|
191
|
7.8 |
HIGH
Local
|
-
|
-
|
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
New
|
CWE-122
Heap-based Buffer Overflow
|
CVE-2026-33837
|
2026-05-13 03:17 |
2026-05-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
192
|
7.8 |
HIGH
Local
|
-
|
-
|
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
New
|
CWE-416
Use After Free
|
CVE-2026-33835
|
2026-05-13 03:17 |
2026-05-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
193
|
7.8 |
HIGH
Local
|
-
|
-
|
Improper access control in Windows Event Logging Service allows an authorized attacker to elevate privileges locally.
New
|
CWE-284
Improper Access Control
|
CVE-2026-33834
|
2026-05-13 03:17 |
2026-05-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
194
|
8.2 |
HIGH
Network
|
-
|
-
|
Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Machine Learning allows an unauthorized attacker to perform spoofing over a network.
New
|
CWE-74
Injection
|
CVE-2026-33833
|
2026-05-13 03:17 |
2026-05-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195
|
7.7 |
HIGH
Network
|
-
|
-
|
Improper privilege management in Microsoft Dynamics 365 Customer Insights allows an authorized attacker to elevate privileges over a network.
New
|
CWE-269
Improper Privilege Management
|
CVE-2026-33821
|
2026-05-13 03:17 |
2026-05-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196
|
9.1 |
CRITICAL
Network
|
-
|
-
|
Improper authentication in Azure SDK allows an unauthorized attacker to bypass a security feature over a network.
New
|
CWE-287 CWE-347
Improper Authentication Improper Verification of Cryptographic Signature
|
CVE-2026-33117
|
2026-05-13 03:17 |
2026-05-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197
|
8.8 |
HIGH
Network
|
-
|
-
|
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
New
|
CWE-502
Deserialization of Untrusted Data
|
CVE-2026-33112
|
2026-05-13 03:17 |
2026-05-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198
|
8.8 |
HIGH
Network
|
-
|
-
|
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
New
|
CWE-502
Deserialization of Untrusted Data
|
CVE-2026-33110
|
2026-05-13 03:17 |
2026-05-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199
|
4.4 |
MEDIUM
Local
|
-
|
-
|
Improper access control in Windows Filtering Platform (WFP) allows an authorized attacker to bypass a security feature locally.
New
|
CWE-284
Improper Access Control
|
CVE-2026-32209
|
2026-05-13 03:17 |
2026-05-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
200
|
7.8 |
HIGH
Local
|
-
|
-
|
External control of file name or path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.
New
|
CWE-73
External Control of File Name or Path
|
CVE-2026-32204
|
2026-05-13 03:17 |
2026-05-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|