{"Cloud":true,"Homeassistant":true,"Plex":true,"Proxmox1":true,"Proxmox2":true,"SecurityAlerts":[{"Title":"NCSC-2026-0141 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Windows","Link":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0141","Description":"Microsoft heeft kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de volgende categorie\u00EBn schade:\n\n- Denial-of-Service (DoS)\n- Uitvoeren van willekeurige code (root/admin-rechten)\n- Uitvoeren van willekeurige code (gebruikersrechten)\n- Verkrijgen van verhoogde rechten\n- Omzeilen van een beveiligingsmaatregel\n- Toegang tot gevoelige gegevens\n\nDe ernstigste kwetsbaarheden hebben kenmerken CVE-2026-40402, CVE-2026-41089 en CVE-2026-41096 toegewezen gekregen en bevinden zich respectievelijk in Hyper-V, NETLOGON en de DNS Client. De kwetsbaarheid in Hyper-V stelt een geauthenticeerde kwaadwillende in staat om uit de Guest-VM te breken en toegang te krijgen tot geheugen van de host en mogelijk willekeurige code uit te voeren op de host. De kwetsbaarheden in NETLOGON en de DNS Client stellen een ongeauthenticeerde kwaadwillende op afstand in staat om willekeurige code uit te voeren op het kwetsbare systeem.\n\n**Met name Domain Controllers die toegankelijk zijn vanaf externe netwerken lopen een hoog risico voor actief misbruik van de kwetsbaarheid in NETLOGON.**\n\nHet verdient altijd aanbeveling om een systeem met de rol van Domain Controller niet publiek toegankelijk te hebben en, indien dit noodzakelijk is, additionele maatregelen te hebben genomen.\n\n\u0060\u0060\u0060\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34340 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Application Identity (AppID) Subsystem: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34343 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nUndisclosed: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41095 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40398 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41096 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-34345 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-35416 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-41088 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33841 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-35420 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-40369 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Secure Boot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41097 | 6.70 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Native WiFi Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-32161 | 7.50 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Kernel-Mode Drivers: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40408 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-34332 | 8.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nTelnet Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-35423 | 5.40 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Print Spooler Components: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34342 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40410 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage Spaces Controller: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-35415 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Filtering Platform (WFP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-32209 | 4.40 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Volume Manager Extension Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40380 | 6.20 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Cryptographic Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40377 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - GRFX: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33839 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-34330 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-34331 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-34333 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-34347 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-40403 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-35438 | 8.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40402 | 9.30 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Rich Text Edit Control: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-32170 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33834 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Internet Key Exchange (IKE) Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-35424 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Netlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41089 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Storport Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34350 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40407 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-40397 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-35418 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-33835 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-34337 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K - ICOMP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33840 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-35417 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-35421 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Rich Text Edit: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-21530 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34351 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-35422 | 6.50 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-40399 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-40405 | 7.50 | Denial-of-Service                   | \n| CVE-2026-40406 | 7.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40414 | 7.40 | Denial-of-Service                   | \n| CVE-2026-40415 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-33837 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-34334 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-40401 | 6.20 | Denial-of-Service                   | \n| CVE-2026-40413 | 7.40 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34339 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42825 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-34338 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-40382 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34329 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-33838 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-35419 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-42896 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-34336 | 7.80 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Link-Layer Discovery Protocol (LLDP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34341 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n\u0060\u0060\u0060","Guid":"NCSC-2026-0141 [1.00]","PubDate":"2026-05-12T19:52:42+02:00","AdvisoryID":"NCSC-2026-0141","Versie":"1.00","Kans":"M","Schade":"H"},{"Title":"NCSC-2026-0147 [1.00] [M/H] Kwetsbaarheden verholpen in Siemens-producten","Link":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0147","Description":"Siemens heeft kwetsbaarheden verholpen in verschillende (OT-)producten. Het gaat onder andere om producten in de Siemens RUGGEDCOM-, SCALANCE-, SIMATIC-, SIMIT-, SINAMICS-, SIPROTEC-, SENTRON- en Solid Edge-productreeksen. De kwetsbaarheden stellen een kwaadwillende mogelijk in staat aanvallen uit te voeren die kunnen leiden tot de volgende categorie\u00EBn schade:\n\n- Denial-of-Service (DoS)\n- Manipulatie van gegevens\n- (Remote) code execution\n- Toegang tot gevoelige gegevens\n- Verhogen van rechten\n\nVoor succesvol misbruik van de genoemde kwetsbaarheden moet de kwaadwillende (netwerk)toegang hebben tot het kwetsbare product. Het is goed gebruik een dergelijke producten niet publiek toegankelijk te hebben.","Guid":"NCSC-2026-0147 [1.00]","PubDate":"2026-05-13T08:33:28+02:00","AdvisoryID":"NCSC-2026-0147","Versie":"1.00","Kans":"M","Schade":"H"},{"Title":"NCSC-2026-0146 [1.00] [M/H] Kwetsbaarheid verholpen in Microsoft SQL Server","Link":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0146","Description":"Microsoft heeft een kwetsbaarheid verholpen in SQL Server. Een geauthenticeerde kwaadwillende kan de kwetsbaarheid misbruiken om willekeurige code uit te voeren onder het account van de SQL server zelf.","Guid":"NCSC-2026-0146 [1.00]","PubDate":"2026-05-12T19:53:47+02:00","AdvisoryID":"NCSC-2026-0146","Versie":"1.00","Kans":"M","Schade":"H"},{"Title":"NCSC-2026-0145 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Dynamics","Link":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0145","Description":"Microsoft heeft kwetsbaarheden verholpen in diverse componenten van Dynamics. Een geauthenticeerde kwaadwillende kan de kwetsbaarheden misbruiken om zich verhoogde rechten toe te kennen, willekeurige code uit te voeren en/of toegang te krijgen tot gevoelige gegevens.\n\nDe kwetsbaarheid met kenmerk CVE-2026-33821 is reeds centraal verholpen door Microsoft en slechts toegevoegd ter informatie. Er zijn geen acties benodigd voor deze kwetsbaarheid.\n\n\u0060\u0060\u0060\nDynamics Business Central: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40417 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Dynamics 365 (on-premises): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42898 | 9.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-42833 | 9.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nPower Automate: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40374 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Dynamics 365 Customer Insights: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33821 | 7.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\u0060\u0060\u0060\n","Guid":"NCSC-2026-0145 [1.00]","PubDate":"2026-05-12T19:53:37+02:00","AdvisoryID":"NCSC-2026-0145","Versie":"1.00","Kans":"M","Schade":"H"},{"Title":"NCSC-2026-0144 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Office","Link":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0144","Description":"Microsoft heeft kwetsbaarheden verholpen in diverse Office producten. Een kwaadwillende kan de kwetsbaarheden misbruiken om zich voor te doen als andere gebruiker, of willekeurige code uit te voeren met rechten van het slachtoffer en mogelijk toegang te krijgen tot gevoelige gegevens in de context van het slachtoffer.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen.\n\nDe kwetsbaarheid met kenmerk CVE-2026-33823 is reeds door Microsoft centraal verholpen en slechts toegevoegd ter informatie. Er zijn geen verdere acties benodigd voor deze kwetsbaarheid.\n\n\u0060\u0060\u0060\nMicrosoft Teams: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-32185 | 5.50 | Voordoen als andere gebruiker       | \n| CVE-2026-33823 | 9.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41102 | 7.10 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nM365 Copilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42893 | 7.40 | \u003CVertaal: Tampering\u003E                | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-35440 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40364 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-40366 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-40421 | 4.30 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40361 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-40367 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nOffice for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42831 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40363 | 8.40 | Uitvoeren van willekeurige code     | \n| CVE-2026-40419 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-40358 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-35439 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-40368 | 8.