CVE Notify
19.7K subscribers
4 photos
300K links
Alert on the latest CVEs

Partner channel: @malwr
Download Telegram
🚨 CVE-2026-72931
Missing release of resource after effective lifetime in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to deny service locally.

🎖@cveNotify
🚨 CVE-2026-72945
Use of uninitialized resource in Windows Task Scheduler allows an authorized attacker to disclose information locally.

🎖@cveNotify
🚨 CVE-2026-72949
Null pointer dereference in Windows SMB Server Network Transport Driver (srvnet.sys) allows an unauthorized attacker to deny service over a network.

🎖@cveNotify
🚨 CVE-2026-73029
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.

🎖@cveNotify
🚨 CVE-2026-77491
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally.

🎖@cveNotify
🚨 CVE-2026-77494
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

🎖@cveNotify
🚨 CVE-2026-77498
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

🎖@cveNotify
🚨 CVE-2026-77501
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

🎖@cveNotify
🚨 CVE-2026-77502
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

🎖@cveNotify
🚨 CVE-2026-77886
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

🎖@cveNotify
🚨 CVE-2026-77888
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

🎖@cveNotify
🚨 CVE-2026-77890
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

🎖@cveNotify
🚨 CVE-2026-77893
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

🎖@cveNotify
🚨 CVE-2026-77895
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

🎖@cveNotify
🚨 CVE-2026-77896
Integer overflow or wraparound in Remote Desktop Client allows an unauthorized attacker to deny service over a network.

🎖@cveNotify
🚨 CVE-2026-77909
Insufficiently protected credentials in Azure CycleCloud allows an authorized attacker to disclose information over a network.

🎖@cveNotify
🚨 CVE-2026-78446
Use after free in Windows Distributed File System (DFS) allows an authorized attacker to deny service over a network.

🎖@cveNotify
🚨 CVE-2026-78508
Out-of-bounds read in Windows CD-ROM Driver allows an unauthorized attacker to disclose information with a physical attack.

🎖@cveNotify
🚨 CVE-2026-78511
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

🎖@cveNotify
🚨 CVE-2026-78512
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

🎖@cveNotify
🚨 CVE-2026-78513
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

🎖@cveNotify