","Windows 10 Version 21H2","Windows Server 2019","Windows 10 Version 1607","Windows Server 2012 R2","Windows 10 Version 1809"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-85880","summary":"Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":true,"propose_action":"Microsoft Windows Advanced Local Procedure Call contains a heap-based buffer overflow vulnerability that allows an attacker to elevate privileges locally.","ransomware_campaign":"Unknown","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85880","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-85880"],"vendor":"microsoft","product":"windows_server_2019","version":null,"published_time":"2026-09-08T18:21:14","euvd":{"id":"EUVD-2026-73365","description":"Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:14:21","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85880"],"products":["Windows Server 2012 R2 (Server Core installation)","Windows Server 2016","Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows 10 Version 22H2","Windows Server 2022","Windows Server 2016 (Server Core installation)","Windows Server 2019 (Server Core installation)","Windows 10 Version 21H2","Windows Server 2019","Windows 10 Version 1607","Windows Server 2012 R2","Windows 10 Version 1809"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-85880","summary":"Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":true,"propose_action":"Microsoft Windows Advanced Local Procedure Call contains a heap-based buffer overflow vulnerability that allows an attacker to elevate privileges locally.","ransomware_campaign":"Unknown","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85880","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-85880"],"vendor":"microsoft","product":"windows_server_2022","version":null,"published_time":"2026-09-08T18:21:14","euvd":{"id":"EUVD-2026-73365","description":"Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:14:21","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85880"],"products":["Windows Server 2012 R2 (Server Core installation)","Windows Server 2016","Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows 10 Version 22H2","Windows Server 2022","Windows Server 2016 (Server Core installation)","Windows Server 2019 (Server Core installation)","Windows 10 Version 21H2","Windows Server 2019","Windows 10 Version 1607","Windows Server 2012 R2","Windows 10 Version 1809"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-86074","summary":"n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the Instance AI credential setup flow accepted a credential test or verification URL without checking that it matched the workflow node's origin. Attacker-controlled fetched content could influence that URL after a user injected it into the setup flow, causing authenticated requests, redirects, or probes to reach another origin. The affected logic includes packages/@n8n/instance-ai/src/tools/workflows/credential-utils.ts and the extractServiceOrigin origin derivation. This issue is fixed in versions 2.37.7 and 2.38.2.","cvss":5.9,"cvss_version":4.0,"cvss_v2":null,"cvss_v3":null,"cvss_v4":5.9,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://github.com/n8n-io/n8n/releases/tag/n8n@2.37.7","https://github.com/n8n-io/n8n/releases/tag/n8n@2.38.2","https://github.com/n8n-io/n8n/security/advisories/GHSA-q5wm-mgqx-fv2f"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:21:14","euvd":{"id":"EUVD-2026-73930","description":"n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the Instance AI credential setup flow accepted a credential test or verification URL without checking that it matched the workflow node's origin. Attacker-controlled fetched content could influence that URL after a user injected it into the setup flow, causing authenticated requests, redirects, or probes to reach another origin. The affected logic includes packages/@n8n/instance-ai/src/tools/workflows/credential-utils.ts and the extractServiceOrigin origin derivation. This issue is fixed in versions 2.37.7 and 2.38.2.","published_time":"2026-09-08T17:38:11","cvss":5.9,"cvss_version":"4.0","epss":0.0,"assigner":"GitHub_M","references":["https://github.com/n8n-io/n8n/security/advisories/GHSA-q5wm-mgqx-fv2f","https://github.com/n8n-io/n8n/releases/tag/n8n@2.37.7","https://github.com/n8n-io/n8n/releases/tag/n8n@2.38.2"],"products":["n8n","n8n"],"vendors":["n8n-io"]}},{"cve_id":"CVE-2026-85875","summary":"Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85875"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:21:13","euvd":{"id":"EUVD-2026-73919","description":"Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.","published_time":"2026-09-08T17:19:30","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85875"],"products":["Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC 2021","Microsoft Office 2019","Microsoft Excel 2016","Microsoft Office LTSC for Mac 2024","Microsoft Office LTSC 2024","Microsoft Office 365 for Mac","Microsoft 365 Apps for Enterprise","Microsoft Office 2016"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-85877","summary":"Heap-based buffer overflow in Windows Print Spooler Components allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85877"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:21:13","euvd":{"id":"EUVD-2026-73364","description":"Heap-based buffer overflow in Windows Print Spooler Components allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:14:20","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85877"],"products":["Windows 11 Version 24H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-85360","summary":"Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.","cvss":7.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85360"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:21:12","euvd":{"id":"EUVD-2026-73174","description":"Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:10:37","cvss":7.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85360"],"products":["Windows Server 2022","Windows Server 2012 R2","Windows Server 2025","Windows 11 Version 25H2","Windows 10 Version 1607","Windows 11 version 26H1","Windows Server 2016 (Server Core installation)","Windows Server 2016","Windows Server 2012 R2 (Server Core installation)","Windows 11 Version 23H2","Windows 10 Version 22H2","Windows Server 2025 (Server Core installation)","Windows Server 2019","Windows Server 2019 (Server Core installation)","Windows 10 Version 21H2","Windows 11 Version 24H2","Windows 10 Version 1809","Windows Server 2012","Windows Server 2012 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-84001","summary":"Out-of-bounds read in Windows Key Distribution Center allows an unauthorized attacker to deny service over a network.","cvss":7.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84001"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:21:11","euvd":{"id":"EUVD-2026-73363","description":"Out-of-bounds read in Windows Key Distribution Center allows an unauthorized attacker to deny service over a network.","published_time":"2026-09-08T17:14:20","cvss":7.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84001"],"products":["Windows Server 2019 (Server Core installation)","Windows Server 2019","Windows Server 2012 (Server Core installation)","Windows Server 2025","Windows 10 Version 1809","Windows Server 2016 (Server Core installation)","Windows 10 Version 1607","Windows Server 2012 R2","Windows 11 Version 24H2","Windows Server 2016","Windows Server 2012 R2 (Server Core installation)","Windows Server 2025 (Server Core installation)","Windows 11 Version 25H2","Windows 11 Version 23H2","Windows 11 version 26H1","Windows 10 Version 21H2","Windows Server 2022","Windows 10 Version 22H2","Windows Server 2012"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-84003","summary":"Authentication bypass by capture-replay in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to perform spoofing over a network.","cvss":7.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84003"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:21:11","euvd":{"id":"EUVD-2026-73922","description":"Authentication bypass by capture-replay in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to perform spoofing over a network.","published_time":"2026-09-08T17:19:32","cvss":7.4,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84003"],"products":["Microsoft Authentication Library"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-83995","summary":"Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83995"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:21:10","euvd":{"id":"EUVD-2026-73915","description":"Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:19:28","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83995"],"products":["Windows Server 2012 R2 (Server Core installation)","Windows Server 2012 R2","Windows Server 2022","Windows 11 Version 25H2","Windows 11 Version 24H2","Windows Server 2016 (Server Core installation)","Windows Server 2019 (Server Core installation)","Windows 10 Version 1809","Windows 11 Version 23H2","Windows Server 2016","Windows Server 2025 (Server Core installation)","Windows Server 2019","Windows Server 2012 (Server Core installation)","Windows 10 Version 22H2","Windows Server 2025","Windows 11 version 26H1","Windows 10 Version 21H2","Windows Server 2012","Windows 10 Version 1607"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-83996","summary":"Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83996"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:21:10","euvd":{"id":"EUVD-2026-73360","description":"Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:14:17","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83996"],"products":["Windows Server 2012 (Server Core installation)","Windows Server 2012","Windows Server 2025","Windows Server 2022","Windows Server 2012 R2","Windows 11 Version 24H2","Windows 10 Version 1809","Windows 10 Version 21H2","Windows 11 Version 25H2","Windows 11 Version 23H2","Windows Server 2019","Windows 10 Version 22H2","Windows Server 2025 (Server Core installation)","Windows Server 2016 (Server Core installation)","Windows 10 Version 1607","Windows 11 version 26H1","Windows Server 2016","Windows Server 2012 R2 (Server Core installation)","Windows Server 2019 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-83997","summary":"Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.","cvss":8.1,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.1,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83997"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:21:10","euvd":{"id":"EUVD-2026-73916","description":"Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:19:28","cvss":8.1,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83997"],"products":["Windows 11 Version 25H2","Windows Server 2022","Windows 11 Version 24H2","Windows 10 Version 21H2","Windows 10 Version 22H2","Windows Server 2025 (Server Core installation)","Windows Server 2025","Windows 11 version 26H1","Windows 11 Version 23H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-83998","summary":"Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83998"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:21:10","euvd":{"id":"EUVD-2026-73361","description":"Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:14:18","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83998"],"products":["Windows Server 2016 (Server Core installation)","Windows 11 version 26H1","Windows Server 2025 (Server Core installation)","Windows 10 Version 1607","Windows 11 Version 25H2","Windows Server 2022","Windows 10 Version 22H2","Windows Server 2019 (Server Core installation)","Windows 10 Version 21H2","Windows Server 2016","Windows Server 2025","Windows Server 2019","Windows 10 Version 1809","Windows 11 Version 23H2","Windows 11 Version 24H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-83999","summary":"Improper link resolution before file access ('link following') in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to elevate privileges locally.","cvss":7.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83999"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:21:10","euvd":{"id":"EUVD-2026-73362","description":"Improper link resolution before file access ('link following') in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:14:19","cvss":7.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83999"],"products":["Windows Server 2025","Windows 11 version 26H1","Windows 11 Version 25H2","Windows 11 Version 24H2","Windows Server 2025 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-84000","summary":"Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to execute code locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84000"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:21:10","euvd":{"id":"EUVD-2026-73917","description":"Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to execute code locally.","published_time":"2026-09-08T17:19:29","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84000"],"products":["Windows Server 2012 R2","Windows 11 Version 24H2","Windows 10 Version 21H2","Windows 10 Version 1809","Windows Server 2016 (Server Core installation)","Windows Server 2025 (Server Core installation)","Windows 10 Version 1607","Windows Server 2022","Windows 11 Version 23H2","Windows Server 2019 (Server Core installation)","Windows Server 2012 (Server Core installation)","Windows Server 2019","Windows Server 2012 R2 (Server Core installation)","Windows Server 2025","Windows 11 version 26H1","Windows Server 2016","Windows Server 2012","Windows 11 Version 25H2","Windows 10 Version 22H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-83986","summary":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83986"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:21:09","euvd":{"id":"EUVD-2026-73351","description":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:14:08","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83986"],"products":["Windows Server 2019","Windows 10 Version 1809","Windows Server 2016","Windows 11 Version 24H2","Windows Server 2025 (Server Core installation)","Windows 10 Version 1607","Windows 11 Version 25H2","Windows 11 version 26H1","Windows Server 2019 (Server Core installation)","Windows Server 2022","Windows Server 2016 (Server Core installation)","Windows Server 2025","Windows 10 Version 21H2","Windows 11 Version 23H2","Windows 10 Version 22H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-83987","summary":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83987"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:21:09","euvd":{"id":"EUVD-2026-73909","description":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:19:24","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83987"],"products":["Windows 10 Version 1607","Windows 10 Version 22H2","Windows 11 Version 25H2","Windows Server 2019 (Server Core installation)","Windows 10 Version 21H2","Windows Server 2019","Windows Server 2025 (Server Core installation)","Windows Server 2025","Windows Server 2022","Windows 11 Version 24H2","Windows 10 Version 1809","Windows 11 Version 23H2","Windows Server 2016","Windows 11 version 26H1","Windows Server 2016 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-83988","summary":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83988"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:21:09","euvd":{"id":"EUVD-2026-73353","description":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:14:10","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83988"],"products":["Windows Server 2025","Windows 11 version 26H1","Windows 10 Version 21H2","Windows Server 2022","Windows 10 Version 1607","Windows Server 2019 (Server Core installation)","Windows Server 2016","Windows 11 Version 24H2","Windows Server 2019","Windows 11 Version 23H2","Windows Server 2016 (Server Core installation)","Windows 11 Version 25H2","Windows 10 Version 22H2","Windows 10 Version 1809","Windows Server 2025 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-83989","summary":"Out-of-bounds read in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to deny service over a network.","cvss":7.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83989"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:21:09","euvd":{"id":"EUVD-2026-73912","description":"Out-of-bounds read in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to deny service over a network.","published_time":"2026-09-08T17:19:26","cvss":7.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83989"],"products":["Windows Server 2012","Windows 10 Version 1809","Windows Server 2016","Windows 11 Version 24H2","Windows 11 Version 25H2","Windows 11 Version 23H2","Windows Server 2012 R2","Windows Server 2022","Windows Server 2012 (Server Core installation)","Windows Server 2019 (Server Core installation)","Windows 10 Version 1607","Windows Server 2019","Windows Server 2025 (Server Core installation)","Windows 11 version 26H1","Windows 10 Version 21H2","Windows Server 2016 (Server Core installation)","Windows Server 2025","Windows Server 2012 R2 (Server Core installation)","Windows 10 Version 22H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-83990","summary":"Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83990"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:21:09","euvd":{"id":"EUVD-2026-73913","description":"Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:19:26","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83990"],"products":["Windows Server 2025","Windows Server 2025 (Server Core installation)","Windows 11 Version 23H2","Windows 11 Version 24H2","Windows 11 Version 25H2","Windows Server 2022","Windows 11 version 26H1"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-83991","summary":"Missing authentication for critical function in Windows Cloud Files Mini Filter Driver allows an authorized attacker to perform tampering locally.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83991"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:21:09","euvd":{"id":"EUVD-2026-73359","description":"Missing authentication for critical function in Windows Cloud Files Mini Filter Driver allows an authorized attacker to perform tampering locally.","published_time":"2026-09-08T17:14:16","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83991"],"products":["Windows 10 Version 21H2","Windows Server 2022","Windows 11 version 26H1","Windows 11 Version 24H2","Windows Server 2019 (Server Core installation)","Windows Server 2025 (Server Core installation)","Windows Server 2019","Windows 11 Version 23H2","Windows 10 Version 22H2","Windows 11 Version 25H2","Windows Server 2025","Windows 10 Version 1809"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-83992","summary":"Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83992"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:21:09","euvd":{"id":"EUVD-2026-73914","description":"Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:19:27","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83992"],"products":["Windows Server 2016 (Server Core installation)","Windows 11 Version 24H2","Windows 11 Version 23H2","Windows 10 Version 22H2","Windows Server 2012","Windows Server 2022","Windows Server 2019 (Server Core installation)","Windows Server 2012 R2","Windows Server 2019","Windows Server 2012 R2 (Server Core installation)","Windows 10 Version 1607","Windows 10 Version 21H2","Windows Server 2025","Windows 10 Version 1809","Windows Server 2016","Windows Server 2012 (Server Core installation)","Windows 11 version 26H1","Windows 11 Version 25H2","Windows Server 2025 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-83979","summary":"Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83979"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:21:08","euvd":{"id":"EUVD-2026-73354","description":"Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:14:11","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83979"],"products":["Windows 10 Version 21H2","Windows Server 2022","Windows Server 2016","Windows 11 version 26H1","Windows Server 2019","Windows 10 Version 1809","Windows Server 2025","Windows 11 Version 24H2","Windows 10 Version 1607","Windows Server 2025 (Server Core installation)","Windows Server 2016 (Server Core installation)","Windows 11 Version 25H2","Windows 10 Version 22H2","Windows Server 2019 (Server Core installation)","Windows 11 Version 23H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-83980","summary":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83980"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:21:08","euvd":{"id":"EUVD-2026-73908","description":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:19:24","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83980"],"products":["Windows Server 2016 (Server Core installation)","Windows Server 2022","Windows 11 version 26H1","Windows 11 Version 24H2","Windows Server 2025","Windows Server 2019 (Server Core installation)","Windows 10 Version 21H2","Windows Server 2025 (Server Core installation)","Windows Server 2019","Windows 11 Version 25H2","Windows 10 Version 1607","Windows 11 Version 23H2","Windows 10 Version 1809","Windows Server 2016","Windows 10 Version 22H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-83981","summary":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83981"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:21:08","euvd":{"id":"EUVD-2026-73904","description":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:19:21","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83981"],"products":["Windows Server 2019 (Server Core installation)","Windows 11 version 26H1","Windows Server 2019","Windows 11 Version 24H2","Windows Server 2016","Windows Server 2016 (Server Core installation)","Windows 11 Version 25H2","Windows 10 Version 21H2","Windows 10 Version 22H2","Windows 10 Version 1607","Windows 11 Version 23H2","Windows Server 2025","Windows 10 Version 1809","Windows Server 2025 (Server Core installation)","Windows Server 2022"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-83982","summary":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83982"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:21:08","euvd":{"id":"EUVD-2026-73907","description":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:19:23","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83982"],"products":["Windows 11 Version 24H2","Windows Server 2025 (Server Core installation)","Windows 10 Version 22H2","Windows Server 2016","Windows 11 version 26H1","Windows Server 2019","Windows Server 2022","Windows 10 Version 21H2","Windows 11 Version 25H2","Windows 11 Version 23H2","Windows Server 2019 (Server Core installation)","Windows 10 Version 1607","Windows Server 2025","Windows 10 Version 1809","Windows Server 2016 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-83983","summary":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83983"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:21:08","euvd":{"id":"EUVD-2026-73910","description":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:19:25","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83983"],"products":["Windows 11 Version 23H2","Windows 10 Version 22H2","Windows Server 2022","Windows Server 2025 (Server Core installation)","Windows Server 2016","Windows 11 Version 25H2","Windows Server 2019","Windows Server 2025","Windows 11 Version 24H2","Windows 10 Version 21H2","Windows Server 2016 (Server Core installation)","Windows Server 2019 (Server Core installation)","Windows 10 Version 1607","Windows 10 Version 1809","Windows 11 version 26H1"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-83985","summary":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83985"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:21:08","euvd":{"id":"EUVD-2026-73911","description":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:19:25","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83985"],"products":["Windows Server 2016 (Server Core installation)","Windows 10 Version 1607","Windows 11 Version 25H2","Windows 11 Version 24H2","Windows 11 version 26H1","Windows 10 Version 21H2","Windows Server 2022","Windows Server 2019","Windows 10 Version 22H2","Windows 10 Version 1809","Windows Server 2025 (Server Core installation)","Windows Server 2025","Windows Server 2016","Windows Server 2019 (Server Core installation)","Windows 11 Version 23H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-83974","summary":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83974"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:21:07","euvd":{"id":"EUVD-2026-73355","description":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:14:12","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83974"],"products":["Windows Server 2022","Windows Server 2016 (Server Core installation)","Windows Server 2016","Windows 11 Version 23H2","Windows 11 version 26H1","Windows 11 Version 25H2","Windows 11 Version 24H2","Windows 10 Version 1809","Windows 10 Version 22H2","Windows 10 Version 1607","Windows 10 Version 21H2","Windows Server 2019","Windows Server 2025","Windows Server 2025 (Server Core installation)","Windows Server 2019 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-83975","summary":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83975"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:21:07","euvd":{"id":"EUVD-2026-73356","description":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:14:13","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83975"],"products":["Windows 10 Version 1607","Windows 11 Version 25H2","Windows Server 2025","Windows 11 version 26H1","Windows Server 2016","Windows 11 Version 23H2","Windows 10 Version 22H2","Windows Server 2019","Windows Server 2019 (Server Core installation)","Windows 10 Version 21H2","Windows 11 Version 24H2","Windows Server 2025 (Server Core installation)","Windows Server 2016 (Server Core installation)","Windows Server 2022","Windows 10 Version 1809"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-83976","summary":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83976"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:21:07","euvd":{"id":"EUVD-2026-73357","description":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:14:14","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83976"],"products":["Windows 10 Version 1607","Windows Server 2019","Windows 11 Version 24H2","Windows Server 2019 (Server Core installation)","Windows 11 Version 25H2","Windows Server 2022","Windows Server 2016","Windows Server 2025 (Server Core installation)","Windows 10 Version 1809","Windows 11 Version 23H2","Windows 11 version 26H1","Windows 10 Version 21H2","Windows 10 Version 22H2","Windows Server 2016 (Server Core installation)","Windows Server 2025"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-83977","summary":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83977"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:21:07","euvd":{"id":"EUVD-2026-73905","description":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:19:22","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83977"],"products":["Windows 11 version 26H1","Windows 11 Version 23H2","Windows 10 Version 22H2","Windows Server 2019","Windows 10 Version 21H2","Windows 11 Version 24H2","Windows Server 2016","Windows Server 2019 (Server Core installation)","Windows 11 Version 25H2","Windows Server 2025 (Server Core installation)","Windows Server 2025","Windows 10 Version 1607","Windows 10 Version 1809","Windows Server 2016 (Server Core installation)","Windows Server 2022"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-83978","summary":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83978"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:21:07","euvd":{"id":"EUVD-2026-73906","description":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:19:23","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83978"],"products":["Windows 11 Version 24H2","Windows 10 Version 1607","Windows 10 Version 1809","Windows 11 Version 23H2","Windows Server 2016 (Server Core installation)","Windows 10 Version 21H2","Windows 11 Version 25H2","Windows 11 version 26H1","Windows Server 2019","Windows 10 Version 22H2","Windows Server 2019 (Server Core installation)","Windows Server 2025 (Server Core installation)","Windows Server 2016","Windows Server 2022","Windows Server 2025"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-83968","summary":"Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83968"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:21:06","euvd":{"id":"EUVD-2026-73901","description":"Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:19:20","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83968"],"products":["Windows 11 Version 23H2","Windows 11 Version 24H2","Windows Server 2025","Windows Server 2016","Windows Server 2025 (Server Core installation)","Windows 10 Version 1809","Windows 11 version 26H1","Windows Server 2022","Windows 10 Version 22H2","Windows Server 2019","Windows 10 Version 21H2","Windows 10 Version 1607","Windows 11 Version 25H2","Windows Server 2019 (Server Core installation)","Windows Server 2016 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-83969","summary":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83969"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:21:06","euvd":{"id":"EUVD-2026-73352","description":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:14:09","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83969"],"products":["Windows Server 2022","Windows 10 Version 1809","Windows Server 2019 (Server Core installation)","Windows 11 Version 25H2","Windows 11 Version 24H2","Windows 11 Version 23H2","Windows Server 2016 (Server Core installation)","Windows 10 Version 22H2","Windows Server 2025 (Server Core installation)","Windows Server 2025","Windows Server 2016","Windows 10 Version 1607","Windows Server 2019","Windows 11 version 26H1","Windows 10 Version 21H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-83970","summary":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83970"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:21:06","euvd":{"id":"EUVD-2026-73899","description":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:19:19","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83970"],"products":["Windows Server 2019","Windows Server 2025","Windows 10 Version 1607","Windows 11 Version 24H2","Windows 11 version 26H1","Windows 11 Version 25H2","Windows 10 Version 21H2","Windows Server 2016","Windows 10 Version 22H2","Windows Server 2022","Windows Server 2019 (Server Core installation)","Windows 10 Version 1809","Windows Server 2025 (Server Core installation)","Windows Server 2016 (Server Core installation)","Windows 11 Version 23H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-83971","summary":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83971"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:21:06","euvd":{"id":"EUVD-2026-73896","description":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:19:17","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83971"],"products":["Windows Server 2019","Windows 11 Version 25H2","Windows 11 Version 23H2","Windows Server 2016 (Server Core installation)","Windows Server 2019 (Server Core installation)","Windows Server 2022","Windows 11 Version 24H2","Windows 10 Version 22H2","Windows Server 2025 (Server Core installation)","Windows Server 2025","Windows Server 2016","Windows 10 Version 1809","Windows 10 Version 21H2","Windows 11 version 26H1","Windows 10 Version 1607"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-83972","summary":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83972"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:21:06","euvd":{"id":"EUVD-2026-73900","description":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:19:19","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83972"],"products":["Windows 11 Version 23H2","Windows Server 2019 (Server Core installation)","Windows 10 Version 22H2","Windows Server 2025","Windows Server 2025 (Server Core installation)","Windows Server 2019","Windows 11 version 26H1","Windows Server 2016","Windows Server 2016 (Server Core installation)","Windows 10 Version 21H2","Windows 10 Version 1607","Windows Server 2022","Windows 11 Version 25H2","Windows 11 Version 24H2","Windows 10 Version 1809"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-83973","summary":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83973"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:21:06","euvd":{"id":"EUVD-2026-73903","description":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:19:21","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83973"],"products":["Windows Server 2016 (Server Core installation)","Windows Server 2019","Windows Server 2019 (Server Core installation)","Windows 10 Version 22H2","Windows 10 Version 1809","Windows 10 Version 1607","Windows Server 2016","Windows Server 2025","Windows 11 Version 23H2","Windows Server 2022","Windows 11 Version 25H2","Windows 10 Version 21H2","Windows Server 2025 (Server Core installation)","Windows 11 version 26H1","Windows 11 Version 24H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-83948","summary":"Improper neutralization of special elements used in a command ('command injection') in Microsoft Azure CLI allows an authorized attacker to execute code over a network.","cvss":8.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83948"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:21:05","euvd":{"id":"EUVD-2026-73888","description":"Improper neutralization of special elements used in a command ('command injection') in Microsoft Azure CLI allows an authorized attacker to execute code over a network.","published_time":"2026-09-08T17:19:12","cvss":8.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83948"],"products":["Microsoft Azure CLI"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-83949","summary":"Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83949"],"vendor":"microsoft","product":"365_apps","version":null,"published_time":"2026-09-08T18:21:05","euvd":{"id":"EUVD-2026-73891","description":"Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.","published_time":"2026-09-08T17:19:14","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83949"],"products":["Microsoft Word 2016","Microsoft Office 2019","Microsoft Office LTSC 2021","Microsoft Office LTSC 2024","Microsoft 365 Apps for Enterprise"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-83949","summary":"Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83949"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:21:05","euvd":{"id":"EUVD-2026-73891","description":"Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.","published_time":"2026-09-08T17:19:14","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83949"],"products":["Microsoft Word 2016","Microsoft Office 2019","Microsoft Office LTSC 2021","Microsoft Office LTSC 2024","Microsoft 365 Apps for Enterprise"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-83949","summary":"Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83949"],"vendor":"microsoft","product":"office_2019","version":null,"published_time":"2026-09-08T18:21:05","euvd":{"id":"EUVD-2026-73891","description":"Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.","published_time":"2026-09-08T17:19:14","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83949"],"products":["Microsoft Word 2016","Microsoft Office 2019","Microsoft Office LTSC 2021","Microsoft Office LTSC 2024","Microsoft 365 Apps for Enterprise"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-83949","summary":"Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83949"],"vendor":"microsoft","product":"office_2021","version":null,"published_time":"2026-09-08T18:21:05","euvd":{"id":"EUVD-2026-73891","description":"Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.","published_time":"2026-09-08T17:19:14","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83949"],"products":["Microsoft Word 2016","Microsoft Office 2019","Microsoft Office LTSC 2021","Microsoft Office LTSC 2024","Microsoft 365 Apps for Enterprise"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-83949","summary":"Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83949"],"vendor":"microsoft","product":"office_2024","version":null,"published_time":"2026-09-08T18:21:05","euvd":{"id":"EUVD-2026-73891","description":"Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.","published_time":"2026-09-08T17:19:14","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83949"],"products":["Microsoft Word 2016","Microsoft Office 2019","Microsoft Office LTSC 2021","Microsoft Office LTSC 2024","Microsoft 365 Apps for Enterprise"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-83949","summary":"Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83949"],"vendor":"microsoft","product":"word","version":null,"published_time":"2026-09-08T18:21:05","euvd":{"id":"EUVD-2026-73891","description":"Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.","published_time":"2026-09-08T17:19:14","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83949"],"products":["Microsoft Word 2016","Microsoft Office 2019","Microsoft Office LTSC 2021","Microsoft Office LTSC 2024","Microsoft 365 Apps for Enterprise"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-83951","summary":"Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83951"],"vendor":"microsoft","product":"365_apps","version":null,"published_time":"2026-09-08T18:21:05","euvd":{"id":"EUVD-2026-73890","description":"Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.","published_time":"2026-09-08T17:19:13","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83951"],"products":["Microsoft Office LTSC 2024","Microsoft Word 2016","Microsoft Office 2019","Microsoft Office LTSC 2021","Microsoft 365 Apps for Enterprise"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-83951","summary":"Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83951"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:21:05","euvd":{"id":"EUVD-2026-73890","description":"Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.","published_time":"2026-09-08T17:19:13","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83951"],"products":["Microsoft Office LTSC 2024","Microsoft Word 2016","Microsoft Office 2019","Microsoft Office LTSC 2021","Microsoft 365 Apps for Enterprise"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-83951","summary":"Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83951"],"vendor":"microsoft","product":"office_2019","version":null,"published_time":"2026-09-08T18:21:05","euvd":{"id":"EUVD-2026-73890","description":"Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.","published_time":"2026-09-08T17:19:13","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83951"],"products":["Microsoft Office LTSC 2024","Microsoft Word 2016","Microsoft Office 2019","Microsoft Office LTSC 2021","Microsoft 365 Apps for Enterprise"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-83951","summary":"Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83951"],"vendor":"microsoft","product":"office_2021","version":null,"published_time":"2026-09-08T18:21:05","euvd":{"id":"EUVD-2026-73890","description":"Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.","published_time":"2026-09-08T17:19:13","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83951"],"products":["Microsoft Office LTSC 2024","Microsoft Word 2016","Microsoft Office 2019","Microsoft Office LTSC 2021","Microsoft 365 Apps for Enterprise"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-83951","summary":"Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83951"],"vendor":"microsoft","product":"office_2024","version":null,"published_time":"2026-09-08T18:21:05","euvd":{"id":"EUVD-2026-73890","description":"Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.","published_time":"2026-09-08T17:19:13","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83951"],"products":["Microsoft Office LTSC 2024","Microsoft Word 2016","Microsoft Office 2019","Microsoft Office LTSC 2021","Microsoft 365 Apps for Enterprise"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-83951","summary":"Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83951"],"vendor":"microsoft","product":"word","version":null,"published_time":"2026-09-08T18:21:05","euvd":{"id":"EUVD-2026-73890","description":"Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.","published_time":"2026-09-08T17:19:13","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83951"],"products":["Microsoft Office LTSC 2024","Microsoft Word 2016","Microsoft Office 2019","Microsoft Office LTSC 2021","Microsoft 365 Apps for Enterprise"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-83952","summary":"Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83952"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:21:05","euvd":{"id":"EUVD-2026-73340","description":"Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:14:02","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83952"],"products":["Windows Server 2025 (Server Core installation)","Windows Server 2025","Windows 11 Version 24H2","Windows 11 Version 25H2","Windows 11 version 26H1"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-83954","summary":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83954"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:21:05","euvd":{"id":"EUVD-2026-73897","description":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:19:17","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83954"],"products":["Windows 10 Version 1809","Windows 11 Version 25H2","Windows Server 2019 (Server Core installation)","Windows Server 2016 (Server Core installation)","Windows 10 Version 1607","Windows 11 Version 23H2","Windows Server 2025","Windows 10 Version 21H2","Windows Server 2019","Windows 10 Version 22H2","Windows 11 Version 24H2","Windows 11 version 26H1","Windows Server 2016","Windows Server 2022","Windows Server 2025 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-83955","summary":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83955"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:21:05","euvd":{"id":"EUVD-2026-73350","description":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:14:08","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83955"],"products":["Windows Server 2025 (Server Core installation)","Windows Server 2025","Windows Server 2019 (Server Core installation)","Windows 10 Version 1809","Windows 11 version 26H1","Windows 10 Version 1607","Windows 11 Version 25H2","Windows Server 2022","Windows 11 Version 24H2","Windows Server 2019","Windows 11 Version 23H2","Windows 10 Version 21H2","Windows 10 Version 22H2","Windows Server 2016 (Server Core installation)","Windows Server 2016"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-83967","summary":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83967"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:21:05","euvd":{"id":"EUVD-2026-73898","description":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:19:18","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83967"],"products":["Windows Server 2016 (Server Core installation)","Windows Server 2019","Windows Server 2016","Windows 11 Version 25H2","Windows 11 version 26H1","Windows 10 Version 1607","Windows 10 Version 22H2","Windows Server 2025 (Server Core installation)","Windows Server 2025","Windows Server 2022","Windows Server 2019 (Server Core installation)","Windows 10 Version 1809","Windows 11 Version 23H2","Windows 10 Version 21H2","Windows 11 Version 24H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-83498","summary":"Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83498"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:21:04","euvd":{"id":"EUVD-2026-73921","description":"Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:19:31","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83498"],"products":["Windows Server 2025 (Server Core installation)","Windows 11 Version 25H2","Windows 11 Version 24H2","Windows 11 version 26H1","Windows 11 Version 23H2","Windows Server 2025"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-83501","summary":"Out-of-bounds read in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose information locally.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83501"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:21:04","euvd":{"id":"EUVD-2026-73920","description":"Out-of-bounds read in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose information locally.","published_time":"2026-09-08T17:19:31","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83501"],"products":["Windows 11 Version 24H2","Windows 11 Version 25H2","Windows 11 version 26H1","Windows 11 Version 23H2","Windows Server 2025","Windows Server 2025 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-83939","summary":"Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.","cvss":8.2,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.2,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83939"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:21:04","euvd":{"id":"EUVD-2026-73885","description":"Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:19:10","cvss":8.2,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83939"],"products":["Windows 11 version 26H1"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-83940","summary":"Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.","cvss":7.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83940"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:21:04","euvd":{"id":"EUVD-2026-73884","description":"Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:19:10","cvss":7.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83940"],"products":["Windows Server 2025 (Server Core installation)","Windows Server 2016","Windows 11 Version 25H2","Windows 11 Version 24H2","Windows 10 Version 1809","Windows Server 2019 (Server Core installation)","Windows 10 Version 21H2","Windows Server 2022","Windows Server 2016 (Server Core installation)","Windows 11 version 26H1","Windows 10 Version 1607","Windows Server 2019","Windows Server 2025","Windows 11 Version 23H2","Windows 10 Version 22H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-83941","summary":"Missing authorization in Entra ID allows an authorized attacker to elevate privileges over a network.","cvss":9.9,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":9.9,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83941"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:21:04","euvd":{"id":"EUVD-2026-73173","description":"Missing authorization in Entra ID allows an authorized attacker to elevate privileges over a network.","published_time":"2026-09-08T17:10:36","cvss":9.9,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83941"],"products":["Microsoft Entra"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-83942","summary":"Missing authorization in Windows Kernel allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83942"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:21:04","euvd":{"id":"EUVD-2026-73339","description":"Missing authorization in Windows Kernel allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:14:01","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83942"],"products":["Windows Server 2019 (Server Core installation)","Windows 11 version 26H1","Windows 10 Version 21H2","Windows 11 Version 24H2","Windows 11 Version 25H2","Windows 10 Version 1809","Windows 11 Version 23H2","Windows Server 2025 (Server Core installation)","Windows Server 2025","Windows 10 Version 22H2","Windows Server 2022","Windows Server 2019"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-81963","summary":"Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":true,"propose_action":"Microsoft Windows Update Stack contains a link following vulnerability that allows a local attacker to escalate privileges locally up to SYSTEM.","ransomware_campaign":"Unknown","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81963","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-81963"],"vendor":"microsoft","product":"windows_11_23h2","version":null,"published_time":"2026-09-08T18:21:00","euvd":{"id":"EUVD-2026-73889","description":"Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:19:13","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81963"],"products":["Windows 11 Version 24H2","Windows 11 Version 23H2","Windows Server 2025","Windows 11 version 26H1","Windows Server 2025 (Server Core installation)","Windows 11 Version 25H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-81963","summary":"Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":true,"propose_action":"Microsoft Windows Update Stack contains a link following vulnerability that allows a local attacker to escalate privileges locally up to SYSTEM.","ransomware_campaign":"Unknown","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81963","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-81963"],"vendor":"microsoft","product":"windows_11_24h2","version":null,"published_time":"2026-09-08T18:21:00","euvd":{"id":"EUVD-2026-73889","description":"Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:19:13","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81963"],"products":["Windows 11 Version 24H2","Windows 11 Version 23H2","Windows Server 2025","Windows 11 version 26H1","Windows Server 2025 (Server Core installation)","Windows 11 Version 25H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-81963","summary":"Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":true,"propose_action":"Microsoft Windows Update Stack contains a link following vulnerability that allows a local attacker to escalate privileges locally up to SYSTEM.","ransomware_campaign":"Unknown","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81963","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-81963"],"vendor":"microsoft","product":"windows_11_25h2","version":null,"published_time":"2026-09-08T18:21:00","euvd":{"id":"EUVD-2026-73889","description":"Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:19:13","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81963"],"products":["Windows 11 Version 24H2","Windows 11 Version 23H2","Windows Server 2025","Windows 11 version 26H1","Windows Server 2025 (Server Core installation)","Windows 11 Version 25H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-81963","summary":"Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":true,"propose_action":"Microsoft Windows Update Stack contains a link following vulnerability that allows a local attacker to escalate privileges locally up to SYSTEM.","ransomware_campaign":"Unknown","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81963","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-81963"],"vendor":"microsoft","product":"windows_11_26h1","version":null,"published_time":"2026-09-08T18:21:00","euvd":{"id":"EUVD-2026-73889","description":"Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:19:13","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81963"],"products":["Windows 11 Version 24H2","Windows 11 Version 23H2","Windows Server 2025","Windows 11 version 26H1","Windows Server 2025 (Server Core installation)","Windows 11 Version 25H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-81963","summary":"Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":true,"propose_action":"Microsoft Windows Update Stack contains a link following vulnerability that allows a local attacker to escalate privileges locally up to SYSTEM.","ransomware_campaign":"Unknown","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81963","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-81963"],"vendor":"microsoft","product":"windows_server_2025","version":null,"published_time":"2026-09-08T18:21:00","euvd":{"id":"EUVD-2026-73889","description":"Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:19:13","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81963"],"products":["Windows 11 Version 24H2","Windows 11 Version 23H2","Windows Server 2025","Windows 11 version 26H1","Windows Server 2025 (Server Core installation)","Windows 11 Version 25H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-81955","summary":"Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81955"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:59","euvd":{"id":"EUVD-2026-73875","description":"Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:19:05","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81955"],"products":["Windows Server 2012 R2 (Server Core installation)","Windows 10 Version 21H2","Windows Server 2012","Windows 10 Version 22H2","Windows 11 Version 23H2","Windows Server 2025","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows 10 Version 1809","Microsoft Office 2019","Windows 11 Version 25H2","Microsoft Office 365 for Mac","Microsoft Office LTSC 2021","Windows Server 2016 (Server Core installation)","Microsoft Office LTSC 2024","Microsoft Office LTSC for Mac 2021","Windows 11 version 26H1","Microsoft 365 Apps for Enterprise","Windows Server 2025 (Server Core installation)","Windows Server 2019","Windows 10 Version 1607","Windows Server 2016","Microsoft Office LTSC for Mac 2024","Microsoft Office 2016","Windows Server 2022","Windows Server 2019 (Server Core installation)","Windows 11 Version 24H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-81956","summary":"Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81956"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:59","euvd":{"id":"EUVD-2026-73866","description":"Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.","published_time":"2026-09-08T17:19:00","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81956"],"products":["Microsoft Office 2019","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC for Mac 2024","Microsoft Office 2016","Microsoft Office LTSC 2024","Office Online Server","Microsoft Excel 2016","Microsoft Office LTSC 2021","Microsoft 365 Apps for Enterprise","Microsoft Office 365 for Mac"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-81957","summary":"Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81957"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:59","euvd":{"id":"EUVD-2026-73873","description":"Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.","published_time":"2026-09-08T17:19:04","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81957"],"products":["Microsoft Office 365 for Mac","Microsoft Excel 2016","Microsoft Office 2016","Microsoft Office LTSC 2021","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC for Mac 2024","Microsoft Office LTSC 2024","Microsoft Office LTSC for Mac 2021","Microsoft Office 2019"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-81958","summary":"Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81958"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:59","euvd":{"id":"EUVD-2026-73862","description":"Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.","published_time":"2026-09-08T17:18:57","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81958"],"products":["Microsoft 365 Apps for Enterprise","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC 2024","Microsoft Excel 2016","Microsoft Office 365 for Mac","Microsoft Office 2016","Microsoft Office LTSC for Mac 2024","Microsoft Office LTSC 2021","Microsoft Office 2019"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-81959","summary":"Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81959"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:59","euvd":{"id":"EUVD-2026-73878","description":"Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.","published_time":"2026-09-08T17:19:06","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81959"],"products":["Microsoft Excel 2016","Microsoft Office 2016","Microsoft Office 2019","Microsoft Office LTSC 2021","Microsoft Office LTSC for Mac 2024","Microsoft 365 Apps for Enterprise","Microsoft Office 365 for Mac","Microsoft Office LTSC 2024","Microsoft Office LTSC for Mac 2021"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-81960","summary":"Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81960"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:59","euvd":{"id":"EUVD-2026-73871","description":"Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.","published_time":"2026-09-08T17:19:02","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81960"],"products":["Microsoft Office LTSC for Mac 2024","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2024","Microsoft Excel 2016","Microsoft Office LTSC for Mac 2021","Microsoft Office 2019","Microsoft Office 365 for Mac","Microsoft Office 2016","Microsoft Office LTSC 2021"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-81947","summary":"Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81947"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:58","euvd":{"id":"EUVD-2026-73855","description":"Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.","published_time":"2026-09-08T17:18:53","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81947"],"products":["Microsoft Office LTSC for Mac 2024","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC 2021","Microsoft Excel 2016","Microsoft Office 365 for Mac","Microsoft 365 Apps for Enterprise","Microsoft Office 2019","Microsoft Office 2016","Microsoft Office LTSC 2024","Office Online Server"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-81948","summary":"Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81948"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:58","euvd":{"id":"EUVD-2026-73882","description":"Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.","published_time":"2026-09-08T17:19:09","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81948"],"products":["Microsoft Excel 2016","Microsoft Office LTSC for Mac 2024","Microsoft 365 Apps for Enterprise","Microsoft Office 2016","Microsoft Office LTSC 2024","Microsoft Office 365 for Mac","Microsoft Office 2019","Microsoft Office LTSC 2021","Microsoft Office LTSC for Mac 2021"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-81949","summary":"Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81949"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:58","euvd":{"id":"EUVD-2026-73880","description":"Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally.","published_time":"2026-09-08T17:19:07","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81949"],"products":["Microsoft Office 365 for Mac","Microsoft Excel 2016","Microsoft Office LTSC for Mac 2024","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC for Mac 2021","Microsoft Office 2016","Microsoft Office LTSC 2021","Microsoft Office LTSC 2024","Microsoft Office 2019"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-81950","summary":"Double free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81950"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:58","euvd":{"id":"EUVD-2026-73881","description":"Double free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.","published_time":"2026-09-08T17:19:08","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81950"],"products":["Microsoft Office LTSC for Mac 2024","Microsoft Office LTSC 2021","Microsoft Excel 2016","Microsoft Office LTSC for Mac 2021","Microsoft Office 365 for Mac","Microsoft Office 2019","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2024","Microsoft Office 2016"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-81951","summary":"Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81951"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:58","euvd":{"id":"EUVD-2026-73876","description":"Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.","published_time":"2026-09-08T17:19:05","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81951"],"products":["Microsoft Office 2019","Microsoft Office 365 for Mac","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC for Mac 2024","Microsoft Office LTSC for Mac 2021","Microsoft Excel 2016","Microsoft Office 2016","Microsoft Office LTSC 2024","Microsoft Office LTSC 2021"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-81952","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81952"],"vendor":"microsoft","product":"365_apps","version":null,"published_time":"2026-09-08T18:20:58","euvd":{"id":"EUVD-2026-73877","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:19:06","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81952"],"products":["Microsoft Office LTSC 2021","Microsoft Office LTSC for Mac 2021","Microsoft Office 2016","Microsoft Office LTSC for Mac 2024","Microsoft Office 2019","Microsoft Office LTSC 2024","Microsoft 365 Apps for Enterprise","Microsoft Office 365 for Mac"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-81952","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81952"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:58","euvd":{"id":"EUVD-2026-73877","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:19:06","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81952"],"products":["Microsoft Office LTSC 2021","Microsoft Office LTSC for Mac 2021","Microsoft Office 2016","Microsoft Office LTSC for Mac 2024","Microsoft Office 2019","Microsoft Office LTSC 2024","Microsoft 365 Apps for Enterprise","Microsoft Office 365 for Mac"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-81952","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81952"],"vendor":"microsoft","product":"microsoft_365","version":null,"published_time":"2026-09-08T18:20:58","euvd":{"id":"EUVD-2026-73877","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:19:06","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81952"],"products":["Microsoft