Other CVEs.
Published CVEs classified as other, ranked by exploit odds.
-
CVE-2026-124194
Product ui does not warn user of unsafe actions in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.
-
CVE-2026-118747
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
-
CVE-2026-118153
Inefficient algorithmic complexity in Microsoft Exchange Server allows an unauthorized attacker to deny service over a network.
-
CVE-2026-114154
Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.
-
CVE-2026-114147
Missing release of memory after effective lifetime in ASP.NET Core allows an unauthorized attacker to deny service over a network.
-
CVE-2026-109478
Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.
-
CVE-2026-96176
Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny service over a network.
-
CVE-2026-112966
Uncontrolled resource consumption in Windows Security Account Manager allows an unauthorized attacker to deny service over a network.
-
CVE-2026-120796
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
-
CVE-2026-118207
Improper input validation in Microsoft Exchange Server allows an authorized attacker to execute code over a network.
-
CVE-2026-112795
Untrusted pointer dereference in Windows Security Account Manager allows an authorized attacker to deny service over a network.
-
CVE-2026-118484
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page.
-
CVE-2026-118151
External control of file name or path in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
-
CVE-2026-111309
Release of invalid pointer or reference in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
-
CVE-2026-105561
Uncontrolled resource consumption in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to deny service over a network.
-
CVE-2026-70240
Missing release of memory after effective lifetime in Windows Kerberos allows an unauthorized attacker to deny service over a network.
-
CVE-2026-118749
Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.
-
CVE-2026-110051
Incorrect conversion between numeric types in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
-
CVE-2026-118154
Reliance on untrusted inputs in a security decision in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
-
CVE-2026-67387
Untrusted pointer dereference in SQL Server allows an authorized attacker to elevate privileges over a network.
-
CVE-2026-105559
No cwe for this issue in Windows Active Directory allows an authorized attacker to deny service over a network.
-
CVE-2026-118157
Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
-
CVE-2026-121663
Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
-
CVE-2026-122475
Untrusted pointer dereference in Windows Storage Spaces Controller allows an unauthorized attacker to execute code over a network.
-
CVE-2026-118724
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
CVE-2026-118708
Release of invalid pointer or reference in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
CVE-2026-112727
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
-
CVE-2026-111308
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
CVE-2026-105520
Improper link resolution before file access ('link following') in Windows DNS allows an authorized attacker to elevate privileges over a network.
-
CVE-2026-118208
Improper access control in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network.
-
CVE-2026-110046
Off-by-one error in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
-
CVE-2026-119952
Observable timing discrepancy in Windows Schannel allows an unauthorized attacker to execute code over a network.
-
CVE-2026-83528
Exposure of PII in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote authenticated attacker with admin privileges to leak GDPR protected user information.
-
CVE-2026-119909
Uncontrolled resource consumption in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.
-
CVE-2026-119972
Uncontrolled resource consumption in Windows Remote Procedure Call allows an unauthorized attacker to deny service over a network.
-
CVE-2026-88234
Release of invalid pointer or reference in Windows iSCSI allows an unauthorized attacker to execute code over a network.
-
CVE-2026-113814
Untrusted pointer dereference in Windows Storage Spaces Controller allows an unauthorized attacker to execute code over a network.
-
CVE-2026-105542
Untrusted pointer dereference in Windows NTFS allows an unauthorized attacker to execute code over a network.
-
CVE-2026-105560
Release of invalid pointer or reference in Windows DHCP Server allows an authorized attacker to execute code over a network.
-
CVE-2026-113756
Improper access control in Windows FileCrypt Driver allows an authorized attacker to bypass a security feature over a network.
-
CVE-2026-114171
User interface (ui) misrepresentation of critical information in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
-
CVE-2026-116934
Untrusted pointer dereference in SQL Server allows an authorized attacker to elevate privileges over a network.
-
CVE-2026-118741
Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.
-
CVE-2026-107155
A permissive cross-domain policy vulnerability has been identified in the SonicOS management interface, which in specific conditions could potentially enable a remote unauthenticated attacker to perform unauthorized operations.
-
CVE-2026-118108
Improper authorization in SQL Server allows an authorized attacker to elevate privileges over a network.
-
CVE-2026-105426
Improper input validation in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote authenticated attacker with admin privileges to set arbitrary Linux kernel parameters as root.
-
CVE-2026-119976
External control of file name or path in Visual Studio Code - GitHub Pull Requests and Issues Extension allows an unauthorized attacker to disclose information over a network.
-
CVE-2026-121660
Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
-
CVE-2026-116929
Execution with unnecessary privileges in SQL Server allows an authorized attacker to elevate privileges over a network.
-
CVE-2026-119991
Weak authentication in Microsoft Configuration Manager allows an unauthorized attacker to disclose information over a network.
A list of CVEs whose flaw type is other, sorted by how likely they are to be exploited (EPSS). Classification uses the CWE weakness id where present, and a small local model otherwise.