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-33110 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-33112 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-40357 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-40365 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40360 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-40359 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-40362 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-42832 | 7.70 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Click-To-Run: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40418 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-35436 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-40420 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\u0060\u0060\u0060\n","Guid":"NCSC-2026-0144 [1.00]","PubDate":"2026-05-12T19:53:28+02:00","AdvisoryID":"NCSC-2026-0144","Versie":"1.00","Kans":"M","Schade":"H"},{"Title":"NCSC-2026-0143 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Developer Tools","Link":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0143","Description":"Microsoft heeft kwetsbaarheden verholpen in diverse Developer Tools. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de volgende categorie\u00EBn schade:\n\n- Denial-of-Service (DoS)\n- Omzeilen van een beveiligingsmaatregel\n- Uitvoeren van willekeurige code (gebruikersrechten)\n- Toegang tot gevoelige gegevens\n\nDe kwetsbaarheid met kenmerk CVE-2026-42826 is centraal verholpen door Microsoft en slechts toegevoegd ter informatie. Er zijn hiervoor geen verdere acties benodigd.\n\n\u0060\u0060\u0060\nAzure DevOps: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42826 | 10.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nVisual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41610 | 6.30 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-41611 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-41612 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-41613 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Data Formulator: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41094 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nASP.NET Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42899 | 7.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\n.NET: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-32177 | 7.30 | Denial-of-Service                   | \n| CVE-2026-35433 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-32175 | 4.30 | \u003CVertaal: Tampering\u003E                | \n|----------------|------|-------------------------------------|\n\nGitHub Copilot and Visual Studio: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41109 | 8.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\u0060\u0060\u0060\n","Guid":"NCSC-2026-0143 [1.00]","PubDate":"2026-05-12T19:53:17+02:00","AdvisoryID":"NCSC-2026-0143","Versie":"1.00","Kans":"M","Schade":"H"},{"Title":"NCSC-2026-0142 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Azure","Link":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0142","Description":"Microsoft heeft kwetsbaarheden verholpen in diverse Azure componenten. Een kwaadwillende kan de kwetsbaarheden misbruiken om zich voor te doen als andere gebruiker, zich verhoogde rechten toe te kennen, willekeurige code uit te voeren en mogelijk daarmee toegang te krijgen tot gevoelige gegevens.\n\nDe kwetsbaarheden met kenmerk CVE-2026-40379, CVE-2026-32207, CVE-2026-33109, CVE-2026-33844, CVE-2026-34327, CVE-2026-35428, CVE-2026-35435 en CVE-2026-41105 zijn reeds centraal verholpen door Microsoft en slechts opgenomen ter informatie. Voor deze kwetsbaarheden zijn geen acties benodigd.\n\n\u0060\u0060\u0060\nAzure Machine Learning: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-32207 | 8.80 | Voordoen als andere gebruiker       | \n| CVE-2026-33833 | 8.20 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nAzure Monitor Agent: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-32204 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-42830 | 6.50 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Partner Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-34327 | 8.20 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nAzure Connected Machine Agent: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40381 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure SDK: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33117 | 9.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nMicrosoft SSO Plugin for Jira \u0026 Confluence: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41103 | 9.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure Notification Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41105 | 8.10 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure Logic Apps: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42823 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure Entra ID: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-40379 | 9.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-41086 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure AI Foundry M365 published agents: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-35435 | 8.60 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure Cloud Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-35428 | 9.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nAzure Managed Instance for Apache Cassandra: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-33109 | 9.90 | Uitvoeren van willekeurige code     | \n| CVE-2026-33844 | 9.00 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\u0060\u0060\u0060","Guid":"NCSC-2026-0142 [1.00]","PubDate":"2026-05-12T19:53:04+02:00","AdvisoryID":"NCSC-2026-0142","Versie":"1.00","Kans":"M","Schade":"H"},{"Title":"NCSC-2026-0140 [1.00] [M/H] Kwetsbaarheden verholpen in diverse SAP-producten","Link":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0140","Description":"SAP heeft kwetsbaarheden verholpen in SAP S/4HANA, SAP Commerce Cloud, SAP Forecasting \u0026 Replenishment, SAP NetWeaver Application Server voor ABAP, SAP Business Server Pages, SAP BusinessObjects Business Intelligence Platform, SAP Strategic Enterprise Management Scorecard Wizard, SAPUI5 Search UI, SAP Financial Consolidation, SAP Incentive and Commission Management, SAP Application Server ABAP voor SAP NetWeaver en ABAP Platform, en SAP HANA Deployment Infrastructure. De kwetsbaarheden betreffen verschillende typen beveiligingsproblemen binnen de genoemde SAP-producten.\n\n- In SAP S/4HANA\u0027s Enterprise Search for ABAP module kunnen geauthenticeerde aanvallers SQL-injecties uitvoeren, wat kan leiden tot ongeautoriseerde toegang tot gevoelige data en applicatiecrashes.\n- SAP Commerce Cloud bevat een configuratiefout in Spring Security waardoor ongeauthenticeerde gebruikers kwaadaardige configuraties kunnen uploaden en daarmee willekeurige server-side code kunnen uitvoeren.\n- In SAP Forecasting \u0026 Replenishment en SAP NetWeaver Application Server voor ABAP kunnen geauthenticeerde gebruikers met administratieve rechten OS-commando\u0027s uitvoeren, wat kan resulteren in systeemcompromittering of verstoring van de applicatie.\n- SAP S/4HANA Condition Maintenance heeft een ontbrekende autorisatiecontrole waardoor geauthenticeerde gebruikers records kunnen bekijken en wijzigen zonder de juiste permissies.\n- SAP Business Server Pages Application component TAF_APPLAUNCHER en SAP NetWeaver Application Server ABAP bevatten Cross-Site Scripting (XSS) kwetsbaarheden die het mogelijk maken om gebruikers te misleiden via kwaadaardige links.\n- SAP BusinessObjects Business Intelligence Platform heeft een Cross Site Request Forgery (CSRF) kwetsbaarheid die geauthenticeerde gebruikers kan misleiden tot het uitvoeren van ongewenste acties.\n- SAP Strategic Enterprise Management Scorecard Wizard kent een autorisatiefout waardoor geauthenticeerde gebruikers toegang krijgen tot niet-toegestane informatie en instellingen kunnen wijzigen.\n- SAPUI5 Search UI is kwetsbaar voor URL-parameter manipulatie die kan leiden tot het injecteren van kwaadaardige content en gebruikers kan omleiden naar aanvallersites.\n- SAP Financial Consolidation bevat een kwetsbaarheid waarmee geauthenticeerde gebruikers sessies van andere gebruikers kunnen be\u00EBindigen, wat de beschikbaarheid be\u00EFnvloedt.\n- SAP Incentive and Commission Management heeft onvoldoende autorisatiecontrole waardoor geauthenticeerde gebruikers database tabellen kunnen aanpassen.\n- SAP Application Server ABAP voor SAP NetWeaver en ABAP Platform bevat een code-injectie kwetsbaarheid die geauthenticeerde gebruikers kunnen misbruiken om willekeurige code uit te voeren.\n- SAP HANA Deployment Infrastructure bevat een SQL-injectie kwetsbaarheid in de @sap/hdi-deploy package, waarbij gebruikers met hoge privileges dynamische SQL-query\u0027s kunnen manipuleren, wat de vertrouwelijkheid en beschikbaarheid kan be\u00EFnvloeden.\n\nDaarnaast is er een gerelateerde kwetsbaarheid in Apache Log4j Core (versies 2.0-beta9 tot 2.25.2) met ontbrekende TLS hostname verificatie, die man-in-the-middle aanvallen mogelijk maakt en ook diverse SAP-producten en andere software be\u00EFnvloedt.","Guid":"NCSC-2026-0140 [1.00]","PubDate":"2026-05-12T14:21:42+02:00","AdvisoryID":"NCSC-2026-0140","Versie":"1.00","Kans":"M","Schade":"H"},{"Title":"NCSC-2026-0139 [1.00] [M/H] Kwetsbaarheden verholpen in Apple MacOS","Link":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0139","Description":"Apple heeft meerdere kwetsbaarheden verholpen in diverse versies van macOS (inclusief Sequoia, Sonoma en Tahoe versies). De kwetsbaarheden betreffen onder andere fouten in geheugenbeheer zoals buffer overflows, use-after-free, out-of-bounds read en write, en integer overflow, die kunnen leiden tot onverwachte applicatie- of systeemcrashes, denial-of-service, of ongeautoriseerde toegang tot kernel- of gebruikersgegevens. Verder zijn er problemen opgelost met betrekking tot sandbox escape, privilege escalatie naar root, bypass van Content Security Policy, onjuiste permissie- en toegangscontrole, race conditions, logging die gevoelige informatie lekt, en bypass van Gatekeeper beveiligingsmechanismen. Sommige kwetsbaarheden kunnen worden misbruikt via speciaal vervaardigde bestanden, webcontent, of netwerkverkeer. De fixes omvatten verbeterde validatie van invoer, strengere toegangscontrole, verbeterde geheugen- en statusbeheer, en versterkte sandboxing en logging mechanismen.","Guid":"NCSC-2026-0139 [1.00]","PubDate":"2026-05-12T14:19:43+02:00","AdvisoryID":"NCSC-2026-0139","Versie":"1.00","Kans":"M","Schade":"H"},{"Title":"NCSC-2026-0138 [1.00] [M/H] Kwetsbaarheden verholpen in Apple iOS en iPadOS","Link":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0138","Description":"Apple heeft meerdere kwetsbaarheden verholpen in diverse versies van iOS en iPadOS De kwetsbaarheden betreffen onder andere onjuiste geheugenbeheermechanismen zoals use-after-free, buffer overflows, out-of-bounds reads en writes, race conditions, type confusion, null pointer dereferences, en onvoldoende inputvalidatie. Deze kunnen leiden tot onverwachte applicatie- of systeemcrashes, denial-of-service, ongeautoriseerde toegang tot gevoelige gebruikers- of kerneldata, privilege-escalatie, en het omzeilen van beveiligingsmechanismen zoals Content Security Policy en sandboxing. Sommige kwetsbaarheden maken het mogelijk dat een aanvaller code met kernel-privileges uitvoert of systeemstabiliteit verstoort. De problemen kunnen worden geactiveerd door het verwerken van speciaal vervaardigde bestanden, webcontent, of netwerkverkeer. De fixes omvatten verbeterde validatie, strengere toegangscontroles, en verbeterde geheugen- en state managementmechanismen.","Guid":"NCSC-2026-0138 [1.00]","PubDate":"2026-05-12T14:18:59+02:00","AdvisoryID":"NCSC-2026-0138","Versie":"1.00","Kans":"M","Schade":"H"},{"Title":"NCSC-2026-0137 [1.00] [M/H] Kwetsbaarheden verholpen in LiteLLM door BerriAI","Link":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0137","Description":"BerriAI heeft kwetsbaarheden verholpen in LiteLLM, specifiek in versies 1.74.2 tot en met 1.83.6. LiteLLM is een veelgebruikte proxy om op gecentraliseerde wijze API\u0027s naar een groot aantal LLM systemen te beheren.