Office LTSC 2021","Microsoft Office LTSC for Mac 2021","Microsoft Office 2016","Microsoft Office LTSC for Mac 2024","Microsoft Office 2019","Microsoft Office LTSC 2024","Microsoft 365 Apps for Enterprise","Microsoft Office 365 for Mac"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-81952","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81952"],"vendor":"microsoft","product":"office_2016","version":null,"published_time":"2026-09-08T18:20:58","euvd":{"id":"EUVD-2026-73877","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:19:06","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81952"],"products":["Microsoft Office LTSC 2021","Microsoft Office LTSC for Mac 2021","Microsoft Office 2016","Microsoft Office LTSC for Mac 2024","Microsoft Office 2019","Microsoft Office LTSC 2024","Microsoft 365 Apps for Enterprise","Microsoft Office 365 for Mac"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-81952","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81952"],"vendor":"microsoft","product":"office_2019","version":null,"published_time":"2026-09-08T18:20:58","euvd":{"id":"EUVD-2026-73877","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:19:06","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81952"],"products":["Microsoft Office LTSC 2021","Microsoft Office LTSC for Mac 2021","Microsoft Office 2016","Microsoft Office LTSC for Mac 2024","Microsoft Office 2019","Microsoft Office LTSC 2024","Microsoft 365 Apps for Enterprise","Microsoft Office 365 for Mac"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-81952","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81952"],"vendor":"microsoft","product":"office_2021","version":null,"published_time":"2026-09-08T18:20:58","euvd":{"id":"EUVD-2026-73877","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:19:06","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81952"],"products":["Microsoft Office LTSC 2021","Microsoft Office LTSC for Mac 2021","Microsoft Office 2016","Microsoft Office LTSC for Mac 2024","Microsoft Office 2019","Microsoft Office LTSC 2024","Microsoft 365 Apps for Enterprise","Microsoft Office 365 for Mac"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-81952","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81952"],"vendor":"microsoft","product":"office_2024","version":null,"published_time":"2026-09-08T18:20:58","euvd":{"id":"EUVD-2026-73877","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:19:06","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81952"],"products":["Microsoft Office LTSC 2021","Microsoft Office LTSC for Mac 2021","Microsoft Office 2016","Microsoft Office LTSC for Mac 2024","Microsoft Office 2019","Microsoft Office LTSC 2024","Microsoft 365 Apps for Enterprise","Microsoft Office 365 for Mac"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-81953","summary":"Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81953"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:58","euvd":{"id":"EUVD-2026-73879","description":"Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.","published_time":"2026-09-08T17:19:07","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81953"],"products":["Microsoft Office LTSC for Mac 2021","Microsoft Office 2016","Microsoft Excel 2016","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2021","Microsoft Office 365 for Mac","Microsoft Office 2019","Microsoft Office LTSC 2024","Microsoft Office LTSC for Mac 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-81954","summary":"Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81954"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:58","euvd":{"id":"EUVD-2026-73857","description":"Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.","published_time":"2026-09-08T17:18:55","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81954"],"products":["Microsoft Office 2019","Microsoft Office LTSC 2021","Microsoft Excel 2016","Microsoft Office LTSC for Mac 2021","Microsoft Office 365 for Mac","Microsoft Office LTSC 2024","Microsoft Office 2016","Microsoft Office LTSC for Mac 2024","Microsoft 365 Apps for Enterprise"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-81821","summary":"The vulnerability, if exploited, could allow a miscreant with read access to PIMBoards project files to decrypt and view sensitive information.","cvss":8.3,"cvss_version":4.0,"cvss_v2":null,"cvss_v3":8.4,"cvss_v4":8.3,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2026-006.pdf"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:57","euvd":{"id":"EUVD-2026-73932","description":"The vulnerability, if exploited, could allow a miscreant with read access to PIMBoards project files to decrypt and view sensitive information.","published_time":"2026-09-08T17:42:30","cvss":8.3,"cvss_version":"4.0","epss":0.0,"assigner":"icscert","references":["https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2026-006.pdf"],"products":["Pipeline Integrity Monitor"],"vendors":["AVEVA"]}},{"cve_id":"CVE-2026-81822","summary":"The vulnerability, if exploited, could allow a miscreant with read access to PIMBoards project files to reverse engineer PIMBoards users’ app-native passwords through computational brute-forcing of weak hashes, potentially allowing elevation to a PIMBoards administrator user.","cvss":8.3,"cvss_version":4.0,"cvss_v2":null,"cvss_v3":8.4,"cvss_v4":8.3,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2026-006.pdf"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:57","euvd":{"id":"EUVD-2026-73931","description":"The vulnerability, if exploited, could allow a miscreant with read access to PIMBoards project files to reverse engineer PIMBoards users’ app-native passwords through computational brute-forcing of weak hashes, potentially allowing elevation to a PIMBoards administrator user.","published_time":"2026-09-08T17:39:46","cvss":8.3,"cvss_version":"4.0","epss":0.0,"assigner":"icscert","references":["https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2026-006.pdf"],"products":["Pipeline Integrity Monitor"],"vendors":["AVEVA"]}},{"cve_id":"CVE-2026-81823","summary":"The vulnerability, if exploited, could allow an unauthenticated miscreant to perform read operations intended only for PIMBoards users, resulting in information disclosure. Write operations are not impacted.","cvss":6.9,"cvss_version":4.0,"cvss_v2":null,"cvss_v3":5.3,"cvss_v4":6.9,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2026-006.pdf"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:57","euvd":{"id":"EUVD-2026-73929","description":"The vulnerability, if exploited, could allow an unauthenticated miscreant to perform read operations intended only for PIMBoards users, resulting in information disclosure. Write operations are not impacted.","published_time":"2026-09-08T17:36:55","cvss":6.9,"cvss_version":"4.0","epss":0.0,"assigner":"icscert","references":["https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2026-006.pdf"],"products":["Pipeline Integrity Monitor"],"vendors":["AVEVA"]}},{"cve_id":"CVE-2026-81824","summary":"The vulnerability, if exploited, could allow a miscreant to run arbitrary JavaScript code in a browser session of a PIMBoards user who was socially engineered to click on a malicious link.","cvss":6.3,"cvss_version":4.0,"cvss_v2":null,"cvss_v3":4.7,"cvss_v4":6.3,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2026-006.pdf"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:57","euvd":{"id":"EUVD-2026-73928","description":"The vulnerability, if exploited, could allow a miscreant to run arbitrary JavaScript code in a browser session of a PIMBoards user who was socially engineered to click on a malicious link.","published_time":"2026-09-08T17:32:40","cvss":6.3,"cvss_version":"4.0","epss":0.0,"assigner":"icscert","references":["https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2026-006.pdf"],"products":["Pipeline Integrity Monitor"],"vendors":["AVEVA"]}},{"cve_id":"CVE-2026-81395","summary":"Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81395"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:56","euvd":{"id":"EUVD-2026-73872","description":"Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.","published_time":"2026-09-08T17:19:03","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81395"],"products":["Microsoft Office LTSC 2021","Microsoft Office 365 for Mac","Microsoft Office LTSC 2024","Microsoft Office LTSC for Mac 2024","Microsoft Excel 2016","Microsoft Office LTSC for Mac 2021","Microsoft Office 2016","Microsoft 365 Apps for Enterprise","Microsoft Office 2019"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-81396","summary":"Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81396"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:56","euvd":{"id":"EUVD-2026-73863","description":"Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.","published_time":"2026-09-08T17:18:58","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81396"],"products":["Microsoft Office LTSC 2024","Microsoft Office LTSC for Mac 2021","Microsoft Office 2019","Microsoft Office 365 for Mac","Microsoft Office LTSC 2021","Microsoft Office LTSC for Mac 2024","Microsoft Excel 2016","Microsoft 365 Apps for Enterprise","Microsoft Office 2016"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-81397","summary":"Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81397"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:56","euvd":{"id":"EUVD-2026-73865","description":"Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.","published_time":"2026-09-08T17:18:59","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81397"],"products":["Microsoft Office LTSC 2024","Microsoft Excel 2016","Microsoft Office 2019","Microsoft Office LTSC for Mac 2021","Microsoft Office 2016","Microsoft Office LTSC 2021","Microsoft Office LTSC for Mac 2024","Microsoft Office 365 for Mac","Microsoft 365 Apps for Enterprise"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-81398","summary":"Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81398"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:56","euvd":{"id":"EUVD-2026-73853","description":"Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.","published_time":"2026-09-08T17:18:52","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81398"],"products":["Microsoft Excel 2016","Microsoft Office 2016","Microsoft Office LTSC 2021","Microsoft Office LTSC for Mac 2021","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2024","Microsoft Office LTSC for Mac 2024","Microsoft Office 2019","Microsoft Office 365 for Mac"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-81399","summary":"Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81399"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:56","euvd":{"id":"EUVD-2026-73859","description":"Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.","published_time":"2026-09-08T17:18:56","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81399"],"products":["Microsoft Office LTSC for Mac 2024","Microsoft Office LTSC 2021","Microsoft Office 2016","Microsoft 365 Apps for Enterprise","Microsoft Office 365 for Mac","Microsoft Office LTSC 2024","Microsoft Office LTSC for Mac 2021","Microsoft Office 2019","Microsoft Excel 2016"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-81400","summary":"Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81400"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:56","euvd":{"id":"EUVD-2026-73868","description":"Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.","published_time":"2026-09-08T17:19:01","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81400"],"products":["Microsoft Office LTSC for Mac 2024","Microsoft Office 2016","Microsoft Office 365 for Mac","Microsoft Office LTSC 2021","Microsoft Excel 2016","Microsoft Office LTSC 2024","Microsoft 365 Apps for Enterprise","Microsoft Office 2019","Microsoft Office LTSC for Mac 2021"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-81401","summary":"Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81401"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:56","euvd":{"id":"EUVD-2026-73861","description":"Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.","published_time":"2026-09-08T17:18:57","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81401"],"products":["Microsoft Office LTSC for Mac 2024","Microsoft Office 2019","Microsoft Office 2016","Microsoft Excel 2016","Microsoft 365 Apps for Enterprise","Office Online Server","Microsoft Office LTSC 2024","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC 2021","Microsoft Office 365 for Mac"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-81388","summary":"Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81388"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:55","euvd":{"id":"EUVD-2026-73874","description":"Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.","published_time":"2026-09-08T17:19:04","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81388"],"products":["Microsoft Office 365 for Mac","Microsoft Office LTSC 2024","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC for Mac 2024","Microsoft Office 2019","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2021","Microsoft Office 2016","Microsoft Excel 2016"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-81389","summary":"Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.","cvss":7.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81389"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:55","euvd":{"id":"EUVD-2026-73869","description":"Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.","published_time":"2026-09-08T17:19:01","cvss":7.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81389"],"products":["Microsoft Office LTSC 2021","Microsoft Office 365 for Mac","Microsoft Office LTSC 2024","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC for Mac 2024","Microsoft Excel 2016","Microsoft Office 2016","Microsoft Office 2019","Microsoft Office LTSC for Mac 2021"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-81390","summary":"Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81390"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:55","euvd":{"id":"EUVD-2026-73858","description":"Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.","published_time":"2026-09-08T17:18:55","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81390"],"products":["Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC for Mac 2024","Microsoft Office LTSC 2021","Office Online Server","Microsoft 365 Apps for Enterprise","Microsoft Excel 2016","Microsoft Office LTSC 2024","Microsoft Office 365 for Mac","Microsoft Office 2019","Microsoft Office 2016"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-81391","summary":"Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81391"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:55","euvd":{"id":"EUVD-2026-73860","description":"Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.","published_time":"2026-09-08T17:18:56","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81391"],"products":["Microsoft Office 365 for Mac","Microsoft Office LTSC for Mac 2021","Microsoft Excel 2016","Microsoft Office 2016","Microsoft Office 2019","Microsoft Office LTSC 2021","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2024","Microsoft Office LTSC for Mac 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-81392","summary":"Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81392"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:55","euvd":{"id":"EUVD-2026-73864","description":"Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.","published_time":"2026-09-08T17:18:58","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81392"],"products":["Microsoft Office 365 for Mac","Microsoft Office 2016","Microsoft Office LTSC 2024","Microsoft Excel 2016","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC 2021","Microsoft Office LTSC for Mac 2024","Microsoft Office 2019"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-81393","summary":"Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81393"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:55","euvd":{"id":"EUVD-2026-73867","description":"Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.","published_time":"2026-09-08T17:19:00","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81393"],"products":["Microsoft Excel 2016","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2024","Microsoft Office 2016","Microsoft Office 365 for Mac","Microsoft Office LTSC for Mac 2024","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC 2021","Microsoft Office 2019"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-81394","summary":"Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81394"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:55","euvd":{"id":"EUVD-2026-73870","description":"Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.","published_time":"2026-09-08T17:19:02","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81394"],"products":["Microsoft Office LTSC 2021","Microsoft Office 365 for Mac","Microsoft Office 2016","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC for Mac 2021","Microsoft Excel 2016","Microsoft Office 2019","Microsoft Office LTSC for Mac 2024","Microsoft Office LTSC 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-81378","summary":"Interpretation conflict in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.","cvss":8.2,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.2,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81378"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:54","euvd":{"id":"EUVD-2026-73334","description":"Interpretation conflict in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.","published_time":"2026-09-08T17:13:58","cvss":8.2,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81378"],"products":["Visual Studio Code"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-81379","summary":"Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.","cvss":8.2,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.2,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81379"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:54","euvd":{"id":"EUVD-2026-73335","description":"Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.","published_time":"2026-09-08T17:13:59","cvss":8.2,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81379"],"products":["Visual Studio Code"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-81380","summary":"Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network.","cvss":5.3,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.3,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81380"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:54","euvd":{"id":"EUVD-2026-73336","description":"Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:13:59","cvss":5.3,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81380"],"products":["Visual Studio Code"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-81381","summary":"Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81381"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:54","euvd":{"id":"EUVD-2026-73337","description":"Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:14:00","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81381"],"products":["Visual Studio Code"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-81383","summary":"Use of incorrectly-resolved name or reference in Visual Studio Code allows an unauthorized attacker to disclose information over a network.","cvss":7.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81383"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:54","euvd":{"id":"EUVD-2026-73851","description":"Use of incorrectly-resolved name or reference in Visual Studio Code allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:18:51","cvss":7.4,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81383"],"products":["Visual Studio Code"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-81385","summary":"Deserialization of untrusted data in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81385"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:54","euvd":{"id":"EUVD-2026-73852","description":"Deserialization of untrusted data in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:52","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81385"],"products":["Microsoft Office LTSC 2024","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2021","Microsoft Publisher 2016","Microsoft Office 2019"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-81386","summary":"Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81386"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:54","euvd":{"id":"EUVD-2026-73854","description":"Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.","published_time":"2026-09-08T17:18:53","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81386"],"products":["Microsoft Office 2016","Microsoft Excel 2016","Microsoft Office 2019","Microsoft Office LTSC for Mac 2024","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2021","Microsoft Office LTSC for Mac 2021","Microsoft Office 365 for Mac","Microsoft Office LTSC 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-81387","summary":"Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81387"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:54","euvd":{"id":"EUVD-2026-73856","description":"Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.","published_time":"2026-09-08T17:18:54","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81387"],"products":["Microsoft Office 365 for Mac","Microsoft Office 2019","Microsoft Office 2016","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC 2024","Microsoft Office LTSC 2021","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC for Mac 2024","Microsoft Excel 2016"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-81353","summary":"Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81353"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:53","euvd":{"id":"EUVD-2026-73849","description":"Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.","published_time":"2026-09-08T17:18:50","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81353"],"products":["HEIF Image Extension"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-81354","summary":"Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally.","cvss":8.2,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.2,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81354"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:53","euvd":{"id":"EUVD-2026-73850","description":"Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:18:51","cvss":8.2,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81354"],"products":["Windows 10 Version 22H2","Windows 11 Version 24H2","Windows 11 Version 23H2","Windows 10 Version 1809","Windows Server 2019","Windows Server 2019 (Server Core installation)","Windows 10 Version 21H2","Windows 11 Version 25H2","Windows 11 version 26H1"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-81355","summary":"Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to execute code locally.","cvss":7.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81355"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:53","euvd":{"id":"EUVD-2026-73329","description":"Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to execute code locally.","published_time":"2026-09-08T17:13:55","cvss":7.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81355"],"products":["Windows Server 2019 (Server Core installation)","Windows Server 2025","Windows 10 Version 1607","Windows 11 Version 23H2","Windows 10 Version 1809","Windows 11 Version 25H2","Windows Server 2016","Windows Server 2016 (Server Core installation)","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012","Windows 11 version 26H1","Windows 10 Version 22H2","Windows 10 Version 21H2","Windows Server 2019","Windows 11 Version 24H2","Windows Server 2012 R2 (Server Core installation)","Windows Server 2022","Windows Server 2025 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-81356","summary":"Inconsistent interpretation of http requests ('http request/response smuggling') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.","cvss":8.2,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.2,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81356"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:53","euvd":{"id":"EUVD-2026-73330","description":"Inconsistent interpretation of http requests ('http request/response smuggling') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.","published_time":"2026-09-08T17:13:56","cvss":8.2,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81356"],"products":["Visual Studio Code"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-81357","summary":"Server-side request forgery (ssrf) in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.","cvss":8.2,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.2,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81357"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:53","euvd":{"id":"EUVD-2026-73331","description":"Server-side request forgery (ssrf) in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.","published_time":"2026-09-08T17:13:56","cvss":8.2,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81357"],"products":["Visual Studio Code"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-81376","summary":"Incomplete comparison with missing factors in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.","cvss":9.6,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":9.6,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81376"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:53","euvd":{"id":"EUVD-2026-73332","description":"Incomplete comparison with missing factors in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.","published_time":"2026-09-08T17:13:57","cvss":9.6,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81376"],"products":["Visual Studio Code"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-81377","summary":"Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to perform tampering over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81377"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:53","euvd":{"id":"EUVD-2026-73333","description":"Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to perform tampering over a network.","published_time":"2026-09-08T17:13:58","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81377"],"products":["Visual Studio Code"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-80097","summary":"Improper authentication in Microsoft Authenticator allows an unauthorized attacker to elevate privileges locally.","cvss":8.6,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.6,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80097"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:52","euvd":{"id":"EUVD-2026-73327","description":"Improper authentication in Microsoft Authenticator allows an unauthorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:13:54","cvss":8.6,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80097"],"products":["Microsoft Authenticator for Android"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-81349","summary":"Improper neutralization of special elements used in an os command ('os command injection') in Azure HDInsights allows an authorized attacker to elevate privileges over a network.","cvss":7.2,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.2,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81349"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:52","euvd":{"id":"EUVD-2026-73328","description":"Improper neutralization of special elements used in an os command ('os command injection') in Azure HDInsights allows an authorized attacker to elevate privileges over a network.","published_time":"2026-09-08T17:13:55","cvss":7.2,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81349"],"products":["Azure HDInsight"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-81352","summary":"Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81352"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:52","euvd":{"id":"EUVD-2026-73848","description":"Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:50","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81352"],"products":["Web Media Extensions"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-80086","summary":"Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80086"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:51","euvd":{"id":"EUVD-2026-73837","description":"Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:18:44","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80086"],"products":["Microsoft Office LTSC for Mac 2021","Microsoft 365 Apps for Enterprise","Microsoft Office 365 for Mac","Microsoft Office LTSC for Mac 2024","Microsoft Office 2019","Microsoft Office LTSC 2024","Microsoft Office LTSC 2021"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-80087","summary":"Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80087"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:51","euvd":{"id":"EUVD-2026-73839","description":"Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:18:45","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80087"],"products":["Microsoft 365 Apps for Enterprise","Microsoft Office 2016","Microsoft Office LTSC for Mac 2024","Microsoft Office LTSC 2021","Microsoft Office 365 for Mac","Microsoft Office LTSC 2024","Microsoft Office 2019","Microsoft Office LTSC for Mac 2021"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-80088","summary":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80088"],"vendor":"microsoft","product":"365_apps","version":null,"published_time":"2026-09-08T18:20:51","euvd":{"id":"EUVD-2026-73841","description":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:18:46","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80088"],"products":["Microsoft Office LTSC 2021","Microsoft Office 2019","Microsoft Office LTSC 2024","Microsoft Office LTSC for Mac 2024","Microsoft Office 2016","Microsoft Office LTSC for Mac 2021","Microsoft Office 365 for Mac","Microsoft 365 Apps for Enterprise"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-80088","summary":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80088"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:51","euvd":{"id":"EUVD-2026-73841","description":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:18:46","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80088"],"products":["Microsoft Office LTSC 2021","Microsoft Office 2019","Microsoft Office LTSC 2024","Microsoft Office LTSC for Mac 2024","Microsoft Office 2016","Microsoft Office LTSC for Mac 2021","Microsoft Office 365 for Mac","Microsoft 365 Apps for Enterprise"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-80088","summary":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80088"],"vendor":"microsoft","product":"microsoft_365","version":null,"published_time":"2026-09-08T18:20:51","euvd":{"id":"EUVD-2026-73841","description":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:18:46","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80088"],"products":["Microsoft Office LTSC 2021","Microsoft Office 2019","Microsoft Office LTSC 2024","Microsoft Office LTSC for Mac 2024","Microsoft Office 2016","Microsoft Office LTSC for Mac 2021","Microsoft Office 365 for Mac","Microsoft 365 Apps for Enterprise"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-80088","summary":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80088"],"vendor":"microsoft","product":"office_2016","version":null,"published_time":"2026-09-08T18:20:51","euvd":{"id":"EUVD-2026-73841","description":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:18:46","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80088"],"products":["Microsoft Office LTSC 2021","Microsoft Office 2019","Microsoft Office LTSC 2024","Microsoft Office LTSC for Mac 2024","Microsoft Office 2016","Microsoft Office LTSC for Mac 2021","Microsoft Office 365 for Mac","Microsoft 365 Apps for Enterprise"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-80088","summary":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80088"],"vendor":"microsoft","product":"office_2019","version":null,"published_time":"2026-09-08T18:20:51","euvd":{"id":"EUVD-2026-73841","description":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:18:46","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80088"],"products":["Microsoft Office LTSC 2021","Microsoft Office 2019","Microsoft Office LTSC 2024","Microsoft Office LTSC for Mac 2024","Microsoft Office 2016","Microsoft Office LTSC for Mac 2021","Microsoft Office 365 for Mac","Microsoft 365 Apps for Enterprise"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-80088","summary":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80088"],"vendor":"microsoft","product":"office_2021","version":null,"published_time":"2026-09-08T18:20:51","euvd":{"id":"EUVD-2026-73841","description":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:18:46","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80088"],"products":["Microsoft Office LTSC 2021","Microsoft Office 2019","Microsoft Office LTSC 2024","Microsoft Office LTSC for Mac 2024","Microsoft Office 2016","Microsoft Office LTSC for Mac 2021","Microsoft Office 365 for Mac","Microsoft 365 Apps for Enterprise"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-80088","summary":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80088"],"vendor":"microsoft","product":"office_2024","version":null,"published_time":"2026-09-08T18:20:51","euvd":{"id":"EUVD-2026-73841","description":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:18:46","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80088"],"products":["Microsoft Office LTSC 2021","Microsoft Office 2019","Microsoft Office LTSC 2024","Microsoft Office LTSC for Mac 2024","Microsoft Office 2016","Microsoft Office LTSC for Mac 2021","Microsoft Office 365 for Mac","Microsoft 365 Apps for Enterprise"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-80089","summary":"Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80089"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:51","euvd":{"id":"EUVD-2026-73843","description":"Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:18:47","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80089"],"products":["Microsoft Office 2019","Microsoft Office LTSC for Mac 2024","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC for Mac 2021","Microsoft Office 365 for Mac","Microsoft Office LTSC 2021","Microsoft Office 2016","Microsoft Office LTSC 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-80090","summary":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80090"],"vendor":"microsoft","product":"365_apps","version":null,"published_time":"2026-09-08T18:20:51","euvd":{"id":"EUVD-2026-73844","description":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:18:47","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80090"],"products":["Microsoft Office LTSC 2021","Microsoft Office LTSC for Mac 2024","Microsoft Word 2016","Microsoft Office 365 for Mac","Microsoft Office LTSC for Mac 2021","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2024","Microsoft Office 2019"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-80090","summary":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80090"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:51","euvd":{"id":"EUVD-2026-73844","description":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:18:47","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80090"],"products":["Microsoft Office LTSC 2021","Microsoft Office LTSC for Mac 2024","Microsoft Word 2016","Microsoft Office 365 for Mac","Microsoft Office LTSC for Mac 2021","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2024","Microsoft Office 2019"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-80090","summary":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80090"],"vendor":"microsoft","product":"microsoft_365","version":null,"published_time":"2026-09-08T18:20:51","euvd":{"id":"EUVD-2026-73844","description":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:18:47","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80090"],"products":["Microsoft Office LTSC 2021","Microsoft Office LTSC for Mac 2024","Microsoft Word 2016","Microsoft Office 365 for Mac","Microsoft Office LTSC for Mac 2021","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2024","Microsoft Office 2019"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-80090","summary":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80090"],"vendor":"microsoft","product":"office_2019","version":null,"published_time":"2026-09-08T18:20:51","euvd":{"id":"EUVD-2026-73844","description":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:18:47","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80090"],"products":["Microsoft Office LTSC 2021","Microsoft Office LTSC for Mac 2024","Microsoft Word 2016","Microsoft Office 365 for Mac","Microsoft Office LTSC for Mac 2021","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2024","Microsoft Office 2019"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-80090","summary":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80090"],"vendor":"microsoft","product":"office_2021","version":null,"published_time":"2026-09-08T18:20:51","euvd":{"id":"EUVD-2026-73844","description":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:18:47","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80090"],"products":["Microsoft Office LTSC 2021","Microsoft Office LTSC for Mac 2024","Microsoft Word 2016","Microsoft Office 365 for Mac","Microsoft Office LTSC for Mac 2021","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2024","Microsoft Office 2019"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-80090","summary":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80090"],"vendor":"microsoft","product":"office_2024","version":null,"published_time":"2026-09-08T18:20:51","euvd":{"id":"EUVD-2026-73844","description":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:18:47","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80090"],"products":["Microsoft Office LTSC 2021","Microsoft Office LTSC for Mac 2024","Microsoft Word 2016","Microsoft Office 365 for Mac","Microsoft Office LTSC for Mac 2021","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2024","Microsoft Office 2019"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-80090","summary":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80090"],"vendor":"microsoft","product":"word","version":null,"published_time":"2026-09-08T18:20:51","euvd":{"id":"EUVD-2026-73844","description":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:18:47","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80090"],"products":["Microsoft Office LTSC 2021","Microsoft Office LTSC for Mac 2024","Microsoft Word 2016","Microsoft Office 365 for Mac","Microsoft Office LTSC for Mac 2021","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2024","Microsoft Office 2019"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-80091","summary":"Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80091"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:51","euvd":{"id":"EUVD-2026-73842","description":"Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:18:46","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80091"],"products":["Microsoft 365 Apps for Enterprise","Microsoft Office 2016","Microsoft Office LTSC for Mac 2024","Microsoft Office 365 for Mac","Microsoft Office 2019","Microsoft Office LTSC 2024","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC 2021"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-80093","summary":"Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.","cvss":7.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80093","https://www.talosintelligence.com/vulnerability_reports/TALOS-2026-2445"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:51","euvd":{"id":"EUVD-2026-73326","description":"Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:13:54","cvss":7.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80093"],"products":["Windows 11 Version 24H2","Windows Server 2025","Windows Server 2025 (Server Core installation)","Windows 11 Version 23H2","Windows Server 2019","Windows 11 version 26H1","Windows 10 Version 21H2","Windows 10 Version 22H2","Windows 10 Version 1809","Windows Server 2022","Windows Server 2019 (Server Core installation)","Windows 11 Version 25H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-80096","summary":"Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80096"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:51","euvd":{"id":"EUVD-2026-73847","description":"Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network.","published_time":"2026-09-08T17:18:49","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80096"],"products":["Windows Server 2016 (Server Core installation)","Windows 10 Version 1809","Windows 10 Version 1607","Windows Server 2019","Windows 10 Version 22H2","Windows 10 Version 21H2","Windows 11 Version 24H2","Windows 11 Version 25H2","Windows Server 2012 R2","Windows Server 2025 (Server Core installation)","Windows 11 version 26H1","Windows Server 2025","Windows Server 2012","Windows Server 2019 (Server Core installation)","Windows Server 2012 R2 (Server Core installation)","Windows Server 2016","Windows Server 2012 (Server Core installation)","Windows Server 2022","Windows 11 Version 23H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-80079","summary":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80079"],"vendor":"microsoft","product":"365_apps","version":null,"published_time":"2026-09-08T18:20:50","euvd":{"id":"EUVD-2026-73826","description":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:18:37","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80079"],"products":["Microsoft Office 2019","Microsoft Word 2016","Microsoft Office LTSC 2021","Microsoft Office LTSC 2024","Microsoft 365 Apps for Enterprise"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-80079","summary":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80079"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:50","euvd":{"id":"EUVD-2026-73826","description":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:18:37","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80079"],"products":["Microsoft Office 2019","Microsoft Word 2016","Microsoft Office LTSC 2021","Microsoft Office LTSC 2024","Microsoft 365 Apps for Enterprise"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-80079","summary":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80079"],"vendor":"microsoft","product":"office_2019","version":null,"published_time":"2026-09-08T18:20:50","euvd":{"id":"EUVD-2026-73826","description":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:18:37","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80079"],"products":["Microsoft Office 2019","Microsoft Word 2016","Microsoft Office LTSC 2021","Microsoft Office LTSC 2024","Microsoft 365 Apps for Enterprise"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-80079","summary":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80079"],"vendor":"microsoft","product":"office_2021","version":null,"published_time":"2026-09-08T18:20:50","euvd":{"id":"EUVD-2026-73826","description":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:18:37","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80079"],"products":["Microsoft Office 2019","Microsoft Word 2016","Microsoft Office LTSC 2021","Microsoft Office LTSC 2024","Microsoft 365 Apps for Enterprise"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-80079","summary":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80079"],"vendor":"microsoft","product":"office_2024","version":null,"published_time":"2026-09-08T18:20:50","euvd":{"id":"EUVD-2026-73826","description":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:18:37","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80079"],"products":["Microsoft Office 2019","Microsoft Word 2016","Microsoft Office LTSC 2021","Microsoft Office LTSC 2024","Microsoft 365 Apps for Enterprise"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-80079","summary":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80079"],"vendor":"microsoft","product":"word","version":null,"published_time":"2026-09-08T18:20:50","euvd":{"id":"EUVD-2026-73826","description":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:18:37","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80079"],"products":["Microsoft Office 2019","Microsoft Word 2016","Microsoft Office LTSC 2021","Microsoft Office LTSC 2024","Microsoft 365 Apps for Enterprise"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-80080","summary":"Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80080"],"vendor":"microsoft","product":"365_apps","version":null,"published_time":"2026-09-08T18:20:50","euvd":{"id":"EUVD-2026-73838","description":"Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:44","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80080"],"products":["Microsoft Office 2019","Microsoft Office LTSC for Mac 2024","Microsoft Office LTSC 2024","Microsoft Office LTSC 2021","Microsoft Office LTSC for Mac 2021","Microsoft Word 2016","Microsoft 365 Apps for Enterprise","Microsoft Office 365 for Mac"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-80080","summary":"Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80080"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:50","euvd":{"id":"EUVD-2026-73838","description":"Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:44","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80080"],"products":["Microsoft Office 2019","Microsoft Office LTSC for Mac 2024","Microsoft Office LTSC 2024","Microsoft Office LTSC 2021","Microsoft Office LTSC for Mac 2021","Microsoft Word 2016","Microsoft 365 Apps for Enterprise","Microsoft Office 365 for Mac"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-80080","summary":"Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80080"],"vendor":"microsoft","product":"microsoft_365","version":null,"published_time":"2026-09-08T18:20:50","euvd":{"id":"EUVD-2026-73838","description":"Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:44","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80080"],"products":["Microsoft Office 2019","Microsoft Office LTSC for Mac 2024","Microsoft Office LTSC 2024","Microsoft Office LTSC 2021","Microsoft Office LTSC for Mac 2021","Microsoft Word 2016","Microsoft 365 Apps for Enterprise","Microsoft Office 365 for Mac"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-80080","summary":"Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80080"],"vendor":"microsoft","product":"office_2019","version":null,"published_time":"2026-09-08T18:20:50","euvd":{"id":"EUVD-2026-73838","description":"Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:44","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80080"],"products":["Microsoft Office 2019","Microsoft Office LTSC for Mac 2024","Microsoft Office LTSC 2024","Microsoft Office LTSC 2021","Microsoft Office LTSC for Mac 2021","Microsoft Word 2016","Microsoft 365 Apps for Enterprise","Microsoft Office 365 for Mac"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-80080","summary":"Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80080"],"vendor":"microsoft","product":"office_2021","version":null,"published_time":"2026-09-08T18:20:50","euvd":{"id":"EUVD-2026-73838","description":"Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:44","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80080"],"products":["Microsoft Office 2019","Microsoft Office LTSC for Mac 2024","Microsoft Office LTSC 2024","Microsoft Office LTSC 2021","Microsoft Office LTSC for Mac 2021","Microsoft Word 2016","Microsoft 365 Apps for Enterprise","Microsoft Office 365 for Mac"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-80080","summary":"Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80080"],"vendor":"microsoft","product":"office_2024","version":null,"published_time":"2026-09-08T18:20:50","euvd":{"id":"EUVD-2026-73838","description":"Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:44","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80080"],"products":["Microsoft Office 2019","Microsoft Office LTSC for Mac 2024","Microsoft Office LTSC 2024","Microsoft Office LTSC 2021","Microsoft Office LTSC for Mac 2021","Microsoft Word 2016","Microsoft 365 Apps for Enterprise","Microsoft Office 365 for Mac"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-80080","summary":"Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80080"],"vendor":"microsoft","product":"word","version":null,"published_time":"2026-09-08T18:20:50","euvd":{"id":"EUVD-2026-73838","description":"Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:44","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80080"],"products":["Microsoft Office 2019","Microsoft Office LTSC for Mac 2024","Microsoft Office LTSC 2024","Microsoft Office LTSC 2021","Microsoft Office LTSC for Mac 2021","Microsoft Word 2016","Microsoft 365 Apps for Enterprise","Microsoft Office 365 for Mac"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-80081","summary":"Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80081"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:50","euvd":{"id":"EUVD-2026-73845","description":"Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:48","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80081"],"products":["Microsoft 365 Apps for Enterprise"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-80082","summary":"Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80082"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:50","euvd":{"id":"EUVD-2026-73846","description":"Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:18:49","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80082"],"products":["Microsoft 365 Apps for Enterprise","Microsoft Office LTSC for Mac 2024","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC 2021","Microsoft Office 365 for Mac","Microsoft Office LTSC 2024","Microsoft Office 2019"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-80083","summary":"Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute code locally.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80083"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:50","euvd":{"id":"EUVD-2026-73325","description":"Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute code locally.","published_time":"2026-09-08T17:13:53","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80083"],"products":["Windows Server 2022","Windows Server 2025 (Server Core installation)","Windows Server 2025","Windows 11 Version 23H2","Windows 11 version 26H1","Windows 11 Version 24H2","Windows 11 Version 25H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-80084","summary":"Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80084"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:50","euvd":{"id":"EUVD-2026-73835","description":"Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:18:43","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80084"],"products":["Microsoft Office 2016","Microsoft Office LTSC 2021","Microsoft Office 2019","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-80085","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80085"],"vendor":"microsoft","product":"365_apps","version":null,"published_time":"2026-09-08T18:20:50","euvd":{"id":"EUVD-2026-73840","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:45","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80085"],"products":["Microsoft Office 365 for Mac","Microsoft Office 2019","Microsoft Office LTSC for Mac 2024","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC 2021","Microsoft Word 2016","Microsoft Office LTSC 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-80085","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80085"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:50","euvd":{"id":"EUVD-2026-73840","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:45","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80085"],"products":["Microsoft Office 365 for Mac","Microsoft Office 2019","Microsoft Office LTSC for Mac 2024","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC 2021","Microsoft Word 2016","Microsoft Office LTSC 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-80085","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80085"],"vendor":"microsoft","product":"microsoft_365","version":null,"published_time":"2026-09-08T18:20:50","euvd":{"id":"EUVD-2026-73840","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:45","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80085"],"products":["Microsoft Office 365 for Mac","Microsoft Office 2019","Microsoft Office LTSC for Mac 2024","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC 2021","Microsoft Word 2016","Microsoft Office LTSC 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-80085","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80085"],"vendor":"microsoft","product":"office_2019","version":null,"published_time":"2026-09-08T18:20:50","euvd":{"id":"EUVD-2026-73840","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:45","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80085"],"products":["Microsoft Office 365 for Mac","Microsoft Office 2019","Microsoft Office LTSC for Mac 2024","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC 2021","Microsoft Word 2016","Microsoft Office LTSC 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-80085","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80085"],"vendor":"microsoft","product":"office_2021","version":null,"published_time":"2026-09-08T18:20:50","euvd":{"id":"EUVD-2026-73840","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:45","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80085"],"products":["Microsoft Office 365 for Mac","Microsoft Office 2019","Microsoft Office LTSC for Mac 2024","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC 2021","Microsoft Word 2016","Microsoft Office LTSC 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-80085","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80085"],"vendor":"microsoft","product":"office_2024","version":null,"published_time":"2026-09-08T18:20:50","euvd":{"id":"EUVD-2026-73840","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:45","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80085"],"products":["Microsoft Office 365 for Mac","Microsoft Office 2019","Microsoft Office LTSC for Mac 2024","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC 2021","Microsoft Word 2016","Microsoft Office LTSC 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-80085","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80085"],"vendor":"microsoft","product":"word","version":null,"published_time":"2026-09-08T18:20:50","euvd":{"id":"EUVD-2026-73840","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:45","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80085"],"products":["Microsoft Office 365 for Mac","Microsoft Office 2019","Microsoft Office LTSC for Mac 2024","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC 2021","Microsoft Word 2016","Microsoft Office LTSC 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-79904","summary":"Photoshop Mobile is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to access unauthorized files or directories outside the intended restrictions. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","cvss":5.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/photoshop/apsb26-136.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:49","euvd":{"id":"EUVD-2026-73925","description":"Photoshop Mobile is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to access unauthorized files or directories outside the intended restrictions. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","published_time":"2026-09-08T17:27:43","cvss":5.0,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/photoshop/apsb26-136.html"],"products":["Photoshop Android","Photoshop Android"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-80073","summary":"Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80073"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:49","euvd":{"id":"EUVD-2026-73828","description":"Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:18:39","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80073"],"products":["Microsoft Office 2019","Microsoft Outlook 2016","Microsoft Office LTSC 2021","Microsoft Office LTSC 2024","Microsoft 365 Apps for Enterprise"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-80074","summary":"Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80074"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:49","euvd":{"id":"EUVD-2026-73322","description":"Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:52","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80074"],"products":["Remote Desktop client for Windows Desktop"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-80075","summary":"Heap-based buffer overflow in Windows Work Folders allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80075"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:49","euvd":{"id":"EUVD-2026-73324","description":"Heap-based buffer overflow in Windows Work Folders allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:13:53","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80075"],"products":["Windows 11 version 26H1","Windows 11 Version 25H2","Windows 11 Version 24H2","Windows 10 Version 22H2","Windows 10 Version 21H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-80076","summary":"Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80076"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:49","euvd":{"id":"EUVD-2026-73833","description":"Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:18:41","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80076"],"products":["Microsoft Office LTSC for Mac 2021","Microsoft Office 2019","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC for Mac 2024","Microsoft Office LTSC 2021","Microsoft Office 365 for Mac","Microsoft Office LTSC 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-80077","summary":"Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80077"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:49","euvd":{"id":"EUVD-2026-73323","description":"Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:52","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80077"],"products":["Remote Desktop client for Windows Desktop"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-80078","summary":"Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80078"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:49","euvd":{"id":"EUVD-2026-73832","description":"Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:18:41","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80078"],"products":["Microsoft 365 Apps for Enterprise","Microsoft Office LTSC for Mac 2024","Microsoft Office LTSC 2024","Microsoft Office LTSC for Mac 2021","Microsoft Office 2019","Microsoft Office 365 for Mac","Microsoft Office LTSC 2021"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78524","summary":"Out-of-bounds write in Microsoft Office allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78524"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:48","euvd":{"id":"EUVD-2026-73831","description":"Out-of-bounds write in Microsoft Office allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:40","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78524"],"products":["Microsoft Office LTSC 2024","Microsoft Office LTSC 2021","Microsoft 365 Apps for Enterprise","Microsoft Office 2016","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC for Mac 2024","Microsoft Office 2019","Microsoft Office 365 for Mac"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78525","summary":"Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78525"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:48","euvd":{"id":"EUVD-2026-73836","description":"Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:43","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78525"],"products":["Microsoft Office LTSC 2021","Microsoft 365 Apps for Enterprise","Microsoft Word 2016","Microsoft Office 2019","Microsoft Office 365 for Mac","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC for Mac 2024","Microsoft Office LTSC 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78526","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78526"],"vendor":"microsoft","product":"365_apps","version":null,"published_time":"2026-09-08T18:20:48","euvd":{"id":"EUVD-2026-73834","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:42","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78526"],"products":["Microsoft Office 2016","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2021","Microsoft Office 2019","Microsoft Office 365 for Mac","Microsoft Office LTSC for Mac 2024","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78526","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78526"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:48","euvd":{"id":"EUVD-2026-73834","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:42","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78526"],"products":["Microsoft Office 2016","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2021","Microsoft Office 2019","Microsoft Office 365 for Mac","Microsoft Office LTSC for Mac 2024","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78526","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78526"],"vendor":"microsoft","product":"microsoft_365","version":null,"published_time":"2026-09-08T18:20:48","euvd":{"id":"EUVD-2026-73834","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:42","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78526"],"products":["Microsoft Office 2016","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2021","Microsoft Office 2019","Microsoft Office 365 for Mac","Microsoft Office LTSC for Mac 2024","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78526","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78526"],"vendor":"microsoft","product":"office_2016","version":null,"published_time":"2026-09-08T18:20:48","euvd":{"id":"EUVD-2026-73834","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:42","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78526"],"products":["Microsoft Office 2016","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2021","Microsoft Office 2019","Microsoft Office 365 for Mac","Microsoft Office LTSC for Mac 2024","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78526","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78526"],"vendor":"microsoft","product":"office_2019","version":null,"published_time":"2026-09-08T18:20:48","euvd":{"id":"EUVD-2026-73834","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:42","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78526"],"products":["Microsoft Office 2016","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2021","Microsoft Office 2019","Microsoft Office 365 for Mac","Microsoft Office LTSC for Mac 2024","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78526","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78526"],"vendor":"microsoft","product":"office_2021","version":null,"published_time":"2026-09-08T18:20:48","euvd":{"id":"EUVD-2026-73834","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:42","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78526"],"products":["Microsoft Office 2016","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2021","Microsoft Office 2019","Microsoft Office 365 for Mac","Microsoft Office LTSC for Mac 2024","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78526","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78526"],"vendor":"microsoft","product":"office_2024","version":null,"published_time":"2026-09-08T18:20:48","euvd":{"id":"EUVD-2026-73834","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:42","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78526"],"products":["Microsoft Office 2016","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2021","Microsoft Office 2019","Microsoft Office 365 for Mac","Microsoft Office LTSC for Mac 2024","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78517","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78517"],"vendor":"microsoft","product":"365_apps","version":null,"published_time":"2026-09-08T18:20:47","euvd":{"id":"EUVD-2026-73312","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:46","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78517"],"products":["Microsoft Office 365 for Mac","Microsoft Office LTSC 2021","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2024","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC for Mac 2024","Microsoft Word 2016","Microsoft Office 2019"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78517","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78517"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:47","euvd":{"id":"EUVD-2026-73312","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:46","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78517"],"products":["Microsoft Office 365 for Mac","Microsoft Office LTSC 2021","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2024","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC for Mac 2024","Microsoft Word 2016","Microsoft Office 2019"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78517","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78517"],"vendor":"microsoft","product":"microsoft_365","version":null,"published_time":"2026-09-08T18:20:47","euvd":{"id":"EUVD-2026-73312","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:46","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78517"],"products":["Microsoft Office 365 for Mac","Microsoft Office LTSC 2021","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2024","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC for Mac 2024","Microsoft Word 2016","Microsoft Office 2019"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78517","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78517"],"vendor":"microsoft","product":"office_2019","version":null,"published_time":"2026-09-08T18:20:47","euvd":{"id":"EUVD-2026-73312","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:46","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78517"],"products":["Microsoft Office 365 for Mac","Microsoft Office LTSC 2021","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2024","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC for Mac 2024","Microsoft Word 2016","Microsoft Office 2019"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78517","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78517"],"vendor":"microsoft","product":"office_2021","version":null,"published_time":"2026-09-08T18:20:47","euvd":{"id":"EUVD-2026-73312","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:46","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78517"],"products":["Microsoft Office 365 for Mac","Microsoft Office LTSC 2021","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2024","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC for Mac 2024","Microsoft Word 2016","Microsoft Office 2019"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78517","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78517"],"vendor":"microsoft","product":"office_2024","version":null,"published_time":"2026-09-08T18:20:47","euvd":{"id":"EUVD-2026-73312","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:46","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78517"],"products":["Microsoft Office 365 for Mac","Microsoft Office LTSC 2021","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2024","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC for Mac 2024","Microsoft Word 2016","Microsoft Office 2019"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78517","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78517"],"vendor":"microsoft","product":"word","version":null,"published_time":"2026-09-08T18:20:47","euvd":{"id":"EUVD-2026-73312","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:46","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78517"],"products":["Microsoft Office 365 for Mac","Microsoft Office LTSC 2021","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2024","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC for Mac 2024","Microsoft Word 2016","Microsoft Office 2019"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78518","summary":"Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78518"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:47","euvd":{"id":"EUVD-2026-73315","description":"Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:47","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78518"],"products":["Microsoft Office 2019","Microsoft Office 365 for Mac","Microsoft Excel 2016","Microsoft Office LTSC for Mac 2021","Microsoft Office 2016","Microsoft Office LTSC 2024","Microsoft Office LTSC for Mac 2024","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2021"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78519","summary":"Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78519"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:47","euvd":{"id":"EUVD-2026-73825","description":"Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:37","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78519"],"products":["Microsoft Office LTSC 2024","Microsoft Outlook 2016","Microsoft 365 Apps for Enterprise","Microsoft Office 2019","Microsoft Office LTSC 2021"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78520","summary":"Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78520"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:47","euvd":{"id":"EUVD-2026-73830","description":"Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:40","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78520"],"products":["Microsoft Word 2016","Microsoft Office 2019","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2024","Microsoft Office 365 for Mac","Microsoft Office LTSC 2021","Microsoft Office LTSC for Mac 2024","Microsoft Office LTSC for Mac 2021"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78521","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78521"],"vendor":"microsoft","product":"365_apps","version":null,"published_time":"2026-09-08T18:20:47","euvd":{"id":"EUVD-2026-73827","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:38","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78521"],"products":["Microsoft Office LTSC for Mac 2024","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC for Mac 2021","Microsoft Word 2016","Microsoft Office 365 for Mac","Microsoft Office LTSC 2024","Microsoft Office 2019","Microsoft Office LTSC 2021"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78521","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78521"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:47","euvd":{"id":"EUVD-2026-73827","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:38","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78521"],"products":["Microsoft Office LTSC for Mac 2024","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC for Mac 2021","Microsoft Word 2016","Microsoft Office 365 for Mac","Microsoft Office LTSC 2024","Microsoft Office 2019","Microsoft Office LTSC 2021"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78521","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78521"],"vendor":"microsoft","product":"microsoft_365","version":null,"published_time":"2026-09-08T18:20:47","euvd":{"id":"EUVD-2026-73827","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:38","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78521"],"products":["Microsoft Office LTSC for Mac 2024","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC for Mac 2021","Microsoft Word 2016","Microsoft Office 365 for Mac","Microsoft Office LTSC 2024","Microsoft Office 2019","Microsoft Office LTSC 2021"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78521","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78521"],"vendor":"microsoft","product":"office_2019","version":null,"published_time":"2026-09-08T18:20:47","euvd":{"id":"EUVD-2026-73827","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:38","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78521"],"products":["Microsoft Office LTSC for Mac 2024","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC for Mac 2021","Microsoft Word 2016","Microsoft Office 365 for Mac","Microsoft Office LTSC 2024","Microsoft Office 2019","Microsoft Office LTSC 2021"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78521","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78521"],"vendor":"microsoft","product":"office_2021","version":null,"published_time":"2026-09-08T18:20:47","euvd":{"id":"EUVD-2026-73827","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:38","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78521"],"products":["Microsoft Office LTSC for Mac 2024","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC for Mac 2021","Microsoft Word 2016","Microsoft Office 365 for Mac","Microsoft Office LTSC 2024","Microsoft Office 2019","Microsoft Office LTSC 2021"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78521","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78521"],"vendor":"microsoft","product":"office_2024","version":null,"published_time":"2026-09-08T18:20:47","euvd":{"id":"EUVD-2026-73827","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:38","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78521"],"products":["Microsoft Office LTSC for Mac 2024","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC for Mac 2021","Microsoft Word 2016","Microsoft Office 365 for Mac","Microsoft Office LTSC 2024","Microsoft Office 2019","Microsoft Office LTSC 2021"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78521","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78521"],"vendor":"microsoft","product":"word","version":null,"published_time":"2026-09-08T18:20:47","euvd":{"id":"EUVD-2026-73827","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:38","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78521"],"products":["Microsoft Office LTSC for Mac 2024","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC for Mac 2021","Microsoft Word 2016","Microsoft Office 365 for Mac","Microsoft Office LTSC 2024","Microsoft Office 2019","Microsoft Office LTSC 2021"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78522","summary":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78522"],"vendor":"microsoft","product":"365_apps","version":null,"published_time":"2026-09-08T18:20:47","euvd":{"id":"EUVD-2026-73829","description":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:18:39","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78522"],"products":["Microsoft 365 Apps for Enterprise","Microsoft Word 2016","Microsoft Office LTSC 2024","Microsoft Office 2019","Microsoft Office LTSC 2021"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78522","summary":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78522"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:47","euvd":{"id":"EUVD-2026-73829","description":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:18:39","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78522"],"products":["Microsoft 365 Apps for Enterprise","Microsoft Word 2016","Microsoft Office LTSC 2024","Microsoft Office 2019","Microsoft Office LTSC 2021"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78522","summary":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78522"],"vendor":"microsoft","product":"office_2019","version":null,"published_time":"2026-09-08T18:20:47","euvd":{"id":"EUVD-2026-73829","description":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:18:39","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78522"],"products":["Microsoft 365 Apps for Enterprise","Microsoft Word 2016","Microsoft Office LTSC 2024","Microsoft Office 2019","Microsoft Office LTSC 2021"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78522","summary":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78522"],"vendor":"microsoft","product":"office_2021","version":null,"published_time":"2026-09-08T18:20:47","euvd":{"id":"EUVD-2026-73829","description":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:18:39","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78522"],"products":["Microsoft 365 Apps for Enterprise","Microsoft Word 2016","Microsoft Office LTSC 2024","Microsoft Office 2019","Microsoft Office LTSC 2021"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78522","summary":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78522"],"vendor":"microsoft","product":"office_2024","version":null,"published_time":"2026-09-08T18:20:47","euvd":{"id":"EUVD-2026-73829","description":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:18:39","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78522"],"products":["Microsoft 365 Apps for Enterprise","Microsoft Word 2016","Microsoft Office LTSC 2024","Microsoft Office 2019","Microsoft Office LTSC 2021"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78522","summary":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78522"],"vendor":"microsoft","product":"word","version":null,"published_time":"2026-09-08T18:20:47","euvd":{"id":"EUVD-2026-73829","description":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:18:39","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78522"],"products":["Microsoft 365 Apps for Enterprise","Microsoft Word 2016","Microsoft Office LTSC 2024","Microsoft Office 2019","Microsoft Office LTSC 2021"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78523","summary":"Use after free in Windows DNS allows an unauthorized attacker to deny service over a network.","cvss":5.9,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.9,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78523"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:47","euvd":{"id":"EUVD-2026-73321","description":"Use after free in Windows DNS allows an unauthorized attacker to deny service over a network.","published_time":"2026-09-08T17:13:51","cvss":5.9,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78523"],"products":["Windows Server 2012 R2","Windows Server 2025","Windows Server 2025 (Server Core installation)","Windows Server 2019 (Server Core installation)","Windows Server 2022","Windows 10 Version 1607","Windows Server 2012 R2 (Server Core installation)","Windows Server 2012 (Server Core installation)","Windows 10 Version 1809","Windows Server 2016 (Server Core installation)","Windows Server 2016","Windows Server 2012","Windows Server 2019"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78509","summary":"Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.","cvss":9.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":9.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78509"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:46","euvd":{"id":"EUVD-2026-73313","description":"Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:46","cvss":9.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78509"],"products":["Microsoft Office LTSC for Mac 2024","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC 2021","Microsoft Word 2016","Microsoft Office LTSC 2024","Microsoft Office 2019","Microsoft 365 Apps for Enterprise","Microsoft Office 365 for Mac"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78510","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":9.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":9.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78510"],"vendor":"microsoft","product":"365_apps","version":null,"published_time":"2026-09-08T18:20:46","euvd":{"id":"EUVD-2026-73308","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:44","cvss":9.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78510"],"products":["Microsoft Office 2019","Microsoft Office LTSC 2021","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC for Mac 2024","Microsoft Office 2016","Microsoft Office LTSC for Mac 2021","Microsoft Office 365 for Mac","Microsoft Office LTSC 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78510","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":9.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":9.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78510"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:46","euvd":{"id":"EUVD-2026-73308","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:44","cvss":9.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78510"],"products":["Microsoft Office 2019","Microsoft Office LTSC 2021","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC for Mac 2024","Microsoft Office 2016","Microsoft Office LTSC for Mac 2021","Microsoft Office 365 for Mac","Microsoft Office LTSC 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78510","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":9.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":9.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78510"],"vendor":"microsoft","product":"microsoft_365","version":null,"published_time":"2026-09-08T18:20:46","euvd":{"id":"EUVD-2026-73308","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:44","cvss":9.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78510"],"products":["Microsoft Office 2019","Microsoft Office LTSC 2021","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC for Mac 2024","Microsoft Office 2016","Microsoft Office LTSC for Mac 2021","Microsoft Office 365 for Mac","Microsoft Office LTSC 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78510","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":9.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":9.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78510"],"vendor":"microsoft","product":"office_2016","version":null,"published_time":"2026-09-08T18:20:46","euvd":{"id":"EUVD-2026-73308","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:44","cvss":9.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78510"],"products":["Microsoft Office 2019","Microsoft Office LTSC 2021","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC for Mac 2024","Microsoft Office 2016","Microsoft Office LTSC for Mac 2021","Microsoft Office 365 for Mac","Microsoft Office LTSC 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78510","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":9.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":9.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78510"],"vendor":"microsoft","product":"office_2019","version":null,"published_time":"2026-09-08T18:20:46","euvd":{"id":"EUVD-2026-73308","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:44","cvss":9.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78510"],"products":["Microsoft Office 2019","Microsoft Office LTSC 2021","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC for Mac 2024","Microsoft Office 2016","Microsoft Office LTSC for Mac 2021","Microsoft Office 365 for Mac","Microsoft Office LTSC 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78510","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":9.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":9.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78510"],"vendor":"microsoft","product":"office_2021","version":null,"published_time":"2026-09-08T18:20:46","euvd":{"id":"EUVD-2026-73308","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:44","cvss":9.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78510"],"products":["Microsoft Office 2019","Microsoft Office LTSC 2021","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC for Mac 2024","Microsoft Office 2016","Microsoft Office LTSC for Mac 2021","Microsoft Office 365 for Mac","Microsoft Office LTSC 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78510","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":9.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":9.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78510"],"vendor":"microsoft","product":"office_2024","version":null,"published_time":"2026-09-08T18:20:46","euvd":{"id":"EUVD-2026-73308","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:44","cvss":9.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78510"],"products":["Microsoft Office 2019","Microsoft Office LTSC 2021","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC for Mac 2024","Microsoft Office 2016","Microsoft Office LTSC for Mac 2021","Microsoft Office 365 for Mac","Microsoft Office LTSC 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78511","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78511"],"vendor":"microsoft","product":"365_apps","version":null,"published_time":"2026-09-08T18:20:46","euvd":{"id":"EUVD-2026-73304","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:41","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78511"],"products":["Microsoft Word 2016","Microsoft Office LTSC 2021","Microsoft Office 2019","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC for Mac 2024","Microsoft Office 365 for Mac","Microsoft Office LTSC 2024","Microsoft 365 Apps for Enterprise"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78511","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78511"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:46","euvd":{"id":"EUVD-2026-73304","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:41","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78511"],"products":["Microsoft Word 2016","Microsoft Office LTSC 2021","Microsoft Office 2019","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC for Mac 2024","Microsoft Office 365 for Mac","Microsoft Office LTSC 2024","Microsoft 365 Apps for Enterprise"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78511","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78511"],"vendor":"microsoft","product":"microsoft_365","version":null,"published_time":"2026-09-08T18:20:46","euvd":{"id":"EUVD-2026-73304","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:41","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78511"],"products":["Microsoft Word 2016","Microsoft Office LTSC 2021","Microsoft Office 2019","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC for Mac 2024","Microsoft Office 365 for Mac","Microsoft Office LTSC 2024","Microsoft 365 Apps for Enterprise"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78511","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78511"],"vendor":"microsoft","product":"office_2019","version":null,"published_time":"2026-09-08T18:20:46","euvd":{"id":"EUVD-2026-73304","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:41","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78511"],"products":["Microsoft Word 2016","Microsoft Office LTSC 2021","Microsoft Office 2019","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC for Mac 2024","Microsoft Office 365 for Mac","Microsoft Office LTSC 2024","Microsoft 365 Apps for Enterprise"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78511","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78511"],"vendor":"microsoft","product":"office_2021","version":null,"published_time":"2026-09-08T18:20:46","euvd":{"id":"EUVD-2026-73304","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:41","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78511"],"products":["Microsoft Word 2016","Microsoft Office LTSC 2021","Microsoft Office 2019","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC for Mac 2024","Microsoft Office 365 for Mac","Microsoft Office LTSC 2024","Microsoft 365 Apps for Enterprise"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78511","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78511"],"vendor":"microsoft","product":"office_2024","version":null,"published_time":"2026-09-08T18:20:46","euvd":{"id":"EUVD-2026-73304","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:41","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78511"],"products":["Microsoft Word 2016","Microsoft Office LTSC 2021","Microsoft Office 2019","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC for Mac 2024","Microsoft Office 365 for Mac","Microsoft Office LTSC 2024","Microsoft 365 Apps for Enterprise"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78511","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78511"],"vendor":"microsoft","product":"word","version":null,"published_time":"2026-09-08T18:20:46","euvd":{"id":"EUVD-2026-73304","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:41","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78511"],"products":["Microsoft Word 2016","Microsoft Office LTSC 2021","Microsoft Office 2019","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC for Mac 2024","Microsoft Office 365 for Mac","Microsoft Office LTSC 2024","Microsoft 365 Apps for Enterprise"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78512","summary":"Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78512"],"vendor":"microsoft","product":"365_apps","version":null,"published_time":"2026-09-08T18:20:46","euvd":{"id":"EUVD-2026-73818","description":"Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:33","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78512"],"products":["Microsoft Office LTSC 2021","Microsoft Office LTSC 2024","Microsoft Office 2019","Microsoft Office 365 for Mac","Microsoft 365 Apps for Enterprise","Microsoft Office 2016","Microsoft Word 2016","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC for Mac 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78512","summary":"Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78512"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:46","euvd":{"id":"EUVD-2026-73818","description":"Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:33","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78512"],"products":["Microsoft Office LTSC 2021","Microsoft Office LTSC 2024","Microsoft Office 2019","Microsoft Office 365 for Mac","Microsoft 365 Apps for Enterprise","Microsoft Office 2016","Microsoft Word 2016","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC for Mac 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78512","summary":"Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78512"],"vendor":"microsoft","product":"microsoft_365","version":null,"published_time":"2026-09-08T18:20:46","euvd":{"id":"EUVD-2026-73818","description":"Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:33","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78512"],"products":["Microsoft Office LTSC 2021","Microsoft Office LTSC 2024","Microsoft Office 2019","Microsoft Office 365 for Mac","Microsoft 365 Apps for Enterprise","Microsoft Office 2016","Microsoft Word 2016","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC for Mac 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78512","summary":"Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78512"],"vendor":"microsoft","product":"office_2016","version":null,"published_time":"2026-09-08T18:20:46","euvd":{"id":"EUVD-2026-73818","description":"Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:33","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78512"],"products":["Microsoft Office LTSC 2021","Microsoft Office LTSC 2024","Microsoft Office 2019","Microsoft Office 365 for Mac","Microsoft 365 Apps for Enterprise","Microsoft Office 2016","Microsoft Word 2016","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC for Mac 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78512","summary":"Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78512"],"vendor":"microsoft","product":"office_2019","version":null,"published_time":"2026-09-08T18:20:46","euvd":{"id":"EUVD-2026-73818","description":"Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:33","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78512"],"products":["Microsoft Office LTSC 2021","Microsoft Office LTSC 2024","Microsoft Office 2019","Microsoft Office 365 for Mac","Microsoft 365 Apps for Enterprise","Microsoft Office 2016","Microsoft Word 2016","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC for Mac 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78512","summary":"Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78512"],"vendor":"microsoft","product":"office_2021","version":null,"published_time":"2026-09-08T18:20:46","euvd":{"id":"EUVD-2026-73818","description":"Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:33","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78512"],"products":["Microsoft Office LTSC 2021","Microsoft Office LTSC 2024","Microsoft Office 2019","Microsoft Office 365 for Mac","Microsoft 365 Apps for Enterprise","Microsoft Office 2016","Microsoft Word 2016","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC for Mac 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78512","summary":"Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78512"],"vendor":"microsoft","product":"office_2024","version":null,"published_time":"2026-09-08T18:20:46","euvd":{"id":"EUVD-2026-73818","description":"Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:33","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78512"],"products":["Microsoft Office LTSC 2021","Microsoft Office LTSC 2024","Microsoft Office 2019","Microsoft Office 365 for Mac","Microsoft 365 Apps for Enterprise","Microsoft Office 2016","Microsoft Word 2016","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC for Mac 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78512","summary":"Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78512"],"vendor":"microsoft","product":"word","version":null,"published_time":"2026-09-08T18:20:46","euvd":{"id":"EUVD-2026-73818","description":"Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:33","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78512"],"products":["Microsoft Office LTSC 2021","Microsoft Office LTSC 2024","Microsoft Office 2019","Microsoft Office 365 for Mac","Microsoft 365 Apps for Enterprise","Microsoft Office 2016","Microsoft Word 2016","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC for Mac 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78513","summary":"Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78513"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:46","euvd":{"id":"EUVD-2026-73310","description":"Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.","published_time":"2026-09-08T17:13:45","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78513"],"products":["Microsoft Office 365 for Mac","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC 2021","Microsoft Office LTSC for Mac 2024","Microsoft PowerPoint 2016","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2024","Microsoft Office 2019"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78514","summary":"Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78514"],"vendor":"microsoft","product":"365_apps","version":null,"published_time":"2026-09-08T18:20:46","euvd":{"id":"EUVD-2026-73819","description":"Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:33","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78514"],"products":["Microsoft Office LTSC 2024","Microsoft Office LTSC for Mac 2024","Microsoft Word 2016","Microsoft Office 2019","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC 2021","Microsoft Office 365 for Mac","Microsoft 365 Apps for Enterprise"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78514","summary":"Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78514"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:46","euvd":{"id":"EUVD-2026-73819","description":"Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:33","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78514"],"products":["Microsoft Office LTSC 2024","Microsoft Office LTSC for Mac 2024","Microsoft Word 2016","Microsoft Office 2019","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC 2021","Microsoft Office 365 for Mac","Microsoft 365 Apps for Enterprise"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78514","summary":"Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78514"],"vendor":"microsoft","product":"microsoft_365","version":null,"published_time":"2026-09-08T18:20:46","euvd":{"id":"EUVD-2026-73819","description":"Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:33","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78514"],"products":["Microsoft Office LTSC 2024","Microsoft Office LTSC for Mac 2024","Microsoft Word 2016","Microsoft Office 2019","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC 2021","Microsoft Office 365 for Mac","Microsoft 365 Apps for Enterprise"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78514","summary":"Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78514"],"vendor":"microsoft","product":"office_2019","version":null,"published_time":"2026-09-08T18:20:46","euvd":{"id":"EUVD-2026-73819","description":"Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:33","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78514"],"products":["Microsoft Office LTSC 2024","Microsoft Office LTSC for Mac 2024","Microsoft Word 2016","Microsoft Office 2019","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC 2021","Microsoft Office 365 for Mac","Microsoft 365 Apps for Enterprise"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78514","summary":"Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78514"],"vendor":"microsoft","product":"office_2021","version":null,"published_time":"2026-09-08T18:20:46","euvd":{"id":"EUVD-2026-73819","description":"Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:33","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78514"],"products":["Microsoft Office LTSC 2024","Microsoft Office LTSC for Mac 2024","Microsoft Word 2016","Microsoft Office 2019","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC 2021","Microsoft Office 365 for Mac","Microsoft 365 Apps for Enterprise"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78514","summary":"Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78514"],"vendor":"microsoft","product":"office_2024","version":null,"published_time":"2026-09-08T18:20:46","euvd":{"id":"EUVD-2026-73819","description":"Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:33","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78514"],"products":["Microsoft Office LTSC 2024","Microsoft Office LTSC for Mac 2024","Microsoft Word 2016","Microsoft Office 2019","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC 2021","Microsoft Office 365 for Mac","Microsoft 365 Apps for Enterprise"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78514","summary":"Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78514"],"vendor":"microsoft","product":"word","version":null,"published_time":"2026-09-08T18:20:46","euvd":{"id":"EUVD-2026-73819","description":"Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:33","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78514"],"products":["Microsoft Office LTSC 2024","Microsoft Office LTSC for Mac 2024","Microsoft Word 2016","Microsoft Office 2019","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC 2021","Microsoft Office 365 for Mac","Microsoft 365 Apps for Enterprise"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78515","summary":"Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78515"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:46","euvd":{"id":"EUVD-2026-73306","description":"Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:13:42","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78515"],"products":["Microsoft Office 2016","Microsoft Office 2019","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC 2021","Microsoft Office LTSC 2024","Microsoft Office LTSC for Mac 2024","Microsoft Office 365 for Mac"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78516","summary":"Buffer over-read in Windows Storage allows an unauthorized attacker to disclose information with a physical attack.","cvss":4.3,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":4.3,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78516"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:46","euvd":{"id":"EUVD-2026-73821","description":"Buffer over-read in Windows Storage allows an unauthorized attacker to disclose information with a physical attack.","published_time":"2026-09-08T17:18:34","cvss":4.3,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78516"],"products":["Windows Server 2012 (Server Core installation)","Windows 11 version 26H1","Windows 10 Version 21H2","Windows 10 Version 22H2","Windows Server 2019 (Server Core installation)","Windows 11 Version 24H2","Windows Server 2012 R2 (Server Core installation)","Windows 10 Version 1809","Windows 10 Version 1607","Windows Server 2016","Windows Server 2019","Windows 11 Version 25H2","Windows Server 2012 R2","Windows Server 2012","Windows Server 2025 (Server Core installation)","Windows Server 2022","Windows 11 Version 23H2","Windows Server 2025","Windows Server 2016 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78502","summary":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78502"],"vendor":"microsoft","product":"365_apps","version":null,"published_time":"2026-09-08T18:20:45","euvd":{"id":"EUVD-2026-73305","description":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:13:42","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78502"],"products":["Microsoft Office LTSC 2021","Microsoft Office LTSC for Mac 2024","Microsoft Word 2016","Microsoft 365 Apps for Enterprise","Microsoft Office 365 for Mac","Microsoft Office LTSC 2024","Microsoft Office LTSC for Mac 2021","Microsoft Office 2019"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78502","summary":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78502"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:45","euvd":{"id":"EUVD-2026-73305","description":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:13:42","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78502"],"products":["Microsoft Office LTSC 2021","Microsoft Office LTSC for Mac 2024","Microsoft Word 2016","Microsoft 365 Apps for Enterprise","Microsoft Office 365 for Mac","Microsoft Office LTSC 2024","Microsoft Office LTSC for Mac 2021","Microsoft Office 2019"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78502","summary":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78502"],"vendor":"microsoft","product":"microsoft_365","version":null,"published_time":"2026-09-08T18:20:45","euvd":{"id":"EUVD-2026-73305","description":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:13:42","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78502"],"products":["Microsoft Office LTSC 2021","Microsoft Office LTSC for Mac 2024","Microsoft Word 2016","Microsoft 365 Apps for Enterprise","Microsoft Office 365 for Mac","Microsoft Office LTSC 2024","Microsoft Office LTSC for Mac 2021","Microsoft Office 2019"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78502","summary":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78502"],"vendor":"microsoft","product":"office_2019","version":null,"published_time":"2026-09-08T18:20:45","euvd":{"id":"EUVD-2026-73305","description":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:13:42","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78502"],"products":["Microsoft Office LTSC 2021","Microsoft Office LTSC for Mac 2024","Microsoft Word 2016","Microsoft 365 Apps for Enterprise","Microsoft Office 365 for Mac","Microsoft Office LTSC 2024","Microsoft Office LTSC for Mac 2021","Microsoft Office 2019"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78502","summary":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78502"],"vendor":"microsoft","product":"office_2021","version":null,"published_time":"2026-09-08T18:20:45","euvd":{"id":"EUVD-2026-73305","description":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:13:42","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78502"],"products":["Microsoft Office LTSC 2021","Microsoft Office LTSC for Mac 2024","Microsoft Word 2016","Microsoft 365 Apps for Enterprise","Microsoft Office 365 for Mac","Microsoft Office LTSC 2024","Microsoft Office LTSC for Mac 2021","Microsoft Office 2019"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78502","summary":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78502"],"vendor":"microsoft","product":"office_2024","version":null,"published_time":"2026-09-08T18:20:45","euvd":{"id":"EUVD-2026-73305","description":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:13:42","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78502"],"products":["Microsoft Office LTSC 2021","Microsoft Office LTSC for Mac 2024","Microsoft Word 2016","Microsoft 365 Apps for Enterprise","Microsoft Office 365 for Mac","Microsoft Office LTSC 2024","Microsoft Office LTSC for Mac 2021","Microsoft Office 2019"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78502","summary":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78502"],"vendor":"microsoft","product":"word","version":null,"published_time":"2026-09-08T18:20:45","euvd":{"id":"EUVD-2026-73305","description":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:13:42","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78502"],"products":["Microsoft Office LTSC 2021","Microsoft Office LTSC for Mac 2024","Microsoft Word 2016","Microsoft 365 Apps for Enterprise","Microsoft Office 365 for Mac","Microsoft Office LTSC 2024","Microsoft Office LTSC for Mac 2021","Microsoft Office 2019"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78503","summary":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78503"],"vendor":"microsoft","product":"365_apps","version":null,"published_time":"2026-09-08T18:20:45","euvd":{"id":"EUVD-2026-73820","description":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:18:34","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78503"],"products":["Microsoft Office LTSC for Mac 2024","Microsoft Office 365 for Mac","Microsoft Word 2016","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC 2024","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2021","Microsoft Office 2019"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78503","summary":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78503"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:45","euvd":{"id":"EUVD-2026-73820","description":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:18:34","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78503"],"products":["Microsoft Office LTSC for Mac 2024","Microsoft Office 365 for Mac","Microsoft Word 2016","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC 2024","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2021","Microsoft Office 2019"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78503","summary":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78503"],"vendor":"microsoft","product":"microsoft_365","version":null,"published_time":"2026-09-08T18:20:45","euvd":{"id":"EUVD-2026-73820","description":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:18:34","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78503"],"products":["Microsoft Office LTSC for Mac 2024","Microsoft Office 365 for Mac","Microsoft Word 2016","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC 2024","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2021","Microsoft Office 2019"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78503","summary":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78503"],"vendor":"microsoft","product":"office_2019","version":null,"published_time":"2026-09-08T18:20:45","euvd":{"id":"EUVD-2026-73820","description":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:18:34","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78503"],"products":["Microsoft Office LTSC for Mac 2024","Microsoft Office 365 for Mac","Microsoft Word 2016","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC 2024","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2021","Microsoft Office 2019"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78503","summary":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78503"],"vendor":"microsoft","product":"office_2021","version":null,"published_time":"2026-09-08T18:20:45","euvd":{"id":"EUVD-2026-73820","description":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:18:34","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78503"],"products":["Microsoft Office LTSC for Mac 2024","Microsoft Office 365 for Mac","Microsoft Word 2016","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC 2024","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2021","Microsoft Office 2019"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78503","summary":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78503"],"vendor":"microsoft","product":"office_2024","version":null,"published_time":"2026-09-08T18:20:45","euvd":{"id":"EUVD-2026-73820","description":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:18:34","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78503"],"products":["Microsoft Office LTSC for Mac 2024","Microsoft Office 365 for Mac","Microsoft Word 2016","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC 2024","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2021","Microsoft Office 2019"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78503","summary":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78503"],"vendor":"microsoft","product":"word","version":null,"published_time":"2026-09-08T18:20:45","euvd":{"id":"EUVD-2026-73820","description":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:18:34","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78503"],"products":["Microsoft Office LTSC for Mac 2024","Microsoft Office 365 for Mac","Microsoft Word 2016","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC 2024","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2021","Microsoft Office 2019"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78504","summary":"Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78504"],"vendor":"microsoft","product":"365_apps","version":null,"published_time":"2026-09-08T18:20:45","euvd":{"id":"EUVD-2026-73311","description":"Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:45","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78504"],"products":["Microsoft Word 2016","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC 2024","Microsoft Office 365 for Mac","Microsoft Office LTSC 2021","Microsoft 365 Apps for Enterprise","Microsoft Office 2019","Microsoft Office LTSC for Mac 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78504","summary":"Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78504"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:45","euvd":{"id":"EUVD-2026-73311","description":"Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:45","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78504"],"products":["Microsoft Word 2016","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC 2024","Microsoft Office 365 for Mac","Microsoft Office LTSC 2021","Microsoft 365 Apps for Enterprise","Microsoft Office 2019","Microsoft Office LTSC for Mac 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78504","summary":"Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78504"],"vendor":"microsoft","product":"microsoft_365","version":null,"published_time":"2026-09-08T18:20:45","euvd":{"id":"EUVD-2026-73311","description":"Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:45","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78504"],"products":["Microsoft Word 2016","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC 2024","Microsoft Office 365 for Mac","Microsoft Office LTSC 2021","Microsoft 365 Apps for Enterprise","Microsoft Office 2019","Microsoft Office LTSC for Mac 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78504","summary":"Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78504"],"vendor":"microsoft","product":"office_2019","version":null,"published_time":"2026-09-08T18:20:45","euvd":{"id":"EUVD-2026-73311","description":"Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:45","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78504"],"products":["Microsoft Word 2016","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC 2024","Microsoft Office 365 for Mac","Microsoft Office LTSC 2021","Microsoft 365 Apps for Enterprise","Microsoft Office 2019","Microsoft Office LTSC for Mac 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78504","summary":"Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78504"],"vendor":"microsoft","product":"office_2021","version":null,"published_time":"2026-09-08T18:20:45","euvd":{"id":"EUVD-2026-73311","description":"Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:45","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78504"],"products":["Microsoft Word 2016","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC 2024","Microsoft Office 365 for Mac","Microsoft Office LTSC 2021","Microsoft 365 Apps for Enterprise","Microsoft Office 2019","Microsoft Office LTSC for Mac 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78504","summary":"Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78504"],"vendor":"microsoft","product":"office_2024","version":null,"published_time":"2026-09-08T18:20:45","euvd":{"id":"EUVD-2026-73311","description":"Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:45","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78504"],"products":["Microsoft Word 2016","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC 2024","Microsoft Office 365 for Mac","Microsoft Office LTSC 2021","Microsoft 365 Apps for Enterprise","Microsoft Office 2019","Microsoft Office LTSC for Mac 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78504","summary":"Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78504"],"vendor":"microsoft","product":"word","version":null,"published_time":"2026-09-08T18:20:45","euvd":{"id":"EUVD-2026-73311","description":"Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:45","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78504"],"products":["Microsoft Word 2016","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC 2024","Microsoft Office 365 for Mac","Microsoft Office LTSC 2021","Microsoft 365 Apps for Enterprise","Microsoft Office 2019","Microsoft Office LTSC for Mac 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78505","summary":"Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78505"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:45","euvd":{"id":"EUVD-2026-73307","description":"Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:43","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78505"],"products":["Microsoft Office 365 for Mac","Microsoft Office LTSC 2024","Microsoft Office LTSC 2021","Microsoft Office 2016","Microsoft Office 2019","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC for Mac 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78506","summary":"Improper null termination in Microsoft Office Word allows an unauthorized attacker to disclose information locally.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78506"],"vendor":"microsoft","product":"365_apps","version":null,"published_time":"2026-09-08T18:20:45","euvd":{"id":"EUVD-2026-73817","description":"Improper null termination in Microsoft Office Word allows an unauthorized attacker to disclose information locally.","published_time":"2026-09-08T17:18:32","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78506"],"products":["Microsoft Office LTSC 2024","Microsoft Office 365 for Mac","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2021","Microsoft Office 2019","Microsoft Word 2016","Microsoft Office LTSC for Mac 2024","Microsoft Office LTSC for Mac 2021"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78506","summary":"Improper null termination in Microsoft Office Word allows an unauthorized attacker to disclose information locally.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78506"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:45","euvd":{"id":"EUVD-2026-73817","description":"Improper null termination in Microsoft Office Word allows an unauthorized attacker to disclose information locally.","published_time":"2026-09-08T17:18:32","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78506"],"products":["Microsoft Office LTSC 2024","Microsoft Office 365 for Mac","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2021","Microsoft Office 2019","Microsoft Word 2016","Microsoft Office LTSC for Mac 2024","Microsoft Office LTSC for Mac 2021"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78506","summary":"Improper null termination in Microsoft Office Word allows an unauthorized attacker to disclose information locally.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78506"],"vendor":"microsoft","product":"microsoft_365","version":null,"published_time":"2026-09-08T18:20:45","euvd":{"id":"EUVD-2026-73817","description":"Improper null termination in Microsoft Office Word allows an unauthorized attacker to disclose information locally.","published_time":"2026-09-08T17:18:32","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78506"],"products":["Microsoft Office LTSC 2024","Microsoft Office 365 for Mac","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2021","Microsoft Office 2019","Microsoft Word 2016","Microsoft Office LTSC for Mac 2024","Microsoft Office LTSC for Mac 2021"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78506","summary":"Improper null termination in Microsoft Office Word allows an unauthorized attacker to disclose information locally.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78506"],"vendor":"microsoft","product":"office_2019","version":null,"published_time":"2026-09-08T18:20:45","euvd":{"id":"EUVD-2026-73817","description":"Improper null termination in Microsoft Office Word allows an unauthorized attacker to disclose information locally.","published_time":"2026-09-08T17:18:32","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78506"],"products":["Microsoft Office LTSC 2024","Microsoft Office 365 for Mac","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2021","Microsoft Office 2019","Microsoft Word 2016","Microsoft Office LTSC for Mac 2024","Microsoft Office LTSC for Mac 2021"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78506","summary":"Improper null termination in Microsoft Office Word allows an unauthorized attacker to disclose information locally.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78506"],"vendor":"microsoft","product":"office_2021","version":null,"published_time":"2026-09-08T18:20:45","euvd":{"id":"EUVD-2026-73817","description":"Improper null termination in Microsoft Office Word allows an unauthorized attacker to disclose information locally.","published_time":"2026-09-08T17:18:32","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78506"],"products":["Microsoft Office LTSC 2024","Microsoft Office 365 for Mac","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2021","Microsoft Office 2019","Microsoft Word 2016","Microsoft Office LTSC for Mac 2024","Microsoft Office LTSC for Mac 2021"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78506","summary":"Improper null termination in Microsoft Office Word allows an unauthorized attacker to disclose information locally.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78506"],"vendor":"microsoft","product":"office_2024","version":null,"published_time":"2026-09-08T18:20:45","euvd":{"id":"EUVD-2026-73817","description":"Improper null termination in Microsoft Office Word allows an unauthorized attacker to disclose information locally.","published_time":"2026-09-08T17:18:32","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78506"],"products":["Microsoft Office LTSC 2024","Microsoft Office 365 for Mac","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2021","Microsoft Office 2019","Microsoft Word 2016","Microsoft Office LTSC for Mac 2024","Microsoft Office LTSC for Mac 2021"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78506","summary":"Improper null termination in Microsoft Office Word allows an unauthorized attacker to disclose information locally.