Month: September 2026

Out-of-bounds read in Xbox allows an unauthorized attacker to disclose information with a physical attack. Continue reading CVE-2026-78455 Xbox Information Disclosure Vulnerability→

Untrusted pointer dereference in Microsoft Windows SCSI Class System File allows an unauthorized attacker to elevate privileges with a physical attack. Continue reading CVE-2026-78451 Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability→

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-78447 Windows Biometric Service Elevation of Privilege Vulnerability→

Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-78444 Microsoft Failover Cluster Remote Code Execution Vulnerability→

Use after free in Windows Distributed File System (DFS) allows an authorized attacker to deny service over a network. Continue reading CVE-2026-78446 Windows Distributed File System (DFS) Denial of Service Vulnerability→

Out-of-bounds read in Windows OLE DB allows an unauthorized attacker to disclose information over a network. Continue reading CVE-2026-78441 Windows OLE DB Information Disclosure Vulnerability→

Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over a network. Continue reading CVE-2026-69562 Microsoft SQL Server Information Disclosure Vulnerability→

Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-77905 Windows Management Instrumentation Elevation of Privilege Vulnerability→