Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Reset

High7.8Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.CVE-2026-40419 · microsoft · 365 apps · CVE.org · NIST NVD · Microsoft, Microsoft 365May 12, 2026
High7.8Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.CVE-2026-40418 · microsoft · 365 apps · CVE.org · NIST NVD · Microsoft, Microsoft 365May 12, 2026
High8.1Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network.CVE-2026-40415 · microsoft · windows 10 1809 · CVE.org · NIST NVD · Microsoft, WindowsMay 12, 2026
High7.0Use after free in Windows SMB Client allows an authorized attacker to elevate privileges locally.CVE-2026-40410 · microsoft · windows 10 1607 · CVE.org · NIST NVD · Microsoft, WindowsMay 12, 2026
High7.8Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.CVE-2026-40408 · microsoft · windows 10 1607 · CVE.org · NIST NVD · Microsoft, WindowsMay 12, 2026
High7.5Use after free in Windows TCP/IP allows an unauthorized attacker to disclose information over a network.CVE-2026-40406 · microsoft · windows 10 1607 · CVE.org · NIST NVD · Microsoft, WindowsMay 12, 2026
Critical9.3Use after free in Windows Hyper-V allows an unauthorized attacker to elevate privileges locally.CVE-2026-40402 · microsoft · windows 11 23h2 · CVE.org · NIST NVD · Microsoft, WindowsMay 12, 2026
High7.8Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.CVE-2026-40382 · microsoft · windows 10 1607 · CVE.org · NIST NVD · Microsoft, WindowsMay 12, 2026
High8.4Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.CVE-2026-40366 · microsoft · 365 apps · CVE.org · NIST NVD · Microsoft, Microsoft 365May 12, 2026
High8.4Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2026-40361 · microsoft · 365 apps · CVE.org · NIST NVD · Microsoft, Microsoft 365May 12, 2026
High7.8Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.CVE-2026-40359 · microsoft · 365 apps · CVE.org · NIST NVD · Microsoft, Microsoft 365May 12, 2026
High8.4Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2026-40358 · microsoft · 365 apps · CVE.org · NIST NVD · Microsoft, Microsoft 365May 12, 2026
High7.0Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.CVE-2026-35418 · microsoft · windows 10 1809 · CVE.org · NIST NVD · Microsoft, WindowsMay 12, 2026
High7.0Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.CVE-2026-35416 · microsoft · windows 10 1607 · CVE.org · NIST NVD · Microsoft, WindowsMay 12, 2026
High7.8Premiere Pro versions 26.0.2, 25.6.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.CVE-2026-34638 · adobe · premiere pro · CVE.org · NIST NVD · AdobeMay 12, 2026
High7.0Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.CVE-2026-34347 · microsoft · windows 10 1607 · CVE.org · NIST NVD · Microsoft, WindowsMay 12, 2026
High7.0Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.CVE-2026-34345 · microsoft · windows 10 1607 · CVE.org · NIST NVD · Microsoft, WindowsMay 12, 2026
High7.0Use after free in Windows Projected File System allows an authorized attacker to elevate privileges locally.CVE-2026-34340 · microsoft · windows 10 1809 · CVE.org · NIST NVD · Microsoft, WindowsMay 12, 2026
High7.8Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.CVE-2026-34338 · microsoft · windows 10 1607 · CVE.org · NIST NVD · Microsoft, WindowsMay 12, 2026
High7.0Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.CVE-2026-34337 · microsoft · windows 10 1809 · CVE.org · NIST NVD · Microsoft, WindowsMay 12, 2026
High7.8Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.CVE-2026-34333 · microsoft · windows 10 1607 · CVE.org · NIST NVD · Microsoft, WindowsMay 12, 2026
High8.0Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to execute code over a network.CVE-2026-34332 · microsoft · windows server 2025 · CVE.org · NIST NVD · Microsoft, WindowsMay 12, 2026
High7.0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.CVE-2026-34331 · microsoft · windows 10 1607 · CVE.org · NIST NVD · Microsoft, WindowsMay 12, 2026
High7.8Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.CVE-2026-34330 · microsoft · windows 10 1607 · CVE.org · NIST NVD · Microsoft, WindowsMay 12, 2026
High7.8Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.CVE-2026-33840 · microsoft · windows 11 24h2 · CVE.org · NIST NVD · Microsoft, WindowsMay 12, 2026