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78506"],"vendor":"microsoft","product":"word","version":null,"published_time":"2026-09-08T18:20:45","euvd":{"id":"EUVD-2026-73817","description":"Improper null termination in Microsoft Office Word allows an unauthorized attacker to disclose information locally.","published_time":"2026-09-08T17:18:32","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78506"],"products":["Microsoft Office LTSC 2024","Microsoft Office 365 for Mac","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2021","Microsoft Office 2019","Microsoft Word 2016","Microsoft Office LTSC for Mac 2024","Microsoft Office LTSC for Mac 2021"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78507","summary":"Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78507"],"vendor":"microsoft","product":"365_apps","version":null,"published_time":"2026-09-08T18:20:45","euvd":{"id":"EUVD-2026-73816","description":"Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:32","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78507"],"products":["Microsoft Office LTSC 2021","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC for Mac 2024","Microsoft Office 2019","Microsoft Office LTSC 2024","Microsoft Office 365 for Mac","Microsoft 365 Apps for Enterprise"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78507","summary":"Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78507"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:45","euvd":{"id":"EUVD-2026-73816","description":"Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:32","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78507"],"products":["Microsoft Office LTSC 2021","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC for Mac 2024","Microsoft Office 2019","Microsoft Office LTSC 2024","Microsoft Office 365 for Mac","Microsoft 365 Apps for Enterprise"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78507","summary":"Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78507"],"vendor":"microsoft","product":"microsoft_365","version":null,"published_time":"2026-09-08T18:20:45","euvd":{"id":"EUVD-2026-73816","description":"Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:32","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78507"],"products":["Microsoft Office LTSC 2021","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC for Mac 2024","Microsoft Office 2019","Microsoft Office LTSC 2024","Microsoft Office 365 for Mac","Microsoft 365 Apps for Enterprise"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78507","summary":"Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78507"],"vendor":"microsoft","product":"office_2019","version":null,"published_time":"2026-09-08T18:20:45","euvd":{"id":"EUVD-2026-73816","description":"Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:32","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78507"],"products":["Microsoft Office LTSC 2021","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC for Mac 2024","Microsoft Office 2019","Microsoft Office LTSC 2024","Microsoft Office 365 for Mac","Microsoft 365 Apps for Enterprise"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78507","summary":"Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78507"],"vendor":"microsoft","product":"office_2021","version":null,"published_time":"2026-09-08T18:20:45","euvd":{"id":"EUVD-2026-73816","description":"Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:32","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78507"],"products":["Microsoft Office LTSC 2021","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC for Mac 2024","Microsoft Office 2019","Microsoft Office LTSC 2024","Microsoft Office 365 for Mac","Microsoft 365 Apps for Enterprise"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78507","summary":"Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78507"],"vendor":"microsoft","product":"office_2024","version":null,"published_time":"2026-09-08T18:20:45","euvd":{"id":"EUVD-2026-73816","description":"Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:32","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78507"],"products":["Microsoft Office LTSC 2021","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC for Mac 2024","Microsoft Office 2019","Microsoft Office LTSC 2024","Microsoft Office 365 for Mac","Microsoft 365 Apps for Enterprise"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78508","summary":"Out-of-bounds read in Windows CD-ROM Driver allows an unauthorized attacker to disclose information with a physical attack.","cvss":4.6,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":4.6,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78508"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:45","euvd":{"id":"EUVD-2026-73309","description":"Out-of-bounds read in Windows CD-ROM Driver allows an unauthorized attacker to disclose information with a physical attack.","published_time":"2026-09-08T17:13:44","cvss":4.6,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78508"],"products":["Windows Server 2012 (Server Core installation)","Windows 11 Version 25H2","Windows Server 2012 R2 (Server Core installation)","Windows 10 Version 1809","Windows 11 Version 24H2","Windows Server 2019","Windows 11 version 26H1","Windows Server 2025","Windows 10 Version 1607","Windows Server 2019 (Server Core installation)","Windows Server 2016 (Server Core installation)","Windows 10 Version 21H2","Windows Server 2016","Windows Server 2012 R2","Windows Server 2012","Windows Server 2025 (Server Core installation)","Windows Server 2022","Windows 11 Version 23H2","Windows 10 Version 22H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78455","summary":"Out-of-bounds read in Xbox allows an unauthorized attacker to disclose information with a physical attack.","cvss":4.3,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":4.3,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78455"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:44","euvd":{"id":"EUVD-2026-73806","description":"Out-of-bounds read in Xbox allows an unauthorized attacker to disclose information with a physical attack.","published_time":"2026-09-08T17:18:26","cvss":4.3,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78455"],"products":["Windows 10 Version 1809","Windows Server 2016","Windows 11 version 26H1","Windows Server 2016 (Server Core installation)","Windows 11 Version 23H2","Windows 10 Version 22H2","Windows 11 Version 25H2","Windows 10 Version 21H2","Windows Server 2019","Windows Server 2019 (Server Core installation)","Windows 10 Version 1607","Windows 11 Version 24H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78456","summary":"Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78456"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:44","euvd":{"id":"EUVD-2026-73809","description":"Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:28","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78456"],"products":["Microsoft SQL Server 2022 (GDR)","Microsoft SQL Server 2022 (CU 26)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78457","summary":"Use after free in Windows Security Health Service allows an authorized attacker to elevate privileges locally.","cvss":7.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78457"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:44","euvd":{"id":"EUVD-2026-73810","description":"Use after free in Windows Security Health Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:18:28","cvss":7.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78457"],"products":["Windows Server 2025 (Server Core installation)","Windows Server 2022","Windows 11 Version 25H2","Windows 11 version 26H1","Windows 11 Version 24H2","Windows Server 2025"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78461","summary":"Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.","cvss":7.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78461"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:44","euvd":{"id":"EUVD-2026-73297","description":"Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.","published_time":"2026-09-08T17:13:37","cvss":7.4,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78461"],"products":["Visual Studio Code"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78462","summary":"Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78462"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:44","euvd":{"id":"EUVD-2026-73811","description":"Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.","published_time":"2026-09-08T17:18:29","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78462"],"products":["Visual Studio Code"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78463","summary":"Improper control of generation of code ('code injection') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78463"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:44","euvd":{"id":"EUVD-2026-73299","description":"Improper control of generation of code ('code injection') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:38","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78463"],"products":["Remote Desktop client for Windows Desktop"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78464","summary":"Time-of-check time-of-use (toctou) race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.","cvss":7.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78464"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:44","euvd":{"id":"EUVD-2026-73813","description":"Time-of-check time-of-use (toctou) race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:18:30","cvss":7.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78464"],"products":["Windows 11 Version 25H2","Windows 11 Version 24H2","Windows 11 version 26H1"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78450","summary":"Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.","cvss":8.1,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.1,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78450"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:43","euvd":{"id":"EUVD-2026-73801","description":"Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:23","cvss":8.1,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78450"],"products":["Windows Server 2025 (Server Core installation)","Windows 10 Version 1809","Windows Server 2019","Windows Server 2025","Windows Server 2022","Windows Server 2019 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78451","summary":"Untrusted pointer dereference in Microsoft Windows SCSI Class System File allows an unauthorized attacker to elevate privileges with a physical attack.","cvss":6.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78451"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:43","euvd":{"id":"EUVD-2026-73804","description":"Untrusted pointer dereference in Microsoft Windows SCSI Class System File allows an unauthorized attacker to elevate privileges with a physical attack.","published_time":"2026-09-08T17:18:25","cvss":6.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78451"],"products":["Windows 10 Version 1809","Windows Server 2025 (Server Core installation)","Windows Server 2022","Windows 11 Version 23H2","Windows 11 Version 24H2","Windows 10 Version 21H2","Windows 11 version 26H1","Windows Server 2019","Windows 10 Version 22H2","Windows 11 Version 25H2","Windows Server 2025","Windows Server 2019 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78452","summary":"Out-of-bounds read in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information with a physical attack.","cvss":4.6,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":4.6,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78452"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:43","euvd":{"id":"EUVD-2026-73807","description":"Out-of-bounds read in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information with a physical attack.","published_time":"2026-09-08T17:18:27","cvss":4.6,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78452"],"products":["Windows Server 2025 (Server Core installation)","Windows 11 version 26H1","Windows 10 Version 1809","Windows 10 Version 21H2","Windows 11 Version 23H2","Windows Server 2019 (Server Core installation)","Windows Server 2022","Windows 10 Version 22H2","Windows Server 2019","Windows Server 2025","Windows 11 Version 24H2","Windows 11 Version 25H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78453","summary":"Integer underflow (wrap or wraparound) in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78453"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:43","euvd":{"id":"EUVD-2026-73805","description":"Integer underflow (wrap or wraparound) in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:18:26","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78453"],"products":["Windows 11 Version 23H2","Windows 10 Version 22H2","Windows Server 2016","Windows 10 Version 1809","Windows Server 2016 (Server Core installation)","Windows 11 Version 25H2","Windows Server 2019","Windows Server 2012 R2","Windows Server 2012 (Server Core installation)","Windows Server 2025","Windows 11 version 26H1","Windows Server 2022","Windows Server 2012 R2 (Server Core installation)","Windows 10 Version 1607","Windows 10 Version 21H2","Windows Server 2025 (Server Core installation)","Windows Server 2012","Windows Server 2019 (Server Core installation)","Windows 11 Version 24H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78454","summary":"Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78454"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:43","euvd":{"id":"EUVD-2026-73808","description":"Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally.","published_time":"2026-09-08T17:18:27","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78454"],"products":["Windows Server 2019","Windows 11 Version 25H2","Windows 10 Version 21H2","Windows 10 Version 1809","Windows Server 2019 (Server Core installation)","Windows Server 2016","Windows 11 Version 24H2","Windows 11 Version 23H2","Windows Server 2016 (Server Core installation)","Windows 11 version 26H1","Windows 10 Version 1607","Windows 10 Version 22H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78442","summary":"Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78442"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:42","euvd":{"id":"EUVD-2026-73795","description":"Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:20","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78442"],"products":["Microsoft SQL Server 2019 (CU 32)","Microsoft SQL Server 2017 (CU 31)","Microsoft SQL Server 2019 (GDR)","Microsoft SQL Server 2017 (GDR)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78444","summary":"Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.","cvss":8.1,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.1,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78444"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:42","euvd":{"id":"EUVD-2026-73800","description":"Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:23","cvss":8.1,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78444"],"products":["Windows Server 2019 (Server Core installation)","Windows Server 2025 (Server Core installation)","Windows Server 2022","Windows Server 2019","Windows 10 Version 1809","Windows Server 2025"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78445","summary":"Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network.","cvss":9.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":9.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78445"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:42","euvd":{"id":"EUVD-2026-73797","description":"Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:21","cvss":9.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78445"],"products":["Windows Server 2025 (Server Core installation)","Windows Server 2012 R2","Windows Server 2016 (Server Core installation)","Windows Server 2019","Windows Server 2022","Windows Server 2012","Windows Server 2016","Windows Server 2012 R2 (Server Core installation)","Windows Server 2025","Windows Server 2019 (Server Core installation)","Windows Server 2012 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78446","summary":"Use after free in Windows Distributed File System (DFS) allows an authorized attacker to deny service over a network.","cvss":5.3,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.3,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78446"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:42","euvd":{"id":"EUVD-2026-73798","description":"Use after free in Windows Distributed File System (DFS) allows an authorized attacker to deny service over a network.","published_time":"2026-09-08T17:18:22","cvss":5.3,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78446"],"products":["Windows Server 2022","Windows 10 Version 21H2","Windows Server 2012 (Server Core installation)","Windows Server 2012","Windows Server 2016","Windows Server 2025","Windows 10 Version 1607","Windows Server 2012 R2 (Server Core installation)","Windows 11 Version 23H2","Windows Server 2025 (Server Core installation)","Windows 11 version 26H1","Windows 10 Version 1809","Windows 11 Version 25H2","Windows Server 2012 R2","Windows Server 2019","Windows Server 2016 (Server Core installation)","Windows 11 Version 24H2","Windows Server 2019 (Server Core installation)","Windows 10 Version 22H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78447","summary":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78447"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:42","euvd":{"id":"EUVD-2026-73802","description":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:18:24","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78447"],"products":["Windows 10 Version 21H2","Windows 10 Version 1809","Windows Server 2025 (Server Core installation)","Windows Server 2025","Windows 11 version 26H1","Windows Server 2022","Windows 11 Version 25H2","Windows Server 2019 (Server Core installation)","Windows 11 Version 24H2","Windows Server 2016","Windows Server 2016 (Server Core installation)","Windows Server 2019","Windows 11 Version 23H2","Windows 10 Version 22H2","Windows 10 Version 1607"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78448","summary":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78448"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:42","euvd":{"id":"EUVD-2026-73803","description":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:18:24","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78448"],"products":["Windows Server 2025 (Server Core installation)","Windows Server 2019 (Server Core installation)","Windows Server 2016","Windows 10 Version 1607","Windows 11 Version 23H2","Windows Server 2025","Windows Server 2022","Windows Server 2019","Windows Server 2016 (Server Core installation)","Windows 11 version 26H1","Windows 10 Version 21H2","Windows 10 Version 22H2","Windows 11 Version 25H2","Windows 10 Version 1809","Windows 11 Version 24H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78449","summary":"Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.","cvss":8.1,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.1,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78449"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:42","euvd":{"id":"EUVD-2026-73799","description":"Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:22","cvss":8.1,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78449"],"products":["Windows 10 Version 22H2","Windows 11 Version 23H2","Windows Server 2022","Windows Server 2019 (Server Core installation)","Windows Server 2012 (Server Core installation)","Windows 10 Version 1809","Windows 11 version 26H1","Windows 10 Version 1607","Windows Server 2016","Windows 11 Version 24H2","Windows 10 Version 21H2","Windows 11 Version 25H2","Windows Server 2019","Windows Server 2012","Windows Server 2025 (Server Core installation)","Windows Server 2016 (Server Core installation)","Windows Server 2012 R2","Windows Server 2025","Windows Server 2012 R2 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-77908","summary":"Improper control of generation of code ('code injection') in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77908"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:41","euvd":{"id":"EUVD-2026-73294","description":"Improper control of generation of code ('code injection') in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:35","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77908"],"products":["Microsoft Dynamics 365 Customer Engagement V9.1"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-77909","summary":"Insufficiently protected credentials in Azure CycleCloud allows an authorized attacker to disclose information over a network.","cvss":7.7,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.7,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77909"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:41","euvd":{"id":"EUVD-2026-73295","description":"Insufficiently protected credentials in Azure CycleCloud allows an authorized attacker to disclose information over a network.","published_time":"2026-09-08T17:13:36","cvss":7.7,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77909"],"products":["Azure CycleCloud 8.9.2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-77911","summary":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77911"],"vendor":"microsoft","product":"365_apps","version":null,"published_time":"2026-09-08T18:20:41","euvd":{"id":"EUVD-2026-73793","description":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:18:19","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77911"],"products":["Microsoft 365 Apps for Enterprise","Microsoft Office 365 for Mac","Microsoft Office LTSC 2021","Microsoft Office 2019","Microsoft Office LTSC 2024","Microsoft Word 2016","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC for Mac 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-77911","summary":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77911"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:41","euvd":{"id":"EUVD-2026-73793","description":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:18:19","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77911"],"products":["Microsoft 365 Apps for Enterprise","Microsoft Office 365 for Mac","Microsoft Office LTSC 2021","Microsoft Office 2019","Microsoft Office LTSC 2024","Microsoft Word 2016","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC for Mac 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-77911","summary":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77911"],"vendor":"microsoft","product":"microsoft_365","version":null,"published_time":"2026-09-08T18:20:41","euvd":{"id":"EUVD-2026-73793","description":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:18:19","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77911"],"products":["Microsoft 365 Apps for Enterprise","Microsoft Office 365 for Mac","Microsoft Office LTSC 2021","Microsoft Office 2019","Microsoft Office LTSC 2024","Microsoft Word 2016","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC for Mac 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-77911","summary":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77911"],"vendor":"microsoft","product":"office_2019","version":null,"published_time":"2026-09-08T18:20:41","euvd":{"id":"EUVD-2026-73793","description":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:18:19","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77911"],"products":["Microsoft 365 Apps for Enterprise","Microsoft Office 365 for Mac","Microsoft Office LTSC 2021","Microsoft Office 2019","Microsoft Office LTSC 2024","Microsoft Word 2016","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC for Mac 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-77911","summary":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77911"],"vendor":"microsoft","product":"office_2021","version":null,"published_time":"2026-09-08T18:20:41","euvd":{"id":"EUVD-2026-73793","description":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:18:19","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77911"],"products":["Microsoft 365 Apps for Enterprise","Microsoft Office 365 for Mac","Microsoft Office LTSC 2021","Microsoft Office 2019","Microsoft Office LTSC 2024","Microsoft Word 2016","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC for Mac 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-77911","summary":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77911"],"vendor":"microsoft","product":"office_2024","version":null,"published_time":"2026-09-08T18:20:41","euvd":{"id":"EUVD-2026-73793","description":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:18:19","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77911"],"products":["Microsoft 365 Apps for Enterprise","Microsoft Office 365 for Mac","Microsoft Office LTSC 2021","Microsoft Office 2019","Microsoft Office LTSC 2024","Microsoft Word 2016","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC for Mac 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-77911","summary":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77911"],"vendor":"microsoft","product":"word","version":null,"published_time":"2026-09-08T18:20:41","euvd":{"id":"EUVD-2026-73793","description":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:18:19","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77911"],"products":["Microsoft 365 Apps for Enterprise","Microsoft Office 365 for Mac","Microsoft Office LTSC 2021","Microsoft Office 2019","Microsoft Office LTSC 2024","Microsoft Word 2016","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC for Mac 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78439","summary":"Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78439"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:41","euvd":{"id":"EUVD-2026-73296","description":"Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:37","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78439"],"products":["Microsoft Office LTSC for Mac 2024","Microsoft Office 365 for Mac","Microsoft Office for Android","Microsoft Office LTSC for Mac 2021"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-78441","summary":"Out-of-bounds read in Windows OLE DB allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78441"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:41","euvd":{"id":"EUVD-2026-73796","description":"Out-of-bounds read in Windows OLE DB allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:18:20","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78441"],"products":["Microsoft SQL Server 2017 (GDR)","Microsoft SQL Server 2019 (CU 32)","Microsoft SQL Server 2017 (CU 31)","Microsoft SQL Server 2019 (GDR)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-77899","summary":"Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally.","cvss":7.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77899"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:40","euvd":{"id":"EUVD-2026-73291","description":"Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:13:34","cvss":7.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77899"],"products":["Windows Server 2012","Windows 11 Version 25H2","Windows Server 2012 (Server Core installation)","Windows 11 Version 24H2","Windows 11 version 26H1"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-77901","summary":"Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77901"],"vendor":"microsoft","product":"365_apps","version":null,"published_time":"2026-09-08T18:20:40","euvd":{"id":"EUVD-2026-73790","description":"Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:17","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77901"],"products":["Microsoft Office 365 for Mac","Microsoft Office LTSC 2021","Microsoft Word 2016","Microsoft Office LTSC for Mac 2021","Microsoft 365 Apps for Enterprise","Microsoft Office 2019","Microsoft Office LTSC for Mac 2024","Microsoft Office LTSC 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-77901","summary":"Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77901"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:40","euvd":{"id":"EUVD-2026-73790","description":"Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:17","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77901"],"products":["Microsoft Office 365 for Mac","Microsoft Office LTSC 2021","Microsoft Word 2016","Microsoft Office LTSC for Mac 2021","Microsoft 365 Apps for Enterprise","Microsoft Office 2019","Microsoft Office LTSC for Mac 2024","Microsoft Office LTSC 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-77901","summary":"Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77901"],"vendor":"microsoft","product":"microsoft_365","version":null,"published_time":"2026-09-08T18:20:40","euvd":{"id":"EUVD-2026-73790","description":"Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:17","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77901"],"products":["Microsoft Office 365 for Mac","Microsoft Office LTSC 2021","Microsoft Word 2016","Microsoft Office LTSC for Mac 2021","Microsoft 365 Apps for Enterprise","Microsoft Office 2019","Microsoft Office LTSC for Mac 2024","Microsoft Office LTSC 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-77901","summary":"Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77901"],"vendor":"microsoft","product":"office_2019","version":null,"published_time":"2026-09-08T18:20:40","euvd":{"id":"EUVD-2026-73790","description":"Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:17","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77901"],"products":["Microsoft Office 365 for Mac","Microsoft Office LTSC 2021","Microsoft Word 2016","Microsoft Office LTSC for Mac 2021","Microsoft 365 Apps for Enterprise","Microsoft Office 2019","Microsoft Office LTSC for Mac 2024","Microsoft Office LTSC 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-77901","summary":"Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77901"],"vendor":"microsoft","product":"office_2021","version":null,"published_time":"2026-09-08T18:20:40","euvd":{"id":"EUVD-2026-73790","description":"Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:17","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77901"],"products":["Microsoft Office 365 for Mac","Microsoft Office LTSC 2021","Microsoft Word 2016","Microsoft Office LTSC for Mac 2021","Microsoft 365 Apps for Enterprise","Microsoft Office 2019","Microsoft Office LTSC for Mac 2024","Microsoft Office LTSC 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-77901","summary":"Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77901"],"vendor":"microsoft","product":"office_2024","version":null,"published_time":"2026-09-08T18:20:40","euvd":{"id":"EUVD-2026-73790","description":"Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:17","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77901"],"products":["Microsoft Office 365 for Mac","Microsoft Office LTSC 2021","Microsoft Word 2016","Microsoft Office LTSC for Mac 2021","Microsoft 365 Apps for Enterprise","Microsoft Office 2019","Microsoft Office LTSC for Mac 2024","Microsoft Office LTSC 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-77901","summary":"Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77901"],"vendor":"microsoft","product":"word","version":null,"published_time":"2026-09-08T18:20:40","euvd":{"id":"EUVD-2026-73790","description":"Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:17","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77901"],"products":["Microsoft Office 365 for Mac","Microsoft Office LTSC 2021","Microsoft Word 2016","Microsoft Office LTSC for Mac 2021","Microsoft 365 Apps for Enterprise","Microsoft Office 2019","Microsoft Office LTSC for Mac 2024","Microsoft Office LTSC 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-77904","summary":"Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77904"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:40","euvd":{"id":"EUVD-2026-73292","description":"Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:13:34","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77904"],"products":["Windows Server 2025","Windows 10 Version 1607","Windows Server 2012 R2 (Server Core installation)","Windows Server 2025 (Server Core installation)","Windows 10 Version 21H2","Windows Server 2012 R2","Windows 10 Version 22H2","Windows 11 Version 24H2","Windows 10 Version 1809","Windows 11 version 26H1","Windows 11 Version 25H2","Windows Server 2012 (Server Core installation)","Windows Server 2019 (Server Core installation)","Windows Server 2022","Windows Server 2012","Windows Server 2016 (Server Core installation)","Windows 11 Version 23H2","Windows Server 2019","Windows Server 2016"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-77905","summary":"Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.","cvss":7.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77905"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:40","euvd":{"id":"EUVD-2026-73792","description":"Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:18:18","cvss":7.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77905"],"products":["Windows 11 version 26H1","Windows Server 2012 R2 (Server Core installation)","Windows Server 2012 (Server Core installation)","Windows Server 2025","Windows 10 Version 22H2","Windows 11 Version 25H2","Windows Server 2022","Windows 11 Version 24H2","Windows 10 Version 1809","Windows 11 Version 23H2","Windows Server 2019","Windows Server 2012 R2","Windows Server 2019 (Server Core installation)","Windows Server 2016","Windows Server 2016 (Server Core installation)","Windows Server 2012","Windows 10 Version 1607","Windows 10 Version 21H2","Windows Server 2025 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-77906","summary":"Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77906"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:40","euvd":{"id":"EUVD-2026-73883","description":"Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:19:09","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77906"],"products":["Microsoft Visual Studio 2026 version 18.9"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-77907","summary":"Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77907"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:40","euvd":{"id":"EUVD-2026-73293","description":"Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:35","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77907"],"products":["Microsoft Visual Studio 2026 version 18.9"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-77892","summary":"No cwe for this issue in Windows Boot Manager allows an unauthorized attacker to elevate privileges with a physical attack.","cvss":6.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77892"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:39","euvd":{"id":"EUVD-2026-73281","description":"No cwe for this issue in Windows Boot Manager allows an unauthorized attacker to elevate privileges with a physical attack.","published_time":"2026-09-08T17:13:28","cvss":6.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77892"],"products":["Windows 11 Version 23H2","Windows 11 version 26H1","Windows 10 Version 1607","Windows Server 2012 R2 (Server Core installation)","Windows Server 2022","Windows 10 Version 22H2","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2025 (Server Core installation)","Windows 10 Version 1809","Windows Server 2019","Windows Server 2016","Windows 11 Version 24H2","Windows Server 2019 (Server Core installation)","Windows Server 2012","Windows Server 2025","Windows 10 Version 21H2","Windows 11 Version 25H2","Windows Server 2016 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-77893","summary":"Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.","cvss":7.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77893"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:39","euvd":{"id":"EUVD-2026-73282","description":"Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.","published_time":"2026-09-08T17:13:29","cvss":7.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77893"],"products":["Windows Server 2022","Windows Server 2019 (Server Core installation)","Windows Server 2025","Windows Server 2012 R2","Windows Server 2016 (Server Core installation)","Windows Server 2016","Windows Server 2012 R2 (Server Core installation)","Windows Server 2019","Windows Server 2012","Windows 10 Version 1809","Windows 10 Version 1607","Windows Server 2012 (Server Core installation)","Windows Server 2025 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-77894","summary":"Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.","cvss":7.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77894"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:39","euvd":{"id":"EUVD-2026-73283","description":"Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:13:30","cvss":7.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77894"],"products":["Windows Server 2012 R2 (Server Core installation)","Windows 10 Version 1607","Windows Server 2012 (Server Core installation)","Windows Server 2019 (Server Core installation)","Windows 11 Version 23H2","Windows Server 2022","Windows Server 2012","Windows 10 Version 22H2","Windows 11 Version 25H2","Windows 10 Version 1809","Windows 11 Version 24H2","Windows Server 2012 R2","Windows 10 Version 21H2","Windows Server 2025 (Server Core installation)","Windows Server 2025","Windows Server 2019","Windows Server 2016 (Server Core installation)","Windows Server 2016","Windows 11 version 26H1"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-77895","summary":"Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.","cvss":7.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77895"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:39","euvd":{"id":"EUVD-2026-73284","description":"Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.","published_time":"2026-09-08T17:13:30","cvss":7.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77895"],"products":["Windows 10 Version 1809","Windows Server 2012 R2","Windows Server 2016","Windows Server 2012 (Server Core installation)","Windows 10 Version 1607","Windows Server 2012","Windows Server 2025","Windows Server 2019 (Server Core installation)","Windows Server 2025 (Server Core installation)","Windows Server 2016 (Server Core installation)","Windows Server 2022","Windows Server 2012 R2 (Server Core installation)","Windows Server 2019"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-77896","summary":"Integer overflow or wraparound in Remote Desktop Client allows an unauthorized attacker to deny service over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77896"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:39","euvd":{"id":"EUVD-2026-73285","description":"Integer overflow or wraparound in Remote Desktop Client allows an unauthorized attacker to deny service over a network.","published_time":"2026-09-08T17:13:31","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77896"],"products":["Windows Server 2025 (Server Core installation)","Windows 11 Version 23H2","Windows 10 Version 1809","Windows 11 version 26H1","Windows 11 Version 24H2","Windows 10 Version 1607","Windows 10 Version 21H2","Windows Server 2019 (Server Core installation)","Windows Server 2019","Windows 10 Version 22H2","Windows Server 2016 (Server Core installation)","Windows Server 2025","Windows 11 Version 25H2","Windows Server 2022","Windows Server 2016"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-77897","summary":"Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally.","cvss":7.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77897"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:39","euvd":{"id":"EUVD-2026-73887","description":"Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:19:11","cvss":7.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77897"],"products":["Power Automate agent for virtual desktops","Power Automate for Desktop"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-77898","summary":"Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.","cvss":7.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77898"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:39","euvd":{"id":"EUVD-2026-73290","description":"Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:33","cvss":7.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77898"],"products":["Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC 2021","Microsoft Office 365 for Mac","Microsoft Office 2019","Microsoft Office LTSC 2024","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC for Mac 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-77886","summary":"Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.","cvss":7.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77886"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:38","euvd":{"id":"EUVD-2026-73277","description":"Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.","published_time":"2026-09-08T17:13:26","cvss":7.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77886"],"products":["Windows Server 2019 (Server Core installation)","Windows 10 Version 1607","Windows Server 2012","Windows 10 Version 1809","Windows Server 2012 R2","Windows Server 2016 (Server Core installation)","Windows Server 2012 (Server Core installation)","Windows Server 2016","Windows Server 2019","Windows Server 2012 R2 (Server Core installation)","Windows Server 2025","Windows Server 2025 (Server Core installation)","Windows Server 2022"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-77887","summary":"Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally.","cvss":6.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77887"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:38","euvd":{"id":"EUVD-2026-73273","description":"Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally.","published_time":"2026-09-08T17:13:24","cvss":6.4,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77887"],"products":["Windows Server 2016","Windows Server 2025","Windows 10 Version 1809","Windows Server 2012 (Server Core installation)","Windows Server 2016 (Server Core installation)","Windows 10 Version 1607","Windows Server 2012","Windows Server 2012 R2","Windows Server 2022","Windows Server 2025 (Server Core installation)","Windows Server 2019 (Server Core installation)","Windows Server 2012 R2 (Server Core installation)","Windows Server 2019"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-77888","summary":"Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.","cvss":7.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77888"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:38","euvd":{"id":"EUVD-2026-73276","description":"Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.","published_time":"2026-09-08T17:13:26","cvss":7.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77888"],"products":["Windows Server 2016","Windows Server 2012 R2","Windows 10 Version 1607","Windows Server 2025 (Server Core installation)","Windows Server 2012 (Server Core installation)","Windows Server 2012","Windows Server 2019","Windows Server 2016 (Server Core installation)","Windows Server 2019 (Server Core installation)","Windows Server 2012 R2 (Server Core installation)","Windows Server 2022","Windows Server 2025","Windows 10 Version 1809"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-77889","summary":"Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.","cvss":7.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77889"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:38","euvd":{"id":"EUVD-2026-73279","description":"Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.","published_time":"2026-09-08T17:13:27","cvss":7.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77889"],"products":["Windows Server 2012 R2","Windows Server 2025","Windows Server 2012 R2 (Server Core installation)","Windows 10 Version 1809","Windows Server 2025 (Server Core installation)","Windows 10 Version 1607","Windows Server 2016","Windows Server 2012","Windows Server 2019","Windows Server 2012 (Server Core installation)","Windows Server 2019 (Server Core installation)","Windows Server 2016 (Server Core installation)","Windows Server 2022"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-77890","summary":"Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.","cvss":7.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77890"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:38","euvd":{"id":"EUVD-2026-73278","description":"Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.","published_time":"2026-09-08T17:13:27","cvss":7.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77890"],"products":["Windows Server 2016 (Server Core installation)","Windows Server 2025 (Server Core installation)","Windows 10 Version 1809","Windows Server 2012","Windows Server 2025","Windows Server 2019","Windows 10 Version 1607","Windows Server 2012 R2","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2 (Server Core installation)","Windows Server 2019 (Server Core installation)","Windows Server 2016","Windows Server 2022"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-77891","summary":"Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally.","cvss":6.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77891"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:38","euvd":{"id":"EUVD-2026-73280","description":"Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally.","published_time":"2026-09-08T17:13:28","cvss":6.4,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77891"],"products":["Windows Server 2025 (Server Core installation)","Windows Server 2012 R2","Windows Server 2016","Windows Server 2019 (Server Core installation)","Windows Server 2012","Windows Server 2012 R2 (Server Core installation)","Windows 10 Version 1809","Windows Server 2025","Windows Server 2016 (Server Core installation)","Windows Server 2019","Windows 10 Version 1607","Windows Server 2022","Windows Server 2012 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-77501","summary":"Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.","cvss":7.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77501"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:37","euvd":{"id":"EUVD-2026-73270","description":"Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.","published_time":"2026-09-08T17:13:22","cvss":7.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77501"],"products":["Windows Server 2025 (Server Core installation)","Windows Server 2019","Windows Server 2016 (Server Core installation)","Windows Server 2025","Windows Server 2019 (Server Core installation)","Windows Server 2016","Windows Server 2012 R2","Windows 10 Version 1607","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2 (Server Core installation)","Windows Server 2012","Windows Server 2022","Windows 10 Version 1809"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-77502","summary":"Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.","cvss":7.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77502"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:37","euvd":{"id":"EUVD-2026-73271","description":"Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.","published_time":"2026-09-08T17:13:23","cvss":7.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77502"],"products":["Windows Server 2012","Windows Server 2016 (Server Core installation)","Windows Server 2012 R2","Windows Server 2025","Windows Server 2019 (Server Core installation)","Windows Server 2016","Windows 10 Version 1809","Windows Server 2025 (Server Core installation)","Windows Server 2022","Windows Server 2012 (Server Core installation)","Windows 10 Version 1607","Windows Server 2012 R2 (Server Core installation)","Windows Server 2019"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-77503","summary":"Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.","cvss":8.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77503"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:37","euvd":{"id":"EUVD-2026-73272","description":"Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:13:23","cvss":8.4,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77503"],"products":["Windows Server 2022","Windows Server 2012","Windows 10 Version 21H2","Windows 10 Version 1809","Windows 10 Version 1607","Windows Server 2016","Windows Server 2025 (Server Core installation)","Windows 11 Version 23H2","Windows Server 2019","Windows 11 Version 24H2","Windows Server 2012 R2","Windows Server 2019 (Server Core installation)","Windows Server 2012 (Server Core installation)","Windows Server 2016 (Server Core installation)","Windows 11 Version 25H2","Windows 10 Version 22H2","Windows 11 version 26H1","Windows Server 2012 R2 (Server Core installation)","Windows Server 2025"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-77504","summary":"Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77504"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:37","euvd":{"id":"EUVD-2026-73274","description":"Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:24","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77504"],"products":["Windows 11 Version 24H2","Windows Server 2019 (Server Core installation)","Windows 10 Version 1607","Windows Server 2025 (Server Core installation)","Windows 10 Version 21H2","Windows 11 Version 25H2","Windows 11 Version 23H2","Windows Server 2019","Windows Server 2012 (Server Core installation)","Windows Server 2016","Windows Server 2022","Windows Server 2012","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)","Windows 10 Version 22H2","Windows Server 2025","Windows 10 Version 1809","Windows Server 2016 (Server Core installation)","Windows 11 version 26H1"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-77505","summary":"Use after free in DNS Server allows an unauthorized attacker to execute code over a network.","cvss":8.1,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.1,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77505"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:37","euvd":{"id":"EUVD-2026-73275","description":"Use after free in DNS Server allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:25","cvss":8.1,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77505"],"products":["Windows Server 2022","Windows Server 2016 (Server Core installation)","Windows Server 2012 R2 (Server Core installation)","Windows Server 2012 R2","Windows Server 2019","Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows 10 Version 1607","Windows 10 Version 1809","Windows Server 2019 (Server Core installation)","Windows Server 2025 (Server Core installation)","Windows Server 2016","Windows Server 2025"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-77498","summary":"Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.","cvss":7.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77498"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:36","euvd":{"id":"EUVD-2026-73267","description":"Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.","published_time":"2026-09-08T17:13:21","cvss":7.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77498"],"products":["Windows Server 2022","Windows Server 2012 R2 (Server Core installation)","Windows 10 Version 1607","Windows Server 2012 R2","Windows Server 2016 (Server Core installation)","Windows 10 Version 1809","Windows Server 2019","Windows Server 2019 (Server Core installation)","Windows Server 2012 (Server Core installation)","Windows Server 2025 (Server Core installation)","Windows Server 2012","Windows Server 2016","Windows Server 2025"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-77499","summary":"Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.","cvss":7.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77499"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:36","euvd":{"id":"EUVD-2026-73269","description":"Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.","published_time":"2026-09-08T17:13:22","cvss":7.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77499"],"products":["Windows 10 Version 1809","Windows Server 2012","Windows Server 2019 (Server Core installation)","Windows Server 2016 (Server Core installation)","Windows Server 2022","Windows Server 2012 R2 (Server Core installation)","Windows 10 Version 1607","Windows Server 2019","Windows Server 2025 (Server Core installation)","Windows Server 2012 (Server Core installation)","Windows Server 2025","Windows Server 2016","Windows Server 2012 R2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-77500","summary":"Release of invalid pointer or reference in Windows Device Association Service allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77500"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:36","euvd":{"id":"EUVD-2026-73268","description":"Release of invalid pointer or reference in Windows Device Association Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:13:21","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77500"],"products":["Windows 10 Version 1607","Windows Server 2019","Windows 11 Version 25H2","Windows Server 2016 (Server Core installation)","Windows Server 2016","Windows Server 2019 (Server Core installation)","Windows 10 Version 22H2","Windows 10 Version 21H2","Windows 10 Version 1809","Windows 11 Version 23H2","Windows 11 Version 24H2","Windows 11 version 26H1"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-77492","summary":"Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77492"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:35","euvd":{"id":"EUVD-2026-73264","description":"Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally.","published_time":"2026-09-08T17:13:19","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77492"],"products":["Windows Server 2016 (Server Core installation)","Windows Server 2012 R2","Windows Server 2019 (Server Core installation)","Windows Server 2025 (Server Core installation)","Windows 11 Version 23H2","Windows Server 2019","Windows Server 2016","Windows 10 Version 21H2","Windows 10 Version 1607","Windows Server 2025","Windows 11 Version 24H2","Windows Server 2012 R2 (Server Core installation)","Windows 11 version 26H1","Windows 10 Version 1809","Windows 10 Version 22H2","Windows Server 2022","Windows 11 Version 25H2","Windows Server 2012","Windows Server 2012 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-77493","summary":"Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.","cvss":9.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":9.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77493"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:35","euvd":{"id":"EUVD-2026-73265","description":"Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:20","cvss":9.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77493"],"products":["Windows Server 2019 (Server Core installation)","Windows 10 Version 1809","Windows 11 Version 25H2","Windows Server 2012 R2","Windows Server 2012 (Server Core installation)","Windows 11 version 26H1","Windows Server 2022","Windows 10 Version 1607","Windows Server 2016","Windows Server 2019","Windows 11 Version 23H2","Windows Server 2016 (Server Core installation)","Windows Server 2025","Windows Server 2025 (Server Core installation)","Windows 10 Version 22H2","Windows Server 2012 R2 (Server Core installation)","Windows Server 2012","Windows 10 Version 21H2","Windows 11 Version 24H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-77494","summary":"Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.","cvss":7.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77494"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:35","euvd":{"id":"EUVD-2026-73266","description":"Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.","published_time":"2026-09-08T17:13:20","cvss":7.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77494"],"products":["Windows Server 2025 (Server Core installation)","Windows Server 2019 (Server Core installation)","Windows Server 2019","Windows Server 2012","Windows Server 2012 R2","Windows Server 2016","Windows Server 2022","Windows Server 2012 R2 (Server Core installation)","Windows Server 2016 (Server Core installation)","Windows Server 2025","Windows 10 Version 1809","Windows 10 Version 1607","Windows Server 2012 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-77495","summary":"Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77495"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:35","euvd":{"id":"EUVD-2026-73252","description":"Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:13","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77495"],"products":["Windows Server 2016","Windows 11 version 26H1","Windows Server 2022","Windows 10 Version 22H2","Windows Server 2019","Windows 10 Version 21H2","Windows Server 2012","Windows Server 2019 (Server Core installation)","Windows 10 Version 1809","Windows Server 2012 R2 (Server Core installation)","Windows Server 2016 (Server Core installation)","Windows 10 Version 1607","Windows Server 2012 R2","Windows Server 2012 (Server Core installation)","Windows 11 Version 23H2","Windows 11 Version 24H2","Windows 11 Version 25H2","Windows Server 2025 (Server Core installation)","Windows Server 2025"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-77484","summary":"Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77484"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:34","euvd":{"id":"EUVD-2026-73785","description":"Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:13","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77484"],"products":["Microsoft SQL Server 2019 (CU 32)","Microsoft SQL Server 2025 for x64-based Systems (GDR)","Microsoft SQL Server 2025 (CU8)","Microsoft SQL Server 2019 (GDR)","Microsoft SQL Server 2022 (GDR)","Microsoft SQL Server 2022 (CU 26)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-77485","summary":"Use after free in SQL Server allows an authorized attacker to elevate privileges locally.","cvss":7.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77485"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:34","euvd":{"id":"EUVD-2026-73787","description":"Use after free in SQL Server allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:18:15","cvss":7.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77485"],"products":["Microsoft SQL Server 2019 (GDR)","Microsoft SQL Server 2022 (CU 26)","Microsoft SQL Server 2017 (CU 31)","Microsoft SQL Server 2017 (GDR)","Microsoft SQL Server 2025 (CU8)","Microsoft SQL Server 2025 for x64-based Systems (GDR)","Microsoft SQL Server 2022 (GDR)","Microsoft SQL Server 2019 (CU 32)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-77486","summary":"Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77486"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:34","euvd":{"id":"EUVD-2026-73788","description":"Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:16","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77486"],"products":["Microsoft SQL Server 2017 (CU 31)","Microsoft SQL Server 2019 (CU 32)","Microsoft SQL Server 2019 (GDR)","Microsoft SQL Server 2017 (GDR)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-77487","summary":"Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77487"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:34","euvd":{"id":"EUVD-2026-73786","description":"Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.","published_time":"2026-09-08T17:18:14","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77487"],"products":["Microsoft SQL Server 2025 (CU8)","Microsoft SQL Server 2017 (GDR)","Microsoft SQL Server 2022 (CU 26)","Microsoft SQL Server 2019 (GDR)","Microsoft SQL Server 2017 (CU 31)","Microsoft SQL Server 2019 (CU 32)","Microsoft SQL Server 2022 (GDR)","Microsoft SQL Server 2025 for x64-based Systems (GDR)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-77488","summary":"Integer underflow (wrap or wraparound) in SQL Server allows an authorized attacker to disclose information locally.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77488"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:34","euvd":{"id":"EUVD-2026-73789","description":"Integer underflow (wrap or wraparound) in SQL Server allows an authorized attacker to disclose information locally.","published_time":"2026-09-08T17:18:17","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77488"],"products":["Microsoft SQL Server 2017 (GDR)","Microsoft SQL Server 2017 (CU 31)","Microsoft SQL Server 2025 for x64-based Systems (GDR)","Microsoft SQL Server 2019 (CU 32)","Microsoft SQL Server 2019 (GDR)","Microsoft SQL Server 2022 (GDR)","Microsoft SQL Server 2025 (CU8)","Microsoft SQL Server 2022 (CU 26)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-77489","summary":"Null pointer dereference in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77489"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:34","euvd":{"id":"EUVD-2026-73262","description":"Null pointer dereference in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:13:18","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77489"],"products":["Windows Server 2025","Windows 10 Version 21H2","Windows 11 version 26H1","Windows Server 2016","Windows 10 Version 1809","Windows Server 2016 (Server Core installation)","Windows 10 Version 22H2","Windows 11 Version 24H2","Windows Server 2022","Windows 11 Version 23H2","Windows 10 Version 1607","Windows Server 2019 (Server Core installation)","Windows 11 Version 25H2","Windows Server 2025 (Server Core installation)","Windows Server 2019"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-77491","summary":"Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77491"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:34","euvd":{"id":"EUVD-2026-73263","description":"Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally.","published_time":"2026-09-08T17:13:18","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77491"],"products":["Windows Server 2012 R2 (Server Core installation)","Windows Server 2012 (Server Core installation)","Windows Server 2022","Windows Server 2016 (Server Core installation)","Windows 10 Version 21H2","Windows Server 2019 (Server Core installation)","Windows 11 Version 25H2","Windows 11 Version 24H2","Windows Server 2025 (Server Core installation)","Windows Server 2012","Windows 11 version 26H1","Windows 10 Version 1809","Windows Server 2019","Windows Server 2025","Windows Server 2012 R2","Windows 10 Version 22H2","Windows 11 Version 23H2","Windows Server 2016","Windows 10 Version 1607"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-76191","summary":"Animate is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.","cvss":8.2,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.2,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/animate/apsb26-132.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:33","euvd":{"id":"EUVD-2026-73591","description":"Animate is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.","published_time":"2026-09-08T17:16:24","cvss":8.2,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/animate/apsb26-132.html"],"products":["Adobe Animate 2024","Adobe Animate 2023"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-76196","summary":"Photoshop Mobile is affected by a Session Fixation vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain access to sensitive resources. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user interaction in that a victim must interact with a malicious webpage. Scope is changed.","cvss":7.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://helpx.adobe.com/security/products/photoshop/apsb26-136.html"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:33","euvd":{"id":"EUVD-2026-73926","description":"Photoshop Mobile is affected by a Session Fixation vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain access to sensitive resources. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user interaction in that a victim must interact with a malicious webpage. Scope is changed.","published_time":"2026-09-08T17:27:43","cvss":7.4,"cvss_version":"3.1","epss":0.0,"assigner":"adobe","references":["https://helpx.adobe.com/security/products/photoshop/apsb26-136.html"],"products":["Photoshop Android","Photoshop Android"],"vendors":["Adobe"]}},{"cve_id":"CVE-2026-77480","summary":"Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77480"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:33","euvd":{"id":"EUVD-2026-73783","description":"Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network.","published_time":"2026-09-08T17:18:11","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77480"],"products":["Microsoft SQL Server 2019 (CU 32)","Microsoft SQL Server 2025 for x64-based Systems (GDR)","Microsoft SQL Server 2017 (CU 31)","Microsoft SQL Server 2022 (CU 26)","Microsoft SQL Server 2019 (GDR)","Microsoft SQL Server 2025 (CU8)","Microsoft SQL Server 2017 (GDR)","Microsoft SQL Server 2022 (GDR)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-77481","summary":"Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77481"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:33","euvd":{"id":"EUVD-2026-73824","description":"Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:36","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77481"],"products":["Microsoft SQL Server 2022 (CU 26)","Microsoft SQL Server 2019 (CU 32)","Microsoft SQL Server 2025 for x64-based Systems (GDR)","Microsoft SQL Server 2017 (GDR)","Microsoft SQL Server 2022 (GDR)","Microsoft SQL Server 2025 (CU8)","Microsoft SQL Server 2019 (GDR)","Microsoft SQL Server 2017 (CU 31)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-77482","summary":"Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77482"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:33","euvd":{"id":"EUVD-2026-73175","description":"Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:10:37","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77482"],"products":["Microsoft SQL Server 2019 (GDR)","Microsoft SQL Server 2017 (CU 31)","Microsoft SQL Server 2017 (GDR)","Microsoft SQL Server 2019 (CU 32)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-77483","summary":"Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77483"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:33","euvd":{"id":"EUVD-2026-73784","description":"Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network.","published_time":"2026-09-08T17:18:12","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77483"],"products":["Microsoft SQL Server 2025 for x64-based Systems (GDR)","Microsoft SQL Server 2017 (GDR)","Microsoft SQL Server 2022 (GDR)","Microsoft SQL Server 2022 (CU 26)","Microsoft SQL Server 2025 (CU8)","Microsoft SQL Server 2017 (CU 31)","Microsoft SQL Server 2019 (CU 32)","Microsoft SQL Server 2019 (GDR)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-73023","summary":"Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73023"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:32","euvd":{"id":"EUVD-2026-73776","description":"Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:07","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73023"],"products":["Windows Server 2016 (Server Core installation)","Windows 10 Version 22H2","Windows Server 2019 (Server Core installation)","Windows Server 2025","Windows Server 2016","Windows 11 Version 24H2","Windows Server 2012 R2","Windows Server 2022","Windows 10 Version 1809","Windows Server 2012","Windows Server 2012 R2 (Server Core installation)","Windows Server 2025 (Server Core installation)","Windows 10 Version 21H2","Windows 11 version 26H1","Windows 11 Version 25H2","Windows 11 Version 23H2","Windows Server 2012 (Server Core installation)","Windows Server 2019","Windows 10 Version 1607"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-73024","summary":"Heap-based buffer overflow in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73024"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:32","euvd":{"id":"EUVD-2026-73768","description":"Heap-based buffer overflow in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:18:03","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73024"],"products":["Windows 11 Version 23H2","Windows 11 Version 24H2","Windows Server 2022","Windows 11 version 26H1","Windows Server 2016 (Server Core installation)","Windows Server 2025 (Server Core installation)","Windows 10 Version 1809","Windows Server 2012","Windows 10 Version 1607","Windows Server 2019","Windows Server 2025","Windows Server 2012 R2 (Server Core installation)","Windows 10 Version 21H2","Windows Server 2012 (Server Core installation)","Windows Server 2019 (Server Core installation)","Windows Server 2012 R2","Windows Server 2016","Windows 10 Version 22H2","Windows 11 Version 25H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-73025","summary":"Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security feature over a network.","cvss":9.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":9.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73025"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:32","euvd":{"id":"EUVD-2026-73778","description":"Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security feature over a network.","published_time":"2026-09-08T17:18:08","cvss":9.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73025"],"products":["Windows Server 2012 R2 (Server Core installation)","Windows 10 Version 1607","Windows Server 2022","Windows Server 2012 R2","Windows Server 2016","Windows Server 2019","Windows Server 2025 (Server Core installation)","Windows Server 2012","Windows Server 2016 (Server Core installation)","Windows 10 Version 1809","Windows Server 2012 (Server Core installation)","Windows Server 2025","Windows Server 2019 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-73026","summary":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73026"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:32","euvd":{"id":"EUVD-2026-73770","description":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:18:04","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73026"],"products":["Windows 10 Version 1607","Windows Server 2016 (Server Core installation)","Windows 11 version 26H1","Windows Server 2025 (Server Core installation)","Windows Server 2019","Windows Server 2025","Windows Server 2019 (Server Core installation)","Windows Server 2022","Windows 10 Version 1809","Windows 11 Version 23H2","Windows 11 Version 24H2","Windows 11 Version 25H2","Windows 10 Version 22H2","Windows Server 2016","Windows 10 Version 21H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-73028","summary":"Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73028"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:32","euvd":{"id":"EUVD-2026-73782","description":"Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.","published_time":"2026-09-08T17:18:10","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73028"],"products":["Microsoft SQL Server 2019 (GDR)","Microsoft SQL Server 2022 (GDR)","Microsoft SQL Server 2019 (CU 32)","Microsoft SQL Server 2022 (CU 26)","Microsoft SQL Server 2025 for x64-based Systems (GDR)","Microsoft SQL Server 2025 (CU8)","Microsoft SQL Server 2017 (CU 31)","Microsoft SQL Server 2017 (GDR)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-73029","summary":"Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73029"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:32","euvd":{"id":"EUVD-2026-73319","description":"Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.","published_time":"2026-09-08T17:13:50","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73029"],"products":["Microsoft SQL Server 2019 (CU 32)","Microsoft SQL Server 2025 (CU8)","Microsoft SQL Server 2019 (GDR)","Microsoft SQL Server 2025 for x64-based Systems (GDR)","Microsoft SQL Server 2022 (CU 26)","Microsoft SQL Server 2022 (GDR)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-73017","summary":"Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to execute code locally.","cvss":7.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73017"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:31","euvd":{"id":"EUVD-2026-73780","description":"Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to execute code locally.","published_time":"2026-09-08T17:18:09","cvss":7.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73017"],"products":["Windows 10 Version 1809","Windows 10 Version 22H2","Windows 11 Version 25H2","Windows 10 Version 21H2","Windows Server 2025","Windows 11 Version 24H2","Windows Server 2019 (Server Core installation)","Windows Server 2025 (Server Core installation)","Windows 11 version 26H1","Windows Server 2019","Windows 11 Version 23H2","Windows Server 2022"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-73018","summary":"Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73018"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:31","euvd":{"id":"EUVD-2026-73753","description":"Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:17:54","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73018"],"products":["Windows 11 Version 23H2","Windows Server 2012 R2","Windows 10 Version 1809","Windows Server 2016","Windows Server 2019","Windows 11 Version 25H2","Windows Server 2012 (Server Core installation)","Windows Server 2022","Windows 11 Version 24H2","Windows Server 2012 R2 (Server Core installation)","Windows Server 2025 (Server Core installation)","Windows 10 Version 22H2","Windows Server 2019 (Server Core installation)","Windows 10 Version 21H2","Windows 10 Version 1607","Windows Server 2025","Windows Server 2016 (Server Core installation)","Windows Server 2012","Windows 11 version 26H1"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-73019","summary":"Improper resolution of path equivalence in Windows URL Moniker allows an unauthorized attacker to bypass a security feature over a network.","cvss":4.3,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":4.3,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73019"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:31","euvd":{"id":"EUVD-2026-73754","description":"Improper resolution of path equivalence in Windows URL Moniker allows an unauthorized attacker to bypass a security feature over a network.","published_time":"2026-09-08T17:17:55","cvss":4.3,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73019"],"products":["Windows Server 2012 R2 (Server Core installation)","Windows 10 Version 22H2","Windows 11 version 26H1","Windows 11 Version 23H2","Windows Server 2016 (Server Core installation)","Windows Server 2012 R2","Windows 11 Version 24H2","Windows Server 2016","Windows 10 Version 21H2","Windows Server 2022","Windows Server 2019","Windows 10 Version 1607","Windows Server 2019 (Server Core installation)","Windows Server 2025","Windows 10 Version 1809","Windows 11 Version 25H2","Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2025 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-73020","summary":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73020"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:31","euvd":{"id":"EUVD-2026-73757","description":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:17:56","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73020"],"products":["Windows 11 version 26H1","Windows Server 2025 (Server Core installation)","Windows 11 Version 24H2","Windows Server 2019 (Server Core installation)","Windows 10 Version 22H2","Windows 11 Version 25H2","Windows Server 2016","Windows 10 Version 21H2","Windows Server 2022","Windows 11 Version 23H2","Windows Server 2025","Windows 10 Version 1809","Windows 10 Version 1607","Windows Server 2019","Windows Server 2016 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-73021","summary":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73021"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:31","euvd":{"id":"EUVD-2026-73760","description":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:17:58","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73021"],"products":["Windows 10 Version 21H2","Windows Server 2019 (Server Core installation)","Windows Server 2025 (Server Core installation)","Windows 11 version 26H1","Windows 10 Version 1607","Windows 10 Version 22H2","Windows 11 Version 24H2","Windows Server 2022","Windows Server 2025","Windows Server 2016 (Server Core installation)","Windows 10 Version 1809","Windows 11 Version 25H2","Windows Server 2016","Windows 11 Version 23H2","Windows Server 2019"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-73022","summary":"Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.","cvss":7.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73022"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:31","euvd":{"id":"EUVD-2026-73763","description":"Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:18:00","cvss":7.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73022"],"products":["Windows 11 version 26H1","Windows 10 Version 21H2","Windows 10 Version 1809","Windows 11 Version 25H2","Windows Server 2025 (Server Core installation)","Windows 11 Version 23H2","Windows 10 Version 22H2","Windows Server 2025","Windows Server 2022","Windows Server 2019","Windows 11 Version 24H2","Windows Server 2019 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-73011","summary":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73011"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:30","euvd":{"id":"EUVD-2026-73764","description":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:18:00","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73011"],"products":["Windows Server 2016 (Server Core installation)","Windows Server 2025","Windows 10 Version 22H2","Windows Server 2016","Windows 11 Version 24H2","Windows Server 2019 (Server Core installation)","Windows Server 2019","Windows 10 Version 1809","Windows Server 2025 (Server Core installation)","Windows Server 2022","Windows 11 Version 25H2","Windows 10 Version 1607","Windows 10 Version 21H2","Windows 11 version 26H1","Windows 11 Version 23H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-73012","summary":"Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73012"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:30","euvd":{"id":"EUVD-2026-73772","description":"Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network.","published_time":"2026-09-08T17:18:05","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73012"],"products":["Windows Server 2016 (Server Core installation)","Windows Server 2025","Windows Server 2025 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)","Windows 10 Version 22H2","Windows Server 2022","Windows 11 Version 23H2","Windows Server 2012 (Server Core installation)","Windows Server 2019","Windows Server 2012","Windows 11 version 26H1","Windows Server 2016","Windows 11 Version 24H2","Windows 10 Version 21H2","Windows 11 Version 25H2","Windows Server 2019 (Server Core installation)","Windows 10 Version 1607","Windows 10 Version 1809"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-73013","summary":"Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73013"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:30","euvd":{"id":"EUVD-2026-73777","description":"Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:08","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73013"],"products":["Windows 11 Version 25H2","Windows 10 Version 1607","Windows Server 2025 (Server Core installation)","Windows Server 2016 (Server Core installation)","Windows Server 2016","Windows Server 2025","Windows 11 Version 23H2","Windows 11 Version 24H2","Windows 10 Version 22H2","Windows Server 2012 (Server Core installation)","Windows 10 Version 1809","Windows Server 2019 (Server Core installation)","Windows Server 2022","Windows Server 2012 R2","Windows Server 2012","Windows Server 2012 R2 (Server Core installation)","Windows Server 2019","Windows 11 version 26H1","Windows 10 Version 21H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-73014","summary":"Missing authorization in Data Sharing Service Client allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73014"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:30","euvd":{"id":"EUVD-2026-73765","description":"Missing authorization in Data Sharing Service Client allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:18:01","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73014"],"products":["Windows 11 Version 23H2","Windows Server 2019","Windows 11 Version 25H2","Windows 10 Version 1607","Windows 10 Version 1809","Windows Server 2025","Windows 11 version 26H1","Windows Server 2016","Windows 10 Version 21H2","Windows Server 2019 (Server Core installation)","Windows 11 Version 24H2","Windows Server 2016 (Server Core installation)","Windows Server 2022","Windows 10 Version 22H2","Windows Server 2025 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-73015","summary":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73015"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:30","euvd":{"id":"EUVD-2026-73761","description":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:17:59","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73015"],"products":["Windows Server 2022","Windows 11 Version 25H2","Windows 11 Version 24H2","Windows Server 2025","Windows 10 Version 1809","Windows Server 2025 (Server Core installation)","Windows 10 Version 21H2","Windows Server 2019","Windows 10 Version 22H2","Windows Server 2019 (Server Core installation)","Windows 11 Version 23H2","Windows Server 2016","Windows 11 version 26H1","Windows 10 Version 1607","Windows Server 2016 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-73016","summary":"Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73016"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:30","euvd":{"id":"EUVD-2026-73779","description":"Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:09","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73016"],"products":["Windows 10 Version 22H2","Windows Server 2019","Windows 10 Version 1809","Windows Server 2012 R2","Windows Server 2019 (Server Core installation)","Windows 11 Version 24H2","Windows 10 Version 21H2","Windows 10 Version 1607","Windows Server 2016","Windows Server 2012 (Server Core installation)","Windows Server 2022","Windows 11 version 26H1","Windows Server 2012","Windows 11 Version 25H2","Windows Server 2025","Windows Server 2012 R2 (Server Core installation)","Windows 11 Version 23H2","Windows Server 2025 (Server Core installation)","Windows Server 2016 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-73004","summary":"Missing authentication for critical function in Windows Autopilot allows an authorized attacker to perform tampering locally.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73004"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:29","euvd":{"id":"EUVD-2026-73771","description":"Missing authentication for critical function in Windows Autopilot allows an authorized attacker to perform tampering locally.","published_time":"2026-09-08T17:18:04","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73004"],"products":["Windows 11 version 26H1","Windows 11 Version 24H2","Windows 10 Version 21H2","Windows Server 2025 (Server Core installation)","Windows 11 Version 25H2","Windows 10 Version 22H2","Windows Server 2025","Windows 11 Version 23H2","Windows Server 2022"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-73005","summary":"Use after free in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.","cvss":7.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73005"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:29","euvd":{"id":"EUVD-2026-73767","description":"Use after free in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:18:02","cvss":7.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73005"],"products":["Windows 11 version 26H1","Windows 11 Version 25H2","Windows 11 Version 23H2","Windows 11 Version 24H2","Windows 10 Version 1809","Windows Server 2022","Windows Server 2025 (Server Core installation)","Windows Server 2025","Windows 10 Version 21H2","Windows Server 2019","Windows 10 Version 22H2","Windows Server 2016","Windows Server 2019 (Server Core installation)","Windows 10 Version 1607","Windows Server 2016 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-73006","summary":"Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73006"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:29","euvd":{"id":"EUVD-2026-73774","description":"Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:06","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73006"],"products":["Windows Server 2019 (Server Core installation)","Windows 11 Version 25H2","Windows Server 2022","Windows 10 Version 1809","Windows Server 2016","Windows 10 Version 21H2","Windows Server 2019","Windows 10 Version 22H2","Windows 11 Version 24H2","Windows 11 Version 23H2","Windows Server 2025 (Server Core installation)","Windows Server 2025","Windows 10 Version 1607","Windows 11 version 26H1","Windows Server 2016 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-73007","summary":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73007"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:29","euvd":{"id":"EUVD-2026-73769","description":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:18:03","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73007"],"products":["Windows 10 Version 1809","Windows 11 Version 25H2","Windows 10 Version 1607","Windows Server 2022","Windows Server 2025 (Server Core installation)","Windows 10 Version 21H2","Windows Server 2019","Windows Server 2025","Windows 11 Version 24H2","Windows 10 Version 22H2","Windows 11 Version 23H2","Windows Server 2016","Windows Server 2016 (Server Core installation)","Windows 11 version 26H1","Windows Server 2019 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-73008","summary":"Exposure of private personal information to an unauthorized actor in Windows Biometric Service allows an authorized attacker to disclose information locally.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73008"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:29","euvd":{"id":"EUVD-2026-73766","description":"Exposure of private personal information to an unauthorized actor in Windows Biometric Service allows an authorized attacker to disclose information locally.","published_time":"2026-09-08T17:18:01","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73008"],"products":["Windows Server 2019 (Server Core installation)","Windows 11 version 26H1","Windows Server 2025 (Server Core installation)","Windows 10 Version 1809","Windows Server 2025","Windows 10 Version 22H2","Windows Server 2019","Windows Server 2016 (Server Core installation)","Windows 11 Version 23H2","Windows Server 2016","Windows Server 2022","Windows 10 Version 21H2","Windows 10 Version 1607","Windows 11 Version 24H2","Windows 11 Version 25H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-73009","summary":"Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.","cvss":9.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":9.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73009"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:29","euvd":{"id":"EUVD-2026-73773","description":"Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:05","cvss":9.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73009"],"products":["Windows Server 2019","Windows 10 Version 21H2","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)","Windows Server 2012 (Server Core installation)","Windows Server 2025 (Server Core installation)","Windows 11 Version 25H2","Windows Server 2016 (Server Core installation)","Windows Server 2022","Windows 10 Version 22H2","Windows Server 2025","Windows 10 Version 1607","Windows Server 2012","Windows 11 Version 24H2","Windows 11 Version 23H2","Windows Server 2019 (Server Core installation)","Windows Server 2016","Windows 10 Version 1809","Windows 11 version 26H1"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-73010","summary":"Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.","cvss":9.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":9.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73010"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:29","euvd":{"id":"EUVD-2026-73775","description":"Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:06","cvss":9.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73010"],"products":["Windows Server 2019 (Server Core installation)","Windows Server 2019","Windows Server 2025 (Server Core installation)","Windows 10 Version 1809","Windows Server 2022","Windows Server 2025"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72997","summary":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72997"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:28","euvd":{"id":"EUVD-2026-73752","description":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:17:54","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72997"],"products":["Windows Server 2019","Windows Server 2019 (Server Core installation)","Windows Server 2022","Windows 11 version 26H1","Windows 10 Version 1809","Windows 10 Version 22H2","Windows Server 2016","Windows 10 Version 21H2","Windows 10 Version 1607","Windows Server 2025","Windows Server 2016 (Server Core installation)","Windows 11 Version 23H2","Windows Server 2025 (Server Core installation)","Windows 11 Version 25H2","Windows 11 Version 24H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72999","summary":"Out-of-bounds read in Windows USB Hub Driver allows an unauthorized attacker to elevate privileges with a physical attack.","cvss":6.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72999"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:28","euvd":{"id":"EUVD-2026-73755","description":"Out-of-bounds read in Windows USB Hub Driver allows an unauthorized attacker to elevate privileges with a physical attack.","published_time":"2026-09-08T17:17:55","cvss":6.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72999"],"products":["Windows Server 2025 (Server Core installation)","Windows Server 2016","Windows 11 Version 24H2","Windows Server 2016 (Server Core installation)","Windows Server 2025","Windows 11 version 26H1","Windows Server 2019","Windows 11 Version 25H2","Windows 11 Version 23H2","Windows 10 Version 22H2","Windows 10 Version 21H2","Windows Server 2022","Windows 10 Version 1809","Windows 10 Version 1607","Windows Server 2019 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-73000","summary":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73000"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:28","euvd":{"id":"EUVD-2026-73758","description":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:17:57","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73000"],"products":["Windows 11 Version 25H2","Windows 10 Version 1607","Windows Server 2025 (Server Core installation)","Windows Server 2016 (Server Core installation)","Windows Server 2019 (Server Core installation)","Windows Server 2022","Windows 10 Version 22H2","Windows Server 2019","Windows Server 2025","Windows Server 2016","Windows 10 Version 21H2","Windows 11 Version 24H2","Windows 10 Version 1809","Windows 11 version 26H1","Windows 11 Version 23H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-73001","summary":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73001"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:28","euvd":{"id":"EUVD-2026-73759","description":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:17:57","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73001"],"products":["Windows Server 2025 (Server Core installation)","Windows 11 Version 24H2","Windows 10 Version 1607","Windows Server 2016","Windows 11 Version 25H2","Windows Server 2019","Windows 11 version 26H1","Windows Server 2019 (Server Core installation)","Windows 10 Version 22H2","Windows Server 2025","Windows 10 Version 21H2","Windows 10 Version 1809","Windows Server 2016 (Server Core installation)","Windows 11 Version 23H2","Windows Server 2022"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-73002","summary":"Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73002"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:28","euvd":{"id":"EUVD-2026-73756","description":"Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:17:56","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73002"],"products":["Windows 10 Version 21H2","Windows 11 Version 23H2","Windows 10 Version 22H2","Windows Server 2016 (Server Core installation)","Windows Server 2022","Windows Server 2025 (Server Core installation)","Windows 10 Version 1607","Windows Server 2016","Windows Server 2019 (Server Core installation)","Windows 10 Version 1809","Windows 11 version 26H1","Windows 11 Version 25H2","Windows 11 Version 24H2","Windows Server 2019","Windows Server 2025"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-73003","summary":"Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.","cvss":7.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73003"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:28","euvd":{"id":"EUVD-2026-73762","description":"Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:17:59","cvss":7.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73003"],"products":["Windows 10 Version 22H2","Windows 10 Version 21H2","Windows Server 2019 (Server Core installation)","Windows 11 Version 24H2","Windows 10 Version 1809","Windows Server 2025 (Server Core installation)","Windows 11 Version 23H2","Windows Server 2022","Windows 11 version 26H1","Windows 11 Version 25H2","Windows Server 2025","Windows Server 2019"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72992","summary":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72992"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:27","euvd":{"id":"EUVD-2026-73748","description":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:17:51","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72992"],"products":["Windows Server 2016","Windows 11 Version 23H2","Windows Server 2016 (Server Core installation)","Windows 10 Version 1809","Windows Server 2025","Windows Server 2019 (Server Core installation)","Windows 11 Version 24H2","Windows 11 version 26H1","Windows 10 Version 21H2","Windows 10 Version 22H2","Windows Server 2022","Windows Server 2025 (Server Core installation)","Windows 10 Version 1607","Windows Server 2019","Windows 11 Version 25H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72993","summary":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72993"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:27","euvd":{"id":"EUVD-2026-73749","description":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:17:52","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72993"],"products":["Windows Server 2025 (Server Core installation)","Windows 10 Version 1607","Windows Server 2016","Windows 11 Version 23H2","Windows Server 2016 (Server Core installation)","Windows Server 2025","Windows 10 Version 1809","Windows 10 Version 21H2","Windows 11 version 26H1","Windows 11 Version 24H2","Windows Server 2019","Windows Server 2022","Windows Server 2019 (Server Core installation)","Windows 10 Version 22H2","Windows 11 Version 25H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72994","summary":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72994"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:27","euvd":{"id":"EUVD-2026-73750","description":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:17:52","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72994"],"products":["Windows Server 2016 (Server Core installation)","Windows 10 Version 21H2","Windows Server 2025 (Server Core installation)","Windows 11 version 26H1","Windows Server 2022","Windows Server 2016","Windows Server 2019","Windows 10 Version 1809","Windows 11 Version 23H2","Windows 11 Version 25H2","Windows 11 Version 24H2","Windows Server 2025","Windows 10 Version 22H2","Windows 10 Version 1607","Windows Server 2019 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72995","summary":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72995"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:27","euvd":{"id":"EUVD-2026-73744","description":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:17:49","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72995"],"products":["Windows 10 Version 1809","Windows Server 2019","Windows Server 2025 (Server Core installation)","Windows 11 Version 25H2","Windows Server 2016","Windows 10 Version 1607","Windows 11 Version 23H2","Windows 10 Version 21H2","Windows Server 2025","Windows Server 2019 (Server Core installation)","Windows Server 2016 (Server Core installation)","Windows 11 Version 24H2","Windows 10 Version 22H2","Windows 11 version 26H1","Windows Server 2022"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72996","summary":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72996"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:27","euvd":{"id":"EUVD-2026-73751","description":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:17:53","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72996"],"products":["Windows 11 Version 24H2","Windows Server 2025 (Server Core installation)","Windows 11 version 26H1","Windows 10 Version 22H2","Windows Server 2025","Windows 10 Version 1809","Windows 11 Version 23H2","Windows Server 2019","Windows 11 Version 25H2","Windows Server 2022","Windows Server 2016 (Server Core installation)","Windows Server 2016","Windows 10 Version 21H2","Windows Server 2019 (Server Core installation)","Windows 10 Version 1607"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72989","summary":"Use of uninitialized resource in Windows Failover Cluster allows an unauthorized attacker to disclose information over a network.","cvss":7.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72989"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:26","euvd":{"id":"EUVD-2026-73742","description":"Use of uninitialized resource in Windows Failover Cluster allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:17:48","cvss":7.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72989"],"products":["Windows Server 2025","Windows Server 2019","Windows Server 2019 (Server Core installation)","Windows Server 2022","Windows 10 Version 1809","Windows Server 2025 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72990","summary":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72990"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:26","euvd":{"id":"EUVD-2026-73746","description":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:17:50","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72990"],"products":["Windows 10 Version 21H2","Windows 11 version 26H1","Windows 11 Version 24H2","Windows 10 Version 1809","Windows Server 2025 (Server Core installation)","Windows Server 2022","Windows Server 2016","Windows Server 2016 (Server Core installation)","Windows 10 Version 1607","Windows 11 Version 23H2","Windows Server 2019 (Server Core installation)","Windows 11 Version 25H2","Windows Server 2025","Windows Server 2019","Windows 10 Version 22H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72991","summary":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72991"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:26","euvd":{"id":"EUVD-2026-73747","description":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:17:51","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72991"],"products":["Windows 11 version 26H1","Windows Server 2019","Windows Server 2016 (Server Core installation)","Windows 10 Version 1607","Windows 10 Version 1809","Windows Server 2016","Windows 10 Version 22H2","Windows 11 Version 23H2","Windows Server 2019 (Server Core installation)","Windows 10 Version 21H2","Windows Server 2025","Windows 11 Version 25H2","Windows 11 Version 24H2","Windows Server 2025 (Server Core installation)","Windows Server 2022"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72983","summary":"Use after free in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to execute code over a network.","cvss":9.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":9.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72983"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:25","euvd":{"id":"EUVD-2026-73256","description":"Use after free in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:15","cvss":9.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72983"],"products":["Windows Server 2025 (Server Core installation)","Windows 10 Version 21H2","Windows 10 Version 22H2","Windows Server 2019","Windows 10 Version 1607","Windows Server 2016","Windows 11 Version 23H2","Windows Server 2025","Windows 11 version 26H1","Windows 11 Version 24H2","Windows Server 2012 R2 (Server Core installation)","Windows 11 Version 25H2","Windows Server 2019 (Server Core installation)","Windows Server 2022","Windows Server 2016 (Server Core installation)","Windows Server 2012","Windows Server 2012 R2","Windows 10 Version 1809","Windows Server 2012 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72985","summary":"Heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized attacker to elevate privileges with a physical attack.","cvss":6.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72985"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:25","euvd":{"id":"EUVD-2026-73737","description":"Heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized attacker to elevate privileges with a physical attack.","published_time":"2026-09-08T17:17:45","cvss":6.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72985"],"products":["Windows Server 2016","Windows 10 Version 22H2","Windows Server 2012 (Server Core installation)","Windows Server 2025","Windows Server 2019","Windows 11 Version 23H2","Windows Server 2025 (Server Core installation)","Windows 10 Version 21H2","Windows 10 Version 1809","Windows 10 Version 1607","Windows Server 2016 (Server Core installation)","Windows Server 2012","Windows 11 Version 25H2","Windows Server 2012 R2 (Server Core installation)","Windows 11 version 26H1","Windows 11 Version 24H2","Windows Server 2019 (Server Core installation)","Windows Server 2012 R2","Windows Server 2022"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72986","summary":"Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72986"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:25","euvd":{"id":"EUVD-2026-73260","description":"Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:17","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72986"],"products":["Windows 10 Version 21H2","Windows 11 Version 23H2","Windows Server 2012","Windows Server 2025 (Server Core installation)","Windows 10 Version 22H2","Windows Server 2019","Windows Server 2019 (Server Core installation)","Windows 11 Version 24H2","Windows 11 version 26H1","Windows Server 2012 R2","Windows 10 Version 1809","Windows Server 2025","Windows Server 2012 R2 (Server Core installation)","Windows Server 2022","Windows 11 Version 25H2","Windows Server 2016 (Server Core installation)","Windows 10 Version 1607","Windows Server 2016","Windows Server 2012 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72987","summary":"Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.","cvss":8.1,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.1,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72987"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:25","euvd":{"id":"EUVD-2026-73743","description":"Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:17:48","cvss":8.1,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72987"],"products":["Windows Server 2022","Windows Server 2012 (Server Core installation)","Windows 10 Version 1809","Windows Server 2012 R2 (Server Core installation)","Windows Server 2012","Windows Server 2016","Windows Server 2025 (Server Core installation)","Windows 10 Version 1607","Windows Server 2019","Windows Server 2012 R2","Windows Server 2016 (Server Core installation)","Windows Server 2019 (Server Core installation)","Windows Server 2025"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72988","summary":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72988"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:25","euvd":{"id":"EUVD-2026-73745","description":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:17:50","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72988"],"products":["Windows Server 2019 (Server Core installation)","Windows 10 Version 1809","Windows Server 2025","Windows 11 Version 23H2","Windows 11 Version 24H2","Windows Server 2019","Windows 11 Version 25H2","Windows 10 Version 21H2","Windows Server 2025 (Server Core installation)","Windows Server 2022","Windows 10 Version 1607","Windows Server 2016","Windows 11 version 26H1","Windows Server 2016 (Server Core installation)","Windows 10 Version 22H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72977","summary":"Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72977"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:24","euvd":{"id":"EUVD-2026-73734","description":"Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:17:43","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72977"],"products":["Microsoft Office LTSC 2024","Microsoft Office 2019","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2021","Microsoft Office LTSC for Mac 2024","Microsoft PowerPoint 2016","Microsoft Office 365 for Mac","Microsoft Office LTSC for Mac 2021"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72978","summary":"Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.","cvss":5.9,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.9,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72978"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:24","euvd":{"id":"EUVD-2026-73251","description":"Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.","published_time":"2026-09-08T17:13:12","cvss":5.9,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72978"],"products":["Windows 10 Version 1809","Windows Server 2025 (Server Core installation)","Windows Server 2012 R2 (Server Core installation)","Windows 10 Version 1607","Windows Server 2012 (Server Core installation)","Windows Server 2019","Windows Server 2012 R2","Windows Server 2025","Windows Server 2012","Windows Server 2019 (Server Core installation)","Windows Server 2016","Windows Server 2022","Windows Server 2016 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72979","summary":"Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.","cvss":9.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":9.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72979"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:24","euvd":{"id":"EUVD-2026-73253","description":"Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:13","cvss":9.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72979"],"products":["Windows Server 2016","Windows Server 2019 (Server Core installation)","Windows Server 2012 (Server Core installation)","Windows Server 2025 (Server Core installation)","Windows Server 2025","Windows Server 2019","Windows 10 Version 1809","Windows 10 Version 1607","Windows Server 2022","Windows Server 2012 R2","Windows Server 2012","Windows Server 2016 (Server Core installation)","Windows Server 2012 R2 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72980","summary":"Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally.","cvss":4.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":4.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72980"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:24","euvd":{"id":"EUVD-2026-73254","description":"Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally.","published_time":"2026-09-08T17:13:14","cvss":4.4,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72980"],"products":["Windows Server 2025","Windows 11 Version 25H2","Windows 11 Version 24H2","Windows 10 Version 1809","Windows Server 2016 (Server Core installation)","Windows 10 Version 21H2","Windows Server 2022","Windows Server 2019","Windows Server 2019 (Server Core installation)","Windows Server 2025 (Server Core installation)","Windows 11 Version 23H2","Windows 10 Version 22H2","Windows 11 version 26H1","Windows Server 2016","Windows 10 Version 1607"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72981","summary":"Use after free in IP Helper allows an unauthorized attacker to execute code over a network.","cvss":8.1,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.1,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72981"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:24","euvd":{"id":"EUVD-2026-73255","description":"Use after free in IP Helper allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:14","cvss":8.1,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72981"],"products":["Windows 10 Version 1809","Windows 10 Version 1607","Windows 11 Version 25H2","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2 (Server Core installation)","Windows Server 2022","Windows Server 2016","Windows Server 2016 (Server Core installation)","Windows 10 Version 22H2","Windows 10 Version 21H2","Windows Server 2019 (Server Core installation)","Windows Server 2012","Windows 11 Version 23H2","Windows Server 2025 (Server Core installation)","Windows 11 version 26H1","Windows Server 2025","Windows Server 2019","Windows Server 2012 R2","Windows 11 Version 24H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72982","summary":"Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.","cvss":9.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":9.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72982"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:24","euvd":{"id":"EUVD-2026-73257","description":"Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:15","cvss":9.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72982"],"products":["Windows Server 2016","Windows Server 2012","Windows 11 Version 24H2","Windows Server 2019","Windows 10 Version 21H2","Windows 10 Version 1809","Windows 11 version 26H1","Windows Server 2016 (Server Core installation)","Windows Server 2012 R2","Windows 10 Version 1607","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2 (Server Core installation)","Windows Server 2019 (Server Core installation)","Windows Server 2025 (Server Core installation)","Windows Server 2022","Windows 11 Version 25H2","Windows 10 Version 22H2","Windows Server 2025","Windows 11 Version 23H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72972","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72972"],"vendor":"microsoft","product":"365_apps","version":null,"published_time":"2026-09-08T18:20:23","euvd":{"id":"EUVD-2026-73730","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:17:41","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72972"],"products":["Microsoft Office 2019","Microsoft Office LTSC 2021","Microsoft Office 365 for Mac","Microsoft Office LTSC 2024","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC for Mac 2024","Microsoft Word 2016","Microsoft Office LTSC for Mac 2021"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72972","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72972"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:23","euvd":{"id":"EUVD-2026-73730","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:17:41","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72972"],"products":["Microsoft Office 2019","Microsoft Office LTSC 2021","Microsoft Office 365 for Mac","Microsoft Office LTSC 2024","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC for Mac 2024","Microsoft Word 2016","Microsoft Office LTSC for Mac 2021"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72972","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72972"],"vendor":"microsoft","product":"microsoft_365","version":null,"published_time":"2026-09-08T18:20:23","euvd":{"id":"EUVD-2026-73730","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:17:41","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72972"],"products":["Microsoft Office 2019","Microsoft Office LTSC 2021","Microsoft Office 365 for Mac","Microsoft Office LTSC 2024","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC for Mac 2024","Microsoft Word 2016","Microsoft Office LTSC for Mac 2021"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72972","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72972"],"vendor":"microsoft","product":"office_2019","version":null,"published_time":"2026-09-08T18:20:23","euvd":{"id":"EUVD-2026-73730","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:17:41","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72972"],"products":["Microsoft Office 2019","Microsoft Office LTSC 2021","Microsoft Office 365 for Mac","Microsoft Office LTSC 2024","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC for Mac 2024","Microsoft Word 2016","Microsoft Office LTSC for Mac 2021"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72972","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72972"],"vendor":"microsoft","product":"office_2021","version":null,"published_time":"2026-09-08T18:20:23","euvd":{"id":"EUVD-2026-73730","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:17:41","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72972"],"products":["Microsoft Office 2019","Microsoft Office LTSC 2021","Microsoft Office 365 for Mac","Microsoft Office LTSC 2024","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC for Mac 2024","Microsoft Word 2016","Microsoft Office LTSC for Mac 2021"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72972","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72972"],"vendor":"microsoft","product":"office_2024","version":null,"published_time":"2026-09-08T18:20:23","euvd":{"id":"EUVD-2026-73730","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:17:41","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72972"],"products":["Microsoft Office 2019","Microsoft Office LTSC 2021","Microsoft Office 365 for Mac","Microsoft Office LTSC 2024","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC for Mac 2024","Microsoft Word 2016","Microsoft Office LTSC for Mac 2021"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72972","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72972"],"vendor":"microsoft","product":"word","version":null,"published_time":"2026-09-08T18:20:23","euvd":{"id":"EUVD-2026-73730","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:17:41","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72972"],"products":["Microsoft Office 2019","Microsoft Office LTSC 2021","Microsoft Office 365 for Mac","Microsoft Office LTSC 2024","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC for Mac 2024","Microsoft Word 2016","Microsoft Office LTSC for Mac 2021"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72973","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72973"],"vendor":"microsoft","product":"365_apps","version":null,"published_time":"2026-09-08T18:20:23","euvd":{"id":"EUVD-2026-73732","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:17:42","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72973"],"products":["Microsoft Word 2016","Microsoft Office LTSC for Mac 2024","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2021","Microsoft Office LTSC 2024","Microsoft Office 2019","Microsoft Office 365 for Mac","Microsoft Office LTSC for Mac 2021"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72973","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72973"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:23","euvd":{"id":"EUVD-2026-73732","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:17:42","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72973"],"products":["Microsoft Word 2016","Microsoft Office LTSC for Mac 2024","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2021","Microsoft Office LTSC 2024","Microsoft Office 2019","Microsoft Office 365 for Mac","Microsoft Office LTSC for Mac 2021"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72973","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72973"],"vendor":"microsoft","product":"microsoft_365","version":null,"published_time":"2026-09-08T18:20:23","euvd":{"id":"EUVD-2026-73732","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:17:42","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72973"],"products":["Microsoft Word 2016","Microsoft Office LTSC for Mac 2024","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2021","Microsoft Office LTSC 2024","Microsoft Office 2019","Microsoft Office 365 for Mac","Microsoft Office LTSC for Mac 2021"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72973","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72973"],"vendor":"microsoft","product":"office_2019","version":null,"published_time":"2026-09-08T18:20:23","euvd":{"id":"EUVD-2026-73732","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:17:42","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72973"],"products":["Microsoft Word 2016","Microsoft Office LTSC for Mac 2024","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2021","Microsoft Office LTSC 2024","Microsoft Office 2019","Microsoft Office 365 for Mac","Microsoft Office LTSC for Mac 2021"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72973","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72973"],"vendor":"microsoft","product":"office_2021","version":null,"published_time":"2026-09-08T18:20:23","euvd":{"id":"EUVD-2026-73732","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:17:42","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72973"],"products":["Microsoft Word 2016","Microsoft Office LTSC for Mac 2024","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2021","Microsoft Office LTSC 2024","Microsoft Office 2019","Microsoft Office 365 for Mac","Microsoft Office LTSC for Mac 2021"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72973","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72973"],"vendor":"microsoft","product":"office_2024","version":null,"published_time":"2026-09-08T18:20:23","euvd":{"id":"EUVD-2026-73732","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:17:42","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72973"],"products":["Microsoft Word 2016","Microsoft Office LTSC for Mac 2024","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2021","Microsoft Office LTSC 2024","Microsoft Office 2019","Microsoft Office 365 for Mac","Microsoft Office LTSC for Mac 2021"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72973","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72973"],"vendor":"microsoft","product":"word","version":null,"published_time":"2026-09-08T18:20:23","euvd":{"id":"EUVD-2026-73732","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:17:42","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72973"],"products":["Microsoft Word 2016","Microsoft Office LTSC for Mac 2024","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2021","Microsoft Office LTSC 2024","Microsoft Office 2019","Microsoft Office 365 for Mac","Microsoft Office LTSC for Mac 2021"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72974","summary":"Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72974"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:23","euvd":{"id":"EUVD-2026-73733","description":"Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:17:43","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72974"],"products":["Microsoft Office LTSC for Mac 2021","Microsoft Office 2016","Microsoft Office LTSC 2024","Microsoft 365 Apps for Enterprise","Microsoft Office 365 for Mac","Microsoft Office LTSC 2021","Microsoft Office LTSC for Mac 2024","Microsoft Office 2019"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72975","summary":"Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72975"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:23","euvd":{"id":"EUVD-2026-73735","description":"Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:17:44","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72975"],"products":["Microsoft Office LTSC for Mac 2024","Microsoft Office 365 for Mac","Microsoft 365 Apps for Enterprise","Microsoft Office 2019","Microsoft PowerPoint 2016","Microsoft Office LTSC 2021","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72976","summary":"Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information locally.","cvss":5.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72976"],"vendor":"microsoft","product":"365_apps","version":null,"published_time":"2026-09-08T18:20:23","euvd":{"id":"EUVD-2026-73736","description":"Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information locally.","published_time":"2026-09-08T17:17:44","cvss":5.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72976"],"products":["Microsoft Office 365 for Mac","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC 2021","Microsoft Office 2019","Microsoft Office LTSC 2024","Microsoft Word 2016","Microsoft Office LTSC for Mac 2024","Microsoft 365 Apps for Enterprise"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72976","summary":"Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information locally.","cvss":5.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72976"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:23","euvd":{"id":"EUVD-2026-73736","description":"Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information locally.","published_time":"2026-09-08T17:17:44","cvss":5.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72976"],"products":["Microsoft Office 365 for Mac","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC 2021","Microsoft Office 2019","Microsoft Office LTSC 2024","Microsoft Word 2016","Microsoft Office LTSC for Mac 2024","Microsoft 365 Apps for Enterprise"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72976","summary":"Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information locally.","cvss":5.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72976"],"vendor":"microsoft","product":"microsoft_365","version":null,"published_time":"2026-09-08T18:20:23","euvd":{"id":"EUVD-2026-73736","description":"Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information locally.","published_time":"2026-09-08T17:17:44","cvss":5.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72976"],"products":["Microsoft Office 365 for Mac","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC 2021","Microsoft Office 2019","Microsoft Office LTSC 2024","Microsoft Word 2016","Microsoft Office LTSC for Mac 2024","Microsoft 365 Apps for Enterprise"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72976","summary":"Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information locally.","cvss":5.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72976"],"vendor":"microsoft","product":"office_2019","version":null,"published_time":"2026-09-08T18:20:23","euvd":{"id":"EUVD-2026-73736","description":"Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information locally.","published_time":"2026-09-08T17:17:44","cvss":5.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72976"],"products":["Microsoft Office 365 for Mac","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC 2021","Microsoft Office 2019","Microsoft Office LTSC 2024","Microsoft Word 2016","Microsoft Office LTSC for Mac 2024","Microsoft 365 Apps for Enterprise"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72976","summary":"Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information locally.","cvss":5.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72976"],"vendor":"microsoft","product":"office_2021","version":null,"published_time":"2026-09-08T18:20:23","euvd":{"id":"EUVD-2026-73736","description":"Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information locally.","published_time":"2026-09-08T17:17:44","cvss":5.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72976"],"products":["Microsoft Office 365 for Mac","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC 2021","Microsoft Office 2019","Microsoft Office LTSC 2024","Microsoft Word 2016","Microsoft Office LTSC for Mac 2024","Microsoft 365 Apps for Enterprise"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72976","summary":"Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information locally.","cvss":5.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72976"],"vendor":"microsoft","product":"office_2024","version":null,"published_time":"2026-09-08T18:20:23","euvd":{"id":"EUVD-2026-73736","description":"Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information locally.","published_time":"2026-09-08T17:17:44","cvss":5.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72976"],"products":["Microsoft Office 365 for Mac","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC 2021","Microsoft Office 2019","Microsoft Office LTSC 2024","Microsoft Word 2016","Microsoft Office LTSC for Mac 2024","Microsoft 365 Apps for Enterprise"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72976","summary":"Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information locally.","cvss":5.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72976"],"vendor":"microsoft","product":"word","version":null,"published_time":"2026-09-08T18:20:23","euvd":{"id":"EUVD-2026-73736","description":"Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information locally.","published_time":"2026-09-08T17:17:44","cvss":5.