\n\nDe eerste kwetsbaarheid betreft een SQL-injectie in het proxy API key verificatiemechanisme, waardoor niet-geauthenticeerde aanvallers SQL-injectieaanvallen kunnen uitvoeren om proxy databasegegevens te lezen en te wijzigen. Dit kan leiden tot het compromitteren van credentials en verdere ongeautoriseerde toegang tot het systeem. De tweede kwetsbaarheid betreft twee preview endpoints in de MCP server feature die volledige serverconfiguraties accepteren. Elke geauthenticeerde gebruiker met een geldige proxy API key kan hiermee willekeurige commando\u0027s uitvoeren op de proxy host, zonder dat hiervoor administratieve rechten vereist zijn. Deze kwetsbaarheid maakt ongeautoriseerde command execution mogelijk.","Guid":"NCSC-2026-0137 [1.00]","PubDate":"2026-05-11T08:38:59+02:00","AdvisoryID":"NCSC-2026-0137","Versie":"1.00","Kans":"M","Schade":"H"},{"Title":"NCSC-2026-0136 [1.00] [M/H] Kwetsbaarheden verholpen in Cisco Unity Connection","Link":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0136","Description":"Cisco heeft meerdere kwetsbaarheden verholpen in Cisco Unity Connection. De kwetsbaarheden bevinden zich in de web management interface en de Web Inbox web UI van Cisco Unity Connection. Geauthenticeerde aanvallers met geldige inloggegevens kunnen arbitrary code uitvoeren met root privileges, waardoor zij volledige controle over het apparaat krijgen. Daarnaast is er een server-side request forgery (SSRF) kwetsbaarheid die het mogelijk maakt om interne services te manipuleren. Sommige SSRF-aanvallen kunnen ook door niet-geauthenticeerde aanvallers worden uitgevoerd door onjuiste inputvalidatie in de Web Inbox web UI. Deze combinatie van kwetsbaarheden maakt het mogelijk om ongeautoriseerde code uit te voeren en interne systemen te be\u00EFnvloeden.","Guid":"NCSC-2026-0136 [1.00]","PubDate":"2026-05-08T15:08:42+02:00","AdvisoryID":"NCSC-2026-0136","Versie":"1.00","Kans":"M","Schade":"H"},{"Title":"NCSC-2026-0135 [1.00] [H/H] Kwetsbaarheden verholpen in Ivanti Endpoint Manager Mobile","Link":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0135","Description":"Ivanti heeft vijf kwetsbaarheden verholpen in Endpoint Manager Mobile (EPMM), ook wel bekend als MobileIron. De kwetsbaarheid met het kenmerk CVE-2026-6973 stelt een geauthenticeerde kwaadwillende met administratieve toegang in staat om op afstand willekeurige code uit te voeren met beheerdersrechten. Van de kwetsbaarheid met kenmerk CVE-2026-6973 meldt Ivanti dat deze actief is misbruikt bij een zeer beperkt aantal klanten. Om succesvol misbruik te bewerkstelligen moet de kwaadwillende beschikken over valide inloggegevens van een account met adminrechten. Ivanti geeft aan dat klanten die het advies in januari hebben opgevolgd om hun inloggegevens te vernieuwen, aanzienlijk minder risico lopen.\n\nDe kwetsbaarheid met CVE-2026-5786 stelt een geauthenticeerde kwaadwillende op afstand in staat om beheertoegang\nte verkrijgen. De kwetsbaarheid met CVE-2026-5787 stelt een niet-geauthenticeerde kwaadwillende in staat om zich voor te doen als\neen geregistreerd Sentry systeem, om zodoende door een Certificate Authority (CA) ondertekende client certificaten \nte verkrijgen. De kwetsbaarheid CVE-2026-5788 stelt een niet-geauthenticeerde kwaadwillende op afstand in staat om willekeurige\ncode uit te voeren. De kwetsbaarheid CVE-2026-7821 stelt een niet-geauthenticeerde kwaadwillende in staat om een apparaat te registreren\naan een set van niet-geregistreerde apparaten en toegang te verkrijgen tot (gevoelige) gegevens.\n\nHet NCSC verwacht dat op korte termijn Proof-of-Concept code publiek beschikbaar komt. Dit vergroot de kans grootschalig misbruik aanzienlijk.","Guid":"NCSC-2026-0135 [1.00]","PubDate":"2026-05-07T18:17:26+02:00","AdvisoryID":"NCSC-2026-0135","Versie":"1.00","Kans":"H","Schade":"H"},{"Title":"NCSC-2026-0134 [1.00] [M/H] Kwetsbaarheden verholpen in Apache HTTP Server","Link":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0134","Description":"Apache Software Foundation heeft meerdere kwetsbaarheden verholpen in Apache HTTP Server. De kwetsbaarheden betreffen verschillende modules en functionaliteiten binnen Apache HTTP Server. De meest ernstige kwetsbaarheid betreft een double free in de HTTP/2-implementatie, die het voor een aanvaller mogelijk maakt om willekeurige code uit te voeren voorafgaand aan authenticatie. \n\nLokale .htaccess auteurs kunnen via een privilege-escalatie toegang krijgen tot bestanden met httpd-gebruikersrechten. Het mod_proxy_ajp module bevat een heap-based buffer overflow en een out-of-bounds read, waardoor geheugenbeschadiging kan optreden. In de mod_md module is een resource allocatieprobleem aanwezig dat de serverprestaties kan be\u00EFnvloeden. De mod_dav_lock module bevat een NULL pointer dereference die kan leiden tot servercrashes en daarmee denial of service. De mod_auth_digest module kent een timing attack die Digest authenticatie kan omzeilen. De mod_authn_socache module heeft een NULL pointer dereference die crashes veroorzaakt bij caching forward proxy configuraties. Verder is er een HTTP response splitting kwetsbaarheid die manipulatie van HTTP headers mogelijk maakt. Daarnaast is er een improper null termination en out-of-bounds read in de core server functionaliteit, en een buffer over-read die kan leiden tot informatielekken of instabiliteit.","Guid":"NCSC-2026-0134 [1.00]","PubDate":"2026-05-06T13:33:26+02:00","AdvisoryID":"NCSC-2026-0134","Versie":"1.00","Kans":"M","Schade":"H"},{"Title":"NCSC-2026-0133 [1.00] [M/H] Kwetsbaarheden verholpen in Progress MOVEit Automation","Link":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0133","Description":"Progress heeft kwetsbaarheden verholpen in MOVEit Automation. De kwetsbaarheid met kenmerk CVE-2026-4670 betreft een bypass van de authenticatie in MOVEit Automation. Een kwaadwillende zonder rechten kan deze kwetsbaarheid misbruiken zonder dat daar gebruikersinteractie voor nodig is. \n\nDe tweede kwetsbaarheid met kenmerk CVE-2026-5174 betreft een onjuiste invoervalidatie in Progress Software MOVEit Automation en maakt privilege-escalatie mogelijk.\n\nDeze kwetsbaarheden zijn aanwezig in versies 2025.0.0 tot maar niet inclusief 2025.0.9, versies 2024.0.0 tot maar niet inclusief 2024.1.8, en alle versies v\u00F3\u00F3r 2024.0.0. \n\n\n","Guid":"NCSC-2026-0133 [1.00]","PubDate":"2026-05-06T11:18:44+02:00","AdvisoryID":"NCSC-2026-0133","Versie":"1.00","Kans":"M","Schade":"H"},{"Title":"NCSC-2026-0132 [1.01] [M/H] Kwetsbaarheid verholpen in Palo Alto Networks PAN-OS","Link":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0132","Description":"Palo Alto Networks heeft een kwetsbaarheid verholpen in PAN-OS, specifiek in de User-ID Authentication Portal component van PA-Series en VM-Series firewalls. De kwetsbaarheid betreft een buffer overflow in de User-ID Authentication Portal, waardoor niet-geauthenticeerde aanvallers willekeurige code kunnen uitvoeren met root privileges. Prisma Access, Cloud NGFW en Panorama appliances zijn niet kwetsbaar. Het is gangbare praktijk om de User-ID Authentication Portal niet direct aan het internet bloot te stellen. Exploitatie kan leiden tot volledige systeemcompromittering via de authenticatieportal.\n\nPalo Alto heeft beperkt misbruik waargenomen, gericht op Palo Alto Networks User-ID\u2122-authenticatieportalen die blootgesteld zijn aan niet-vertrouwde IP-adressen en/of het openbare internet.  Het is niet gebruikelijk om het User-ID\u2122-authenticatieportalal direct publiekelijk aan het internet bloot te stellen.","Guid":"NCSC-2026-0132 [1.01]","PubDate":"2026-05-06T10:42:18+02:00","AdvisoryID":"NCSC-2026-0132","Versie":"1.01","Kans":"M","Schade":"H"},{"Title":"NCSC-2026-0131 [1.00] [M/H] Kwetsbaarheid verholpen in Linux kernel cryptographic subsystem","Link":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0131","Description":"De Linux kernel heeft een kwetsbaarheid verholpen in de algif_aead crypto module binnen het cryptographic subsystem. De kwetsbaarheid bevindt zich in de algif_aead crypto module van de Linux kernel, waar een fout in de in-place operatie optrad wanneer bron- en bestemmingsmappings verschilden. Hiermee is het mogelijk om voor een gebruiker zonder sudo rechten verhoogde privileges te verkrijgen.","Guid":"NCSC-2026-0131 [1.00]","PubDate":"2026-05-01T08:13:56+02:00","AdvisoryID":"NCSC-2026-0131","Versie":"1.00","Kans":"M","Schade":"H"},{"Title":"NCSC-2026-0130 [1.00] [H/H] Kwetsbaarheid verholpen in cPanel en WHM","Link":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0130","Description":"cPanel heeft een kwetsbaarheid verholpen in cPanel en WHM producten, inclusief versies na 11.40 en v\u00F3\u00F3r de specifieke gepatchte releases. De kwetsbaarheid betreft een authenticatieomzeiling die ontstaat door CRLF-injectie in sessiebestanden, waardoor aanvallers sessies kunnen vervalsen. Daarnaast is de loginflow zelf kwetsbaar, waardoor niet-geauthenticeerde externe aanvallers de authenticatiemechanismen kunnen omzeilen. Hierdoor kan ongeautoriseerde toegang tot het WHM control panel met rootrechten worden verkregen.","Guid":"NCSC-2026-0130 [1.00]","PubDate":"2026-04-30T10:00:11+02:00","AdvisoryID":"NCSC-2026-0130","Versie":"1.00","Kans":"H","Schade":"H"},{"Title":"NCSC-2026-0129 [1.00] [M/H] Kwetsbaarheden verholpen in Apache Camel","Link":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0129","Description":"Apache Software Foundation heeft kwetsbaarheden verholpen in Apache Camel. De kwetsbaarheden bevinden zich in verschillende componenten van Apache Camel. De problemen betreffen onder andere onveilige deserialisatie, onvoldoende filtering van e-mailheaders, onjuiste authenticatiepadmatching, en onjuiste verwerking van interne headers. De meest ernstige kwetsbaarheid stelt kwaadwillenden in staat om ongeauthenticeerd op afstand willekeurige code uit te voeren. De kwetsbaarheden zijn aanwezig in diverse versies van Apache Camel, met name vanaf versie 3.0.0 tot net voor de gepatchte versies 4.14.6, 4.14.7, 4.18.1, 4.18.2, 4.19.0 en 4.20.0, afhankelijk van de component. De fixes omvatten onder meer het toepassen van veilige deserialisatie, correcte filtering van headers, en verbeterde authenticatiecontroles.","Guid":"NCSC-2026-0129 [1.00]","PubDate":"2026-04-29T10:12:14+02:00","AdvisoryID":"NCSC-2026-0129","Versie":"1.00","Kans":"M","Schade":"H"},{"Title":"NCSC-2026-0128 [1.00] [M/H] Kwetsbaarheden verholpen in GitLab EE en CE","Link":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0128","Description":"GitLab Inc. heeft meerdere kwetsbaarheden verholpen in GitLab Community Edition en Enterprise Edition, specifiek in versies vari\u00EBrend van 9.2 tot voor 18.11.1, inclusief diverse 18.x releases. De kwetsbaarheden betreffen verschillende componenten van GitLab, waaronder de discussions endpoint, GraphQL API, note retrieval, issue import, Mermaid sandbox, Storybook development environment, issue rendering, web interface en Virtual Registries. Geauthenticeerde gebruikers kunnen door onvoldoende resource limits of onjuiste inputvalidatie resource-exhaustie veroorzaken, wat leidt tot Denial-of-Service. Daarnaast zijn er problemen met onjuiste autorisatiecontroles waardoor project owners group fork preventie kunnen omzeilen, en met onvoldoende CSRF-bescherming waardoor