Baza CVE
Wszystkie technologie
| Oprogramowanie | Podatność i krótki opis | Zapisz | |||
|---|---|---|---|---|---|
| Windows 10 Version 1607 / Windows 10 Version 1809 / Windows Server 2012 (+10 produktów) | CVE-2026-88173 Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network. |
8,1 | 0,51 % | Brak wpisu w KEV nie wyklucza ataków | |
| Windows 10 Version 1607 / Windows 10 Version 1809 / Windows 10 Version 21H2 (+17 produktów) | CVE-2026-88158 Out-of-bounds read in Microsoft Digest Authentication allows an authorized attacker to disclose information locally. |
5,5 | 0,29 % | Brak wpisu w KEV nie wyklucza ataków | |
| Windows 10 Version 1607 / Windows 10 Version 1809 / Windows 10 Version 21H2 (+17 produktów) | CVE-2026-88159 Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network. |
8,8 | 1,42 % | Brak wpisu w KEV nie wyklucza ataków | |
| Windows 10 Version 1607 / Windows 10 Version 1809 / Windows 10 Version 21H2 (+15 produktów) | CVE-2026-88160 Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
7,0 | 0,15 % | Brak wpisu w KEV nie wyklucza ataków | |
| Windows 10 Version 1607 / Windows 10 Version 1809 / Windows 10 Version 21H2 (+17 produktów) | CVE-2026-88161 Use after free in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally. |
7,0 | 0,25 % | Brak wpisu w KEV nie wyklucza ataków | |
| Windows 10 Version 1607 / Windows 10 Version 1809 / Windows 10 Version 21H2 (+13 produktów) | CVE-2026-88162 Improper authorization in Windows Encrypting File System (EFS) allows an authorized attacker to perform tampering locally. |
5,5 | 0,28 % | Brak wpisu w KEV nie wyklucza ataków | |
| Microsoft SharePoint Server Subscription Edition | CVE-2026-88163 Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
8,8 | 0,95 % | Brak wpisu w KEV nie wyklucza ataków | |
| Microsoft 365 Apps for Enterprise / Microsoft Office 365 for Mac / Microsoft Office LTSC 2021 (+3 produktów) | CVE-2026-88151 Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
6,5 | 0,84 % | Brak wpisu w KEV nie wyklucza ataków | |
| Windows 10 Version 1607 / Windows 10 Version 1809 / Windows 10 Version 21H2 (+17 produktów) | CVE-2026-88152 Use after free in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally. |
7,8 | 0,35 % | Brak wpisu w KEV nie wyklucza ataków | |
| Microsoft 365 Apps for Enterprise / Microsoft Office LTSC 2021 / Microsoft Office LTSC 2024 | CVE-2026-88153 Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
6,5 | 0,84 % | Brak wpisu w KEV nie wyklucza ataków | |
| Microsoft 365 Apps for Enterprise / Microsoft Office 365 for Mac / Microsoft Office LTSC 2021 (+1 produktów) | CVE-2026-88154 Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
6,5 | 0,95 % | Brak wpisu w KEV nie wyklucza ataków | |
| Microsoft SharePoint Server Subscription Edition | CVE-2026-88155 Heap-based buffer overflow in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
8,8 | 0,82 % | Brak wpisu w KEV nie wyklucza ataków | |
| Microsoft 365 Apps for Enterprise / Microsoft Office 365 for Mac / Microsoft Office LTSC 2021 (+3 produktów) | CVE-2026-88156 Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. |
9,8 | 1,17 % | Brak wpisu w KEV nie wyklucza ataków | |
| Windows 10 Version 1809 / Windows 10 Version 21H2 / Windows 10 Version 22H2 (+10 produktów) | CVE-2026-88157 Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network. |
8,8 | 0,52 % | Brak wpisu w KEV nie wyklucza ataków | |
| Microsoft 365 Apps for Enterprise / Microsoft Office 365 for Mac / Microsoft Office LTSC 2021 (+3 produktów) | CVE-2026-88144 Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. |
8,8 | 0,93 % | Brak wpisu w KEV nie wyklucza ataków | |
| Microsoft 365 Apps for Enterprise / Microsoft Office 365 for Mac / Microsoft Office LTSC 2021 (+3 produktów) | CVE-2026-88145 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
8,8 | 0,74 % | Brak wpisu w KEV nie wyklucza ataków | |
| Windows 10 Version 1809 / Windows 10 Version 21H2 / Windows 10 Version 22H2 (+10 produktów) | CVE-2026-88146 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally. |
7,0 | 0,19 % | Brak wpisu w KEV nie wyklucza ataków | |
| Windows 10 Version 1607 / Windows 10 Version 1809 / Windows 10 Version 21H2 (+15 produktów) | CVE-2026-88147 Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally. |
7,8 | 0,34 % | Brak wpisu w KEV nie wyklucza ataków | |
| Windows 10 Version 1607 / Windows 10 Version 1809 / Windows 10 Version 21H2 (+17 produktów) | CVE-2026-88149 Double free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
7,0 | 0,2 % | Brak wpisu w KEV nie wyklucza ataków | |
| Microsoft 365 Apps for Enterprise / Microsoft Office 365 for Mac / Microsoft Office LTSC 2021 (+3 produktów) | CVE-2026-88150 Use of uninitialized resource in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
8,8 | 0,76 % | Brak wpisu w KEV nie wyklucza ataków | |
| Windows 10 Version 1607 / Windows 10 Version 1809 / Windows 10 Version 21H2 (+17 produktów) | CVE-2026-88136 Improper resolution of path equivalence in WebDAV allows an authorized attacker to execute code over a network. |
8,8 | 0,95 % | Brak wpisu w KEV nie wyklucza ataków | |
| Windows 10 Version 1607 / Windows 10 Version 1809 / Windows 10 Version 21H2 (+17 produktów) | CVE-2026-88137 Files or directories accessible to external parties in WebDAV allows an authorized attacker to disclose information over a network. |
6,5 | 0,95 % | Brak wpisu w KEV nie wyklucza ataków | |
| Windows 11 Version 24H2 / Windows 11 Version 25H2 / Windows 11 version 26H1 (+3 produktów) | CVE-2026-88139 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
7,0 | 0,25 % | Brak wpisu w KEV nie wyklucza ataków | |
| Windows 10 Version 1607 / Windows 10 Version 1809 / Windows 10 Version 21H2 (+13 produktów) | CVE-2026-88140 Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally. |
5,5 | 0,39 % | Brak wpisu w KEV nie wyklucza ataków | |
| Windows 11 version 23H2 / Windows 11 Version 24H2 / Windows 11 Version 25H2 (+5 produktów) | CVE-2026-88141 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
7,0 | 0,25 % | Brak wpisu w KEV nie wyklucza ataków |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 15.11.2026, 15:02 UTC – 15.11.2026, 20:17 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.