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72976"],"products":["Microsoft Office 365 for Mac","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC 2021","Microsoft Office 2019","Microsoft Office LTSC 2024","Microsoft Word 2016","Microsoft Office LTSC for Mac 2024","Microsoft 365 Apps for Enterprise"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72962","summary":"Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.","cvss":8.2,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.2,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72962"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:22","euvd":{"id":"EUVD-2026-73116","description":"Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:12:39","cvss":8.2,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72962"],"products":["Windows Server 2022","Windows 10 Version 1809","Windows Server 2019","Windows 11 Version 25H2","Windows 11 version 26H1","Windows Server 2025 (Server Core installation)","Windows 11 Version 24H2","Windows 10 Version 21H2","Windows Server 2019 (Server Core installation)","Windows 10 Version 22H2","Windows 11 Version 23H2","Windows Server 2025"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72963","summary":"Use after free in Windows Modern Execution Server allows an authorized attacker to elevate privileges locally.","cvss":7.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72963"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:22","euvd":{"id":"EUVD-2026-73117","description":"Use after free in Windows Modern Execution Server allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:12:40","cvss":7.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72963"],"products":["Windows 11 Version 23H2","Windows 10 Version 1809","Windows 10 Version 1607","Windows 11 Version 24H2","Windows Server 2025 (Server Core installation)","Windows 10 Version 22H2","Windows 10 Version 21H2","Windows 11 Version 25H2","Windows Server 2016","Windows Server 2025","Windows 11 version 26H1","Windows Server 2022","Windows Server 2016 (Server Core installation)","Windows Server 2019 (Server Core installation)","Windows Server 2019"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72964","summary":"Missing authentication for critical function in Windows Internet Connection Sharing (ICS) allows an authorized attacker to perform tampering locally.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72964"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:22","euvd":{"id":"EUVD-2026-73677","description":"Missing authentication for critical function in Windows Internet Connection Sharing (ICS) allows an authorized attacker to perform tampering locally.","published_time":"2026-09-08T17:17:11","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72964"],"products":["Windows Server 2022","Windows Server 2019","Windows 10 Version 22H2","Windows 10 Version 1607","Windows 11 version 26H1","Windows 11 Version 24H2","Windows 11 Version 23H2","Windows Server 2025","Windows Server 2025 (Server Core installation)","Windows 10 Version 21H2","Windows Server 2016 (Server Core installation)","Windows Server 2019 (Server Core installation)","Windows 10 Version 1809","Windows Server 2016","Windows 11 Version 25H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72965","summary":"Use after free in Windows WebClient Service allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72965"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:22","euvd":{"id":"EUVD-2026-73894","description":"Use after free in Windows WebClient Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:19:16","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72965"],"products":["Windows Server 2012 (Server Core installation)","Windows Server 2025","Windows 11 Version 25H2","Windows Server 2019","Windows 11 Version 23H2","Windows 10 Version 21H2","Windows Server 2012 R2","Windows 10 Version 1809","Windows 11 Version 24H2","Windows Server 2016 (Server Core installation)","Windows Server 2016","Windows Server 2012","Windows Server 2012 R2 (Server Core installation)","Windows Server 2019 (Server Core installation)","Windows 10 Version 1607","Windows Server 2022","Windows 11 version 26H1","Windows 10 Version 22H2","Windows Server 2025 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72966","summary":"Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to perform tampering locally.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72966"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:22","euvd":{"id":"EUVD-2026-73678","description":"Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to perform tampering locally.","published_time":"2026-09-08T17:17:12","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72966"],"products":["Windows Server 2012 R2 (Server Core installation)","Windows 11 Version 23H2","Windows Server 2016","Windows 10 Version 22H2","Windows 11 Version 24H2","Windows 10 Version 21H2","Windows Server 2025","Windows Server 2012 R2","Windows Server 2022","Windows 11 Version 25H2","Windows Server 2019","Windows Server 2016 (Server Core installation)","Windows 10 Version 1809","Windows 10 Version 1607","Windows 11 version 26H1","Windows Server 2025 (Server Core installation)","Windows Server 2019 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72967","summary":"Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72967"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:22","euvd":{"id":"EUVD-2026-73679","description":"Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:17:12","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72967"],"products":["Windows 10 Version 22H2","Windows Server 2016","Windows Server 2025 (Server Core installation)","Windows Server 2012 R2","Windows 10 Version 1607","Windows Server 2025","Windows 11 version 26H1","Windows Server 2019","Windows Server 2012 R2 (Server Core installation)","Windows 11 Version 24H2","Windows Server 2019 (Server Core installation)","Windows Server 2016 (Server Core installation)","Windows 10 Version 1809","Windows 11 Version 25H2","Windows Server 2022","Windows Server 2012 (Server Core installation)","Windows 10 Version 21H2","Windows Server 2012","Windows 11 Version 23H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72956","summary":"Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72956"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:21","euvd":{"id":"EUVD-2026-73729","description":"Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:17:41","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72956"],"products":["Microsoft Office LTSC 2021","Microsoft Office 2019","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72957","summary":"Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72957"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:21","euvd":{"id":"EUVD-2026-73671","description":"Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally.","published_time":"2026-09-08T17:17:08","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72957"],"products":["Windows Server 2025","Windows Server 2012 R2 (Server Core installation)","Windows Server 2016","Windows Server 2019","Windows Server 2022","Windows Server 2016 (Server Core installation)","Windows 10 Version 1809","Windows Server 2012 (Server Core installation)","Windows Server 2012","Windows Server 2025 (Server Core installation)","Windows Server 2012 R2","Windows 10 Version 1607","Windows Server 2019 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72958","summary":"Double free in Windows Credential Guard allows an authorized attacker to elevate privileges locally.","cvss":8.2,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.2,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72958"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:21","euvd":{"id":"EUVD-2026-73115","description":"Double free in Windows Credential Guard allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:12:39","cvss":8.2,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72958"],"products":["Windows 11 Version 25H2","Windows Server 2025 (Server Core installation)","Windows 11 Version 24H2","Windows 11 version 26H1","Windows Server 2025"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72959","summary":"Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72959"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:21","euvd":{"id":"EUVD-2026-73673","description":"Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine","published_time":"2026-09-08T17:17:09","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72959"],"products":["Windows Server 2012","Windows Server 2016 (Server Core installation)","Windows Server 2012 (Server Core installation)","Windows Server 2019 (Server Core installation)","Windows Server 2019","Windows Server 2025 (Server Core installation)","Windows 11 Version 24H2","Windows Server 2022","Windows 10 Version 22H2","Windows 10 Version 1809","Windows 11 Version 23H2","Windows 11 Version 25H2","Windows Server 2012 R2","Windows 11 version 26H1","Windows Server 2025","Windows Server 2016","Windows 10 Version 1607","Windows Server 2012 R2 (Server Core installation)","Windows 10 Version 21H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72960","summary":"Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72960"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:21","euvd":{"id":"EUVD-2026-73675","description":"Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:17:10","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72960"],"products":["Windows Server 2016","Windows Server 2025 (Server Core installation)","Windows Server 2019","Windows 11 version 26H1","Windows 10 Version 21H2","Windows Server 2022","Windows 11 Version 23H2","Windows 10 Version 22H2","Windows 10 Version 1809","Windows 10 Version 1607","Windows Server 2025","Windows Server 2016 (Server Core installation)","Windows 11 Version 24H2","Windows 11 Version 25H2","Windows Server 2019 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72961","summary":"Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.","cvss":8.2,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.2,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72961"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:21","euvd":{"id":"EUVD-2026-73676","description":"Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:17:11","cvss":8.2,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72961"],"products":["Windows Server 2016","Windows 10 Version 22H2","Windows 10 Version 21H2","Windows 10 Version 1607","Windows 11 version 26H1","Windows 11 Version 24H2","Windows Server 2019 (Server Core installation)","Windows Server 2025","Windows 10 Version 1809","Windows Server 2019","Windows Server 2025 (Server Core installation)","Windows 11 Version 25H2","Windows Server 2016 (Server Core installation)","Windows 11 Version 23H2","Windows Server 2022"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72947","summary":"Integer underflow (wrap or wraparound) in Windows File History Service allows an authorized attacker to elevate privileges locally.","cvss":6.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72947"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:20","euvd":{"id":"EUVD-2026-73343","description":"Integer underflow (wrap or wraparound) in Windows File History Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:14:03","cvss":6.4,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72947"],"products":["Windows 11 Version 25H2","Windows Server 2016","Windows Server 2019 (Server Core installation)","Windows Server 2016 (Server Core installation)","Windows Server 2019","Windows 10 Version 21H2","Windows 11 Version 24H2","Windows 11 version 26H1","Windows 10 Version 1607","Windows 11 Version 23H2","Windows 10 Version 1809","Windows 10 Version 22H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72948","summary":"Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally.","cvss":6.7,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.7,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72948"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:20","euvd":{"id":"EUVD-2026-73114","description":"Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:12:38","cvss":6.7,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72948"],"products":["Windows Server 2012 (Server Core installation)","Windows Server 2025 (Server Core installation)","Windows Server 2012","Windows 10 Version 1809","Windows 10 Version 1607","Windows Server 2019","Windows Server 2016","Windows Server 2025","Windows Server 2019 (Server Core installation)","Windows Server 2016 (Server Core installation)","Windows Server 2012 R2 (Server Core installation)","Windows Server 2012 R2","Windows Server 2022"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72949","summary":"Null pointer dereference in Windows SMB Server Network Transport Driver (srvnet.sys) allows an unauthorized attacker to deny service over a network.","cvss":7.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72949"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:20","euvd":{"id":"EUVD-2026-73344","description":"Null pointer dereference in Windows SMB Server Network Transport Driver (srvnet.sys) allows an unauthorized attacker to deny service over a network.","published_time":"2026-09-08T17:14:04","cvss":7.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72949"],"products":["Windows Server 2025 (Server Core installation)","Windows 11 Version 23H2","Windows Server 2022","Windows 11 Version 24H2","Windows 11 version 26H1","Windows Server 2025","Windows 11 Version 25H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72950","summary":"Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72950"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:20","euvd":{"id":"EUVD-2026-73672","description":"Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine","published_time":"2026-09-08T17:17:08","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72950"],"products":["Windows 11 Version 24H2","Windows Server 2019","Windows Server 2022","Windows Server 2016 (Server Core installation)","Windows Server 2025 (Server Core installation)","Windows 11 version 26H1","Windows Server 2012 R2","Windows 11 Version 23H2","Windows 10 Version 1809","Windows 11 Version 25H2","Windows 10 Version 22H2","Windows Server 2019 (Server Core installation)","Windows Server 2012 R2 (Server Core installation)","Windows Server 2012","Windows 10 Version 21H2","Windows Server 2016","Windows Server 2012 (Server Core installation)","Windows Server 2025","Windows 10 Version 1607"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72952","summary":"Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally.","cvss":7.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72952"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:20","euvd":{"id":"EUVD-2026-73667","description":"Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally.","published_time":"2026-09-08T17:17:06","cvss":7.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72952"],"products":["Windows 11 Version 25H2","Windows 11 Version 24H2","Windows Server 2025 (Server Core installation)","Windows 10 Version 21H2","Windows Server 2022","Windows Server 2019 (Server Core installation)","Windows Server 2025","Windows 10 Version 1809","Windows 11 version 26H1","Windows 11 Version 23H2","Windows 10 Version 22H2","Windows Server 2019"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72953","summary":"Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72953"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:20","euvd":{"id":"EUVD-2026-73668","description":"Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:17:06","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72953"],"products":["Windows Server 2025 (Server Core installation)","Windows 10 Version 22H2","Windows 11 Version 25H2","Windows 10 Version 21H2","Windows Server 2025","Windows 11 Version 23H2","Windows 11 Version 24H2","Windows 11 version 26H1","Windows Server 2022"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72954","summary":"Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network.","cvss":7.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72954"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:20","euvd":{"id":"EUVD-2026-73674","description":"Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network.","published_time":"2026-09-08T17:17:10","cvss":7.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72954"],"products":["Windows Server 2012 (Server Core installation)","Windows 10 Version 1809","Windows Server 2022","Windows Server 2016 (Server Core installation)","Windows Server 2019 (Server Core installation)","Windows Server 2016","Windows Server 2019","Windows Server 2012 R2 (Server Core installation)","Windows Server 2012","Windows Server 2012 R2","Windows Server 2025","Windows Server 2025 (Server Core installation)","Windows 10 Version 1607"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72941","summary":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72941"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:19","euvd":{"id":"EUVD-2026-73669","description":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:17:07","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72941"],"products":["Windows Server 2019","Windows Server 2025 (Server Core installation)","Windows 10 Version 21H2","Windows 10 Version 22H2","Windows Server 2019 (Server Core installation)","Windows 10 Version 1809","Windows 11 Version 24H2","Windows 10 Version 1607","Windows Server 2022","Windows 11 Version 23H2","Windows Server 2016 (Server Core installation)","Windows 11 version 26H1","Windows 11 Version 25H2","Windows Server 2025","Windows Server 2016"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72942","summary":"Out-of-bounds read in Windows Spaceport.sys allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72942"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:19","euvd":{"id":"EUVD-2026-73670","description":"Out-of-bounds read in Windows Spaceport.sys allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:17:07","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72942"],"products":["Windows 10 Version 1809","Windows Server 2019 (Server Core installation)","Windows 10 Version 1607","Windows 11 version 26H1","Windows Server 2012 R2 (Server Core installation)","Windows Server 2025 (Server Core installation)","Windows 11 Version 25H2","Windows Server 2019","Windows Server 2025","Windows Server 2022","Windows Server 2012 R2","Windows 11 Version 24H2","Windows 11 Version 23H2","Windows 10 Version 22H2","Windows Server 2016 (Server Core installation)","Windows Server 2016","Windows 10 Version 21H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72943","summary":"Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network.","cvss":7.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72943"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:19","euvd":{"id":"EUVD-2026-73112","description":"Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network.","published_time":"2026-09-08T17:12:37","cvss":7.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72943"],"products":["Windows Server 2012 (Server Core installation)","Windows Server 2025 (Server Core installation)","Windows Server 2022","Windows Server 2016 (Server Core installation)","Windows 10 Version 1607","Windows Server 2019","Windows 10 Version 1809","Windows Server 2012 R2","Windows Server 2016","Windows Server 2012 R2 (Server Core installation)","Windows Server 2019 (Server Core installation)","Windows Server 2012","Windows Server 2025"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72944","summary":"Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72944"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:19","euvd":{"id":"EUVD-2026-73110","description":"Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:12:36","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72944"],"products":["Windows Server 2019","Windows Server 2012 R2 (Server Core installation)","Windows 10 Version 21H2","Windows 10 Version 1607","Windows Server 2016 (Server Core installation)","Windows 11 Version 25H2","Windows 11 Version 23H2","Windows Server 2025","Windows 11 Version 24H2","Windows 11 version 26H1","Windows Server 2012 R2","Windows 10 Version 22H2","Windows 10 Version 1809","Windows Server 2022","Windows Server 2025 (Server Core installation)","Windows Server 2019 (Server Core installation)","Windows Server 2012","Windows Server 2016","Windows Server 2012 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72945","summary":"Use of uninitialized resource in Windows Task Scheduler allows an authorized attacker to disclose information locally.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72945"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:19","euvd":{"id":"EUVD-2026-73113","description":"Use of uninitialized resource in Windows Task Scheduler allows an authorized attacker to disclose information locally.","published_time":"2026-09-08T17:12:38","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72945"],"products":["Windows 10 Version 1809","Windows Server 2016","Windows Server 2022","Windows Server 2016 (Server Core installation)","Windows 11 Version 23H2","Windows Server 2019 (Server Core installation)","Windows Server 2019","Windows 10 Version 1607","Windows 10 Version 22H2","Windows 10 Version 21H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72946","summary":"Heap-based buffer overflow in Storage Port Driver allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72946"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:19","euvd":{"id":"EUVD-2026-73111","description":"Heap-based buffer overflow in Storage Port Driver allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:12:37","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72946"],"products":["Windows Server 2025","Windows 11 Version 25H2","Windows Server 2025 (Server Core installation)","Windows 11 Version 24H2","Windows 11 version 26H1"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72935","summary":"Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.","cvss":6.7,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.7,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72935"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:18","euvd":{"id":"EUVD-2026-73108","description":"Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:12:35","cvss":6.7,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72935"],"products":["Windows 10 Version 21H2","Windows Server 2012 R2","Windows Server 2012 (Server Core installation)","Windows 11 Version 23H2","Windows 11 Version 24H2","Windows 10 Version 22H2","Windows Server 2025","Windows Server 2022","Windows Server 2012","Windows Server 2019","Windows 11 Version 25H2","Windows Server 2025 (Server Core installation)","Windows 10 Version 1607","Windows Server 2019 (Server Core installation)","Windows Server 2012 R2 (Server Core installation)","Windows Server 2016","Windows Server 2016 (Server Core installation)","Windows 10 Version 1809","Windows 11 version 26H1"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72936","summary":"Use after free in Windows SMB Client allows an unauthorized attacker to execute code over a network.","cvss":8.1,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.1,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72936"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:18","euvd":{"id":"EUVD-2026-73664","description":"Use after free in Windows SMB Client allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:17:04","cvss":8.1,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72936"],"products":["Windows 11 Version 24H2","Windows 11 Version 23H2","Windows 11 Version 25H2","Windows Server 2022","Windows Server 2025","Windows Server 2025 (Server Core installation)","Windows 11 version 26H1"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72937","summary":"Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72937"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:18","euvd":{"id":"EUVD-2026-73348","description":"Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally.","published_time":"2026-09-08T17:14:06","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72937"],"products":["Windows 10 Version 1809","Windows 11 version 26H1","Windows Server 2019 (Server Core installation)","Windows Server 2012 R2","Windows Server 2016 (Server Core installation)","Windows 11 Version 23H2","Windows Server 2016","Windows Server 2012","Windows 11 Version 25H2","Windows Server 2022","Windows 11 Version 24H2","Windows 10 Version 22H2","Windows Server 2025","Windows Server 2025 (Server Core installation)","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2 (Server Core installation)","Windows Server 2019","Windows 10 Version 1607","Windows 10 Version 21H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72938","summary":"Access of resource using incompatible type ('type confusion') in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72938"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:18","euvd":{"id":"EUVD-2026-73731","description":"Access of resource using incompatible type ('type confusion') in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:17:42","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72938"],"products":["Microsoft Office LTSC for Mac 2024","Microsoft Office 365 for Mac","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC 2021","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2024","Microsoft Office 2019"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72939","summary":"Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to deny service over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72939"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:18","euvd":{"id":"EUVD-2026-73109","description":"Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to deny service over a network.","published_time":"2026-09-08T17:12:35","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72939"],"products":["Windows 11 Version 23H2","Windows Server 2016","Windows 10 Version 1607","Windows Server 2012 (Server Core installation)","Windows Server 2022","Windows Server 2019","Windows Server 2012 R2 (Server Core installation)","Windows Server 2025 (Server Core installation)","Windows 11 Version 25H2","Windows Server 2012 R2","Windows 10 Version 21H2","Windows 10 Version 22H2","Windows Server 2019 (Server Core installation)","Windows 10 Version 1809","Windows Server 2025","Windows 11 Version 24H2","Windows 11 version 26H1","Windows Server 2016 (Server Core installation)","Windows Server 2012"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72940","summary":"Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72940"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:18","euvd":{"id":"EUVD-2026-73346","description":"Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:14:05","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72940"],"products":["Windows Server 2025","Windows Server 2025 (Server Core installation)","Windows Server 2022","Windows 11 version 26H1","Windows 11 Version 25H2","Windows 11 Version 24H2","Windows 11 Version 23H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72928","summary":"Use after free in Windows DNS allows an authorized attacker to execute code over a network.","cvss":7.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72928"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:17","euvd":{"id":"EUVD-2026-73662","description":"Use after free in Windows DNS allows an authorized attacker to execute code over a network.","published_time":"2026-09-08T17:17:03","cvss":7.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72928"],"products":["Windows Server 2025 (Server Core installation)","Windows Server 2025"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72929","summary":"Improper validation of integrity check value in Windows Installer allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72929"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:17","euvd":{"id":"EUVD-2026-73105","description":"Improper validation of integrity check value in Windows Installer allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:12:33","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72929"],"products":["Windows 11 Version 23H2","Windows 11 Version 25H2","Windows Server 2025","Windows Server 2025 (Server Core installation)","Windows 11 Version 24H2","Windows 11 version 26H1"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72930","summary":"Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to execute code locally.","cvss":7.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72930"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:17","euvd":{"id":"EUVD-2026-73107","description":"Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to execute code locally.","published_time":"2026-09-08T17:12:34","cvss":7.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72930"],"products":["Windows Server 2016","Windows Server 2025 (Server Core installation)","Windows 10 Version 1809","Windows 11 version 26H1","Windows 10 Version 22H2","Windows 11 Version 25H2","Windows Server 2012 R2 (Server Core installation)","Windows 11 Version 24H2","Windows Server 2022","Windows Server 2019","Windows 10 Version 21H2","Windows Server 2025","Windows 11 Version 23H2","Windows 10 Version 1607","Windows Server 2019 (Server Core installation)","Windows Server 2012 R2","Windows Server 2016 (Server Core installation)","Windows Server 2012","Windows Server 2012 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72931","summary":"Missing release of resource after effective lifetime in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to deny service locally.","cvss":4.7,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":4.7,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72931"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:17","euvd":{"id":"EUVD-2026-73663","description":"Missing release of resource after effective lifetime in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to deny service locally.","published_time":"2026-09-08T17:17:03","cvss":4.7,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72931"],"products":["Windows Server 2012 (Server Core installation)","Windows 10 Version 22H2","Windows 11 version 26H1","Windows Server 2016 (Server Core installation)","Windows 11 Version 24H2","Windows Server 2025 (Server Core installation)","Windows Server 2022","Windows 11 Version 23H2","Windows 10 Version 1607","Windows 10 Version 21H2","Windows Server 2012 R2 (Server Core installation)","Windows Server 2016","Windows Server 2019","Windows 10 Version 1809","Windows Server 2019 (Server Core installation)","Windows Server 2012","Windows Server 2012 R2","Windows Server 2025","Windows 11 Version 25H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72932","summary":"Buffer over-read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.","cvss":7.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72932"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:17","euvd":{"id":"EUVD-2026-73666","description":"Buffer over-read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:17:05","cvss":7.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72932"],"products":["Windows 11 version 26H1","Windows Server 2012 R2 (Server Core installation)","Windows Server 2012 (Server Core installation)","Windows Server 2019","Windows Server 2019 (Server Core installation)","Windows Server 2016 (Server Core installation)","Windows Server 2025 (Server Core installation)","Windows 11 Version 25H2","Windows Server 2016","Windows 10 Version 1809","Windows Server 2012","Windows Server 2022","Windows 10 Version 21H2","Windows Server 2025","Windows 10 Version 22H2","Windows 10 Version 1607","Windows 11 Version 24H2","Windows 11 Version 23H2","Windows Server 2012 R2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72933","summary":"Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72933"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:17","euvd":{"id":"EUVD-2026-73665","description":"Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:17:05","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72933"],"products":["Windows Server 2019 (Server Core installation)","Windows Server 2012 (Server Core installation)","Windows 10 Version 22H2","Windows 11 version 26H1","Windows Server 2019","Windows 11 Version 25H2","Windows 10 Version 21H2","Windows Server 2025 (Server Core installation)","Windows Server 2025","Windows Server 2016 (Server Core installation)","Windows Server 2012 R2 (Server Core installation)","Windows 10 Version 1809","Windows 11 Version 24H2","Windows 10 Version 1607","Windows Server 2012 R2","Windows Server 2022","Windows Server 2012","Windows Server 2016","Windows 11 Version 23H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-71353","summary":"Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.","cvss":7.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71353"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:16","euvd":{"id":"EUVD-2026-73103","description":"Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:12:32","cvss":7.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71353"],"products":["Windows Server 2016 (Server Core installation)","Windows 11 Version 23H2","Windows Server 2025","Windows 11 Version 25H2","Windows 10 Version 21H2","Windows 10 Version 1809","Windows Server 2012","Windows Server 2019","Windows Server 2022","Windows Server 2012 (Server Core installation)","Windows Server 2019 (Server Core installation)","Windows Server 2025 (Server Core installation)","Windows 11 version 26H1","Windows Server 2016","Windows 11 Version 24H2","Windows 10 Version 22H2","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)","Windows 10 Version 1607"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72923","summary":"In Microsoft.OpenApi.YamlReader from 2.0.0-preview.11 until 2.12.0 and from 3.0.0 until 3.10.0, and in Microsoft.OpenApi.Readers prior to 1.6.30, a small YAML OpenAPI document containing nested anchors and aliases can cause uncontrolled resource consumption when parsed through the public YAML reader APIs. YAML is parsed through SharpYaml, which represents aliases as shared nodes in a directed acyclic graph, so the parsed YAML graph stays small, but converting that graph to System.Text.Json.Nodes.JsonNode requires every alias to be materialized as an independent node because a JsonNode cannot be attached to multiple parents. Without a bound on that conversion work, a document with N nested anchors each referenced k times can require k^N materialized JSON nodes, leading to excessive memory allocation and process termination through out-of-memory conditions, a billion laughs style denial of service. The patched versions bound the YAML-to-JSON conversion by node count and nesting depth and report an OpenApiDiagnostic error instead of expanding without limit. This vulnerability is fixed in Microsoft.OpenApi.YamlReader 2.12.0 and 3.10.0, and Microsoft.OpenApi.Readers 1.6.30.","cvss":7.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://github.com/microsoft/OpenAPI.NET/security/advisories/GHSA-7pxr-59rr-hqj2"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:16","euvd":{"id":"EUVD-2026-73080","description":"In Microsoft.OpenApi.YamlReader from 2.0.0-preview.11 until 2.12.0 and from 3.0.0 until 3.10.0, and in Microsoft.OpenApi.Readers prior to 1.6.30, a small YAML OpenAPI document containing nested anchors and aliases can cause uncontrolled resource consumption when parsed through the public YAML reader APIs. YAML is parsed through SharpYaml, which represents aliases as shared nodes in a directed acyclic graph, so the parsed YAML graph stays small, but converting that graph to System.Text.Json.Nodes.JsonNode requires every alias to be materialized as an independent node because a JsonNode cannot be attached to multiple parents. Without a bound on that conversion work, a document with N nested anchors each referenced k times can require k^N materialized JSON nodes, leading to excessive memory allocation and process termination through out-of-memory conditions, a billion laughs style denial of service. The patched versions bound the YAML-to-JSON conversion by node count and nesting depth and report an OpenApiDiagnostic error instead of expanding without limit. This vulnerability is fixed in Microsoft.OpenApi.YamlReader 2.12.0 and 3.10.0, and Microsoft.OpenApi.Readers 1.6.30.","published_time":"2026-09-08T17:12:20","cvss":7.5,"cvss_version":"3.1","epss":0.0,"assigner":"GitHub_M","references":["https://github.com/microsoft/OpenAPI.NET/security/advisories/GHSA-7pxr-59rr-hqj2"],"products":["OpenApi.YamlReader","OpenApi.YamlReader","OpenApi.Readers"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72926","summary":"Use after free in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally.","cvss":7.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72926"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:16","euvd":{"id":"EUVD-2026-73100","description":"Use after free in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:12:30","cvss":7.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72926"],"products":["Windows 11 version 26H1","Windows 10 Version 1607","Windows 11 Version 25H2","Windows Server 2016 (Server Core installation)","Windows 11 Version 24H2","Windows Server 2022","Windows 10 Version 22H2","Windows 10 Version 1809","Windows Server 2016","Windows Server 2019","Windows 11 Version 23H2","Windows Server 2025","Windows 10 Version 21H2","Windows Server 2025 (Server Core installation)","Windows Server 2019 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-72927","summary":"Heap-based buffer overflow in Winsock allows an authorized attacker to elevate privileges locally.","cvss":6.7,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.7,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72927"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:16","euvd":{"id":"EUVD-2026-73661","description":"Heap-based buffer overflow in Winsock allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:17:02","cvss":6.7,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72927"],"products":["Windows 11 version 26H1","Windows Server 2016","Windows 10 Version 1809","Windows 11 Version 25H2","Windows Server 2012 R2 (Server Core installation)","Windows Server 2019 (Server Core installation)","Windows 10 Version 1607","Windows Server 2025","Windows Server 2025 (Server Core installation)","Windows Server 2012 R2","Windows Server 2019","Windows Server 2012","Windows 10 Version 22H2","Windows Server 2012 (Server Core installation)","Windows Server 2016 (Server Core installation)","Windows Server 2022","Windows 10 Version 21H2","Windows 11 Version 23H2","Windows 11 Version 24H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-71350","summary":"Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack.","cvss":6.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71350"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:15","euvd":{"id":"EUVD-2026-73098","description":"Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack.","published_time":"2026-09-08T17:12:29","cvss":6.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71350"],"products":["Windows 11 Version 24H2","Windows 11 version 26H1","Windows Server 2012","Windows 11 Version 23H2","Windows Server 2025","Windows 10 Version 1809","Windows Server 2012 R2","Windows 10 Version 1607","Windows Server 2025 (Server Core installation)","Windows Server 2022","Windows 10 Version 21H2","Windows Server 2019 (Server Core installation)","Windows Server 2016 (Server Core installation)","Windows Server 2012 R2 (Server Core installation)","Windows Server 2019","Windows Server 2012 (Server Core installation)","Windows 11 Version 25H2","Windows Server 2016","Windows 10 Version 22H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-71351","summary":"Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.","cvss":7.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71351"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:15","euvd":{"id":"EUVD-2026-73106","description":"Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:12:34","cvss":7.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71351"],"products":["Windows Server 2012 R2 (Server Core installation)","Windows Server 2025","Windows Server 2012","Windows Server 2016 (Server Core installation)","Windows Server 2019","Windows Server 2012 (Server Core installation)","Windows Server 2019 (Server Core installation)","Windows Server 2016","Windows 11 Version 25H2","Windows Server 2012 R2","Windows Server 2022","Windows 11 version 26H1","Windows 11 Version 24H2","Windows 10 Version 1607","Windows 10 Version 21H2","Windows 10 Version 22H2","Windows 10 Version 1809","Windows Server 2025 (Server Core installation)","Windows 11 Version 23H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-71352","summary":"Integer underflow (wrap or wraparound) in Windows Remote Access Connection Manager allows an authorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71352"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:15","euvd":{"id":"EUVD-2026-73660","description":"Integer underflow (wrap or wraparound) in Windows Remote Access Connection Manager allows an authorized attacker to execute code over a network.","published_time":"2026-09-08T17:17:02","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71352"],"products":["Windows Server 2016 (Server Core installation)","Windows 11 Version 25H2","Windows Server 2012 R2","Windows Server 2022","Windows 10 Version 22H2","Windows 10 Version 1607","Windows Server 2019 (Server Core installation)","Windows Server 2025","Windows 10 Version 1809","Windows 10 Version 21H2","Windows 11 version 26H1","Windows 11 Version 24H2","Windows Server 2012 R2 (Server Core installation)","Windows Server 2019","Windows Server 2016","Windows Server 2025 (Server Core installation)","Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows 11 Version 23H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-71341","summary":"Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to disclose information locally.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71341"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:14","euvd":{"id":"EUVD-2026-73102","description":"Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to disclose information locally.","published_time":"2026-09-08T17:12:32","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71341"],"products":["Windows 11 version 26H1","Windows Server 2012 R2 (Server Core installation)","Windows Server 2019 (Server Core installation)","Windows Server 2012 (Server Core installation)","Windows 10 Version 21H2","Windows Server 2019","Windows 10 Version 1809","Windows 10 Version 1607","Windows 11 Version 25H2","Windows Server 2012 R2","Windows Server 2016","Windows 11 Version 23H2","Windows 11 Version 24H2","Windows Server 2016 (Server Core installation)","Windows 10 Version 22H2","Windows Server 2025","Windows Server 2025 (Server Core installation)","Windows Server 2012","Windows Server 2022"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-71342","summary":"Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.","cvss":7.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71342"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:14","euvd":{"id":"EUVD-2026-73659","description":"Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:17:01","cvss":7.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71342"],"products":["Windows Server 2022","Windows Server 2012 R2","Windows Server 2019 (Server Core installation)","Windows 10 Version 22H2","Windows 10 Version 21H2","Windows 11 Version 25H2","Windows 10 Version 1607","Windows 11 Version 24H2","Windows Server 2016 (Server Core installation)","Windows Server 2025","Windows 10 Version 1809","Windows 11 Version 23H2","Windows 11 version 26H1","Windows Server 2016","Windows Server 2025 (Server Core installation)","Windows Server 2019","Windows Server 2012 R2 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-71343","summary":"Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to execute code locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71343"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:14","euvd":{"id":"EUVD-2026-73101","description":"Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to execute code locally.","published_time":"2026-09-08T17:12:31","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71343"],"products":["Windows 10 Version 1809","Windows 11 Version 24H2","Windows 10 Version 21H2","Windows Server 2022","Windows Server 2025","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2019","Windows Server 2012","Windows 10 Version 22H2","Windows 11 Version 23H2","Windows Server 2016 (Server Core installation)","Windows 11 version 26H1","Windows 10 Version 1607","Windows 11 Version 25H2","Windows Server 2025 (Server Core installation)","Windows Server 2012 R2 (Server Core installation)","Windows Server 2016","Windows Server 2019 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-71345","summary":"Out-of-bounds write in Windows Spaceport.sys allows an authorized attacker to execute code locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71345"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:14","euvd":{"id":"EUVD-2026-73104","description":"Out-of-bounds write in Windows Spaceport.sys allows an authorized attacker to execute code locally.","published_time":"2026-09-08T17:12:33","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71345"],"products":["Windows 11 Version 25H2","Windows 11 Version 24H2","Windows Server 2022","Windows Server 2012 R2 (Server Core installation)","Windows Server 2019 (Server Core installation)","Windows Server 2025","Windows Server 2012 (Server Core installation)","Windows Server 2019","Windows Server 2012 R2","Windows 10 Version 22H2","Windows Server 2025 (Server Core installation)","Windows 11 version 26H1","Windows Server 2012","Windows 11 Version 23H2","Windows Server 2016 (Server Core installation)","Windows 10 Version 1809","Windows 10 Version 21H2","Windows 10 Version 1607","Windows Server 2016"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-71348","summary":"Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack.","cvss":6.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71348"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:14","euvd":{"id":"EUVD-2026-73099","description":"Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack.","published_time":"2026-09-08T17:12:30","cvss":6.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71348"],"products":["Windows Server 2025","Windows Server 2022","Windows Server 2019","Windows Server 2019 (Server Core installation)","Windows 10 Version 1809","Windows 10 Version 22H2","Windows Server 2012 (Server Core installation)","Windows 11 Version 23H2","Windows 10 Version 1607","Windows 11 Version 24H2","Windows 11 Version 25H2","Windows 10 Version 21H2","Windows Server 2016 (Server Core installation)","Windows Server 2016","Windows 11 version 26H1","Windows Server 2012 R2 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012","Windows Server 2025 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-71349","summary":"Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack.","cvss":6.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71349"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:14","euvd":{"id":"EUVD-2026-73658","description":"Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack.","published_time":"2026-09-08T17:17:01","cvss":6.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71349"],"products":["Windows Server 2016 (Server Core installation)","Windows Server 2019 (Server Core installation)","Windows Server 2022","Windows Server 2019","Windows Server 2012","Windows Server 2025","Windows 11 Version 23H2","Windows 10 Version 21H2","Windows 11 version 26H1","Windows 10 Version 1607","Windows Server 2016","Windows 11 Version 24H2","Windows 10 Version 22H2","Windows Server 2012 R2 (Server Core installation)","Windows Server 2025 (Server Core installation)","Windows 10 Version 1809","Windows Server 2012 R2","Windows Server 2012 (Server Core installation)","Windows 11 Version 25H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-71334","summary":"Heap-based buffer overflow in Windows NFS Portmapper allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71334"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:13","euvd":{"id":"EUVD-2026-73094","description":"Heap-based buffer overflow in Windows NFS Portmapper allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:12:27","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71334"],"products":["Windows 11 Version 24H2","Windows 10 Version 22H2","Windows 10 Version 1809","Windows Server 2012 R2","Windows Server 2012","Windows Server 2022","Windows Server 2025 (Server Core installation)","Windows Server 2012 R2 (Server Core installation)","Windows Server 2016","Windows 11 Version 23H2","Windows 11 Version 25H2","Windows Server 2012 (Server Core installation)","Windows Server 2019 (Server Core installation)","Windows 10 Version 1607","Windows 11 version 26H1","Windows Server 2019","Windows 10 Version 21H2","Windows Server 2016 (Server Core installation)","Windows Server 2025"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-71336","summary":"Integer overflow or wraparound in Windows Work Folder Service allows an authorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71336"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:13","euvd":{"id":"EUVD-2026-73089","description":"Integer overflow or wraparound in Windows Work Folder Service allows an authorized attacker to execute code over a network.","published_time":"2026-09-08T17:12:25","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71336"],"products":["Windows Server 2022","Windows 10 Version 1607","Windows 10 Version 1809","Windows Server 2012 R2","Windows Server 2025","Windows Server 2016","Windows Server 2016 (Server Core installation)","Windows Server 2019 (Server Core installation)","Windows Server 2012 R2 (Server Core installation)","Windows Server 2025 (Server Core installation)","Windows Server 2019"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-71337","summary":"Stack-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71337"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:13","euvd":{"id":"EUVD-2026-73092","description":"Stack-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:12:26","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71337"],"products":["Windows 11 Version 24H2","Windows 11 version 26H1","Windows Server 2022","Windows Server 2025 (Server Core installation)","Windows 10 Version 22H2","Windows 11 Version 23H2","Windows 10 Version 21H2","Windows 11 Version 25H2","Windows Server 2025"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-71338","summary":"Double free in Windows Failover Cluster allows an authorized attacker to elevate privileges locally.","cvss":6.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71338"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:13","euvd":{"id":"EUVD-2026-73095","description":"Double free in Windows Failover Cluster allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:12:28","cvss":6.4,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71338"],"products":["Windows 10 Version 1607","Windows 10 Version 1809","Windows Server 2025","Windows Server 2019 (Server Core installation)","Windows Server 2016 (Server Core installation)","Windows Server 2012 R2 (Server Core installation)","Windows Server 2012 (Server Core installation)","Windows Server 2022","Windows Server 2019","Windows Server 2012","Windows Server 2012 R2","Windows Server 2025 (Server Core installation)","Windows Server 2016"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-71339","summary":"Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.","cvss":6.7,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.7,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71339"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:13","euvd":{"id":"EUVD-2026-73097","description":"Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:12:29","cvss":6.7,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71339"],"products":["Windows 10 Version 1809","Windows 11 version 26H1","Windows Server 2016 (Server Core installation)","Windows 10 Version 21H2","Windows Server 2025 (Server Core installation)","Windows Server 2019","Windows Server 2019 (Server Core installation)","Windows 10 Version 1607","Windows Server 2012 (Server Core installation)","Windows 11 Version 23H2","Windows Server 2016","Windows Server 2022","Windows Server 2012","Windows Server 2012 R2","Windows Server 2025","Windows Server 2012 R2 (Server Core installation)","Windows 11 Version 24H2","Windows 10 Version 22H2","Windows 11 Version 25H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-71340","summary":"Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally.","cvss":7.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71340"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:13","euvd":{"id":"EUVD-2026-73096","description":"Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:12:28","cvss":7.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71340"],"products":["Windows Server 2016","Windows Server 2019 (Server Core installation)","Windows Server 2016 (Server Core installation)","Windows 11 version 26H1","Windows 11 Version 25H2","Windows 11 Version 24H2","Windows 10 Version 1809","Windows Server 2019","Windows 10 Version 21H2","Windows 11 Version 23H2","Windows 10 Version 1607","Windows 10 Version 22H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-71328","summary":"Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71328"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:12","euvd":{"id":"EUVD-2026-73781","description":"Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:18:10","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71328"],"products":["Microsoft Visual Studio 2026 version 18.9",".NET 9.0",".NET 10.0",".NET 8.0","Microsoft Visual Studio 2022 version 17.14",".NET 11.0"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-71329","summary":"Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack.","cvss":6.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71329"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:12","euvd":{"id":"EUVD-2026-73088","description":"Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack.","published_time":"2026-09-08T17:12:24","cvss":6.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71329"],"products":["Windows Server 2012 (Server Core installation)","Windows Server 2022","Windows 11 version 26H1","Windows 10 Version 1809","Windows Server 2025","Windows Server 2016","Windows Server 2025 (Server Core installation)","Windows Server 2016 (Server Core installation)","Windows 11 Version 24H2","Windows 11 Version 25H2","Windows Server 2019","Windows 10 Version 21H2","Windows 10 Version 22H2","Windows 10 Version 1607","Windows Server 2012","Windows Server 2012 R2 (Server Core installation)","Windows Server 2019 (Server Core installation)","Windows Server 2012 R2","Windows 11 Version 23H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-71330","summary":"Exposure of sensitive system information to an unauthorized control sphere in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to disclose information over a network.","cvss":7.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71330"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:12","euvd":{"id":"EUVD-2026-73090","description":"Exposure of sensitive system information to an unauthorized control sphere in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:12:25","cvss":7.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71330"],"products":["Windows Server 2016 (Server Core installation)","Windows Server 2016","Windows 11 version 26H1","Windows 11 Version 23H2","Windows Server 2025","Windows Server 2019","Windows Server 2025 (Server Core installation)","Windows 10 Version 22H2","Windows Server 2022","Windows Server 2012","Windows 11 Version 25H2","Windows Server 2012 (Server Core installation)","Windows 10 Version 1607","Windows 11 Version 24H2","Windows Server 2012 R2 (Server Core installation)","Windows 10 Version 21H2","Windows Server 2019 (Server Core installation)","Windows 10 Version 1809","Windows Server 2012 R2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-71332","summary":"Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.","cvss":7.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71332"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:12","euvd":{"id":"EUVD-2026-73093","description":"Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:12:27","cvss":7.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71332"],"products":["Windows 10 Version 21H2","Windows Server 2022","Windows 11 Version 25H2","Windows 10 Version 1607","Windows Server 2019 (Server Core installation)","Windows Server 2019","Windows 11 version 26H1","Windows Server 2016","Windows 11 Version 24H2","Windows 10 Version 1809","Windows Server 2016 (Server Core installation)","Windows Server 2025 (Server Core installation)","Windows Server 2025","Windows 11 Version 23H2","Windows 10 Version 22H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-71333","summary":"Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.","cvss":7.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71333"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:12","euvd":{"id":"EUVD-2026-73091","description":"Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:12:26","cvss":7.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71333"],"products":["Windows 11 Version 25H2","Windows 11 Version 23H2","Windows Server 2019","Windows Server 2025 (Server Core installation)","Windows Server 2019 (Server Core installation)","Windows 10 Version 1607","Windows Server 2022","Windows 10 Version 22H2","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2025","Windows 11 Version 24H2","Windows Server 2016","Windows Server 2012","Windows Server 2012 R2 (Server Core installation)","Windows Server 2016 (Server Core installation)","Windows 10 Version 1809","Windows 11 version 26H1","Windows 10 Version 21H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-70582","summary":"Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.","cvss":6.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70582"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:11","euvd":{"id":"EUVD-2026-73083","description":"Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:12:21","cvss":6.4,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70582"],"products":["Windows Server 2016","Windows 10 Version 1607","Windows 10 Version 1809","Windows Server 2022","Windows Server 2025 (Server Core installation)","Windows Server 2019","Windows 10 Version 22H2","Windows 11 Version 25H2","Windows Server 2012 R2 (Server Core installation)","Windows Server 2019 (Server Core installation)","Windows Server 2025","Windows 11 Version 23H2","Windows Server 2012","Windows Server 2012 R2","Windows Server 2016 (Server Core installation)","Windows Server 2012 (Server Core installation)","Windows 11 Version 24H2","Windows 11 version 26H1","Windows 10 Version 21H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-70583","summary":"Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70583"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:11","euvd":{"id":"EUVD-2026-73657","description":"Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:17:00","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70583"],"products":["Windows Server 2025","Windows 11 Version 24H2","Windows 11 Version 23H2","Windows 10 Version 1607","Windows Server 2025 (Server Core installation)","Windows Server 2022","Windows 10 Version 21H2","Windows Server 2016 (Server Core installation)","Windows Server 2019","Windows 10 Version 1809","Windows 11 version 26H1","Windows Server 2019 (Server Core installation)","Windows 10 Version 22H2","Windows 11 Version 25H2","Windows Server 2016"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-70584","summary":"Access of resource using incompatible type ('type confusion') in Windows Core Messaging allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70584"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:11","euvd":{"id":"EUVD-2026-73084","description":"Access of resource using incompatible type ('type confusion') in Windows Core Messaging allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:12:22","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70584"],"products":["Windows Server 2025","Windows 11 Version 24H2","Windows Server 2019 (Server Core installation)","Windows 10 Version 1607","Windows 10 Version 21H2","Windows Server 2025 (Server Core installation)","Windows 11 version 26H1","Windows 10 Version 22H2","Windows Server 2016 (Server Core installation)","Windows Server 2022","Windows Server 2019","Windows 11 Version 25H2","Windows 11 Version 23H2","Windows Server 2016","Windows 10 Version 1809"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-70585","summary":"Use after free in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to execute code locally.","cvss":7.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70585"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:11","euvd":{"id":"EUVD-2026-73085","description":"Use after free in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to execute code locally.","published_time":"2026-09-08T17:12:22","cvss":7.