ongeauthenticeerde gebruikers GraphQL mutaties kunnen uitvoeren. Verder is er een cross-site scripting (XSS) kwetsbaarheid die ongeauthenticeerde gebruikers toestaat om JavaScript code in de browser van een gebruiker uit te voeren. Ook kunnen gebruikers door onjuiste toegangscontrole de titels van vertrouwelijke issues in publieke projecten inzien en toegang krijgen tot Virtual Registries via onjuist gescopeerde credentials. Sommige kwetsbaarheden maken het mogelijk om ongeautoriseerde content te injecteren in browser sessies van andere gebruikers. De kwetsbaarheden zijn aanwezig in meerdere opeenvolgende versies en betreffen zowel Community als Enterprise edities van GitLab.","Guid":"NCSC-2026-0128 [1.00]","PubDate":"2026-04-23T13:21:11+02:00","AdvisoryID":"NCSC-2026-0128","Versie":"1.00","Kans":"M","Schade":"H"},{"Title":"NCSC-2026-0127 [1.00] [M/H] Kwetsbaarheden verholpen in Oracle PeopleSoft","Link":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0127","Description":"Oracle heeft kwetsbaarheden verholpen in Oracle PeopleSoft. De kwetsbaarheden stellen ongeauthenticeerde aanvallers in staat om toegang te krijgen tot gevoelige gegevens en deze te wijzigen. Daarbij kunnen de kwetsbaarheden leiden tot een denial-of-service van de betreffende producten.","Guid":"NCSC-2026-0127 [1.00]","PubDate":"2026-04-22T16:10:36+02:00","AdvisoryID":"NCSC-2026-0127","Versie":"1.00","Kans":"M","Schade":"H"},{"Title":"NCSC-2026-0126 [1.00] [M/H] Kwetsbaarheden verholpen in Oracle E-Business Suite","Link":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0126","Description":"Oracle heeft kwetsbaarheden verholpen in Oracle E-Business Suite. De kwetsbaarheden bevinden zich in verschillende componenten van Oracle E-Business Suite, waaronder Oracle Advanced Inbound Telephony, Oracle Enterprise Command Center Framework, Oracle Advanced Supply Chain Planning en Oracle Flow Manufacturing. Deze kwetsbaarheden kunnen worden misbruikt door ongeauthenticeerde of hooggeprivilegieerde aanvallers, wat kan leiden tot ongeautoriseerde toegang en gegevensmanipulatie.","Guid":"NCSC-2026-0126 [1.00]","PubDate":"2026-04-22T14:56:26+02:00","AdvisoryID":"NCSC-2026-0126","Versie":"1.00","Kans":"M","Schade":"H"},{"Title":"NCSC-2026-0125 [1.00] [M/H] Kwetsbaarheden verholpen in Oracle Enterprise Manager","Link":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0125","Description":"Oracle heeft kwetsbaarheden verholpen in Enterprise Manager Base Platform (13.5, 24.1). De kwetsbaarheden stellen niet-geauthenticeerde aanvallers in staat om ongeautoriseerde toegang te verkrijgen, of kunnen leiden tot een denial-of-service via HTTP.","Guid":"NCSC-2026-0125 [1.00]","PubDate":"2026-04-22T14:46:17+02:00","AdvisoryID":"NCSC-2026-0125","Versie":"1.00","Kans":"M","Schade":"H"},{"Title":"NCSC-2026-0124 [1.00] [M/H] Kwetsbaarheden verholpen in Oracle Identity Manager Connector","Link":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0124","Description":"Oracle heeft meerdere kwetsbaarheden verholpen in Oracle Identity Manager Connector versie 12.2.1.4.0. De kwetsbaarheden in Oracle Identity Manager Connector 12.2.1.4.0 stellen een aanvaller zonder authenticatie in staat om via netwerktoegang over HTTPS of HTTP ongeautoriseerde acties uit te voeren, zoals het cre\u00EBren, verwijderen of wijzigen van kritieke data. Daarnaast kan een aanvaller een denial-of-service veroorzaken door de service te laten crashen of hangen. Ook is er een kwetsbaarheid waarbij een aanvaller met lage privileges via LDAP toegang kan krijgen om kritieke data te lezen, wijzigen of verwijderen. ","Guid":"NCSC-2026-0124 [1.00]","PubDate":"2026-04-22T13:33:45+02:00","AdvisoryID":"NCSC-2026-0124","Versie":"1.00","Kans":"M","Schade":"H"},{"Title":"NCSC-2026-0123 [1.00] [M/H] Kwetsbaarheid verholpen in ASP.NET Core van Microsoft","Link":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0123","Description":"Microsoft heeft een kwetsbaarheid verholpen in ASP.NET Core. De kwetsbaarheid ontstaat door onjuiste verificatie van cryptografische handtekeningen binnen ASP.NET Core. Hierdoor kan een onbevoegde aanvaller binnen een netwerk privileges verhogen door beveiligingscontroles te omzeilen en ongeautoriseerde toegang met verhoogde rechten te verkrijgen.","Guid":"NCSC-2026-0123 [1.00]","PubDate":"2026-04-22T11:40:27+02:00","AdvisoryID":"NCSC-2026-0123","Versie":"1.00","Kans":"M","Schade":"H"}],"CveAlerts":[{"CvssScore":"HIGH 7.2","CveId":"CVE-2026-6888","Description":"Affected products:\nSaaS Composer\nIoTSuite Growth Linux docker\nIoTSuite Starter Linux docker\nIoT Edge Linux docker\nIoT Edge Windows\nWebAccess/SCADA\nWebAccess SaaS-Composer\nECOWatch SaaS-Composer\n\nDescription:\nSuccessful exploitation of the SQL injection vulnerability could allow a remote authenticated attacker to\nexecute arbitrary commands via a specific interface,\npotentially enabling the attacker to access, modify, or delete sensitive\ninformation within the database.","Link":"https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-050/","Title":"CVE-2026-6888 [HIGH 7.2] Successful exploitation of the SQL injection vulnerability could allow a remote authenticated attacker to\nexecute arbitrary commands via a specific interface,\npotentially enab"},{"CvssScore":"HIGH 7.2","CveId":"CVE-2026-6888","Description":"Affected products:\nSaaS Composer\nIoTSuite Growth Linux docker\nIoTSuite Starter Linux docker\nIoT Edge Linux docker\nIoT Edge Windows\nWebAccess/SCADA\nWebAccess SaaS-Composer\nECOWatch SaaS-Composer\n\nDescription:\nSuccessful exploitation of the SQL injection vulnerability could allow a remote authenticated attacker to\nexecute arbitrary commands via a specific interface,\npotentially enabling the attacker to access, modify, or delete sensitive\ninformation within the database.","Link":"https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-050/","Title":"CVE-2026-6888 [HIGH 7.2] Successful exploitation of the SQL injection vulnerability could allow a remote authenticated attacker to\nexecute arbitrary commands via a specific interface,\npotentially enab"},{"CvssScore":"0.0","CveId":"CVE-2026-44412","Description":"Affected products:\nSolid Edge SE2026\n\nDescription:\nA vulnerability has been identified in Solid Edge SE2026 (All versions \u003C V226.0 Update 5). The affected applications contain a stack based overflow vulnerability while parsing specially crafted PAR files.\r\nThis could allow an attacker to execute code in the context of the current process.","Link":"https://cert-portal.siemens.com/productcert/html/ssa-921111.html","Title":"CVE-2026-44412 [0.0] A vulnerability has been identified in Solid Edge SE2026 (All versions \u003C V226.0 Update 5). The affected applications contain a stack based overflow vulnerability while parsing spe"},{"CvssScore":"HIGH 7.8","CveId":"CVE-2026-42896","Description":"Affected products:\nWindows 11 Version 24H2\nWindows 11 Version 25H2\nWindows 11 version 26H1\nWindows Server 2025\nWindows Server 2025 (Server Core installation)\n\nDescription:\nInteger overflow or wraparound in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.","Link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42896","Title":"CVE-2026-42896 [HIGH 7.8] Integer overflow or wraparound in Windows DWM Core Library allows an authorized attacker to elevate privileges locally."},{"CvssScore":"HIGH 7.0","CveId":"CVE-2026-42825","Description":"Affected products:\nWindows 10 Version 1607\nWindows 10 Version 1809\nWindows 10 Version 21H2\nWindows 10 Version 22H2\nWindows 11 version 22H3\nWindows 11 Version 23H2\nWindows 11 Version 24H2\nWindows 11 Version 25H2\nWindows 11 version 26H1\nWindows Server 2012\nWindows Server 2012 (Server Core installation)\nWindows Server 2012 R2\nWindows Server 2012 R2 (Server Core installation)\nWindows Server 2016\nWindows Server 2016 (Server Core installation)\nWindows Server 2019\nWindows Server 2019 (Server Core installation)\nWindows Server 2022\nWindows Server 2022, 23H2 Edition (Server Core installation)\nWindows Server 2025\nWindows Server 2025 (Server Core installation)\n\nDescription:\nUse after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.","Link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42825","Title":"CVE-2026-42825 [HIGH 7.0] Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally."},{"CvssScore":"HIGH 8.8","CveId":"CVE-2026-41613","Description":"Affected products:\nVisual Studio Code\n\nDescription:\nSession fixation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network.","Link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41613","Title":"CVE-2026-41613 [HIGH 8.8] Session fixation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network."},{"CvssScore":"HIGH 7.8","CveId":"CVE-2026-41611","Description":"Affected products:\nVisual Studio Code\n\nDescription:\nImproper neutralization of script-related html tags in a web page (basic xss) in Visual Studio Code allows an unauthorized attacker to execute code locally.","Link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41611","Title":"CVE-2026-41611 [HIGH 7.8] Improper neutralization of script-related html tags in a web page (basic xss) in Visual Studio Code allows an unauthorized attacker to execute code locally."},{"CvssScore":"HIGH 8.8","CveId":"CVE-2026-41109","Description":"Affected products:\nVisual Studio Code\n\nDescription:\nImproper neutralization of special elements in output used by a downstream component (\u0027injection\u0027) in GitHub Copilot and Visual Studio allows an unauthorized attacker to bypass a security feature over a network.","Link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41109","Title":"CVE-2026-41109 [HIGH 8.8] Improper neutralization of special elements in output used by a downstream component (\u0027injection\u0027) in GitHub Copilot and Visual Studio allows an unauthorized attacker to bypa"},{"CvssScore":"MEDIUM 6.7","CveId":"CVE-2026-41097","Description":"Affected products:\nWindows 10 Version 1809\nWindows 10 Version 21H2\nWindows 10 Version 22H2\nWindows 11 version 22H3\nWindows 11 Version 23H2\nWindows 11 Version 24H2\nWindows 11 Version 25H2\nWindows 11 version 26H1\nWindows Server 2019\nWindows Server 2019 (Server Core installation)\nWindows Server 2022\nWindows Server 2022, 23H2 Edition (Server Core installation)\nWindows Server 2025\nWindows Server 2025 (Server Core installation)\n\nDescription:\nReliance on a component that is not updateable in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.","Link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41097","Title":"CVE-2026-41097 [MEDIUM 6.7] Reliance on a component that is not updateable in Windows Secure Boot allows an authorized attacker to bypass a security feature locally."},{"CvssScore":"CRITICAL 9.8","CveId":"CVE-2026-41096","Description":"Affected products:\nWindows 11 version 22H3\nWindows 11 Version 23H2\nWindows 11 Version 24H2\nWindows 11 Version 25H2\nWindows 11 version 26H1\nWindows Server 2022, 23H2 Edition (Server Core installation)\nWindows Server 2025\nWindows Server 2025 (Server Core installation)\n\nDescription:\nHeap-based buffer overflow in Microsoft Windows DNS allows an unauthorized attacker to execute code over a network.","Link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41096","Title":"CVE-2026-41096 [CRITICAL 9.8] Heap-based buffer overflow in Microsoft Windows DNS allows an unauthorized attacker to execute code over a network."},{"CvssScore":"HIGH 7.8","CveId":"CVE-2026-41095","Description":"Affected products:\nWindows Server 2012 R2\nWindows Server 2012 R2 (Server Core installation)\nWindows Server 2016\nWindows Server 2016 (Server Core installation)\nWindows Server 2019\nWindows Server 2019 (Server Core installation)\nWindows Server 2022\nWindows Server 2022, 23H2 Edition (Server Core installation)\nWindows Server 2025\nWindows Server 2025 (Server Core installation)\n\nDescription:\nUse after free in Data Deduplication allows an authorized attacker to elevate privileges locally.","Link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41095","Title":"CVE-2026-41095 [HIGH 7.8] Use after free in Data Deduplication allows an authorized attacker to elevate privileges locally."