Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-71352 | high | 8.8 | No | Integer underflow (wrap or wraparound) in Windows Remote Access Connection Manager allows an authorized attacker to execute code over a netw... | 2026-09-24 |
| CVE-2026-71351 | high | 7.0 | No | Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally. | 2026-09-24 |
| CVE-2026-71350 | medium | 6.8 | No | Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack. | 2026-09-24 |
| CVE-2026-71349 | medium | 6.8 | No | Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack. | 2026-09-24 |
| CVE-2026-71348 | medium | 6.8 | No | Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack. | 2026-09-24 |
| CVE-2026-71345 | high | 7.8 | No | Out-of-bounds write in Windows Spaceport.sys allows an authorized attacker to execute code locally. | 2026-09-24 |
| CVE-2026-71343 | high | 7.8 | No | Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to execute code locally. | 2026-09-24 |
| CVE-2026-71342 | high | 7.0 | No | Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. | 2026-09-24 |
| CVE-2026-71341 | medium | 5.5 | No | Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to disclose information locally. | 2026-09-24 |
| CVE-2026-71339 | medium | 6.7 | No | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | 2026-09-24 |
| CVE-2026-71338 | medium | 6.4 | No | Double free in Windows Failover Cluster allows an authorized attacker to elevate privileges locally. | 2026-09-24 |
| CVE-2026-71336 | high | 8.8 | No | Integer overflow or wraparound in Windows Work Folder Service allows an authorized attacker to execute code over a network. | 2026-09-24 |
| CVE-2026-71334 | high | 7.8 | No | Heap-based buffer overflow in Windows NFS Portmapper allows an authorized attacker to elevate privileges locally. | 2026-09-24 |
| CVE-2026-71333 | high | 7.0 | No | Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. | 2026-09-24 |
| CVE-2026-71330 | high | 7.5 | No | Exposure of sensitive system information to an unauthorized control sphere in Windows Services for NFS ONCRPC XDR Driver allows an unauthori... | 2026-09-24 |
| CVE-2026-71329 | medium | 6.8 | No | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack. | 2026-09-24 |
| CVE-2026-70587 | high | 7.5 | No | Improper null termination in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network. | 2026-09-24 |
| CVE-2026-70586 | high | 8.8 | No | Heap-based buffer overflow in Windows Paint allows an unauthorized attacker to execute code over a network. | 2026-09-24 |
| CVE-2026-70585 | high | 7.0 | No | Use after free in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to execute code locally. | 2026-09-24 |
| CVE-2026-70574 | high | 7.8 | No | Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. | 2026-09-24 |