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70585"],"products":["Windows Server 2016","Windows Server 2016 (Server Core installation)","Windows Server 2022","Windows Server 2025 (Server Core installation)","Windows Server 2012 R2","Windows Server 2019 (Server Core installation)","Windows Server 2019","Windows Server 2025","Windows Server 2012 (Server Core installation)","Windows Server 2012","Windows Server 2012 R2 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-70586","summary":"Heap-based buffer overflow in Windows Paint allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70586"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:11","euvd":{"id":"EUVD-2026-73086","description":"Heap-based buffer overflow in Windows Paint allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:12:23","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70586"],"products":["Windows Server 2012 R2 (Server Core installation)","Windows 10 Version 1809","Windows Server 2025 (Server Core installation)","Windows 10 Version 22H2","Windows 11 Version 25H2","Windows Server 2019","Windows 10 Version 21H2","Windows 11 Version 23H2","Windows Server 2012 (Server Core installation)","Windows 11 Version 24H2","Windows Server 2012","Windows Server 2016","Windows Server 2016 (Server Core installation)","Windows 10 Version 1607","Windows Server 2022","Windows 11 version 26H1","Windows Server 2025","Windows Server 2012 R2","Windows Server 2019 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-70587","summary":"Improper null termination in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network.","cvss":7.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70587"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:11","euvd":{"id":"EUVD-2026-73087","description":"Improper null termination in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:12:24","cvss":7.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70587"],"products":["Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows 10 Version 21H2","Windows Server 2025 (Server Core installation)","Windows 10 Version 1809","Windows Server 2025","Windows 11 Version 24H2","Windows Server 2019 (Server Core installation)","Windows 10 Version 22H2","Windows 10 Version 1607","Windows Server 2019","Windows 11 version 26H1","Windows Server 2022","Windows 11 Version 25H2","Windows Server 2012 R2","Windows 11 Version 23H2","Windows Server 2012 R2 (Server Core installation)","Windows Server 2016 (Server Core installation)","Windows Server 2016"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-70573","summary":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","cvss":7.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70573"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:10","euvd":{"id":"EUVD-2026-73650","description":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:16:56","cvss":7.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70573"],"products":["Windows 10 Version 1809","Windows 10 Version 21H2","Windows Server 2016","Windows 10 Version 22H2","Windows 11 Version 24H2","Windows Server 2019","Windows 11 version 26H1","Windows 11 Version 25H2","Windows 10 Version 1607","Windows Server 2022","Windows 11 Version 23H2","Windows Server 2019 (Server Core installation)","Windows Server 2016 (Server Core installation)","Windows Server 2025","Windows Server 2025 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-70574","summary":"Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70574"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:10","euvd":{"id":"EUVD-2026-73646","description":"Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:16:54","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70574"],"products":["Windows 10 Version 21H2","Windows Server 2022","Windows Server 2012 (Server Core installation)","Windows Server 2012","Windows 11 Version 25H2","Windows Server 2016 (Server Core installation)","Windows Server 2025","Windows 11 Version 24H2","Windows 11 version 26H1","Windows Server 2019","Windows Server 2016","Windows Server 2025 (Server Core installation)","Windows 10 Version 1607","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)","Windows 11 Version 23H2","Windows 10 Version 22H2","Windows 10 Version 1809","Windows Server 2019 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-70575","summary":"Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network.","cvss":5.3,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.3,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70575"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:10","euvd":{"id":"EUVD-2026-73652","description":"Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network.","published_time":"2026-09-08T17:16:57","cvss":5.3,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70575"],"products":["Windows Server 2025","Windows 11 version 26H1","Windows Server 2025 (Server Core installation)","Windows 11 Version 24H2","Windows Server 2022","Windows 11 Version 25H2","Windows 11 Version 23H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-70577","summary":"Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.","cvss":7.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70577"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:10","euvd":{"id":"EUVD-2026-73654","description":"Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:16:58","cvss":7.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70577"],"products":["Windows Server 2022","Windows Server 2019","Windows 10 Version 22H2","Windows 11 Version 23H2","Windows Server 2025 (Server Core installation)","Windows 11 Version 25H2","Windows 10 Version 1809","Windows 10 Version 21H2","Windows Server 2019 (Server Core installation)","Windows 11 Version 24H2","Windows 11 version 26H1","Windows Server 2025"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-70578","summary":"Heap-based buffer overflow in Windows Credential Guard allows an authorized attacker to elevate privileges locally.","cvss":7.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70578"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:10","euvd":{"id":"EUVD-2026-73655","description":"Heap-based buffer overflow in Windows Credential Guard allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:16:59","cvss":7.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70578"],"products":["Windows 11 version 26H1","Windows 10 Version 22H2","Windows 11 Version 23H2","Windows 11 Version 24H2","Windows 10 Version 21H2","Windows 11 Version 25H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-70579","summary":"Out-of-bounds read in Windows Mobile Broadband allows an unauthorized attacker to disclose information over a network.","cvss":7.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70579"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:10","euvd":{"id":"EUVD-2026-73656","description":"Out-of-bounds read in Windows Mobile Broadband allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:17:00","cvss":7.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70579"],"products":["Windows 11 Version 23H2","Windows 10 Version 22H2","Windows 11 Version 25H2","Windows 11 version 26H1","Windows 10 Version 21H2","Windows 11 Version 24H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-70581","summary":"Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70581"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:10","euvd":{"id":"EUVD-2026-73653","description":"Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:16:58","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70581"],"products":["Windows Server 2016 (Server Core installation)","Windows Server 2016","Windows 10 Version 1607","Windows 11 Version 24H2","Windows Server 2022","Windows 11 Version 25H2","Windows Server 2025","Windows 10 Version 21H2","Windows Server 2019","Windows Server 2019 (Server Core installation)","Windows Server 2025 (Server Core installation)","Windows 10 Version 22H2","Windows 11 version 26H1","Windows 11 Version 23H2","Windows 10 Version 1809"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-70565","summary":"Use after free in Windows AF_UNIX Socket Provider allows an authorized attacker to elevate privileges locally.","cvss":7.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70565"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:09","euvd":{"id":"EUVD-2026-73645","description":"Use after free in Windows AF_UNIX Socket Provider allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:16:54","cvss":7.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70565"],"products":["Windows Server 2012 R2 (Server Core installation)","Windows 10 Version 21H2","Windows 11 Version 23H2","Windows Server 2012 R2","Windows Server 2016","Windows 11 Version 25H2","Windows 10 Version 22H2","Windows Server 2016 (Server Core installation)","Windows 10 Version 1607","Windows 10 Version 1809","Windows Server 2019","Windows Server 2025","Windows Server 2022","Windows 11 Version 24H2","Windows Server 2012","Windows Server 2019 (Server Core installation)","Windows 11 version 26H1","Windows Server 2012 (Server Core installation)","Windows Server 2025 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-70567","summary":"Double free in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally.","cvss":7.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70567"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:09","euvd":{"id":"EUVD-2026-73647","description":"Double free in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:16:55","cvss":7.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70567"],"products":["Windows 11 Version 25H2","Windows 11 version 26H1","Windows 11 Version 24H2","Windows Server 2025 (Server Core installation)","Windows Server 2025"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-70568","summary":"Heap-based buffer overflow in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.","cvss":7.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70568"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:09","euvd":{"id":"EUVD-2026-73648","description":"Heap-based buffer overflow in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:16:55","cvss":7.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70568"],"products":["Windows Server 2025","Windows Server 2012 R2","Windows 11 version 26H1","Windows 11 Version 24H2","Windows Server 2012 R2 (Server Core installation)","Windows Server 2016 (Server Core installation)","Windows Server 2022","Windows Server 2016","Windows Server 2012","Windows Server 2025 (Server Core installation)","Windows Server 2019 (Server Core installation)","Windows 10 Version 1607","Windows Server 2019","Windows Server 2012 (Server Core installation)","Windows 10 Version 22H2","Windows 10 Version 21H2","Windows 11 Version 25H2","Windows 10 Version 1809","Windows 11 Version 23H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-70569","summary":"Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70569"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:09","euvd":{"id":"EUVD-2026-73649","description":"Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:16:56","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70569"],"products":["Windows 11 Version 24H2","Windows Server 2025 (Server Core installation)","Windows 11 version 26H1","Windows 11 Version 23H2","Windows Server 2025","Windows Server 2022","Windows 11 Version 25H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-70570","summary":"Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine","cvss":7.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70570"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:09","euvd":{"id":"EUVD-2026-73728","description":"Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine","published_time":"2026-09-08T17:17:40","cvss":7.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70570"],"products":["Windows 10 Version 1809","Windows Server 2025","Windows 10 Version 22H2","Windows Server 2022","Windows Server 2019 (Server Core installation)","Windows 11 version 26H1","Windows 11 Version 25H2","Windows Server 2019","Windows 10 Version 1607","Windows Server 2012 (Server Core installation)","Windows Server 2016 (Server Core installation)","Windows 10 Version 21H2","Windows Server 2025 (Server Core installation)","Windows Server 2016","Windows Server 2012","Windows 11 Version 23H2","Windows Server 2012 R2 (Server Core installation)","Windows Server 2012 R2","Windows 11 Version 24H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-70572","summary":"Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70572"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:09","euvd":{"id":"EUVD-2026-73651","description":"Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:16:57","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70572"],"products":["Windows 11 Version 23H2","Windows Server 2019 (Server Core installation)","Windows 10 Version 22H2","Windows Server 2019","Windows Server 2022","Windows 10 Version 1607","Windows Server 2025 (Server Core installation)","Windows 11 Version 25H2","Windows Server 2016","Windows 10 Version 21H2","Windows Server 2016 (Server Core installation)","Windows 11 Version 24H2","Windows 11 version 26H1","Windows Server 2025","Windows 10 Version 1809"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-70351","summary":"Integer overflow or wraparound in Microsoft WebP Image Extension allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70351"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:08","euvd":{"id":"EUVD-2026-73078","description":"Integer overflow or wraparound in Microsoft WebP Image Extension allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:12:19","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70351"],"products":["WebP Image Extension"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-70562","summary":"Double free in Windows Audio Service allows an authorized attacker to elevate privileges locally.","cvss":7.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70562"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:08","euvd":{"id":"EUVD-2026-73079","description":"Double free in Windows Audio Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:12:20","cvss":7.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70562"],"products":["Windows Server 2022","Windows Server 2012 R2 (Server Core installation)","Windows Server 2016 (Server Core installation)","Windows 11 Version 25H2","Windows 10 Version 1809","Windows Server 2016","Windows 11 Version 24H2","Windows Server 2019","Windows Server 2012","Windows Server 2025","Windows Server 2012 (Server Core installation)","Windows 10 Version 22H2","Windows 10 Version 1607","Windows Server 2019 (Server Core installation)","Windows Server 2025 (Server Core installation)","Windows 11 version 26H1","Windows Server 2012 R2","Windows 11 Version 23H2","Windows 10 Version 21H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-70563","summary":"Improper link resolution before file access ('link following') in Windows Shell allows an unauthorized attacker to perform spoofing over a network.","cvss":8.1,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.1,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70563"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:08","euvd":{"id":"EUVD-2026-73081","description":"Improper link resolution before file access ('link following') in Windows Shell allows an unauthorized attacker to perform spoofing over a network.","published_time":"2026-09-08T17:12:20","cvss":8.1,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70563"],"products":["Windows Server 2016 (Server Core installation)","Windows Server 2012 R2 (Server Core installation)","Windows Server 2016","Windows 10 Version 22H2","Windows Server 2025","Windows 11 Version 25H2","Windows 10 Version 1607","Windows Server 2022","Windows 10 Version 21H2","Windows Server 2012 (Server Core installation)","Windows 11 Version 24H2","Windows Server 2012 R2","Windows 10 Version 1809","Windows Server 2025 (Server Core installation)","Windows Server 2012","Windows 11 version 26H1","Windows Server 2019 (Server Core installation)","Windows 11 Version 23H2","Windows Server 2019"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-70564","summary":"Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70564"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:08","euvd":{"id":"EUVD-2026-73082","description":"Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:12:21","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70564"],"products":["Windows 11 Version 25H2","Windows Server 2025","Windows Server 2019","Windows Server 2022","Windows 10 Version 21H2","Windows 10 Version 1607","Windows Server 2012 (Server Core installation)","Windows 10 Version 1809","Windows Server 2016 (Server Core installation)","Windows Server 2012 R2 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012","Windows Server 2025 (Server Core installation)","Windows Server 2016","Windows Server 2019 (Server Core installation)","Windows 11 Version 23H2","Windows 11 Version 24H2","Windows 11 version 26H1","Windows 10 Version 22H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-70334","summary":"Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70334"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:07","euvd":{"id":"EUVD-2026-73074","description":"Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.","published_time":"2026-09-08T17:12:17","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70334"],"products":["Visual Studio Code"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-70342","summary":"Use after free in Windows Ancillary Function Driver for WinSock allows an unauthorized attacker to elevate privileges over a network.","cvss":8.1,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.1,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70342"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:07","euvd":{"id":"EUVD-2026-73076","description":"Use after free in Windows Ancillary Function Driver for WinSock allows an unauthorized attacker to elevate privileges over a network.","published_time":"2026-09-08T17:12:18","cvss":8.1,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70342"],"products":["Windows Server 2025 (Server Core installation)","Windows Server 2025","Windows Server 2022","Windows Server 2016 (Server Core installation)","Windows 11 Version 24H2","Windows Server 2012 (Server Core installation)","Windows Server 2012","Windows Server 2012 R2","Windows 10 Version 22H2","Windows Server 2019 (Server Core installation)","Windows Server 2019","Windows 10 Version 21H2","Windows 10 Version 1809","Windows 11 Version 23H2","Windows 11 Version 25H2","Windows 10 Version 1607","Windows Server 2012 R2 (Server Core installation)","Windows 11 version 26H1","Windows Server 2016"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-70203","summary":"Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70203"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:04","euvd":{"id":"EUVD-2026-73726","description":"Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:17:39","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70203"],"products":["Windows Server 2012 R2 (Server Core installation)","Windows 10 Version 22H2","Windows Server 2022","Windows 11 Version 24H2","Windows Server 2016","Windows Server 2019","Windows 11 version 26H1","Windows Server 2025","Windows Server 2025 (Server Core installation)","Windows Server 2012 (Server Core installation)","Windows Server 2012","Windows 10 Version 1607","Windows Server 2016 (Server Core installation)","Windows 10 Version 1809","Windows 10 Version 21H2","Windows 11 Version 25H2","Windows Server 2019 (Server Core installation)","Windows Server 2012 R2","Windows 11 Version 23H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-70283","summary":"Incorrect authorization in Windows Win32K allows an authorized attacker to elevate privileges locally.","cvss":7.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70283"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:04","euvd":{"id":"EUVD-2026-73250","description":"Incorrect authorization in Windows Win32K allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:13:11","cvss":7.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70283"],"products":["Windows Server 2016","Windows Server 2012 R2 (Server Core installation)","Windows 11 version 26H1","Windows 10 Version 21H2","Windows Server 2019 (Server Core installation)","Windows 11 Version 24H2","Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2025","Windows Server 2025 (Server Core installation)","Windows Server 2022","Windows 11 Version 25H2","Windows 10 Version 1607","Windows 10 Version 22H2","Windows Server 2016 (Server Core installation)","Windows 10 Version 1809","Windows Server 2012 R2","Windows 11 Version 23H2","Windows Server 2019"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-70289","summary":"Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70289"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:04","euvd":{"id":"EUVD-2026-73075","description":"Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:12:17","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70289"],"products":["Windows Server 2019 (Server Core installation)","Windows 11 Version 23H2","Windows Server 2016","Windows 11 Version 25H2","Windows 10 Version 21H2","Windows Server 2025 (Server Core installation)","Windows Server 2022","Windows Server 2025","Windows Server 2012","Windows 10 Version 1809","Windows 10 Version 1607","Windows 11 Version 24H2","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)","Windows Server 2012 (Server Core installation)","Windows 10 Version 22H2","Windows 11 version 26H1","Windows Server 2016 (Server Core installation)","Windows Server 2019"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-70290","summary":"Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70290"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:04","euvd":{"id":"EUVD-2026-73358","description":"Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.","published_time":"2026-09-08T17:14:15","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70290"],"products":["Windows Server 2016","Windows 10 Version 1809","Windows Server 2025","Windows 10 Version 21H2","Windows 11 version 26H1","Windows Server 2016 (Server Core installation)","Windows Server 2019 (Server Core installation)","Windows 10 Version 1607","Windows Server 2012 R2 (Server Core installation)","Windows 11 Version 23H2","Windows Server 2025 (Server Core installation)","Windows Server 2022","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012","Windows 11 Version 24H2","Windows 10 Version 22H2","Windows Server 2019","Windows 11 Version 25H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-70296","summary":"Out-of-bounds write in Windows Imaging Component allows an unauthorized attacker to execute code over a network.","cvss":9.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":9.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70296"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:04","euvd":{"id":"EUVD-2026-73727","description":"Out-of-bounds write in Windows Imaging Component allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:17:39","cvss":9.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70296"],"products":["Windows 11 version 26H1","Windows 11 Version 23H2","Windows Server 2016","Windows 10 Version 1809","Windows Server 2012","Windows Server 2012 R2","Windows Server 2025","Windows 10 Version 1607","Windows 10 Version 21H2","Windows 11 Version 25H2","Windows 10 Version 22H2","Windows Server 2012 (Server Core installation)","Windows 11 Version 24H2","Windows Server 2019 (Server Core installation)","Windows Server 2012 R2 (Server Core installation)","Windows Server 2016 (Server Core installation)","Windows Server 2025 (Server Core installation)","Windows Server 2022","Windows Server 2019"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69989","summary":"Use after free in DNS Server allows an unauthorized attacker to execute code over a network.","cvss":8.1,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.1,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69989"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:03","euvd":{"id":"EUVD-2026-73341","description":"Use after free in DNS Server allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:14:02","cvss":8.1,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69989"],"products":["Windows Server 2012 R2 (Server Core installation)","Windows Server 2025","Windows 10 Version 1809","Windows Server 2016","Windows Server 2019","Windows 10 Version 1607","Windows Server 2022","Windows Server 2012","Windows Server 2019 (Server Core installation)","Windows Server 2012 R2","Windows Server 2025 (Server Core installation)","Windows Server 2012 (Server Core installation)","Windows Server 2016 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-70019","summary":"Windows hard link in Windows Compressed Folder allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70019"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:03","euvd":{"id":"EUVD-2026-73345","description":"Windows hard link in Windows Compressed Folder allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:14:05","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70019"],"products":["Windows Server 2025","Windows 11 Version 23H2","Windows Server 2025 (Server Core installation)","Windows 11 Version 25H2","Windows 11 Version 24H2","Windows 11 version 26H1"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-70065","summary":"Missing release of memory after effective lifetime in Windows DHCP Server allows an unauthorized attacker to deny service over a network.","cvss":7.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70065"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:03","euvd":{"id":"EUVD-2026-73338","description":"Missing release of memory after effective lifetime in Windows DHCP Server allows an unauthorized attacker to deny service over a network.","published_time":"2026-09-08T17:14:01","cvss":7.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70065"],"products":["Windows Server 2012","Windows Server 2016 (Server Core installation)","Windows Server 2025","Windows Server 2019 (Server Core installation)","Windows 10 Version 1607","Windows Server 2012 R2","Windows Server 2019","Windows 10 Version 1809","Windows Server 2016","Windows Server 2012 R2 (Server Core installation)","Windows Server 2025 (Server Core installation)","Windows Server 2022","Windows Server 2012 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-70091","summary":"Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an unauthorized attacker to deny service over a network.","cvss":5.9,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.9,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70091"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:03","euvd":{"id":"EUVD-2026-73171","description":"Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an unauthorized attacker to deny service over a network.","published_time":"2026-09-08T17:10:32","cvss":5.9,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70091"],"products":["Windows Server 2019 (Server Core installation)","Windows Server 2012 R2","Windows 10 Version 1607","Windows Server 2025","Windows Server 2025 (Server Core installation)","Windows Server 2022","Windows Server 2012","Windows Server 2019","Windows Server 2016","Windows Server 2012 R2 (Server Core installation)","Windows Server 2016 (Server Core installation)","Windows 10 Version 1809","Windows Server 2012 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-70124","summary":"Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network.","cvss":5.9,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.9,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70124"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:03","euvd":{"id":"EUVD-2026-73249","description":"Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:13:11","cvss":5.9,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70124"],"products":["Windows Server 2012","Windows Server 2019 (Server Core installation)","Windows Server 2025 (Server Core installation)","Windows Server 2012 R2 (Server Core installation)","Windows Server 2025","Windows Server 2019","Windows Server 2016 (Server Core installation)","Windows Server 2012 (Server Core installation)","Windows 10 Version 1809","Windows Server 2012 R2","Windows Server 2022","Windows Server 2016","Windows 10 Version 1607"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-70145","summary":"Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70145"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:03","euvd":{"id":"EUVD-2026-73902","description":"Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.","published_time":"2026-09-08T17:19:20","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70145"],"products":["Windows 10 Version 1607","Windows Server 2019 (Server Core installation)","Windows Server 2012 (Server Core installation)","Windows Server 2016 (Server Core installation)","Windows 11 Version 24H2","Windows Server 2025","Windows 10 Version 21H2","Windows Server 2022","Windows 11 Version 23H2","Windows 11 version 26H1","Windows Server 2012","Windows Server 2019","Windows 11 Version 25H2","Windows Server 2016","Windows Server 2025 (Server Core installation)","Windows 10 Version 1809","Windows Server 2012 R2 (Server Core installation)","Windows 10 Version 22H2","Windows Server 2012 R2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69910","summary":"Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code over a network.","cvss":9.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":9.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69910"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:02","euvd":{"id":"EUVD-2026-73690","description":"Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:17:18","cvss":9.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69910"],"products":["Windows Server 2016 (Server Core installation)","Windows Server 2019 (Server Core installation)","Windows Server 2019","Windows Server 2025","Windows 11 Version 23H2","Windows 11 Version 24H2","Windows 10 Version 1607","Windows Server 2016","Windows 10 Version 21H2","Windows Server 2025 (Server Core installation)","Windows 11 Version 25H2","Windows 10 Version 1809","Windows 10 Version 22H2","Windows 11 version 26H1","Windows Server 2022"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69911","summary":"Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.","cvss":7.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69911"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:02","euvd":{"id":"EUVD-2026-73621","description":"Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:16:40","cvss":7.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69911"],"products":["Windows 10 Version 21H2","Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2019","Windows Server 2016","Windows Server 2025","Windows Server 2022","Windows 10 Version 1607","Windows Server 2019 (Server Core installation)","Windows Server 2016 (Server Core installation)","Windows 11 version 26H1","Windows Server 2012 R2","Windows 11 Version 25H2","Windows 10 Version 22H2","Windows Server 2025 (Server Core installation)","Windows 10 Version 1809","Windows 11 Version 24H2","Windows 11 Version 23H2","Windows Server 2012 R2 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69921","summary":"Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69921"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:02","euvd":{"id":"EUVD-2026-73605","description":"Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:16:31","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69921"],"products":["Windows 11 Version 24H2","Windows 11 Version 25H2","Windows 11 version 26H1","Windows Server 2022","Windows 11 Version 23H2","Windows Server 2025","Windows Server 2025 (Server Core installation)","Windows 10 Version 21H2","Windows 10 Version 22H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69929","summary":"Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network.","cvss":5.9,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.9,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69929"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:02","euvd":{"id":"EUVD-2026-73247","description":"Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:13:10","cvss":5.9,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69929"],"products":["Windows Server 2019","Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2019 (Server Core installation)","Windows 10 Version 1809","Windows 10 Version 1607","Windows Server 2025","Windows Server 2016","Windows Server 2012 R2","Windows Server 2016 (Server Core installation)","Windows Server 2022","Windows Server 2012 R2 (Server Core installation)","Windows Server 2025 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69930","summary":"Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network.","cvss":5.9,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.9,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69930"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:02","euvd":{"id":"EUVD-2026-73248","description":"Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:13:10","cvss":5.9,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69930"],"products":["Windows Server 2012 R2","Windows Server 2025","Windows Server 2012","Windows Server 2016 (Server Core installation)","Windows Server 2022","Windows 10 Version 1809","Windows Server 2012 R2 (Server Core installation)","Windows 10 Version 1607","Windows Server 2019 (Server Core installation)","Windows Server 2019","Windows Server 2016","Windows Server 2025 (Server Core installation)","Windows Server 2012 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69907","summary":"Improper handling of insufficient permissions or privileges in Windows Enterprise App Management allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69907"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:01","euvd":{"id":"EUVD-2026-73616","description":"Improper handling of insufficient permissions or privileges in Windows Enterprise App Management allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:16:38","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69907"],"products":["Windows 10 Version 22H2","Windows 10 Version 21H2","Windows Server 2025","Windows Server 2016","Windows 11 version 26H1","Windows 10 Version 1809","Windows 11 Version 23H2","Windows Server 2025 (Server Core installation)","Windows Server 2022","Windows 11 Version 25H2","Windows 11 Version 24H2","Windows Server 2019 (Server Core installation)","Windows Server 2016 (Server Core installation)","Windows Server 2019","Windows 10 Version 1607"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69891","summary":"Use after free in Windows Media allows an authorized attacker to elevate privileges locally.","cvss":7.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69891"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:00","euvd":{"id":"EUVD-2026-73619","description":"Use after free in Windows Media allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:16:39","cvss":7.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69891"],"products":["Windows Server 2022","Windows Server 2016 (Server Core installation)","Windows Server 2016","Windows 10 Version 21H2","Windows 10 Version 22H2","Windows 11 version 26H1","Windows 11 Version 25H2","Windows Server 2025","Windows 11 Version 24H2","Windows 10 Version 1809","Windows Server 2019 (Server Core installation)","Windows 11 Version 23H2","Windows Server 2025 (Server Core installation)","Windows Server 2019","Windows 10 Version 1607"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69895","summary":"Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally.","cvss":4.7,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":4.7,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69895"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:00","euvd":{"id":"EUVD-2026-73607","description":"Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally.","published_time":"2026-09-08T17:16:32","cvss":4.7,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69895"],"products":["Windows 11 version 26H1","Windows Server 2019 (Server Core installation)","Windows 10 Version 21H2","Windows Server 2012","Windows Server 2016","Windows 10 Version 1607","Windows Server 2019","Windows 10 Version 22H2","Windows Server 2016 (Server Core installation)","Windows Server 2025 (Server Core installation)","Windows Server 2012 R2 (Server Core installation)","Windows 11 Version 23H2","Windows 10 Version 1809","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2025","Windows 11 Version 25H2","Windows 11 Version 24H2","Windows Server 2022"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69896","summary":"Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.","cvss":7.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69896"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:00","euvd":{"id":"EUVD-2026-73049","description":"Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:12:02","cvss":7.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69896"],"products":["Windows 11 Version 24H2","Windows 11 Version 25H2","Windows Server 2025","Windows 11 version 26H1","Windows Server 2025 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69900","summary":"Untrusted pointer dereference in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69900"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:00","euvd":{"id":"EUVD-2026-73618","description":"Untrusted pointer dereference in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:16:39","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69900"],"products":["Windows 10 Version 21H2","Windows 11 Version 24H2","Windows 10 Version 22H2","Windows 11 Version 25H2","Windows Server 2025","Windows 11 version 26H1","Windows Server 2025 (Server Core installation)","Windows 11 Version 23H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69904","summary":"Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.","cvss":3.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":3.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69904"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:00","euvd":{"id":"EUVD-2026-73724","description":"Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.","published_time":"2026-09-08T17:17:37","cvss":3.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69904"],"products":["Microsoft SharePoint Server Subscription Edition"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69906","summary":"Heap-based buffer overflow in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.","cvss":8.2,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.2,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69906"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:20:00","euvd":{"id":"EUVD-2026-73725","description":"Heap-based buffer overflow in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:17:38","cvss":8.2,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69906"],"products":["Windows Server 2016","Windows 10 Version 1809","Windows Server 2019 (Server Core installation)","Windows 11 Version 25H2","Windows Server 2022","Windows 11 Version 24H2","Windows Server 2025 (Server Core installation)","Windows 10 Version 22H2","Windows 11 version 26H1","Windows 10 Version 21H2","Windows Server 2019","Windows 11 Version 23H2","Windows Server 2025","Windows Server 2016 (Server Core installation)","Windows 10 Version 1607"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69878","summary":"Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code locally.","cvss":6.4,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.4,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69878"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:59","euvd":{"id":"EUVD-2026-73614","description":"Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code locally.","published_time":"2026-09-08T17:16:36","cvss":6.4,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69878"],"products":["Windows Server 2025","Windows 10 Version 1809","Windows Server 2012 R2 (Server Core installation)","Windows Server 2012","Windows Server 2025 (Server Core installation)","Windows Server 2022","Windows Server 2019","Windows 10 Version 1607","Windows Server 2016 (Server Core installation)","Windows Server 2019 (Server Core installation)","Windows Server 2016","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69881","summary":"Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network.","cvss":7.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69881"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:59","euvd":{"id":"EUVD-2026-73563","description":"Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network.","published_time":"2026-09-08T17:16:09","cvss":7.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69881"],"products":["Windows 11 Version 23H2","Windows Server 2019","Windows 10 Version 1809","Windows 11 Version 25H2","Windows Server 2019 (Server Core installation)","Windows 11 Version 24H2","Windows Server 2025 (Server Core installation)","Windows Server 2022","Windows 10 Version 22H2","Windows 11 version 26H1","Windows 10 Version 21H2","Windows Server 2025"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69889","summary":"Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.","cvss":7.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69889"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:59","euvd":{"id":"EUVD-2026-73046","description":"Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:12:01","cvss":7.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69889"],"products":["Windows Server 2019 (Server Core installation)","Windows 10 Version 22H2","Windows 10 Version 1809","Windows Server 2025 (Server Core installation)","Windows Server 2019","Windows Server 2025","Windows 11 Version 25H2","Windows 11 Version 24H2","Windows 10 Version 21H2","Windows 11 Version 23H2","Windows Server 2022","Windows 11 version 26H1"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69890","summary":"Use after free in Windows Virtual Trusted Platform Module allows an authorized attacker to elevate privileges locally.","cvss":7.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69890"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:59","euvd":{"id":"EUVD-2026-73073","description":"Use after free in Windows Virtual Trusted Platform Module allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:12:15","cvss":7.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69890"],"products":["Windows 11 Version 24H2","Windows 10 Version 21H2","Windows Server 2019 (Server Core installation)","Windows Server 2025","Windows 11 Version 23H2","Windows Server 2022","Windows 10 Version 22H2","Windows 10 Version 1809","Windows Server 2025 (Server Core installation)","Windows 11 Version 25H2","Windows 11 version 26H1","Windows Server 2019"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69874","summary":"Untrusted pointer dereference in Windows ALPC allows an authorized attacker to elevate privileges locally.","cvss":8.2,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.2,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69874"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:58","euvd":{"id":"EUVD-2026-73637","description":"Untrusted pointer dereference in Windows ALPC allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:16:49","cvss":8.2,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69874"],"products":["Windows 11 Version 25H2","Windows Server 2025","Windows Server 2022","Windows 11 version 26H1","Windows 10 Version 21H2","Windows Server 2019 (Server Core installation)","Windows Server 2025 (Server Core installation)","Windows 10 Version 1809","Windows Server 2019","Windows 10 Version 22H2","Windows 11 Version 23H2","Windows 11 Version 24H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69875","summary":"Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.","cvss":8.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69875"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:58","euvd":{"id":"EUVD-2026-73044","description":"Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.","published_time":"2026-09-08T17:12:00","cvss":8.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69875"],"products":["Windows Server 2019 (Server Core installation)","Windows Server 2019","Windows 10 Version 21H2","Windows 11 version 26H1","Windows Server 2025","Windows 11 Version 25H2","Windows 10 Version 22H2","Windows Server 2025 (Server Core installation)","Windows 11 Version 24H2","Windows 11 Version 23H2","Windows 10 Version 1809","Windows Server 2022"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69876","summary":"Use after free in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network.","cvss":8.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69876"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:58","euvd":{"id":"EUVD-2026-73627","description":"Use after free in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network.","published_time":"2026-09-08T17:16:44","cvss":8.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69876"],"products":["Windows Server 2025","Windows 10 Version 1607","Windows Server 2019 (Server Core installation)","Windows Server 2012","Windows Server 2025 (Server Core installation)","Windows Server 2012 R2 (Server Core installation)","Windows Server 2012 (Server Core installation)","Windows Server 2019","Windows Server 2012 R2","Windows Server 2016 (Server Core installation)","Windows 10 Version 1809","Windows Server 2022","Windows Server 2016"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69858","summary":"Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.","cvss":8.1,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.1,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69858"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:57","euvd":{"id":"EUVD-2026-73636","description":"Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:16:49","cvss":8.1,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69858"],"products":["Windows Server 2025","Windows Server 2025 (Server Core installation)","Windows Server 2022"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69859","summary":"Time-of-check time-of-use (toctou) race condition in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.","cvss":7.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69859"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:57","euvd":{"id":"EUVD-2026-73038","description":"Time-of-check time-of-use (toctou) race condition in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:11:57","cvss":7.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69859"],"products":["Windows Server 2012 (Server Core installation)","Windows 11 Version 24H2","Windows 10 Version 22H2","Windows 11 Version 25H2","Windows Server 2012 R2","Windows Server 2016","Windows 10 Version 1809","Windows Server 2012","Windows Server 2025 (Server Core installation)","Windows Server 2025","Windows 10 Version 1607","Windows Server 2012 R2 (Server Core installation)","Windows Server 2019 (Server Core installation)","Windows Server 2019","Windows 11 version 26H1","Windows Server 2022","Windows 11 Version 23H2","Windows 10 Version 21H2","Windows Server 2016 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69860","summary":"Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69860"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:57","euvd":{"id":"EUVD-2026-73068","description":"Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:12:12","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69860"],"products":["Windows Server 2012 R2 (Server Core installation)","Windows 10 Version 22H2","Windows Server 2022","Windows Server 2025 (Server Core installation)","Windows 11 version 26H1","Windows Server 2012 R2","Windows 10 Version 1607","Windows Server 2012 (Server Core installation)","Windows Server 2025","Windows 11 Version 23H2","Windows Server 2019 (Server Core installation)","Windows Server 2012","Windows Server 2016 (Server Core installation)","Windows 11 Version 25H2","Windows Server 2019","Windows 10 Version 21H2","Windows 11 Version 24H2","Windows 10 Version 1809","Windows Server 2016"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69862","summary":"Out-of-bounds read in Windows Wireless Wide Area Network Service allows an authorized attacker to disclose information locally.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69862"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:57","euvd":{"id":"EUVD-2026-73055","description":"Out-of-bounds read in Windows Wireless Wide Area Network Service allows an authorized attacker to disclose information locally.","published_time":"2026-09-08T17:12:05","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69862"],"products":["Windows 11 Version 24H2","Windows 10 Version 21H2","Windows 10 Version 1809","Windows Server 2016 (Server Core installation)","Windows Server 2019","Windows Server 2019 (Server Core installation)","Windows 10 Version 22H2","Windows 11 Version 25H2","Windows 10 Version 1607","Windows Server 2016","Windows 11 Version 23H2","Windows 11 version 26H1"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69864","summary":"Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69864"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:57","euvd":{"id":"EUVD-2026-73639","description":"Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:16:51","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69864"],"products":["Windows 11 Version 24H2","Windows 11 Version 25H2","Windows 11 Version 23H2","Windows 10 Version 22H2","Windows 11 version 26H1","Windows 10 Version 21H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69866","summary":"Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.","cvss":7.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69866"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:57","euvd":{"id":"EUVD-2026-73587","description":"Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:16:22","cvss":7.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69866"],"products":["Windows 11 Version 24H2","Windows 10 Version 21H2","Windows Server 2025 (Server Core installation)","Windows Server 2022","Windows 11 Version 25H2","Windows 10 Version 22H2","Windows 10 Version 1809","Windows 11 Version 23H2","Windows 11 version 26H1","Windows Server 2019 (Server Core installation)","Windows Server 2019","Windows Server 2025"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69845","summary":"Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.","cvss":9.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":9.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69845"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:56","euvd":{"id":"EUVD-2026-73628","description":"Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:16:44","cvss":9.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69845"],"products":["Windows Server 2019 (Server Core installation)","Windows 10 Version 1607","Windows Server 2012 R2 (Server Core installation)","Windows Server 2022","Windows Server 2025 (Server Core installation)","Windows Server 2012 (Server Core installation)","Windows Server 2016 (Server Core installation)","Windows Server 2025","Windows 10 Version 1809","Windows Server 2012","Windows Server 2019","Windows Server 2016","Windows Server 2012 R2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69846","summary":"Integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.","cvss":8.2,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.2,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69846"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:56","euvd":{"id":"EUVD-2026-73246","description":"Integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:13:09","cvss":8.2,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69846"],"products":["Windows 11 Version 24H2","Windows 10 Version 21H2","Windows Server 2022","Windows Server 2016","Windows 10 Version 1607","Windows 11 version 26H1","Windows 10 Version 22H2","Windows Server 2016 (Server Core installation)","Windows Server 2025 (Server Core installation)","Windows 11 Version 25H2","Windows 10 Version 1809","Windows 11 Version 23H2","Windows Server 2019 (Server Core installation)","Windows Server 2025","Windows Server 2019"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69847","summary":"Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network.","cvss":8.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69847"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:56","euvd":{"id":"EUVD-2026-73620","description":"Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network.","published_time":"2026-09-08T17:16:40","cvss":8.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69847"],"products":["Windows Server 2012 (Server Core installation)","Windows 11 Version 24H2","Windows 10 Version 1607","Windows Server 2012","Windows Server 2012 R2 (Server Core installation)","Windows 10 Version 1809","Windows Server 2019","Windows Server 2016","Windows 11 version 26H1","Windows Server 2016 (Server Core installation)","Windows Server 2025 (Server Core installation)","Windows Server 2022","Windows 10 Version 21H2","Windows Server 2012 R2","Windows 11 Version 25H2","Windows Server 2019 (Server Core installation)","Windows 10 Version 22H2","Windows 11 Version 23H2","Windows Server 2025"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69852","summary":"Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine","cvss":7.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69852"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:56","euvd":{"id":"EUVD-2026-73631","description":"Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine","published_time":"2026-09-08T17:16:46","cvss":7.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69852"],"products":["Windows 10 Version 1809","Windows Server 2019 (Server Core installation)","Windows 10 Version 22H2","Windows 11 version 26H1","Windows Server 2019","Windows Server 2016 (Server Core installation)","Windows 11 Version 23H2","Windows Server 2025","Windows Server 2022","Windows 11 Version 25H2","Windows 10 Version 1607","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2","Windows Server 2025 (Server Core installation)","Windows 10 Version 21H2","Windows 11 Version 24H2","Windows Server 2012 R2 (Server Core installation)","Windows Server 2016","Windows Server 2012"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69853","summary":"Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally.","cvss":4.7,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":4.7,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69853"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:56","euvd":{"id":"EUVD-2026-73611","description":"Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally.","published_time":"2026-09-08T17:16:35","cvss":4.7,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69853"],"products":["Windows Server 2016 (Server Core installation)","Windows 10 Version 1607","Windows 11 Version 25H2","Windows Server 2019 (Server Core installation)","Windows 11 version 26H1","Windows Server 2012 R2 (Server Core installation)","Windows 11 Version 24H2","Windows Server 2025 (Server Core installation)","Windows Server 2019","Windows Server 2022","Windows Server 2012 (Server Core installation)","Windows Server 2025","Windows 10 Version 22H2","Windows 11 Version 23H2","Windows Server 2012 R2","Windows Server 2016","Windows 10 Version 21H2","Windows Server 2012","Windows 10 Version 1809"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69854","summary":"Improper authentication in Spring Cloud Azure allows an unauthorized attacker to elevate privileges over a network.","cvss":9.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":9.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69854"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:56","euvd":{"id":"EUVD-2026-73791","description":"Improper authentication in Spring Cloud Azure allows an unauthorized attacker to elevate privileges over a network.","published_time":"2026-09-08T17:18:18","cvss":9.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69854"],"products":["Spring Cloud Azure"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69834","summary":"Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally.","cvss":7.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69834"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:55","euvd":{"id":"EUVD-2026-73580","description":"Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:16:18","cvss":7.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69834"],"products":["Windows Server 2016 (Server Core installation)","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)","Windows Server 2025 (Server Core installation)","Windows 10 Version 21H2","Windows Server 2012 (Server Core installation)","Windows 11 version 26H1","Windows 11 Version 24H2","Windows 11 Version 25H2","Windows Server 2012","Windows Server 2019 (Server Core installation)","Windows 11 Version 23H2","Windows Server 2022","Windows Server 2019","Windows 10 Version 22H2","Windows Server 2016","Windows Server 2025","Windows 10 Version 1607","Windows 10 Version 1809"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69838","summary":"Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.","cvss":7.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69838"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:55","euvd":{"id":"EUVD-2026-73058","description":"Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:12:07","cvss":7.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69838"],"products":["Windows Server 2019 (Server Core installation)","Windows 10 Version 21H2","Windows 11 Version 23H2","Windows Server 2022","Windows Server 2012 R2","Windows Server 2012 R2 (Server Core installation)","Windows Server 2016 (Server Core installation)","Windows Server 2025","Windows 11 Version 24H2","Windows Server 2019","Windows 11 Version 25H2","Windows 10 Version 22H2","Windows 10 Version 1607","Windows 11 version 26H1","Windows 10 Version 1809","Windows Server 2016","Windows Server 2025 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69839","summary":"Uncaught exception in Windows iSCSI Target Service allows an authorized attacker to deny service over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69839"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:55","euvd":{"id":"EUVD-2026-73060","description":"Uncaught exception in Windows iSCSI Target Service allows an authorized attacker to deny service over a network.","published_time":"2026-09-08T17:12:08","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69839"],"products":["Windows Server 2012 (Server Core installation)","Windows Server 2025","Windows Server 2012 R2 (Server Core installation)","Windows Server 2016 (Server Core installation)","Windows Server 2022","Windows Server 2012","Windows Server 2016","Windows Server 2019","Windows Server 2019 (Server Core installation)","Windows Server 2025 (Server Core installation)","Windows 10 Version 1809","Windows 10 Version 1607","Windows Server 2012 R2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69841","summary":"Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69841"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:55","euvd":{"id":"EUVD-2026-73590","description":"Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:16:24","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69841"],"products":["Windows 10 Version 1809","Windows 11 Version 24H2","Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows 11 Version 23H2","Windows Server 2022","Windows 10 Version 1607","Windows Server 2019","Windows 11 Version 25H2","Windows Server 2025 (Server Core installation)","Windows 11 version 26H1","Windows Server 2025","Windows Server 2016","Windows Server 2012 R2 (Server Core installation)","Windows Server 2016 (Server Core installation)","Windows 10 Version 21H2","Windows Server 2019 (Server Core installation)","Windows Server 2012 R2","Windows 10 Version 22H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69844","summary":"Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69844"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:55","euvd":{"id":"EUVD-2026-73585","description":"Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:16:21","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69844"],"products":["Windows Server 2012","Windows 10 Version 21H2","Windows Server 2019","Windows Server 2016","Windows 11 Version 23H2","Windows Server 2025","Windows Server 2019 (Server Core installation)","Windows 11 Version 25H2","Windows 10 Version 1607","Windows Server 2022","Windows 10 Version 1809","Windows 10 Version 22H2","Windows Server 2012 R2","Windows Server 2025 (Server Core installation)","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2 (Server Core installation)","Windows 11 Version 24H2","Windows 11 version 26H1","Windows Server 2016 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69822","summary":"Numeric truncation error in Windows Kerberos allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69822"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:54","euvd":{"id":"EUVD-2026-73065","description":"Numeric truncation error in Windows Kerberos allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:12:11","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69822"],"products":["Windows 11 Version 24H2","Windows 10 Version 21H2","Windows Server 2022","Windows 11 version 26H1","Windows 11 Version 25H2","Windows Server 2019","Windows 10 Version 22H2","Windows 11 Version 23H2","Windows Server 2025","Windows Server 2019 (Server Core installation)","Windows 10 Version 1809"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69824","summary":"Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an unauthorized attacker to execute code over a network.","cvss":9.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":9.