},{"CvssScore":"CRITICAL 9.8","CveId":"CVE-2026-41089","Description":"Affected products:\nWindows Server 2012\nWindows Server 2012 (Server Core installation)\nWindows Server 2012 R2\nWindows Server 2012 R2 (Server Core installation)\nWindows Server 2016\nWindows Server 2016 (Server Core installation)\nWindows Server 2019\nWindows Server 2019 (Server Core installation)\nWindows Server 2022\nWindows Server 2022, 23H2 Edition (Server Core installation)\nWindows Server 2025\nWindows Server 2025 (Server Core installation)\n\nDescription:\nStack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.","Link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41089","Title":"CVE-2026-41089 [CRITICAL 9.8] Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network."},{"CvssScore":"HIGH 7.8","CveId":"CVE-2026-41088","Description":"Affected products:\nWindows 10 Version 21H2\nWindows 10 Version 22H2\nWindows 11 version 22H3\nWindows 11 Version 23H2\nWindows 11 Version 24H2\nWindows 11 Version 25H2\nWindows 11 version 26H1\nWindows Server 2022\nWindows Server 2022, 23H2 Edition (Server Core installation)\nWindows Server 2025\nWindows Server 2025 (Server Core installation)\n\nDescription:\nExternal control of file name or path in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.","Link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41088","Title":"CVE-2026-41088 [HIGH 7.8] External control of file name or path in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally."},{"CvssScore":"HIGH 8.8","CveId":"CVE-2026-41086","Description":"Affected products:\nWindows Admin Center in Azure Portal\n\nDescription:\nImproper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network.","Link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41086","Title":"CVE-2026-41086 [HIGH 8.8] Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network."},{"CvssScore":"HIGH 8.1","CveId":"CVE-2026-40415","Description":"Affected products:\nWindows 10 Version 1809\nWindows 10 Version 21H2\nWindows 10 Version 22H2\nWindows 11 version 22H3\nWindows 11 Version 23H2\nWindows 11 Version 24H2\nWindows 11 Version 25H2\nWindows 11 version 26H1\nWindows Server 2019\nWindows Server 2019 (Server Core installation)\nWindows Server 2022\nWindows Server 2022, 23H2 Edition (Server Core installation)\nWindows Server 2025\nWindows Server 2025 (Server Core installation)\n\nDescription:\nUse after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network.","Link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40415","Title":"CVE-2026-40415 [HIGH 8.1] Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network."},{"CvssScore":"HIGH 7.0","CveId":"CVE-2026-40410","Description":"Affected products:\nWindows 10 Version 1607\nWindows 10 Version 1809\nWindows 10 Version 21H2\nWindows 10 Version 22H2\nWindows 11 version 22H3\nWindows 11 Version 23H2\nWindows 11 Version 24H2\nWindows 11 Version 25H2\nWindows 11 version 26H1\nWindows Server 2012 R2\nWindows Server 2012 R2 (Server Core installation)\nWindows Server 2016\nWindows Server 2016 (Server Core installation)\nWindows Server 2019\nWindows Server 2019 (Server Core installation)\nWindows Server 2022\nWindows Server 2022, 23H2 Edition (Server Core installation)\nWindows Server 2025\nWindows Server 2025 (Server Core installation)\n\nDescription:\nUse after free in Windows SMB Client allows an authorized attacker to elevate privileges locally.","Link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40410","Title":"CVE-2026-40410 [HIGH 7.0] Use after free in Windows SMB Client allows an authorized attacker to elevate privileges locally."},{"CvssScore":"HIGH 7.8","CveId":"CVE-2026-40408","Description":"Affected products:\nWindows 10 Version 1607\nWindows 10 Version 1809\nWindows 10 Version 21H2\nWindows 10 Version 22H2\nWindows 11 version 22H3\nWindows 11 Version 23H2\nWindows 11 Version 24H2\nWindows 11 Version 25H2\nWindows 11 version 26H1\nWindows Server 2012\nWindows Server 2012 (Server Core installation)\nWindows Server 2012 R2\nWindows Server 2012 R2 (Server Core installation)\nWindows Server 2016\nWindows Server 2016 (Server Core installation)\nWindows Server 2019\nWindows Server 2019 (Server Core installation)\nWindows Server 2022\nWindows Server 2022, 23H2 Edition (Server Core installation)\nWindows Server 2025\nWindows Server 2025 (Server Core installation)\n\nDescription:\nUse after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.","Link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40408","Title":"CVE-2026-40408 [HIGH 7.8] Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally."},{"CvssScore":"HIGH 7.8","CveId":"CVE-2026-40407","Description":"Affected products:\nWindows 10 Version 1607\nWindows 10 Version 1809\nWindows 10 Version 21H2\nWindows 10 Version 22H2\nWindows 11 version 22H3\nWindows 11 Version 23H2\nWindows 11 Version 24H2\nWindows 11 Version 25H2\nWindows 11 version 26H1\nWindows Server 2012\nWindows Server 2012 (Server Core installation)\nWindows Server 2012 R2\nWindows Server 2012 R2 (Server Core installation)\nWindows Server 2016\nWindows Server 2016 (Server Core installation)\nWindows Server 2019\nWindows Server 2019 (Server Core installation)\nWindows Server 2022\nWindows Server 2022, 23H2 Edition (Server Core installation)\nWindows Server 2025\nWindows Server 2025 (Server Core installation)\n\nDescription:\nHeap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.","Link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40407","Title":"CVE-2026-40407 [HIGH 7.8] Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally."},{"CvssScore":"HIGH 8.8","CveId":"CVE-2026-40403","Description":"Affected products:\nWindows 10 Version 1607\nWindows 10 Version 1809\nWindows 10 Version 21H2\nWindows 10 Version 22H2\nWindows 11 version 22H3\nWindows 11 Version 23H2\nWindows 11 Version 24H2\nWindows 11 Version 25H2\nWindows 11 version 26H1\nWindows Server 2012\nWindows Server 2012 (Server Core installation)\nWindows Server 2012 R2\nWindows Server 2012 R2 (Server Core installation)\nWindows Server 2016\nWindows Server 2016 (Server Core installation)\nWindows Server 2019\nWindows Server 2019 (Server Core installation)\nWindows Server 2022\nWindows Server 2022, 23H2 Edition (Server Core installation)\nWindows Server 2025\nWindows Server 2025 (Server Core installation)\n\nDescription:\nHeap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to execute code locally.","Link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40403","Title":"CVE-2026-40403 [HIGH 8.8] Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to execute code locally."},{"CvssScore":"CRITICAL 9.3","CveId":"CVE-2026-40402","Description":"Affected products:\nWindows 11 version 22H3\nWindows 11 Version 23H2\nWindows Server 2022\n\nDescription:\nUse after free in Windows Hyper-V allows an unauthorized attacker to elevate privileges locally.","Link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40402","Title":"CVE-2026-40402 [CRITICAL 9.3] Use after free in Windows Hyper-V allows an unauthorized attacker to elevate privileges locally."},{"CvssScore":"HIGH 7.8","CveId":"CVE-2026-40399","Description":"Affected products:\nWindows 10 Version 1607\nWindows 10 Version 1809\nWindows 10 Version 21H2\nWindows 10 Version 22H2\nWindows 11 version 22H3\nWindows 11 Version 23H2\nWindows 11 Version 24H2\nWindows 11 Version 25H2\nWindows 11 version 26H1\nWindows Server 2016\nWindows Server 2016 (Server Core installation)\nWindows Server 2019\nWindows Server 2019 (Server Core installation)\nWindows Server 2022\nWindows Server 2022, 23H2 Edition (Server Core installation)\nWindows Server 2025\nWindows Server 2025 (Server Core installation)\n\nDescription:\nStack-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.","Link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40399","Title":"CVE-2026-40399 [HIGH 7.8] Stack-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally."},{"CvssScore":"HIGH 7.8","CveId":"CVE-2026-40398","Description":"Affected products:\nWindows 10 Version 1607\nWindows 10 Version 1809\nWindows 10 Version 21H2\nWindows 10 Version 22H2\nWindows 11 version 22H3\nWindows 11 Version 23H2\nWindows 11 Version 24H2\nWindows 11 Version 25H2\nWindows 11 version 26H1\nWindows Server 2012\nWindows Server 2012 (Server Core installation)\nWindows Server 2012 R2\nWindows Server 2012 R2 (Server Core installation)\nWindows Server 2016\nWindows Server 2016 (Server Core installation)\nWindows Server 2019\nWindows Server 2019 (Server Core installation)\nWindows Server 2022\nWindows Server 2022, 23H2 Edition (Server Core installation)\nWindows Server 2025\nWindows Server 2025 (Server Core installation)\n\nDescription:\nHeap-based buffer overflow in Windows Remote Desktop allows an authorized attacker to elevate privileges locally.","Link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40398","Title":"CVE-2026-40398 [HIGH 7.8] Heap-based buffer overflow in Windows Remote Desktop allows an authorized attacker to elevate privileges locally."},{"CvssScore":"HIGH 7.8","CveId":"CVE-2026-40397","Description":"Affected products:\nWindows 10 Version 1607\nWindows 10 Version 1809\nWindows 10 Version 21H2\nWindows 10 Version 22H2\nWindows 11 version 22H3\nWindows 11 Version 23H2\nWindows 11 Version 24H2\nWindows 11 Version 25H2\nWindows 11 version 26H1\nWindows Server 2012\nWindows Server 2012 (Server Core installation)\nWindows Server 2012 R2\nWindows Server 2012 R2 (Server Core installation)\nWindows Server 2016\nWindows Server 2016 (Server Core installation)\nWindows Server 2019\nWindows Server 2019 (Server Core installation)\nWindows Server 2022\nWindows Server 2022, 23H2 Edition (Server Core installation)\nWindows Server 2025\nWindows Server 2025 (Server Core installation)\n\nDescription:\nInteger underflow (wrap or wraparound) in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.","Link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40397","Title":"CVE-2026-40397 [HIGH 7.8] Integer underflow (wrap or wraparound) in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally."},{"CvssScore":"HIGH 7.8","CveId":"CVE-2026-40382","Description":"Affected products:\nWindows 10 Version 1607\nWindows 10 Version 1809\nWindows 10 Version 21H2\nWindows 10 Version 22H2\nWindows 11 version 22H3\nWindows 11 Version 23H2\nWindows 11 Version 24H2\nWindows 11 Version 25H2\nWindows 11 version 26H1\nWindows Server 2012\nWindows Server 2012 (Server Core installation)\nWindows Server 2012 R2\nWindows Server 2012 R2 (Server Core installation)\nWindows Server 2016\nWindows Server 2016 (Server Core installation)\nWindows Server 2019\nWindows Server 2019 (Server Core installation)\nWindows Server 2022\nWindows Server 2022, 23H2 Edition (Server Core installation)\nWindows Server 2025\nWindows Server 2025 (Server Core installation)\n\nDescription:\nUse after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.","Link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40382","Title":"CVE-2026-40382 [HIGH 7.8] Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally."},{"CvssScore":"HIGH 7.8","CveId":"CVE-2026-40377","Description":"Affected products:\nWindows 10 Version 1607\nWindows 10 Version 1809\nWindows 10 Version 21H2\nWindows 10 Version 22H2\nWindows 11 version 22H3\nWindows 11 Version 23H2\nWindows 11 Version 24H2\nWindows 11 Version 25H2\nWindows 11 version 26H1\nWindows Server 2012\nWindows Server 2012 (Server Core installation)\nWindows Server 2012 R2\nWindows Server 2012 R2 (Server Core installation)\nWindows Server 2016\nWindows Server 2016 (Server Core installation)\nWindows Server 2019\nWindows Server 2019 (Server Core installation)\nWindows Server 2022\nWindows Server 2022, 23H2 Edition (Server Core installation)\nWindows Server 2025\nWindows Server 2025 (Server Core installation)\n\nDescription:\nHeap-based buffer overflow in Windows Cryptographic Services allows an authorized attacker to elevate privileges locally.","Link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40377","Title":"CVE-2026-40377 [HIGH 7.8] Heap-based buffer overflow in Windows Cryptographic Services allows an authorized attacker to elevate privileges locally."