JVNDB-2026-035789

vendorJPjvndb

JVN iPedia advisory JVNDB-2026-035789

view advisory published 2026-09-28

A published security advisory; the vulnerabilities below are the ones it describes.

01

describes (191)

Related CVEs.

IDseverity exploitable
CVE-2026-71331US——
Integer overflow or wraparound in Windows Device Health Attestation (DHA) allows an unauthorized attacker to execute code over a network.
CVE-2026-70354UShigh7.8—
Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.
CVE-2026-70347US——
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-70346US——
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-70345US——
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-70344US——
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-70330UShigh7.8—
Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.
CVE-2026-70307US——
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2026-70304UShigh7.8—
Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.
CVE-2026-68820US—OT criticalKEV
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2026-68819UShigh7.5—
Buffer over-read in Windows Network File System allows an unauthorized attacker to deny service over a network.
CVE-2026-66802US——
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Health Attestation (DHA) allows an unauthorized attacker to execute co…
CVE-2026-66799US——
Heap-based buffer overflow in Windows Key Guard allows an authorized attacker to elevate privileges locally.
CVE-2026-65814US——
Heap-based buffer overflow in Windows Storage Port Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-65810UShigh7.8—
Relative path traversal in .NET Framework allows an unauthorized attacker to elevate privileges locally.
CVE-2026-65799UShigh7.8—
Integer overflow or wraparound in Windows DNS allows an authorized attacker to elevate privileges locally.
CVE-2026-65798US——
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
CVE-2026-65797US——
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
CVE-2026-65796US——
Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network.
CVE-2026-65795US——
Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally.
showing 20 of 191
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan