Security Risk Severity
High Security Risks — Page 7
Published vulnerability pages grouped by high severity. Use this page to review risks that need similar prioritization.
872 published high risks
High severity
Showing 217–252 of 872 published risks.
CVE-2026-58631 windows admin center vulnerability
Improper authorization in Windows Admin Center allows an authorized attacker to execute code locally.
Updated Jul 17, 2026
CVE-2026-58635 windows 10 1809 vulnerability
Improper neutralization of special elements used in a command ('command injection') in Windows Narrator Braille allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-58636 pc manager vulnerability
Improper link resolution before file access ('link following') in Window PC Manager allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-58640 windows 10 1607 vulnerability
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
Updated Jul 17, 2026
CVE-2026-58647 power bi report server vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Power BI allows an authorized attacker to perform spoofing over a network.
Updated Jul 17, 2026
CVE-2026-47290 365 apps vulnerability
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
Updated Jul 17, 2026
CVE-2026-47642 365 apps vulnerability
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Updated Jul 17, 2026
CVE-2026-50301 365 apps vulnerability
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
Updated Jul 17, 2026
CVE-2026-50304 windows 10 1607 vulnerability
Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.
Updated Jul 17, 2026
CVE-2026-50305 windows 11 24h2 vulnerability
Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-50306 windows 10 1607 vulnerability
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-50307 windows 10 1809 vulnerability
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-50309 windows 10 1607 vulnerability
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
Updated Jul 17, 2026
CVE-2026-50313 windows 10 1607 vulnerability
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
Updated Jul 17, 2026
CVE-2026-50314 365 apps vulnerability
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
Updated Jul 17, 2026
CVE-2026-50315 windows 11 24h2 vulnerability
Null pointer dereference in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-50317 windows 11 24h2 vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Operating Systems allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-50321 windows 10 1607 vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Driver allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-50322 windows 11 24h2 vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-50326 windows 10 21h2 vulnerability
Use after free in Windows Unified Consent System allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-50327 windows 11 24h2 vulnerability
Heap-based buffer overflow in Windows Media allows an authorized attacker to execute code locally.
Updated Jul 17, 2026
CVE-2026-50467 365 apps vulnerability
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
Updated Jul 17, 2026
CVE-2026-50665 365 apps vulnerability
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
Updated Jul 17, 2026
CVE-2026-50670 windows 10 1809 vulnerability
Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-50673 windows 10 1607 vulnerability
Null pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-50688 windows 10 1607 vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-55017 365 apps vulnerability
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
Updated Jul 17, 2026
CVE-2026-55018 365 apps vulnerability
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
Updated Jul 17, 2026
CVE-2026-55022 365 apps vulnerability
Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
Updated Jul 17, 2026
CVE-2026-55032 365 apps vulnerability
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Updated Jul 17, 2026
CVE-2026-55033 365 apps vulnerability
Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Updated Jul 17, 2026
CVE-2026-55036 365 apps vulnerability
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Updated Jul 17, 2026
CVE-2026-55037 365 apps vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Updated Jul 17, 2026
CVE-2026-55038 365 apps vulnerability
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Updated Jul 17, 2026
CVE-2026-55039 365 apps vulnerability
Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Updated Jul 17, 2026
CVE-2026-55041 365 apps vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Updated Jul 17, 2026