},{"CvssScore":"HIGH 7.8","CveId":"CVE-2026-40369","Description":"Affected products:\nWindows 11 Version 24H2\nWindows 11 Version 25H2\nWindows 11 version 26H1\nWindows Server 2025\nWindows Server 2025 (Server Core installation)\n\nDescription:\nUntrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.","Link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40369","Title":"CVE-2026-40369 [HIGH 7.8] Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally."},{"CvssScore":"HIGH 8.3","CveId":"CVE-2026-35438","Description":"Affected products:\nWindows Admin Center\n\nDescription:\nMissing authorization in Windows Admin Center allows an authorized attacker to elevate privileges over a network.","Link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35438","Title":"CVE-2026-35438 [HIGH 8.3] Missing authorization in Windows Admin Center allows an authorized attacker to elevate privileges over a network."},{"CvssScore":"HIGH 7.8","CveId":"CVE-2026-35421","Description":"Affected products:\nWindows 10 Version 1607\nWindows 10 Version 1809\nWindows 10 Version 21H2\nWindows 10 Version 22H2\nWindows 11 version 22H3\nWindows 11 Version 23H2\nWindows 11 Version 24H2\nWindows 11 Version 25H2\nWindows 11 version 26H1\nWindows Server 2012\nWindows Server 2012 (Server Core installation)\nWindows Server 2012 R2\nWindows Server 2012 R2 (Server Core installation)\nWindows Server 2016\nWindows Server 2016 (Server Core installation)\nWindows Server 2019\nWindows Server 2019 (Server Core installation)\nWindows Server 2022\nWindows Server 2022, 23H2 Edition (Server Core installation)\nWindows Server 2025\nWindows Server 2025 (Server Core installation)\n\nDescription:\nHeap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code locally.","Link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35421","Title":"CVE-2026-35421 [HIGH 7.8] Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code locally."},{"CvssScore":"HIGH 7.8","CveId":"CVE-2026-35420","Description":"Affected products:\nWindows Server 2012\nWindows Server 2012 (Server Core installation)\nWindows Server 2012 R2\nWindows Server 2012 R2 (Server Core installation)\nWindows Server 2016\nWindows Server 2016 (Server Core installation)\nWindows Server 2019\nWindows Server 2019 (Server Core installation)\nWindows Server 2022\nWindows Server 2022, 23H2 Edition (Server Core installation)\nWindows Server 2025\nWindows Server 2025 (Server Core installation)\n\nDescription:\nHeap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.","Link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35420","Title":"CVE-2026-35420 [HIGH 7.8] Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally."},{"CvssScore":"HIGH 7.8","CveId":"CVE-2026-35418","Description":"Affected products:\nWindows 10 Version 1809\nWindows 10 Version 21H2\nWindows 10 Version 22H2\nWindows 11 version 22H3\nWindows 11 Version 23H2\nWindows 11 Version 24H2\nWindows 11 Version 25H2\nWindows 11 version 26H1\nWindows Server 2019\nWindows Server 2019 (Server Core installation)\nWindows Server 2022\nWindows Server 2022, 23H2 Edition (Server Core installation)\nWindows Server 2025\nWindows Server 2025 (Server Core installation)\n\nDescription:\nUse after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.","Link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35418","Title":"CVE-2026-35418 [HIGH 7.8] Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally."},{"CvssScore":"HIGH 7.8","CveId":"CVE-2026-35417","Description":"Affected products:\nWindows 10 Version 1809\nWindows 10 Version 21H2\nWindows 10 Version 22H2\nWindows 11 version 22H3\nWindows 11 Version 23H2\nWindows 11 Version 24H2\nWindows 11 Version 25H2\nWindows 11 version 26H1\nWindows Server 2019\nWindows Server 2019 (Server Core installation)\nWindows Server 2022\nWindows Server 2022, 23H2 Edition (Server Core installation)\nWindows Server 2025\nWindows Server 2025 (Server Core installation)\n\nDescription:\nAccess of resource using incompatible type (\u0027type confusion\u0027) in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.","Link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35417","Title":"CVE-2026-35417 [HIGH 7.8] Access of resource using incompatible type (\u0027type confusion\u0027) in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally."},{"CvssScore":"HIGH 7.0","CveId":"CVE-2026-35416","Description":"Affected products:\nWindows 10 Version 1607\nWindows 10 Version 1809\nWindows 10 Version 21H2\nWindows 10 Version 22H2\nWindows 11 version 22H3\nWindows 11 Version 23H2\nWindows 11 Version 24H2\nWindows 11 Version 25H2\nWindows 11 version 26H1\nWindows Server 2012\nWindows Server 2012 (Server Core installation)\nWindows Server 2012 R2\nWindows Server 2012 R2 (Server Core installation)\nWindows Server 2016\nWindows Server 2016 (Server Core installation)\nWindows Server 2019\nWindows Server 2019 (Server Core installation)\nWindows Server 2022\nWindows Server 2022, 23H2 Edition (Server Core installation)\nWindows Server 2025\nWindows Server 2025 (Server Core installation)\n\nDescription:\nUse after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.","Link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35416","Title":"CVE-2026-35416 [HIGH 7.0] Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally."},{"CvssScore":"HIGH 7.8","CveId":"CVE-2026-35415","Description":"Affected products:\nWindows 10 Version 1607\nWindows 10 Version 1809\nWindows 10 Version 21H2\nWindows 10 Version 22H2\nWindows 11 version 22H3\nWindows 11 Version 23H2\nWindows 11 Version 24H2\nWindows 11 Version 25H2\nWindows 11 version 26H1\nWindows Server 2012 R2\nWindows Server 2012 R2 (Server Core installation)\nWindows Server 2016\nWindows Server 2016 (Server Core installation)\nWindows Server 2019\nWindows Server 2019 (Server Core installation)\nWindows Server 2022\nWindows Server 2022, 23H2 Edition (Server Core installation)\nWindows Server 2025\nWindows Server 2025 (Server Core installation)\n\nDescription:\nInteger overflow or wraparound in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.","Link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35415","Title":"CVE-2026-35415 [HIGH 7.8] Integer overflow or wraparound in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally."},{"CvssScore":"HIGH 7.8","CveId":"CVE-2026-34351","Description":"Affected products:\nWindows 10 Version 1607\nWindows 10 Version 1809\nWindows 10 Version 21H2\nWindows 10 Version 22H2\nWindows 11 version 22H3\nWindows 11 Version 23H2\nWindows 11 Version 24H2\nWindows 11 Version 25H2\nWindows 11 version 26H1\nWindows Server 2012\nWindows Server 2012 (Server Core installation)\nWindows Server 2012 R2\nWindows Server 2012 R2 (Server Core installation)\nWindows Server 2016\nWindows Server 2016 (Server Core installation)\nWindows Server 2019\nWindows Server 2019 (Server Core installation)\nWindows Server 2022\nWindows Server 2022, 23H2 Edition (Server Core installation)\nWindows Server 2025\nWindows Server 2025 (Server Core installation)\n\nDescription:\nConcurrent execution using shared resource with improper synchronization (\u0027race condition\u0027) in Windows TCP/IP allows an authorized attacker to elevate privileges locally.","Link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34351","Title":"CVE-2026-34351 [HIGH 7.8] Concurrent execution using shared resource with improper synchronization (\u0027race condition\u0027) in Windows TCP/IP allows an authorized attacker to elevate privileges locally."},{"CvssScore":"HIGH 7.0","CveId":"CVE-2026-34347","Description":"Affected products:\nWindows 10 Version 1607\nWindows 10 Version 1809\nWindows 10 Version 21H2\nWindows 10 Version 22H2\nWindows 11 version 22H3\nWindows 11 Version 23H2\nWindows 11 Version 24H2\nWindows 11 Version 25H2\nWindows 11 version 26H1\nWindows Server 2012\nWindows Server 2012 (Server Core installation)\nWindows Server 2012 R2\nWindows Server 2012 R2 (Server Core installation)\nWindows Server 2016\nWindows Server 2016 (Server Core installation)\nWindows Server 2019\nWindows Server 2019 (Server Core installation)\nWindows Server 2022\nWindows Server 2022, 23H2 Edition (Server Core installation)\nWindows Server 2025\nWindows Server 2025 (Server Core installation)\n\nDescription:\nUse after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.","Link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34347","Title":"CVE-2026-34347 [HIGH 7.0] Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally."},{"CvssScore":"HIGH 7.0","CveId":"CVE-2026-34345","Description":"Affected products:\nWindows 10 Version 1607\nWindows 10 Version 1809\nWindows 10 Version 21H2\nWindows 10 Version 22H2\nWindows 11 version 22H3\nWindows 11 Version 23H2\nWindows 11 Version 24H2\nWindows 11 Version 25H2\nWindows 11 version 26H1\nWindows Server 2016\nWindows Server 2016 (Server Core installation)\nWindows Server 2019\nWindows Server 2019 (Server Core installation)\nWindows Server 2022\nWindows Server 2022, 23H2 Edition (Server Core installation)\nWindows Server 2025\nWindows Server 2025 (Server Core installation)\n\nDescription:\nConcurrent execution using shared resource with improper synchronization (\u0027race condition\u0027) in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.","Link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34345","Title":"CVE-2026-34345 [HIGH 7.0] Concurrent execution using shared resource with improper synchronization (\u0027race condition\u0027) in Windows Ancillary Function Driver for WinSock allows an authorized attacker to "},{"CvssScore":"HIGH 7.8","CveId":"CVE-2026-34344","Description":"Affected products:\nWindows 10 Version 1607\nWindows 10 Version 1809\nWindows 10 Version 21H2\nWindows 10 Version 22H2\nWindows 11 version 22H3\nWindows 11 Version 23H2\nWindows 11 Version 24H2\nWindows 11 Version 25H2\nWindows 11 version 26H1\nWindows Server 2012\nWindows Server 2012 (Server Core installation)\nWindows Server 2012 R2\nWindows Server 2012 R2 (Server Core installation)\nWindows Server 2016\nWindows Server 2016 (Server Core installation)\nWindows Server 2019\nWindows Server 2019 (Server Core installation)\nWindows Server 2022\nWindows Server 2022, 23H2 Edition (Server Core installation)\nWindows Server 2025\nWindows Server 2025 (Server Core installation)\n\nDescription:\nAccess of resource using incompatible type (\u0027type confusion\u0027) in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.","Link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34344","Title":"CVE-2026-34344 [HIGH 7.8] Access of resource using incompatible type (\u0027type confusion\u0027) in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally."},{"CvssScore":"HIGH 7.8","CveId":"CVE-2026-34343","Description":"Affected products:\nWindows 10 Version 1607\nWindows 10 Version 1809\nWindows 10 Version 21H2\nWindows 10 Version 22H2\nWindows 11 version 22H3\nWindows 11 Version 23H2\nWindows 11 Version 24H2\nWindows 11 Version 25H2\nWindows 11 version 26H1\nWindows Server 2012\nWindows Server 2012 (Server Core installation)\nWindows Server 2012 R2\nWindows Server 2012 R2 (Server Core installation)\nWindows Server 2016\nWindows Server 2016 (Server Core installation)\nWindows Server 2019\nWindows Server 2019 (Server Core installation)\nWindows Server 2022\nWindows Server 2022, 23H2 Edition (Server Core installation)\nWindows Server 2025\nWindows Server 2025 (Server Core installation)\n\nDescription:\nHeap-based buffer overflow in Windows Application Identity (AppID) Subsystem allows an authorized attacker to elevate privileges locally.","Link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34343","Title":"CVE-2026-34343 [HIGH 7.8] Heap-based buffer overflow in Windows Application Identity (AppID) Subsystem allows an authorized attacker to elevate privileges locally."},{"CvssScore":"HIGH 7.0","CveId":"CVE-2026-34342","Description":"Affected products:\nWindows 10 Version 1607\nWindows 10 Version 1809\nWindows 10 Version 21H2\nWindows 10 Version 22H2\nWindows 11 version 22H3\nWindows 11 Version 23H2\nWindows 11 Version 24H2\nWindows 11 Version 25H2\nWindows 11 version 26H1\nWindows Server 2012\nWindows Server 2012 (Server Core installation)\nWindows Server 2012 R2\nWindows Server 2012 R2 (Server Core installation)\nWindows Server 2016\nWindows Server 2016 (Server Core installation)\nWindows Server 2019\nWindows Server 2019 (Server Core installation)\nWindows Server 2022\nWindows Server 2022, 23H2 Edition (Server Core installation)\nWindows Server 2025\nWindows Server 2025 (Server Core installation)\n\nDescription:\nConcurrent execution using shared resource with improper synchronization (\u0027race condition\u0027) in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.","Link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34342","Title":"CVE-2026-34342 [HIGH 7.0] Concurrent execution using shared resource with improper synchronization (\u0027race condition\u0027) in Windows Print Spooler Components allows an authorized attacker to elevate privi"},{"CvssScore":"HIGH 7.0","CveId":"CVE-2026-34341","Description":"Affected products:\nWindows 10 Version 1607\nWindows 10 Version 1809\nWindows 10 Version 21H2\nWindows 10 Version 22H2\nWindows 11 version 22H3\nWindows 11 Version 23H2\nWindows 11 Version 24H2\nWindows 11 Version 25H2\nWindows 11 version 26H1\nWindows Server 2012\nWindows Server 2012 (Server Core installation)\nWindows Server 2012 R2\nWindows Server 2012 R2 (Server Core installation)\nWindows Server 2016\nWindows Server 2016 (Server Core installation)\nWindows Server 2019\nWindows Server 2019 (Server Core installation)\nWindows Server 2022\nWindows Server 2022, 23H2 Edition (Server Core installation)\nWindows Server 2025\nWindows Server 2025 (Server Core installation)\n\nDescription:\nDouble free in Windows Link-Layer Discovery Protocol (LLDP) allows an authorized attacker to elevate privileges locally.","Link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34341","Title":"CVE-2026-34341 [HIGH 7.0] Double free in Windows Link-Layer Discovery Protocol (LLDP) allows an authorized attacker to elevate privileges locally."},{"CvssScore":"HIGH 7.0","CveId":"CVE-2026-34340","Description":"Affected products:\nWindows 10 Version 1809\nWindows 10 Version 21H2\nWindows 10 Version 22H2\nWindows 11 version 22H3\nWindows 11 Version 23H2\nWindows 11 Version 24H2\nWindows 11 Version 25H2\nWindows 11 version 26H1\nWindows Server 2019\nWindows Server 2019 (Server Core installation)\nWindows Server 2022\nWindows Server 2022, 23H2 Edition (Server Core installation)\nWindows Server 2025\nWindows Server 2025 (Server Core installation)\n\nDescription:\nUse after free in Windows Projected File System allows an authorized attacker to elevate privileges locally.","Link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34340","Title":"CVE-2026-34340 [HIGH 7.0] Use after free in Windows Projected File System allows an authorized attacker to elevate privileges locally."},{"CvssScore":"HIGH 7.8","CveId":"CVE-2026-34338","Description":"Affected products:\nWindows 10 Version 1607\nWindows 10 Version 1809\nWindows 10 Version 21H2\nWindows 10 Version 22H2\nWindows 11 version 22H3\nWindows 11 Version 23H2\nWindows 11 Version 24H2\nWindows 11 Version 25H2\nWindows 11 version 26H1\nWindows Server 2012\nWindows Server 2012 (Server Core installation)\nWindows Server 2012 R2\nWindows Server 2012 R2 (Server Core installation)\nWindows Server 2016\nWindows Server 2016 (Server Core installation)\nWindows Server 2019\nWindows Server 2019 (Server Core installation)\nWindows Server 2022\nWindows Server 2022, 23H2 Edition (Server Core installation)\nWindows Server 2025\nWindows Server 2025 (Server Core installation)\n\nDescription:\nUse after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.","Link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34338","Title":"CVE-2026-34338 [HIGH 7.8] Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally."},{"CvssScore":"HIGH 7.8","CveId":"CVE-2026-34337","Description":"Affected products:\nWindows 10 Version 1809\nWindows 10 Version 21H2\nWindows 10 Version 22H2\nWindows 11 version 22H3\nWindows 11 Version 23H2\nWindows 11 Version 24H2\nWindows 11 Version 25H2\nWindows 11 version 26H1\nWindows Server 2019\nWindows Server 2019 (Server Core installation)\nWindows Server 2022\nWindows Server 2022, 23H2 Edition (Server Core installation)\nWindows Server 2025\nWindows Server 2025 (Server Core installation)\n\nDescription:\nUse after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.","Link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34337","Title":"CVE-2026-34337 [HIGH 7.8] Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally."},{"CvssScore":"HIGH 7.8","CveId":"CVE-2026-34334","Description":"Affected products:\nWindows 10 Version 1607\nWindows 10 Version 1809\nWindows 10 Version 21H2\nWindows 10 Version 22H2\nWindows 11 version 22H3\nWindows 11 Version 23H2\nWindows 11 Version 24H2\nWindows 11 Version 25H2\nWindows 11 version 26H1\nWindows Server 2012\nWindows Server 2012 (Server Core installation)\nWindows Server 2012 R2\nWindows Server 2012 R2 (Server Core installation)\nWindows Server 2016\nWindows Server 2016 (Server Core installation)\nWindows Server 2019\nWindows Server 2019 (Server Core installation)\nWindows Server 2022\nWindows Server 2022, 23H2 Edition (Server Core installation)\nWindows Server 2025\nWindows Server 2025 (Server Core installation)\n\nDescription:\nConcurrent execution using shared resource with improper synchronization (\u0027race condition\u0027) in Windows TCP/IP allows an authorized attacker to elevate privileges locally.","Link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34334","Title":"CVE-2026-34334 [HIGH 7.8] Concurrent execution using shared resource with improper synchronization (\u0027race condition\u0027) in Windows TCP/IP allows an authorized attacker to elevate privileges locally."},{"CvssScore":"HIGH 7.8","CveId":"CVE-2026-34333","Description":"Affected products:\nWindows 10 Version 1607\nWindows 10 Version 1809\nWindows 10 Version 21H2\nWindows 10 Version 22H2\nWindows 11 version 22H3\nWindows 11 Version 23H2\nWindows 11 Version 24H2\nWindows 11 Version 25H2\nWindows 11 version 26H1\nWindows Server 2012\nWindows Server 2012 (Server Core installation)\nWindows Server 2012 R2\nWindows Server 2012 R2 (Server Core installation)\nWindows Server 2016\nWindows Server 2016 (Server Core installation)\nWindows Server 2019\nWindows Server 2019 (Server Core installation)\nWindows Server 2022\nWindows Server 2022, 23H2 Edition (Server Core installation)\nWindows Server 2025\nWindows Server 2025 (Server Core installation)\n\nDescription:\nUse after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.","Link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34333","Title":"CVE-2026-34333 [HIGH 7.8] Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally."},{"CvssScore":"HIGH 8.0","CveId":"CVE-2026-34332","Description":"Affected products:\nWindows Server 2025\nWindows Server 2025 (Server Core installation)\n\nDescription:\nUse after free in Windows Kernel-Mode Drivers allows an authorized attacker to execute code over a network.","Link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34332","Title":"CVE-2026-34332 [HIGH 8.0] Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to execute code over a network."},{"CvssScore":"HIGH 7.0","CveId":"CVE-2026-34331","Description":"Affected products:\nWindows 10 Version 1607\nWindows 10 Version 1809\nWindows 10 Version 21H2\nWindows 10 Version 22H2\nWindows 11 version 22H3\nWindows 11 Version 23H2\nWindows 11 Version 24H2\nWindows 11 Version 25H2\nWindows 11 version 26H1\nWindows Server 2012\nWindows Server 2012 (Server Core installation)\nWindows Server 2012 R2\nWindows Server 2012 R2 (Server Core installation)\nWindows Server 2016\nWindows Server 2016 (Server Core installation)\nWindows Server 2019\nWindows Server 2019 (Server Core installation)\nWindows Server 2022\nWindows Server 2022, 23H2 Edition (Server Core installation)\nWindows Server 2025\nWindows Server 2025 (Server Core installation)\n\nDescription:\nConcurrent execution using shared resource with improper synchronization (\u0027race condition\u0027) in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.","Link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34331","Title":"CVE-2026-34331 [HIGH 7.0] Concurrent execution using shared resource with improper synchronization (\u0027race condition\u0027) in Windows Win32K - GRFX allows an authorized attacker to elevate privileges local"},{"CvssScore":"HIGH 7.8","CveId":"CVE-2026-34330","Description":"Affected products:\nWindows 10 Version 1607\nWindows 10 Version 1809\nWindows 10 Version 21H2\nWindows 10 Version 22H2\nWindows 11 version 22H3\nWindows 11 Version 23H2\nWindows 11 Version 24H2\nWindows 11 Version 25H2\nWindows 11 version 26H1\nWindows Server 2012\nWindows Server 2012 (Server Core installation)\nWindows Server 2012 R2\nWindows Server 2012 R2 (Server Core installation)\nWindows Server 2016\nWindows Server 2016 (Server Core installation)\nWindows Server 2019\nWindows Server 2019 (Server Core installation)\nWindows Server 2022\nWindows Server 2022, 23H2 Edition (Server Core installation)\nWindows Server 2025\nWindows Server 2025 (Server Core installation)\n\nDescription:\nInteger overflow or wraparound in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.","Link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34330","Title":"CVE-2026-34330 [HIGH 7.8] Integer overflow or wraparound in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally."},{"CvssScore":"HIGH 8.8","CveId":"CVE-2026-34329","Description":"Affected products:\nWindows 10 Version 1607\nWindows 10 Version 1809\nWindows 10 Version 21H2\nWindows 10 Version 22H2\nWindows 11 version 22H3\nWindows 11 Version 23H2\nWindows 11 Version 24H2\nWindows 11 Version 25H2\nWindows 11 version 26H1\nWindows Server 2012\nWindows Server 2012 (Server Core installation)\nWindows Server 2012 R2\nWindows Server 2012 R2 (Server Core installation)\nWindows Server 2016\nWindows Server 2016 (Server Core installation)\nWindows Server 2019\nWindows Server 2019 (Server Core installation)\nWindows Server 2022\nWindows Server 2022, 23H2 Edition (Server Core installation)\nWindows Server 2025\nWindows Server 2025 (Server Core installation)\n\nDescription:\nHeap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over an adjacent network.","Link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34329","Title":"CVE-2026-34329 [HIGH 8.8] Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over an adjacent network."},{"CvssScore":"HIGH 7.8","CveId":"CVE-2026-33841","Description":"Affected products:\nWindows 10 Version 21H2\nWindows 10 Version 22H2\nWindows 11 version 22H3\nWindows 11 Version 23H2\nWindows 11 Version 24H2\nWindows 11 Version 25H2\nWindows 11 version 26H1\nWindows 11 Version 26H1\nWindows Server 2022\nWindows Server 2022, 23H2 Edition (Server Core installation)\nWindows Server 2025\nWindows Server 2025 (Server Core installation)\n\nDescription:\nHeap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.","Link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33841","Title":"CVE-2026-33841 [HIGH 7.8] Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally."