Real-Time Zero-Day Stream • Direct NIST NVD Disclosures (2025-2026)

Fresh 2026 Zero-Days & Newly Disclosed CVEs

Continuous surveillance of newly registered CVE advisories with CVSS threat scores, attack vector metrics, and impacted software libraries.

Reset All
Found 65,059 fresh security advisories
Page 132 of 2,711
microsoft/windows_10_1607 CWE-122 Remote (AV:N)

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network....

📅 2026-07-14 Inspect Dossier →
CVE-2026-57092 CRITICAL 9.9
microsoft/windows_10_1607 CWE-416 Remote (AV:N)

Use after free in Windows VMSwitch allows an authorized attacker to elevate privileges over a network....

📅 2026-07-14 Inspect Dossier →
microsoft/windows_10_1607 CWE-122 Remote (AV:N)

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network....

📅 2026-07-14 Inspect Dossier →
microsoft/windows_10_1607 CWE-416 Remote (AV:N)

Use after free in Windows SMB Server Network Transport Driver (srvnet.sys) allows an unauthorized attacker to execute code over a network....

📅 2026-07-14 Inspect Dossier →
microsoft/windows_10_1607 CWE-122 Remote (AV:N)

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network....

📅 2026-07-14 Inspect Dossier →
CVE-2026-56649 MEDIUM 5.9
microsoft/windows_10_1607 CWE-362 Remote (AV:N)

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Network File System allows an unauthorized attacker to execute code over a network....

📅 2026-07-14 Inspect Dossier →
microsoft/windows_10_1607 CWE-367 Remote (AV:N)

Time-of-check time-of-use (toctou) race condition in Windows Network File System allows an authorized attacker to elevate privileges over a network....

📅 2026-07-14 Inspect Dossier →
microsoft/windows_10_1607 CWE-190 Remote (AV:N)

Integer overflow or wraparound in Windows Remote Access Service Infrastructure allows an authorized attacker to elevate privileges over a network....

📅 2026-07-14 Inspect Dossier →
microsoft/fabric_data_warehouse CWE-121 Remote (AV:N)

Stack-based buffer overflow in Microsoft Fabric Data Warehouse allows an authorized attacker to execute code over a network....

📅 2026-07-14 Inspect Dossier →
microsoft/windows_admin_center CWE-77 Remote (AV:N)

Improper neutralization of special elements used in a command ('command injection') in Windows Admin Center allows an authorized attacker to execute code over a network....

📅 2026-07-14 Inspect Dossier →
microsoft/windows_admin_center CWE-23 Remote (AV:N)

Relative path traversal in Windows Admin Center allows an authorized attacker to execute code over a network....

📅 2026-07-14 Inspect Dossier →
microsoft/windows_10_1607 CWE-122 Remote (AV:N)

Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges over a network....

📅 2026-07-14 Inspect Dossier →
CVE-2026-56190 CRITICAL 9.8
microsoft/windows_10_1607 CWE-908 Remote (AV:N)

Use of uninitialized resource in Windows RDP allows an unauthorized attacker to execute code over a network....

📅 2026-07-14 Inspect Dossier →
CVE-2026-56188 CRITICAL 9.8
microsoft/windows_10_1607 CWE-362 Remote (AV:N)

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Server Network driver allows an unauthorized attacker to execute code over a network....

📅 2026-07-14 Inspect Dossier →
microsoft/windows_10_1607 CWE-125 Remote (AV:N)

Out-of-bounds read in Windows Schannel allows an authorized attacker to disclose information over a network....

📅 2026-07-14 Inspect Dossier →
CVE-2026-56168 MEDIUM 6.5
microsoft/windows_10_21h2 CWE-476 Remote (AV:N)

Null pointer dereference in Windows SMB Server allows an authorized attacker to deny service over a network....

📅 2026-07-14 Inspect Dossier →
CVE-2026-56159 CRITICAL 9.8
microsoft/windows_10_1607 CWE-122 Remote (AV:N)

Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network....

📅 2026-07-14 Inspect Dossier →
CVE-2026-56157 MEDIUM 5.4
microsoft/sharepoint_server CWE-284 Remote (AV:N)

Improper access control in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network....

📅 2026-07-14 Inspect Dossier →
CVE-2026-55944 CRITICAL 9.8
microsoft/dynamics_nav CWE-502 Remote (AV:N)

Deserialization of untrusted data in Microsoft Dynamics NAV allows an unauthorized attacker to execute code over a network....

📅 2026-07-14 Inspect Dossier →
CVE-2026-55145 MEDIUM 6.3
microsoft/copilot CWE-77 Remote (AV:N)

Improper neutralization of special elements used in a command ('command injection') in Outlook Copilot allows an authorized attacker to perform tampering over a network....

📅 2026-07-14 Inspect Dossier →
CVE-2026-55135 MEDIUM 4.6
microsoft/sharepoint_server CWE-79 Remote (AV:N)

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network....

📅 2026-07-14 Inspect Dossier →
microsoft/sharepoint_server CWE-79 Remote (AV:N)

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network....

📅 2026-07-14 Inspect Dossier →
CVE-2026-55054 MEDIUM 6.5
microsoft/365_apps CWE-125 Remote (AV:N)

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network....

📅 2026-07-14 Inspect Dossier →
microsoft/sharepoint_server CWE-862 Remote (AV:N)

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network....

📅 2026-07-14 Inspect Dossier →
Showing Page 132 of 2,711 • 65,059 newly disclosed advisories