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69824"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:54","euvd":{"id":"EUVD-2026-73622","description":"Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:16:41","cvss":9.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69824"],"products":["Windows Server 2019","Windows Server 2025 (Server Core installation)","Windows Server 2012","Windows 10 Version 1809","Windows 11 version 26H1","Windows 11 Version 23H2","Windows Server 2019 (Server Core installation)","Windows Server 2025","Windows Server 2012 R2","Windows 11 Version 25H2","Windows 10 Version 22H2","Windows Server 2012 R2 (Server Core installation)","Windows 10 Version 21H2","Windows Server 2016 (Server Core installation)","Windows 10 Version 1607","Windows Server 2012 (Server Core installation)","Windows 11 Version 24H2","Windows Server 2022","Windows Server 2016"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69826","summary":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network.","cvss":8.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69826"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:54","euvd":{"id":"EUVD-2026-73593","description":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network.","published_time":"2026-09-08T17:16:25","cvss":8.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69826"],"products":["Windows Server 2022","Windows 10 Version 1809","Windows Server 2019","Windows Server 2019 (Server Core installation)","Windows 11 Version 23H2","Windows 10 Version 22H2","Windows 10 Version 1607","Windows Server 2016 (Server Core installation)","Windows 11 Version 25H2","Windows Server 2025","Windows 11 Version 24H2","Windows Server 2025 (Server Core installation)","Windows 11 version 26H1","Windows 10 Version 21H2","Windows Server 2016"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69827","summary":"Concurrent execution using shared resource with improper synchronization ('race condition') in DNS Server allows an unauthorized attacker to execute code over a network.","cvss":8.1,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.1,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69827"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:54","euvd":{"id":"EUVD-2026-73342","description":"Concurrent execution using shared resource with improper synchronization ('race condition') in DNS Server allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:14:03","cvss":8.1,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69827"],"products":["Windows Server 2012 R2 (Server Core installation)","Windows 10 Version 1607","Windows Server 2025 (Server Core installation)","Windows Server 2019","Windows Server 2012 R2","Windows Server 2016 (Server Core installation)","Windows Server 2022","Windows 10 Version 1809","Windows Server 2012","Windows Server 2012 (Server Core installation)","Windows Server 2019 (Server Core installation)","Windows Server 2025","Windows Server 2016"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69829","summary":"Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.","cvss":9.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":9.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69829"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:54","euvd":{"id":"EUVD-2026-73629","description":"Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:16:45","cvss":9.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69829"],"products":["Windows 11 Version 25H2","Windows Server 2016","Windows Server 2012 (Server Core installation)","Windows Server 2022","Windows Server 2012 R2","Windows Server 2025 (Server Core installation)","Windows Server 2012 R2 (Server Core installation)","Windows 10 Version 1809","Windows Server 2012","Windows 11 version 26H1","Windows 10 Version 1607","Windows 10 Version 21H2","Windows Server 2019 (Server Core installation)","Windows 11 Version 23H2","Windows Server 2025","Windows Server 2016 (Server Core installation)","Windows Server 2019","Windows 11 Version 24H2","Windows 10 Version 22H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69832","summary":"Exposure of sensitive system information to an unauthorized control sphere in Windows Win32K allows an authorized attacker to disclose information locally.","cvss":5.6,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.6,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69832"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:54","euvd":{"id":"EUVD-2026-73056","description":"Exposure of sensitive system information to an unauthorized control sphere in Windows Win32K allows an authorized attacker to disclose information locally.","published_time":"2026-09-08T17:12:06","cvss":5.6,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69832"],"products":["Windows 11 Version 23H2","Windows Server 2016","Windows 10 Version 22H2","Windows Server 2022","Windows 11 Version 24H2","Windows Server 2012 (Server Core installation)","Windows Server 2019","Windows Server 2019 (Server Core installation)","Windows Server 2025 (Server Core installation)","Windows 10 Version 1809","Windows 10 Version 21H2","Windows Server 2016 (Server Core installation)","Windows 10 Version 1607","Windows 11 version 26H1","Windows Server 2012 R2 (Server Core installation)","Windows Server 2025","Windows Server 2012 R2","Windows Server 2012","Windows 11 Version 25H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69816","summary":"Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally.","cvss":7.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69816"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:53","euvd":{"id":"EUVD-2026-73582","description":"Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:16:19","cvss":7.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69816"],"products":["Windows Server 2016 (Server Core installation)","Windows Server 2022","Windows Server 2025 (Server Core installation)","Windows Server 2019 (Server Core installation)","Windows 10 Version 22H2","Windows Server 2016","Windows 11 version 26H1","Windows 11 Version 24H2","Windows 11 Version 23H2","Windows 10 Version 1607","Windows Server 2025","Windows Server 2019","Windows 11 Version 25H2","Windows 10 Version 21H2","Windows 10 Version 1809"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69817","summary":"Use after free in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally.","cvss":7.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69817"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:53","euvd":{"id":"EUVD-2026-73565","description":"Use after free in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:16:10","cvss":7.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69817"],"products":["Windows Server 2025 (Server Core installation)","Windows 10 Version 1809","Windows 11 Version 24H2","Windows 10 Version 1607","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2 (Server Core installation)","Windows Server 2016","Windows 10 Version 21H2","Windows Server 2019","Windows Server 2025","Windows Server 2012 R2","Windows Server 2019 (Server Core installation)","Windows 11 version 26H1","Windows Server 2022","Windows Server 2012","Windows Server 2016 (Server Core installation)","Windows 11 Version 23H2","Windows 10 Version 22H2","Windows 11 Version 25H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69818","summary":"Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.","cvss":7.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69818"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:53","euvd":{"id":"EUVD-2026-73617","description":"Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:16:38","cvss":7.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69818"],"products":["Windows Server 2025 (Server Core installation)","Windows Server 2025","Windows 11 Version 24H2","Windows 11 version 26H1","Windows 11 Version 25H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69819","summary":"Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.","cvss":9.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":9.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69819"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:53","euvd":{"id":"EUVD-2026-73053","description":"Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:12:04","cvss":9.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69819"],"products":["Windows Server 2019","Windows Server 2012 R2 (Server Core installation)","Windows Server 2016","Windows 11 Version 24H2","Windows Server 2012","Windows Server 2022","Windows 10 Version 1607","Windows 11 Version 23H2","Windows Server 2016 (Server Core installation)","Windows 10 Version 22H2","Windows Server 2025 (Server Core installation)","Windows 11 Version 25H2","Windows 10 Version 1809","Windows Server 2012 R2","Windows 11 version 26H1","Windows Server 2025","Windows Server 2012 (Server Core installation)","Windows Server 2019 (Server Core installation)","Windows 10 Version 21H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69820","summary":"Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally.","cvss":8.2,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.2,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69820"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:53","euvd":{"id":"EUVD-2026-73640","description":"Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:16:51","cvss":8.2,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69820"],"products":["Windows 10 Version 22H2","Windows 11 Version 24H2","Windows 11 Version 25H2","Windows 11 Version 23H2","Windows 10 Version 21H2","Windows 11 version 26H1"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69821","summary":"Improper encoding or escaping of output in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69821"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:53","euvd":{"id":"EUVD-2026-73569","description":"Improper encoding or escaping of output in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:16:12","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69821"],"products":["Windows 10 Version 1809","Windows 10 Version 1607","Windows Server 2012 R2 (Server Core installation)","Windows Server 2025","Windows Server 2012 R2","Windows Server 2012","Windows Server 2022","Windows Server 2012 (Server Core installation)","Windows Server 2016","Windows Server 2025 (Server Core installation)","Windows Server 2016 (Server Core installation)","Windows Server 2019 (Server Core installation)","Windows Server 2019"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69805","summary":"External control of file name or path in .NET allows an unauthorized attacker to elevate privileges over a network.","cvss":7.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69805"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:52","euvd":{"id":"EUVD-2026-73721","description":"External control of file name or path in .NET allows an unauthorized attacker to elevate privileges over a network.","published_time":"2026-09-08T17:17:36","cvss":7.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69805"],"products":["Microsoft Visual Studio 2026 version 18.9","Microsoft Visual Studio 2022 version 17.14","Microsoft.Diagnostics.Runtime"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69806","summary":"Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.","cvss":7.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69806"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:52","euvd":{"id":"EUVD-2026-73918","description":"Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:19:29","cvss":7.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69806"],"products":["Microsoft Visual Studio 2022 version 17.14",".NET 9.0",".NET 11.0","Microsoft Visual Studio 2026 version 18.9",".NET 10.0"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69807","summary":"Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell allows an authorized attacker to elevate privileges over a network.","cvss":8.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69807"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:52","euvd":{"id":"EUVD-2026-73625","description":"Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell allows an authorized attacker to elevate privileges over a network.","published_time":"2026-09-08T17:16:43","cvss":8.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69807"],"products":["Windows 11 version 26H1","Windows Server 2025 (Server Core installation)","Windows Server 2012","Windows Server 2012 R2 (Server Core installation)","Windows 11 Version 24H2","Windows Server 2025","Windows Server 2016 (Server Core installation)","Windows Server 2012 (Server Core installation)","Windows Server 2016","Windows Server 2022","Windows 10 Version 1809","Windows 10 Version 22H2","Windows 11 Version 23H2","Windows Server 2019 (Server Core installation)","Windows Server 2012 R2","Windows 10 Version 1607","Windows Server 2019","Windows 11 Version 25H2","Windows 10 Version 21H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69808","summary":"Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69808"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:52","euvd":{"id":"EUVD-2026-73059","description":"Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.","published_time":"2026-09-08T17:12:07","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69808"],"products":["Windows Server 2025","Windows Server 2016","Windows 10 Version 21H2","Windows 11 Version 23H2","Windows 10 Version 1809","Windows Server 2012","Windows Server 2012 R2","Windows Server 2012 (Server Core installation)","Windows 11 version 26H1","Windows 10 Version 22H2","Windows 10 Version 1607","Windows Server 2016 (Server Core installation)","Windows Server 2019","Windows Server 2019 (Server Core installation)","Windows Server 2012 R2 (Server Core installation)","Windows Server 2022","Windows Server 2025 (Server Core installation)","Windows 11 Version 25H2","Windows 11 Version 24H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69809","summary":"Missing release of memory after effective lifetime in Active Directory Domain Services allows an unauthorized attacker to deny service over a network.","cvss":7.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69809"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:52","euvd":{"id":"EUVD-2026-73609","description":"Missing release of memory after effective lifetime in Active Directory Domain Services allows an unauthorized attacker to deny service over a network.","published_time":"2026-09-08T17:16:34","cvss":7.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69809"],"products":["Windows 11 Version 25H2","Windows 11 Version 23H2","Windows Server 2025","Windows 11 version 26H1","Windows Server 2025 (Server Core installation)","Windows 11 Version 24H2","Windows Server 2022"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69813","summary":"Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.","cvss":8.1,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.1,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69813"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:52","euvd":{"id":"EUVD-2026-73634","description":"Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:16:48","cvss":8.1,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69813"],"products":["Windows Server 2016","Windows Server 2012 (Server Core installation)","Windows Server 2012 R2 (Server Core installation)","Windows Server 2022","Windows Server 2012","Windows 10 Version 1607","Windows 10 Version 1809","Windows Server 2025","Windows Server 2025 (Server Core installation)","Windows Server 2012 R2","Windows Server 2019 (Server Core installation)","Windows Server 2019","Windows Server 2016 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69814","summary":"Use after free in Windows Credential Providers allows an authorized attacker to elevate privileges locally.","cvss":7.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69814"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:52","euvd":{"id":"EUVD-2026-73597","description":"Use after free in Windows Credential Providers allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:16:27","cvss":7.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69814"],"products":["Windows 11 version 26H1","Windows 11 Version 24H2","Windows Server 2025","Windows 11 Version 23H2","Windows 11 Version 25H2","Windows Server 2025 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69794","summary":"Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69794"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:51","euvd":{"id":"EUVD-2026-73600","description":"Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.","published_time":"2026-09-08T17:16:28","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69794"],"products":["Windows Server 2019","Windows Server 2022","Windows 11 Version 25H2","Windows 11 version 26H1","Windows 11 Version 24H2","Windows 10 Version 1607","Windows 10 Version 21H2","Windows Server 2016","Windows Server 2025 (Server Core installation)","Windows 11 Version 23H2","Windows 10 Version 22H2","Windows 10 Version 1809","Windows Server 2016 (Server Core installation)","Windows Server 2019 (Server Core installation)","Windows Server 2025"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69797","summary":"Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69797"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:51","euvd":{"id":"EUVD-2026-73244","description":"Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:08","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69797"],"products":["Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2024","Microsoft Office LTSC for Mac 2024","Microsoft PowerPoint 2016","Microsoft Office 2019","Microsoft Office LTSC for Mac 2021","Microsoft Office LTSC 2021","Microsoft Office 365 for Mac"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69799","summary":"Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hello allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69799"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:51","euvd":{"id":"EUVD-2026-73633","description":"Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hello allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:16:47","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69799"],"products":["Windows 10 Version 21H2","Windows 11 Version 23H2","Windows 11 Version 24H2","Windows 11 version 26H1","Windows 11 Version 25H2","Windows 10 Version 22H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69801","summary":"Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69801"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:51","euvd":{"id":"EUVD-2026-73595","description":"Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:16:26","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69801"],"products":["Windows Server 2025","Windows 11 Version 25H2","Windows 10 Version 1809","Windows 11 version 26H1","Windows 11 Version 23H2","Windows Server 2019","Windows Server 2019 (Server Core installation)","Windows Server 2022","Windows Server 2025 (Server Core installation)","Windows 11 Version 24H2","Windows 10 Version 22H2","Windows 10 Version 21H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69803","summary":"Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network.","cvss":5.9,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.9,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69803"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:51","euvd":{"id":"EUVD-2026-73574","description":"Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:16:15","cvss":5.9,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69803"],"products":["Windows Server 2012 (Server Core installation)","Windows Server 2016 (Server Core installation)","Windows Server 2016","Windows Server 2012 R2 (Server Core installation)","Windows Server 2025 (Server Core installation)","Windows Server 2012","Windows Server 2012 R2","Windows 10 Version 1607","Windows 10 Version 1809","Windows Server 2022","Windows Server 2025","Windows Server 2019 (Server Core installation)","Windows Server 2019"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69804","summary":"Time-of-check time-of-use (toctou) race condition in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.","cvss":7.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69804"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:51","euvd":{"id":"EUVD-2026-73245","description":"Time-of-check time-of-use (toctou) race condition in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:09","cvss":7.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69804"],"products":["Microsoft SharePoint Server Subscription Edition"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69786","summary":"Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.","cvss":8.1,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.1,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69786"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:50","euvd":{"id":"EUVD-2026-73632","description":"Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:16:47","cvss":8.1,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69786"],"products":["Windows 11 Version 23H2","Windows Server 2012 (Server Core installation)","Windows Server 2025","Windows 10 Version 1607","Windows 11 Version 24H2","Windows 11 version 26H1","Windows 11 Version 25H2","Windows Server 2025 (Server Core installation)","Windows Server 2012 R2 (Server Core installation)","Windows Server 2016","Windows Server 2019","Windows 10 Version 21H2","Windows Server 2012 R2","Windows Server 2012","Windows Server 2016 (Server Core installation)","Windows Server 2022","Windows 10 Version 1809","Windows Server 2019 (Server Core installation)","Windows 10 Version 22H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69787","summary":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69787"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:50","euvd":{"id":"EUVD-2026-73259","description":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:13:16","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69787"],"products":["Windows 11 version 26H1","Windows Server 2019","Windows 11 Version 25H2","Windows 10 Version 21H2","Windows 10 Version 22H2","Windows 10 Version 1607","Windows Server 2016","Windows Server 2019 (Server Core installation)","Windows 11 Version 24H2","Windows Server 2025 (Server Core installation)","Windows 11 Version 23H2","Windows Server 2025","Windows Server 2022","Windows Server 2016 (Server Core installation)","Windows 10 Version 1809"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69790","summary":"Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69790"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:50","euvd":{"id":"EUVD-2026-73035","description":"Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:11:55","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69790"],"products":["Windows 11 Version 24H2","Windows Server 2025","Windows 11 Version 25H2","Windows 10 Version 22H2","Windows 10 Version 21H2","Windows 11 Version 23H2","Windows Server 2022","Windows 11 version 26H1","Windows Server 2019","Windows Server 2025 (Server Core installation)","Windows 10 Version 1809","Windows Server 2019 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69791","summary":"Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.","cvss":7.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69791"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:50","euvd":{"id":"EUVD-2026-73577","description":"Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:16:17","cvss":7.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69791"],"products":["Windows 11 version 26H1","Windows Server 2019","Windows Server 2022","Windows 11 Version 24H2","Windows Server 2019 (Server Core installation)","Windows Server 2025 (Server Core installation)","Windows 11 Version 25H2","Windows 10 Version 22H2","Windows Server 2025","Windows 10 Version 1809","Windows 10 Version 21H2","Windows 11 Version 23H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69792","summary":"Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to bypass a security feature locally.","cvss":4.7,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":4.7,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69792"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:50","euvd":{"id":"EUVD-2026-73610","description":"Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to bypass a security feature locally.","published_time":"2026-09-08T17:16:34","cvss":4.7,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69792"],"products":["Windows 10 Version 1809","Windows 11 Version 25H2","Windows Server 2022","Windows Server 2016 (Server Core installation)","Windows 11 version 26H1","Windows Server 2016","Windows Server 2025","Windows 11 Version 23H2","Windows 10 Version 1607","Windows 10 Version 22H2","Windows Server 2019 (Server Core installation)","Windows 11 Version 24H2","Windows 10 Version 21H2","Windows Server 2019","Windows Server 2025 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69793","summary":"Improper validation of consistency within input in Windows TCP/IP allows an unauthorized attacker to bypass a security feature over a network.","cvss":7.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69793"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:50","euvd":{"id":"EUVD-2026-73604","description":"Improper validation of consistency within input in Windows TCP/IP allows an unauthorized attacker to bypass a security feature over a network.","published_time":"2026-09-08T17:16:31","cvss":7.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69793"],"products":["Windows Server 2019 (Server Core installation)","Windows 10 Version 1607","Windows 11 Version 25H2","Windows Server 2012 R2 (Server Core installation)","Windows 11 version 26H1","Windows Server 2012 R2","Windows 11 Version 24H2","Windows Server 2019","Windows 10 Version 22H2","Windows Server 2022","Windows Server 2025","Windows 11 Version 23H2","Windows 10 Version 21H2","Windows Server 2012","Windows Server 2025 (Server Core installation)","Windows Server 2016 (Server Core installation)","Windows Server 2016","Windows Server 2012 (Server Core installation)","Windows 10 Version 1809"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69777","summary":"Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network.","cvss":8.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69777"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:49","euvd":{"id":"EUVD-2026-73624","description":"Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network.","published_time":"2026-09-08T17:16:42","cvss":8.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69777"],"products":["Windows 11 Version 25H2","Windows 11 Version 24H2","Windows 11 version 26H1"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69778","summary":"Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69778"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:49","euvd":{"id":"EUVD-2026-73242","description":"Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:07","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69778"],"products":["Microsoft Office LTSC 2024","Microsoft Office LTSC 2021","Microsoft Access 2016","Microsoft 365 Apps for Enterprise","Microsoft Office 2019","Microsoft Office 2016","Microsoft Access 2016 (32-bit edition)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69779","summary":"Time-of-check time-of-use (toctou) race condition in Windows Win32K allows an authorized attacker to elevate privileges locally.","cvss":7.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69779"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:49","euvd":{"id":"EUVD-2026-73606","description":"Time-of-check time-of-use (toctou) race condition in Windows Win32K allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:16:32","cvss":7.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69779"],"products":["Windows Server 2025 (Server Core installation)","Windows Server 2012 R2","Windows 11 version 26H1","Windows Server 2012 (Server Core installation)","Windows Server 2022","Windows 11 Version 24H2","Windows Server 2019 (Server Core installation)","Windows Server 2025","Windows 11 Version 23H2","Windows Server 2016","Windows 10 Version 21H2","Windows 10 Version 22H2","Windows Server 2019","Windows 10 Version 1607","Windows Server 2012","Windows Server 2012 R2 (Server Core installation)","Windows 11 Version 25H2","Windows Server 2016 (Server Core installation)","Windows 10 Version 1809"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69781","summary":"Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69781"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:49","euvd":{"id":"EUVD-2026-73626","description":"Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network.","published_time":"2026-09-08T17:16:43","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69781"],"products":["Windows 11 version 26H1","Windows Server 2025 (Server Core installation)","Windows 11 Version 24H2","Windows 11 Version 25H2","Windows Server 2025"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69782","summary":"Concurrent execution using shared resource with improper synchronization ('race condition') in DNS Server allows an unauthorized attacker to execute code over a network.","cvss":8.1,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.1,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69782"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:49","euvd":{"id":"EUVD-2026-73172","description":"Concurrent execution using shared resource with improper synchronization ('race condition') in DNS Server allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:10:33","cvss":8.1,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69782"],"products":["Windows Server 2012","Windows Server 2016","Windows 10 Version 1607","Windows Server 2019 (Server Core installation)","Windows Server 2012 R2 (Server Core installation)","Windows 10 Version 1809","Windows Server 2025 (Server Core installation)","Windows Server 2025","Windows Server 2022","Windows Server 2012 (Server Core installation)","Windows Server 2019","Windows Server 2012 R2","Windows Server 2016 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69784","summary":"Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69784"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:49","euvd":{"id":"EUVD-2026-73641","description":"Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:16:52","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69784"],"products":["Windows 11 Version 24H2","Windows 11 version 26H1","Windows 11 Version 23H2","Windows 11 Version 25H2","Windows 10 Version 22H2","Windows 10 Version 21H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69785","summary":"Untrusted search path in Windows Smart Card allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69785"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:49","euvd":{"id":"EUVD-2026-73615","description":"Untrusted search path in Windows Smart Card allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:16:37","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69785"],"products":["Windows 11 Version 23H2","Windows Server 2012 R2","Windows 10 Version 21H2","Windows 10 Version 22H2","Windows Server 2012 R2 (Server Core installation)","Windows Server 2012","Windows Server 2025","Windows Server 2016 (Server Core installation)","Windows Server 2012 (Server Core installation)","Windows 11 Version 25H2","Windows Server 2016","Windows Server 2022","Windows Server 2019 (Server Core installation)","Windows Server 2019","Windows 10 Version 1607","Windows 11 version 26H1","Windows 10 Version 1809","Windows 11 Version 24H2","Windows Server 2025 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69769","summary":"Heap-based buffer overflow in Windows HTTP Print Provider allows an unauthorized attacker to execute code over a network.","cvss":9.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":9.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69769"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:48","euvd":{"id":"EUVD-2026-73630","description":"Heap-based buffer overflow in Windows HTTP Print Provider allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:16:45","cvss":9.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69769"],"products":["Windows 11 version 26H1","Windows Server 2016 (Server Core installation)","Windows 10 Version 1809","Windows Server 2025 (Server Core installation)","Windows 11 Version 23H2","Windows 10 Version 22H2","Windows 10 Version 21H2","Windows Server 2019 (Server Core installation)","Windows 10 Version 1607","Windows Server 2012 R2","Windows Server 2022","Windows Server 2019","Windows Server 2012 (Server Core installation)","Windows Server 2012","Windows Server 2025","Windows Server 2012 R2 (Server Core installation)","Windows 11 Version 24H2","Windows 11 Version 25H2","Windows Server 2016"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69770","summary":"Use of uninitialized resource in Windows Spaceport.sys allows an authorized attacker to disclose information locally.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69770"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:48","euvd":{"id":"EUVD-2026-73067","description":"Use of uninitialized resource in Windows Spaceport.sys allows an authorized attacker to disclose information locally.","published_time":"2026-09-08T17:12:12","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69770"],"products":["Windows 10 Version 1607","Windows 11 Version 23H2","Windows Server 2016 (Server Core installation)","Windows Server 2012 R2 (Server Core installation)","Windows 10 Version 21H2","Windows 11 Version 25H2","Windows 10 Version 1809","Windows 10 Version 22H2","Windows Server 2025 (Server Core installation)","Windows Server 2025","Windows 11 version 26H1","Windows Server 2019 (Server Core installation)","Windows Server 2019","Windows Server 2012 R2","Windows 11 Version 24H2","Windows Server 2022","Windows Server 2016"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69771","summary":"Improper link resolution before file access ('link following') in Windows Container Manager Service allows an authorized attacker to bypass a security feature locally.","cvss":4.7,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":4.7,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69771"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:48","euvd":{"id":"EUVD-2026-73064","description":"Improper link resolution before file access ('link following') in Windows Container Manager Service allows an authorized attacker to bypass a security feature locally.","published_time":"2026-09-08T17:12:10","cvss":4.7,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69771"],"products":["Windows 11 Version 24H2","Windows 11 Version 25H2","Windows 11 Version 23H2","Windows 11 version 26H1"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69772","summary":"Heap-based buffer overflow in Windows Network File System allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69772"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:48","euvd":{"id":"EUVD-2026-73061","description":"Heap-based buffer overflow in Windows Network File System allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:12:09","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69772"],"products":["Windows Server 2012 R2","Windows Server 2019 (Server Core installation)","Windows 10 Version 22H2","Windows 11 Version 23H2","Windows 10 Version 21H2","Windows Server 2025 (Server Core installation)","Windows Server 2016","Windows Server 2019","Windows 11 Version 25H2","Windows Server 2012","Windows Server 2016 (Server Core installation)","Windows 11 version 26H1","Windows Server 2012 R2 (Server Core installation)","Windows Server 2025","Windows 10 Version 1809","Windows Server 2022","Windows Server 2012 (Server Core installation)","Windows 10 Version 1607","Windows 11 Version 24H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69773","summary":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network.","cvss":8.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69773"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:48","euvd":{"id":"EUVD-2026-73599","description":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network.","published_time":"2026-09-08T17:16:28","cvss":8.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69773"],"products":["Windows Server 2022","Windows 10 Version 1809","Windows 10 Version 1607","Windows Server 2019 (Server Core installation)","Windows Server 2025 (Server Core installation)","Windows Server 2016 (Server Core installation)","Windows 11 Version 25H2","Windows Server 2016","Windows Server 2025","Windows 11 Version 23H2","Windows 10 Version 22H2","Windows 10 Version 21H2","Windows 11 version 26H1","Windows 11 Version 24H2","Windows Server 2019"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69775","summary":"Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges over a network.","cvss":7.1,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.1,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69775"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:48","euvd":{"id":"EUVD-2026-73062","description":"Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges over a network.","published_time":"2026-09-08T17:12:09","cvss":7.1,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69775"],"products":["Windows Server 2025 (Server Core installation)","Windows 11 Version 23H2","Windows Server 2025"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69759","summary":"Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69759"],"vendor":"microsoft","product":"365_apps","version":null,"published_time":"2026-09-08T18:19:47","euvd":{"id":"EUVD-2026-73240","description":"Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:06","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69759"],"products":["Microsoft 365 Apps for Enterprise","Microsoft Office 365 for Mac","Microsoft Office LTSC for Mac 2024","Microsoft Office LTSC 2024","Microsoft Office 2019","Microsoft Office LTSC 2021","Microsoft Office LTSC for Mac 2021","Microsoft Word 2016"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69759","summary":"Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69759"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:47","euvd":{"id":"EUVD-2026-73240","description":"Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:06","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69759"],"products":["Microsoft 365 Apps for Enterprise","Microsoft Office 365 for Mac","Microsoft Office LTSC for Mac 2024","Microsoft Office LTSC 2024","Microsoft Office 2019","Microsoft Office LTSC 2021","Microsoft Office LTSC for Mac 2021","Microsoft Word 2016"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69759","summary":"Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69759"],"vendor":"microsoft","product":"microsoft_365","version":null,"published_time":"2026-09-08T18:19:47","euvd":{"id":"EUVD-2026-73240","description":"Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:06","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69759"],"products":["Microsoft 365 Apps for Enterprise","Microsoft Office 365 for Mac","Microsoft Office LTSC for Mac 2024","Microsoft Office LTSC 2024","Microsoft Office 2019","Microsoft Office LTSC 2021","Microsoft Office LTSC for Mac 2021","Microsoft Word 2016"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69759","summary":"Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69759"],"vendor":"microsoft","product":"office_2019","version":null,"published_time":"2026-09-08T18:19:47","euvd":{"id":"EUVD-2026-73240","description":"Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:06","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69759"],"products":["Microsoft 365 Apps for Enterprise","Microsoft Office 365 for Mac","Microsoft Office LTSC for Mac 2024","Microsoft Office LTSC 2024","Microsoft Office 2019","Microsoft Office LTSC 2021","Microsoft Office LTSC for Mac 2021","Microsoft Word 2016"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69759","summary":"Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69759"],"vendor":"microsoft","product":"office_2021","version":null,"published_time":"2026-09-08T18:19:47","euvd":{"id":"EUVD-2026-73240","description":"Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:06","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69759"],"products":["Microsoft 365 Apps for Enterprise","Microsoft Office 365 for Mac","Microsoft Office LTSC for Mac 2024","Microsoft Office LTSC 2024","Microsoft Office 2019","Microsoft Office LTSC 2021","Microsoft Office LTSC for Mac 2021","Microsoft Word 2016"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69759","summary":"Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69759"],"vendor":"microsoft","product":"office_2024","version":null,"published_time":"2026-09-08T18:19:47","euvd":{"id":"EUVD-2026-73240","description":"Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:06","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69759"],"products":["Microsoft 365 Apps for Enterprise","Microsoft Office 365 for Mac","Microsoft Office LTSC for Mac 2024","Microsoft Office LTSC 2024","Microsoft Office 2019","Microsoft Office LTSC 2021","Microsoft Office LTSC for Mac 2021","Microsoft Word 2016"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69759","summary":"Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69759"],"vendor":"microsoft","product":"word","version":null,"published_time":"2026-09-08T18:19:47","euvd":{"id":"EUVD-2026-73240","description":"Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:06","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69759"],"products":["Microsoft 365 Apps for Enterprise","Microsoft Office 365 for Mac","Microsoft Office LTSC for Mac 2024","Microsoft Office LTSC 2024","Microsoft Office 2019","Microsoft Office LTSC 2021","Microsoft Office LTSC for Mac 2021","Microsoft Word 2016"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69760","summary":"Out-of-bounds read in Windows Kerberos allows an unauthorized attacker to deny service over a network.","cvss":7.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69760"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:47","euvd":{"id":"EUVD-2026-73623","description":"Out-of-bounds read in Windows Kerberos allows an unauthorized attacker to deny service over a network.","published_time":"2026-09-08T17:16:41","cvss":7.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69760"],"products":["Windows 11 Version 24H2","Windows Server 2016 (Server Core installation)","Windows 10 Version 22H2","Windows 11 Version 25H2","Windows 11 version 26H1","Windows Server 2022","Windows Server 2025 (Server Core installation)","Windows 10 Version 21H2","Windows 10 Version 1809","Windows Server 2016","Windows Server 2025","Windows 10 Version 1607","Windows Server 2019","Windows 11 Version 23H2","Windows Server 2019 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69761","summary":"Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network.","cvss":7.1,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.1,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69761"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:47","euvd":{"id":"EUVD-2026-73612","description":"Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network.","published_time":"2026-09-08T17:16:35","cvss":7.1,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69761"],"products":["Windows Server 2019","Windows Server 2012 R2 (Server Core installation)","Windows Server 2012 R2","Windows 10 Version 1809","Windows Server 2019 (Server Core installation)","Windows 11 version 26H1","Windows 10 Version 21H2","Windows Server 2016","Windows 11 Version 25H2","Windows 11 Version 24H2","Windows Server 2022","Windows Server 2025 (Server Core installation)","Windows Server 2012","Windows 10 Version 22H2","Windows Server 2012 (Server Core installation)","Windows 10 Version 1607","Windows 11 Version 23H2","Windows Server 2016 (Server Core installation)","Windows Server 2025"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69762","summary":"Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.","cvss":8.0,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.0,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69762"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:47","euvd":{"id":"EUVD-2026-73052","description":"Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.","published_time":"2026-09-08T17:12:04","cvss":8.0,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69762"],"products":["Windows Server 2025 (Server Core installation)","Windows 11 Version 25H2","Windows Server 2019 (Server Core installation)","Windows 10 Version 1809","Windows 11 Version 24H2","Windows Server 2019","Windows 10 Version 22H2","Windows 11 Version 23H2","Windows 10 Version 21H2","Windows Server 2025","Windows Server 2022","Windows 11 version 26H1"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69764","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69764"],"vendor":"microsoft","product":"365_apps","version":null,"published_time":"2026-09-08T18:19:47","euvd":{"id":"EUVD-2026-73241","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:06","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69764"],"products":["Microsoft Office 2019","Microsoft Office LTSC 2024","Microsoft Office 2016","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2021","Microsoft Word 2016"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69764","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69764"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:47","euvd":{"id":"EUVD-2026-73241","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:06","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69764"],"products":["Microsoft Office 2019","Microsoft Office LTSC 2024","Microsoft Office 2016","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2021","Microsoft Word 2016"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69764","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69764"],"vendor":"microsoft","product":"office_2016","version":null,"published_time":"2026-09-08T18:19:47","euvd":{"id":"EUVD-2026-73241","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:06","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69764"],"products":["Microsoft Office 2019","Microsoft Office LTSC 2024","Microsoft Office 2016","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2021","Microsoft Word 2016"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69764","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69764"],"vendor":"microsoft","product":"office_2019","version":null,"published_time":"2026-09-08T18:19:47","euvd":{"id":"EUVD-2026-73241","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:06","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69764"],"products":["Microsoft Office 2019","Microsoft Office LTSC 2024","Microsoft Office 2016","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2021","Microsoft Word 2016"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69764","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69764"],"vendor":"microsoft","product":"office_2021","version":null,"published_time":"2026-09-08T18:19:47","euvd":{"id":"EUVD-2026-73241","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:06","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69764"],"products":["Microsoft Office 2019","Microsoft Office LTSC 2024","Microsoft Office 2016","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2021","Microsoft Word 2016"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69764","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69764"],"vendor":"microsoft","product":"office_2024","version":null,"published_time":"2026-09-08T18:19:47","euvd":{"id":"EUVD-2026-73241","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:06","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69764"],"products":["Microsoft Office 2019","Microsoft Office LTSC 2024","Microsoft Office 2016","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2021","Microsoft Word 2016"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69764","summary":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69764"],"vendor":"microsoft","product":"word","version":null,"published_time":"2026-09-08T18:19:47","euvd":{"id":"EUVD-2026-73241","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:06","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69764"],"products":["Microsoft Office 2019","Microsoft Office LTSC 2024","Microsoft Office 2016","Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2021","Microsoft Word 2016"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69767","summary":"Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69767"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:47","euvd":{"id":"EUVD-2026-73243","description":"Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:07","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69767"],"products":["Microsoft Office LTSC for Mac 2021","Microsoft 365 Apps for Enterprise","Microsoft PowerPoint 2016","Microsoft Office LTSC for Mac 2024","Microsoft Office 2019","Microsoft Office LTSC 2021","Microsoft Office 365 for Mac","Microsoft Office LTSC 2024"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69768","summary":"Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to execute code over a network.","cvss":9.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":9.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69768"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:47","euvd":{"id":"EUVD-2026-73602","description":"Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:16:30","cvss":9.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69768"],"products":["Windows Server 2012 (Server Core installation)","Windows 11 Version 24H2","Windows Server 2025","Windows Server 2016","Windows Server 2019","Windows Server 2022","Windows 10 Version 1809","Windows Server 2012 R2 (Server Core installation)","Windows Server 2012","Windows Server 2025 (Server Core installation)","Windows 11 Version 23H2","Windows 10 Version 21H2","Windows Server 2019 (Server Core installation)","Windows Server 2016 (Server Core installation)","Windows Server 2012 R2","Windows 10 Version 22H2","Windows 11 version 26H1","Windows 11 Version 25H2","Windows 10 Version 1607"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69739","summary":"Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69739"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:46","euvd":{"id":"EUVD-2026-73158","description":"Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:13:04","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69739"],"products":["Microsoft 365 Apps for Enterprise","Microsoft Office LTSC 2024","Microsoft Office 2019","Microsoft Office 2016","Microsoft Office LTSC 2021"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69740","summary":"Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69740"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:46","euvd":{"id":"EUVD-2026-73072","description":"Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:12:15","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69740"],"products":["Windows 11 Version 23H2","Windows 11 Version 25H2","Windows 11 Version 24H2","Windows 11 version 26H1"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69741","summary":"Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally.","cvss":5.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":5.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69741"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:46","euvd":{"id":"EUVD-2026-73051","description":"Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally.","published_time":"2026-09-08T17:12:03","cvss":5.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69741"],"products":["Windows 11 Version 25H2","Windows 11 Version 24H2","Windows Server 2022","Windows 10 Version 21H2","Windows Server 2025 (Server Core installation)","Windows 11 version 26H1","Windows 10 Version 22H2","Windows Server 2025","Windows 11 Version 23H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69742","summary":"Integer overflow or wraparound in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69742"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:46","euvd":{"id":"EUVD-2026-73154","description":"Integer overflow or wraparound in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:13:02","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69742"],"products":["Microsoft Publisher 2016","Microsoft Office LTSC 2024","Microsoft Office 2019","Microsoft Office LTSC 2021","Microsoft 365 Apps for Enterprise"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69744","summary":"Null pointer dereference in Windows Kerberos allows an unauthorized attacker to deny service over a network.","cvss":7.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69744"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:46","euvd":{"id":"EUVD-2026-73054","description":"Null pointer dereference in Windows Kerberos allows an unauthorized attacker to deny service over a network.","published_time":"2026-09-08T17:12:05","cvss":7.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69744"],"products":["Windows Server 2025 (Server Core installation)","Windows 11 Version 24H2","Windows 11 Version 25H2","Windows Server 2025"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69757","summary":"Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network.","cvss":7.1,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.1,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69757"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:46","euvd":{"id":"EUVD-2026-73047","description":"Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network.","published_time":"2026-09-08T17:12:01","cvss":7.1,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69757"],"products":["Windows 11 Version 25H2","Windows 10 Version 21H2","Windows 10 Version 1809","Windows Server 2025 (Server Core installation)","Windows 10 Version 22H2","Windows Server 2019","Windows Server 2019 (Server Core installation)","Windows 11 Version 24H2","Windows 11 version 26H1","Windows 11 Version 23H2","Windows Server 2025","Windows Server 2022"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69758","summary":"Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69758"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:46","euvd":{"id":"EUVD-2026-73063","description":"Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:12:10","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69758"],"products":["Windows Server 2012","Windows 11 Version 25H2","Windows Server 2012 R2","Windows 11 Version 24H2","Windows Server 2019","Windows 10 Version 21H2","Windows Server 2022","Windows 10 Version 22H2","Windows 11 Version 23H2","Windows Server 2016 (Server Core installation)","Windows Server 2025 (Server Core installation)","Windows 10 Version 1607","Windows Server 2019 (Server Core installation)","Windows Server 2012 R2 (Server Core installation)","Windows Server 2012 (Server Core installation)","Windows 11 version 26H1","Windows Server 2016","Windows Server 2025","Windows 10 Version 1809"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69729","summary":"Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to execute code over a network.","cvss":8.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69729"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:45","euvd":{"id":"EUVD-2026-73040","description":"Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to execute code over a network.","published_time":"2026-09-08T17:11:57","cvss":8.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69729"],"products":["Windows Server 2025 (Server Core installation)","Windows 11 Version 25H2","Windows Server 2025","Windows 11 Version 24H2","Windows 11 version 26H1"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69730","summary":"Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.","cvss":9.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":9.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69730"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:45","euvd":{"id":"EUVD-2026-73069","description":"Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:12:13","cvss":9.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69730"],"products":["Windows Server 2012","Windows Server 2019","Windows Server 2016","Windows Server 2019 (Server Core installation)","Windows Server 2012 R2","Windows Server 2022","Windows Server 2012 R2 (Server Core installation)","Windows 10 Version 1607","Windows Server 2025 (Server Core installation)","Windows Server 2012 (Server Core installation)","Windows Server 2025","Windows 10 Version 1809","Windows Server 2016 (Server Core installation)"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69731","summary":"Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.","cvss":7.8,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":7.8,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69731"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:45","euvd":{"id":"EUVD-2026-73598","description":"Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.","published_time":"2026-09-08T17:16:27","cvss":7.8,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69731"],"products":["Windows 11 Version 25H2","Windows 10 Version 22H2","Windows 10 Version 1607","Windows 10 Version 21H2","Windows Server 2025 (Server Core installation)","Windows Server 2012 R2","Windows Server 2019 (Server Core installation)","Windows 11 version 26H1","Windows 11 Version 24H2","Windows Server 2019","Windows Server 2012 (Server Core installation)","Windows Server 2025","Windows Server 2016","Windows Server 2012","Windows Server 2016 (Server Core installation)","Windows 11 Version 23H2","Windows Server 2022","Windows Server 2012 R2 (Server Core installation)","Windows 10 Version 1809"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69732","summary":"Heap-based buffer overflow in Windows Link Layer Topology Discovery Protocol allows an unauthorized attacker to execute code over a network.","cvss":8.1,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":8.1,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69732"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:45","euvd":{"id":"EUVD-2026-73066","description":"Heap-based buffer overflow in Windows Link Layer Topology Discovery Protocol allows an unauthorized attacker to execute code over a network.","published_time":"2026-09-08T17:12:11","cvss":8.1,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69732"],"products":["Windows 10 Version 21H2","Windows 10 Version 1607","Windows Server 2012","Windows Server 2022","Windows Server 2019","Windows Server 2016 (Server Core installation)","Windows Server 2019 (Server Core installation)","Windows Server 2025 (Server Core installation)","Windows 10 Version 22H2","Windows Server 2025","Windows Server 2012 R2 (Server Core installation)","Windows 10 Version 1809","Windows 11 Version 23H2","Windows Server 2016","Windows Server 2012 (Server Core installation)","Windows 11 version 26H1","Windows 11 Version 25H2","Windows Server 2012 R2","Windows 11 Version 24H2"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69734","summary":"Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69734"],"vendor":"microsoft","product":"365_apps","version":null,"published_time":"2026-09-08T18:19:45","euvd":{"id":"EUVD-2026-73153","description":"Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:13:01","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69734"],"products":["Microsoft 365 Apps for Enterprise","Microsoft Word 2016","Microsoft Office 2016","Microsoft Office LTSC 2021","Microsoft Office 2019","Microsoft Office LTSC for Mac 2024","Microsoft Office 365 for Mac","Microsoft Office LTSC 2024","Microsoft Office LTSC for Mac 2021"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69734","summary":"Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69734"],"vendor":null,"product":null,"version":null,"published_time":"2026-09-08T18:19:45","euvd":{"id":"EUVD-2026-73153","description":"Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:13:01","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69734"],"products":["Microsoft 365 Apps for Enterprise","Microsoft Word 2016","Microsoft Office 2016","Microsoft Office LTSC 2021","Microsoft Office 2019","Microsoft Office LTSC for Mac 2024","Microsoft Office 365 for Mac","Microsoft Office LTSC 2024","Microsoft Office LTSC for Mac 2021"],"vendors":["Microsoft"]}},{"cve_id":"CVE-2026-69734","summary":"Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","cvss":6.5,"cvss_version":3.0,"cvss_v2":null,"cvss_v3":6.5,"cvss_v4":null,"epss":null,"ranking_epss":null,"kev":false,"propose_action":null,"ransomware_campaign":null,"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69734"],"vendor":"microsoft","product":"microsoft_365","version":null,"published_time":"2026-09-08T18:19:45","euvd":{"id":"EUVD-2026-73153","description":"Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","published_time":"2026-09-08T17:13:01","cvss":6.5,"cvss_version":"3.1","epss":0.0,"assigner":"microsoft","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69734"],"products":["Microsoft 365 Apps for Enterprise","Microsoft Word 2016","Microsoft Office 2016","Microsoft Office LTSC 2021","Microsoft Office 2019","Microsoft Office LTSC for Mac 2024","Microsoft Office 365 for Mac","Microsoft Office LTSC 2024","Microsoft Office LTSC for Mac 2021"],"vendors":["Microsoft"]}}]}