Find the CVE cohort

Use after free in Windows KDC Proxy Service (KPSSVC) allows an unauthorized attacker to execute code over a network.

Excerpt language: en.

Severity high: primary CNA CVSS 8.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-08T16:57:25.143Z. Updated 2026-02-26T18:27:43.620Z.

Improper handling of insufficient permissions or privileges in Microsoft Teams allows an authorized attacker to elevate privileges over a network.

Excerpt language: en.

Severity low: primary CNA CVSS 3.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-08T16:57:24.562Z. Updated 2026-02-26T18:27:44.108Z.

Use after free in Windows Notification allows an authorized attacker to elevate privileges locally.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-08T16:57:23.885Z. Updated 2026-02-13T19:06:59.350Z.

Missing authorization in Windows StateRepository API allows an authorized attacker to perform tampering locally.

Excerpt language: en.

Severity high: primary CNA CVSS 8.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-08T16:57:23.208Z. Updated 2026-02-13T19:06:58.764Z.

Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to elevate privileges locally.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-08T16:57:22.686Z. Updated 2026-02-13T19:06:58.188Z.

Improper input validation in SQL Server allows an unauthorized attacker to disclose information over a network.

Excerpt language: en.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-08T16:57:22.103Z. Updated 2026-02-13T19:06:57.714Z.

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Excerpt language: en.

Severity high: primary CNA CVSS 8.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-08T16:57:21.614Z. Updated 2026-02-26T18:27:44.480Z.

Uncontrolled resource consumption in Windows Netlogon allows an unauthorized attacker to deny service over a network.

Excerpt language: en.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-08T16:57:21.032Z. Updated 2026-02-13T19:06:56.630Z.

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-08T16:57:20.533Z. Updated 2026-02-13T19:06:56.054Z.

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-08T16:57:19.707Z. Updated 2026-02-13T19:06:55.517Z.

Deserialization of untrusted data in Microsoft Office allows an unauthorized attacker to elevate privileges locally.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-08T16:57:19.136Z. Updated 2026-02-13T19:06:54.897Z.

Improper access control in Microsoft PC Manager allows an authorized attacker to elevate privileges locally.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-08T16:57:18.481Z. Updated 2026-02-26T18:27:45.095Z.

Use after free in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-08T16:57:17.909Z. Updated 2026-02-13T19:06:53.682Z.

Null pointer dereference in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-08T16:57:17.263Z. Updated 2026-02-13T19:06:53.066Z.

Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over an adjacent network.

Excerpt language: en.

Severity high: primary CNA CVSS 8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-08T16:57:16.764Z. Updated 2026-02-13T19:06:52.497Z.

Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Management Service (camsvc) allows an unauthorized attacker to elevate privileges locally.

Excerpt language: en.

Severity high: primary CNA CVSS 7.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-08T16:57:16.185Z. Updated 2026-02-26T18:27:45.699Z.

Integer overflow or wraparound in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-08T16:57:15.512Z. Updated 2026-02-26T18:27:46.183Z.

Double free in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

Excerpt language: en.

Severity high: primary CNA CVSS 8.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-08T16:57:14.921Z. Updated 2026-02-26T18:27:46.631Z.