fixnx

Security Risk Severity

High Security Risks — Page 6

Published vulnerability pages grouped by high severity. Use this page to review risks that need similar prioritization.

872 published high risks

High severity

Showing 181–216 of 872 published risks.

Clear
highEPSS 0.018

CVE-2026-49795 windows 10 1809 vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-49795linuxwindowsmemory-corruption

Updated Jul 17, 2026

highEPSS 0.004

CVE-2026-49796 windows 10 1607 vulnerability

Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally.

CVE-2026-49796windowsmemory-corruption

Updated Jul 17, 2026

highEPSS 0.004

CVE-2026-49797 windows 10 1607 vulnerability

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

CVE-2026-49797windowsmemory-corruption

Updated Jul 17, 2026

highEPSS 0.002

CVE-2026-49800 windows 10 1809 vulnerability

Integer overflow or wraparound in Windows Web Proxy Auto-Discovery Protocol (WPAD) allows an authorized attacker to elevate privileges locally.

CVE-2026-49800wordpresswindowsinput-validationmemory-corruption

Updated Jul 17, 2026

highEPSS 0.002

CVE-2026-49802 windows 11 24h2 vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-49802windowsmemory-corruptionrace-condition

Updated Jul 17, 2026

highEPSS 0.002

CVE-2026-49803 windows 10 1607 vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.

CVE-2026-49803windowsrace-condition

Updated Jul 17, 2026

highEPSS 0.021

CVE-2026-49805 windows 10 1607 vulnerability

Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-49805windowsauthorization-bypass

Updated Jul 17, 2026

highEPSS 0.002

CVE-2026-49806 windows 11 24h2 vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-49806windowsmemory-corruptionrace-condition

Updated Jul 17, 2026

highEPSS 0.002

CVE-2026-49808 windows 11 24h2 vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-49808linuxwindowsmemory-corruptionrace-condition

Updated Jul 17, 2026

highEPSS 0.003

CVE-2026-50293 windows 10 21h2 vulnerability

Use after free in Windows Internal Task Bar allows an authorized attacker to elevate privileges locally.

CVE-2026-50293windowsmemory-corruption

Updated Jul 17, 2026

highEPSS 0.002

CVE-2026-50296 windows 10 1607 vulnerability

Use after free in Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-50296linuxwindowsmemory-corruption

Updated Jul 17, 2026

highEPSS 0.002

CVE-2026-50297 windows 10 1607 vulnerability

Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-50297windowsauthorization-bypass

Updated Jul 17, 2026

highEPSS 0.004

CVE-2026-50308 windows 10 1607 vulnerability

Integer underflow (wrap or wraparound) in Windows NTFS allows an unauthorized attacker to execute code locally.

CVE-2026-50308windowsinput-validationmemory-corruption

Updated Jul 17, 2026

highEPSS 0.002

CVE-2026-50311 windows 10 1607 vulnerability

Improper access control in Windows Server allows an authorized attacker to elevate privileges locally.

CVE-2026-50311windowsauthorization-bypass

Updated Jul 17, 2026

highEPSS 0.003

CVE-2026-50318 windows 10 1607 vulnerability

Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-50318windowsmemory-corruption

Updated Jul 17, 2026

highEPSS 0.002

CVE-2026-50323 windows 11 24h2 vulnerability

Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.

CVE-2026-50323windowsmemory-corruption

Updated Jul 17, 2026

highEPSS 0.002

CVE-2026-50325 windows 10 1607 vulnerability

Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-50325windowsauthorization-bypass

Updated Jul 17, 2026

highEPSS 0.002

CVE-2026-50333 windows 10 1607 vulnerability

Missing authentication for critical function in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

CVE-2026-50333windowsauthentication-bypass

Updated Jul 17, 2026

highEPSS 0.002

CVE-2026-50342 windows 11 24h2 vulnerability

Improper access control in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

CVE-2026-50342windowsauthorization-bypass

Updated Jul 17, 2026

highEPSS 0.025

CVE-2026-50351 windows 10 1607 vulnerability

Improper access control in Windows Audio Compression Manager (ACM) allows an authorized attacker to elevate privileges locally.

CVE-2026-50351windowsauthorization-bypass

Updated Jul 17, 2026

highEPSS 0.002

CVE-2026-50354 windows 10 1607 vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-50354linuxwindowsmemory-corruption

Updated Jul 17, 2026

highEPSS 0.002

CVE-2026-50356 windows 10 1607 vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows App Store allows an authorized attacker to elevate privileges locally.

CVE-2026-50356windowsmicrosoftrace-condition

Updated Jul 17, 2026

highEPSS 0.004

CVE-2026-50364 windows 10 21h2 vulnerability

Improper link resolution before file access ('link following') in Windows Server Backup allows an authorized attacker to elevate privileges locally.

CVE-2026-50364windowspath-traversal

Updated Jul 17, 2026

highEPSS 0.002

CVE-2026-50384 windows 10 1809 vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clip Service allows an authorized attacker to elevate privileges locally.

CVE-2026-50384windowsmemory-corruptionrace-condition

Updated Jul 17, 2026

highEPSS 0.006

CVE-2026-50520 visual studio code vulnerability

Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code locally.

CVE-2026-50520microsoftremote-code-execution

Updated Jul 17, 2026

highEPSS 0.006

CVE-2026-50694 windows 10 1607 vulnerability

Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.

CVE-2026-50694windowsmemory-corruption

Updated Jul 17, 2026

highEPSS 0.008

CVE-2026-50695 windows 10 1607 vulnerability

Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.

CVE-2026-50695windowsmemory-corruption

Updated Jul 17, 2026

highEPSS 0.008

CVE-2026-50696 windows 10 1809 vulnerability

Heap-based buffer overflow in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network.

CVE-2026-50696windowsmemory-corruption

Updated Jul 17, 2026

highEPSS 0.017

CVE-2026-54114 windows 10 1809 vulnerability

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-54114windowsmemory-corruption

Updated Jul 17, 2026

highEPSS 0.008

CVE-2026-54119 windows 10 1607 vulnerability

Loop with unreachable exit condition ('infinite loop') in Windows Active Directory allows an unauthorized attacker to deny service over a network.

CVE-2026-54119windowsdenial-of-service

Updated Jul 17, 2026

highEPSS 0.003

CVE-2026-54122 windows 10 1607 vulnerability

Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally.

CVE-2026-54122windowsmemory-corruption

Updated Jul 17, 2026

highEPSS 0.002

CVE-2026-54127 windows 11 24h2 vulnerability

Use after free in Windows Hyper-V allows an unauthorized attacker to elevate privileges locally.

CVE-2026-54127windowsmemory-corruption

Updated Jul 17, 2026

highEPSS 0.003

CVE-2026-55899 365 apps vulnerability

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-55899microsoftinput-validationmemory-corruption

Updated Jul 17, 2026

highEPSS 0.003

CVE-2026-55948 365 apps vulnerability

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-55948microsoftmemory-corruption

Updated Jul 17, 2026

highEPSS 0.004

CVE-2026-56193 365 apps vulnerability

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVE-2026-56193microsoftinformation-disclosure

Updated Jul 17, 2026

highEPSS 0.003

CVE-2026-58618 365 apps vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-58618microsoftmemory-corruption

Updated Jul 17, 2026