OS & kernel CVEs.
Published CVEs that affect os & kernel software, ranked by exploit odds.
-
CVE-2026-119932
Null pointer dereference in Windows Remote Desktop allows an unauthorized attacker to deny service over a network.
-
CVE-2026-105512
Integer underflow (wrap or wraparound) in Microsoft QUIC allows an unauthorized attacker to deny service over a network.
-
CVE-2026-119958
Out-of-bounds write in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.
-
CVE-2026-96017
Use after free in DNS Server allows an authorized attacker to deny service over a network.
-
CVE-2026-96077
Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network.
-
CVE-2026-88236
Null pointer dereference in Microsoft QUIC allows an unauthorized attacker to deny service over a network.
-
CVE-2026-105515
Buffer over-read in Windows Message Queuing allows an unauthorized attacker to deny service over a network.
-
CVE-2026-116928
Out-of-bounds write in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network.
-
CVE-2026-112967
Heap-based buffer overflow in Windows Xbox Live Networking Service allows an unauthorized attacker to execute code over a network.
-
CVE-2026-119940
Integer overflow or wraparound in Windows Kerberos allows an authorized attacker to deny service over a network.
-
CVE-2026-112807
Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to deny service over a network.
-
CVE-2026-105568
Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network.
-
CVE-2026-88218
Double free in Windows DNS allows an unauthorized attacker to execute code over a network.
-
CVE-2026-96986
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.
-
CVE-2026-96134
Uncontrolled resource consumption in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
-
CVE-2026-108401
Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.
-
CVE-2026-96082
Out-of-bounds read in Windows Kerberos allows an authorized attacker to deny service over a network.
-
CVE-2026-88243
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
-
CVE-2026-108417
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.
-
CVE-2026-108418
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.
-
CVE-2026-108419
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.
-
CVE-2026-108424
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.
-
CVE-2026-96988
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.
-
CVE-2026-96970
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.
-
CVE-2026-96078
Heap-based buffer overflow in Microsoft Color Management allows an unauthorized attacker to execute code over a network.
-
CVE-2026-95901
Double free in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network.
-
CVE-2026-119969
Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.
-
CVE-2026-116697
Null pointer dereference in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to deny service over a network.
-
CVE-2026-114169
Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.
-
CVE-2026-96972
Out-of-bounds read in Windows DNS allows an unauthorized attacker to disclose information over a network.
-
CVE-2026-105579
Integer overflow or wraparound in Windows DNS allows an unauthorized attacker to disclose information over a network.
-
CVE-2026-119970
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.
-
CVE-2026-83684
Buffer over-read in Windows iSCSI Target Service allows an unauthorized attacker to disclose information over a network.
-
CVE-2026-119971
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.
-
CVE-2026-95882
Stack-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network.
-
CVE-2026-88231
Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information over a network.
-
CVE-2026-119392
Heap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized attacker to elevate privileges over a network.
-
CVE-2026-118745
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
-
CVE-2026-114152
Stack-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
-
CVE-2026-122171
Heap-based buffer overflow in Microsoft XPS Document Converter allows an unauthorized attacker to execute code over a network.
-
CVE-2026-121677
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.
-
CVE-2026-119887
Use of uninitialized resource in Windows Installer allows an unauthorized attacker to disclose information over a network.
-
CVE-2026-84590
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A remote attacker may be able to cause unexpected app termination or heap corruption.
-
CVE-2026-119890
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over a network.
-
CVE-2026-97006
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.
-
CVE-2026-96985
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.
-
CVE-2026-96987
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.
-
CVE-2026-96976
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.
-
CVE-2026-96980
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.
-
CVE-2026-96984
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.
CVEs that affect os & kernel, sorted by how likely they are to be exploited (EPSS).