},{"CvssScore":"HIGH 7.8","CveId":"CVE-2026-33840","Description":"Affected products:\nWindows 11 Version 24H2\nWindows 11 Version 25H2\nWindows 11 version 26H1\nWindows Server 2025\nWindows Server 2025 (Server Core installation)\n\nDescription:\nUse after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.","Link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33840","Title":"CVE-2026-33840 [HIGH 7.8] Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally."},{"CvssScore":"HIGH 7.0","CveId":"CVE-2026-33839","Description":"Affected products:\nWindows 10 Version 1809\nWindows 10 Version 21H2\nWindows 10 Version 22H2\nWindows 11 version 22H3\nWindows 11 Version 23H2\nWindows 11 Version 24H2\nWindows 11 Version 25H2\nWindows 11 version 26H1\nWindows Server 2019\nWindows Server 2019 (Server Core installation)\nWindows Server 2022\nWindows Server 2022, 23H2 Edition (Server Core installation)\nWindows Server 2025\nWindows Server 2025 (Server Core installation)\n\nDescription:\nConcurrent execution using shared resource with improper synchronization (\u0027race condition\u0027) in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.","Link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33839","Title":"CVE-2026-33839 [HIGH 7.0] Concurrent execution using shared resource with improper synchronization (\u0027race condition\u0027) in Windows Win32K - GRFX allows an authorized attacker to elevate privileges local"},{"CvssScore":"HIGH 7.8","CveId":"CVE-2026-33838","Description":"Affected products:\nWindows 10 Version 1607\nWindows 10 Version 1809\nWindows 10 Version 21H2\nWindows 10 Version 22H2\nWindows 11 version 22H3\nWindows 11 Version 23H2\nWindows 11 Version 24H2\nWindows 11 Version 25H2\nWindows 11 version 26H1\nWindows Server 2012\nWindows Server 2012 (Server Core installation)\nWindows Server 2012 R2\nWindows Server 2012 R2 (Server Core installation)\nWindows Server 2016\nWindows Server 2016 (Server Core installation)\nWindows Server 2019\nWindows Server 2019 (Server Core installation)\nWindows Server 2022\nWindows Server 2022, 23H2 Edition (Server Core installation)\nWindows Server 2025\nWindows Server 2025 (Server Core installation)\n\nDescription:\nDouble free in Windows Message Queuing allows an authorized attacker to elevate privileges locally.","Link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33838","Title":"CVE-2026-33838 [HIGH 7.8] Double free in Windows Message Queuing allows an authorized attacker to elevate privileges locally."},{"CvssScore":"HIGH 7.8","CveId":"CVE-2026-33837","Description":"Affected products:\nWindows 10 Version 1607\nWindows 10 Version 1809\nWindows 10 Version 21H2\nWindows 10 Version 22H2\nWindows 11 version 22H3\nWindows 11 Version 23H2\nWindows 11 Version 24H2\nWindows 11 Version 25H2\nWindows 11 version 26H1\nWindows Server 2012\nWindows Server 2012 (Server Core installation)\nWindows Server 2012 R2\nWindows Server 2012 R2 (Server Core installation)\nWindows Server 2016\nWindows Server 2016 (Server Core installation)\nWindows Server 2019\nWindows Server 2019 (Server Core installation)\nWindows Server 2022\nWindows Server 2022, 23H2 Edition (Server Core installation)\nWindows Server 2025\nWindows Server 2025 (Server Core installation)\n\nDescription:\nHeap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.","Link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33837","Title":"CVE-2026-33837 [HIGH 7.8] Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally."},{"CvssScore":"HIGH 7.8","CveId":"CVE-2026-33835","Description":"Affected products:\nWindows 10 Version 1809\nWindows 10 Version 21H2\nWindows 10 Version 22H2\nWindows 11 version 22H3\nWindows 11 Version 23H2\nWindows 11 Version 24H2\nWindows 11 Version 25H2\nWindows 11 version 26H1\nWindows Server 2019\nWindows Server 2019 (Server Core installation)\nWindows Server 2022\nWindows Server 2022, 23H2 Edition (Server Core installation)\nWindows Server 2025\nWindows Server 2025 (Server Core installation)\n\nDescription:\nUse after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.","Link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33835","Title":"CVE-2026-33835 [HIGH 7.8] Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally."},{"CvssScore":"HIGH 7.8","CveId":"CVE-2026-33834","Description":"Affected products:\nWindows 10 Version 1607\nWindows 10 Version 1809\nWindows 10 Version 21H2\nWindows 10 Version 22H2\nWindows 11 version 22H3\nWindows 11 Version 23H2\nWindows 11 Version 24H2\nWindows 11 Version 25H2\nWindows 11 version 26H1\nWindows Server 2012\nWindows Server 2012 (Server Core installation)\nWindows Server 2012 R2\nWindows Server 2012 R2 (Server Core installation)\nWindows Server 2016\nWindows Server 2016 (Server Core installation)\nWindows Server 2019\nWindows Server 2019 (Server Core installation)\nWindows Server 2022\nWindows Server 2022, 23H2 Edition (Server Core installation)\nWindows Server 2025\nWindows Server 2025 (Server Core installation)\n\nDescription:\nImproper access control in Windows Event Logging Service allows an authorized attacker to elevate privileges locally.","Link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33834","Title":"CVE-2026-33834 [HIGH 7.8] Improper access control in Windows Event Logging Service allows an authorized attacker to elevate privileges locally."},{"CvssScore":"HIGH 7.3","CveId":"CVE-2026-32177","Description":"Affected products:\n.NET 10.0\n.NET 8.0\n.NET 9.0\nMicrosoft .NET Framework 3.5\nMicrosoft .NET Framework 3.5 AND 4.7.2\nMicrosoft .NET Framework 3.5 AND 4.8\nMicrosoft .NET Framework 3.5 AND 4.8.1\nMicrosoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2\nMicrosoft .NET Framework 4.8\nMicrosoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)\nMicrosoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)\nMicrosoft Visual Studio 2022 version 17.12\nMicrosoft Visual Studio 2022 version 17.14\nMicrosoft Visual Studio 2026 version 18.5\n\nDescription:\nHeap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.","Link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32177","Title":"CVE-2026-32177 [HIGH 7.3] Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally."},{"CvssScore":"MEDIUM 6.7","CveId":"CVE-2026-32170","Description":"Affected products:\nWindows 10 Version 1607\nWindows 10 Version 1809\nWindows 10 Version 21H2\nWindows 10 Version 22H2\nWindows 11 version 22H3\nWindows 11 Version 23H2\nWindows 11 Version 24H2\nWindows 11 Version 25H2\nWindows 11 version 26H1\nWindows Server 2012\nWindows Server 2012 (Server Core installation)\nWindows Server 2012 R2\nWindows Server 2012 R2 (Server Core installation)\nWindows Server 2016\nWindows Server 2016 (Server Core installation)\nWindows Server 2019\nWindows Server 2019 (Server Core installation)\nWindows Server 2022\nWindows Server 2022, 23H2 Edition (Server Core installation)\nWindows Server 2025\nWindows Server 2025 (Server Core installation)\n\nDescription:\nDouble free in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally.","Link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32170","Title":"CVE-2026-32170 [MEDIUM 6.7] Double free in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally."},{"CvssScore":"HIGH 7.5","CveId":"CVE-2026-32161","Description":"Affected products:\nWindows 10 Version 1607\nWindows 10 Version 1809\nWindows 10 Version 21H2\nWindows 10 Version 22H2\nWindows 11 version 22H3\nWindows 11 Version 23H2\nWindows 11 Version 24H2\nWindows 11 Version 25H2\nWindows 11 version 26H1\nWindows Server 2012\nWindows Server 2012 (Server Core installation)\nWindows Server 2012 R2\nWindows Server 2012 R2 (Server Core installation)\nWindows Server 2016\nWindows Server 2016 (Server Core installation)\nWindows Server 2019\nWindows Server 2019 (Server Core installation)\nWindows Server 2022\nWindows Server 2022, 23H2 Edition (Server Core installation)\nWindows Server 2025\nWindows Server 2025 (Server Core installation)\n\nDescription:\nConcurrent execution using shared resource with improper synchronization (\u0027race condition\u0027) in Windows Native WiFi Miniport Driver allows an unauthorized attacker to execute code over an adjacent network.","Link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32161","Title":"CVE-2026-32161 [HIGH 7.5] Concurrent execution using shared resource with improper synchronization (\u0027race condition\u0027) in Windows Native WiFi Miniport Driver allows an unauthorized attacker to execute "},{"CvssScore":"MEDIUM 6.7","CveId":"CVE-2026-21530","Description":"Affected products:\nWindows 10 Version 1607\nWindows 10 Version 1809\nWindows 10 Version 21H2\nWindows 10 Version 22H2\nWindows 11 version 22H3\nWindows 11 Version 23H2\nWindows 11 Version 24H2\nWindows 11 Version 25H2\nWindows 11 version 26H1\nWindows Server 2012\nWindows Server 2012 (Server Core installation)\nWindows Server 2012 R2\nWindows Server 2012 R2 (Server Core installation)\nWindows Server 2016\nWindows Server 2016 (Server Core installation)\nWindows Server 2019\nWindows Server 2019 (Server Core installation)\nWindows Server 2022\nWindows Server 2022, 23H2 Edition (Server Core installation)\nWindows Server 2025\nWindows Server 2025 (Server Core installation)\n\nDescription:\nDouble free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally.","Link":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21530","Title":"CVE-2026-21530 [MEDIUM 6.7] Double free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally."},{"CvssScore":" 0.0","CveId":"CVE-2026-20767","Description":"Affected products:\nIntel(R) QAT software drivers for Windows\n\nDescription:\nImproper input validation for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.","Link":"https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01387.html","Title":"CVE-2026-20767 [ 0.0] Improper input validation for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow an escalation of privilege. Unprivileg"},{"CvssScore":" 0.0","CveId":"CVE-2026-20753","Description":"Affected products:\nSlim Bootloader may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable local code execution. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (high) impacts.\n\nDescription:\nInteger overflow in the UEFI firmware for the Slim Bootloader may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable local code execution. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (high) impacts.","Link":"https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01425.html","Title":"CVE-2026-20753 [ 0.0] Integer overflow in the UEFI firmware for the Slim Bootloader may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexit"},{"CvssScore":" 0.0","CveId":"CVE-2026-20753","Description":"Affected products:\nSlim Bootloader may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable local code execution. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (high) impacts.\n\nDescription:\nInteger overflow in the UEFI firmware for the Slim Bootloader may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable local code execution. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (high) impacts.","Link":"https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01425.html","Title":"CVE-2026-20753 [ 0.0] Integer overflow in the UEFI firmware for the Slim Bootloader may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexit"},{"CvssScore":" 0.0","CveId":"CVE-2026-20714","Description":"Affected products:\nIntel(R) QAT software drivers for Windows\n\nDescription:\nOut-of-bounds write for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.","Link":"https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01387.html","Title":"CVE-2026-20714 [ 0.0] Out-of-bounds write for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a escalation of privilege. Unprivileged soft"}],"Timestamp":"2026-05-13T09:47:12.9134288+02:00","Youless":true,"Zabbix":true}