JVN iPedia advisory JVNDB-2026-035789
view advisory published 2026-09-28
A published security advisory; the vulnerabilities below are the ones it describes.
01
describes (191)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-71331US | — | — | ||
Integer overflow or wraparound in Windows Device Health Attestation (DHA) allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-70354US | high7.8 | — | ||
Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally. | ||||
| CVE-2026-70347US | — | — | ||
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-70346US | — | — | ||
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-70345US | — | — | ||
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-70344US | — | — | ||
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-70330US | high7.8 | — | ||
Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-70307US | — | — | ||
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-70304US | high7.8 | — | ||
Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-68820US | —OT critical | KEV | ||
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-68819US | high7.5 | — | ||
Buffer over-read in Windows Network File System allows an unauthorized attacker to deny service over a network. | ||||
| CVE-2026-66802US | — | — | ||
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Health Attestation (DHA) allows an unauthorized attacker to execute co… | ||||
| CVE-2026-66799US | — | — | ||
Heap-based buffer overflow in Windows Key Guard allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-65814US | — | — | ||
Heap-based buffer overflow in Windows Storage Port Driver allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-65810US | high7.8 | — | ||
Relative path traversal in .NET Framework allows an unauthorized attacker to elevate privileges locally. | ||||
| CVE-2026-65799US | high7.8 | — | ||
Integer overflow or wraparound in Windows DNS allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-65798US | — | — | ||
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-65797US | — | — | ||
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-65796US | — | — | ||
Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-65795US | — | — | ||
Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally. | ||||
showing 20 of 191
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan