Real-Time Zero-Day Stream • Direct NIST NVD Disclosures (2025-2026)

Fresh 2026 Zero-Days & Newly Disclosed CVEs

Continuous surveillance of newly registered CVE advisories with CVSS threat scores, attack vector metrics, and impacted software libraries.

Reset All
Found 65,059 fresh security advisories
Page 137 of 2,711
CVE-2026-54108 MEDIUM 6.5
microsoft/sharepoint_server CWE-73 Remote (AV:N)

External control of file name or path in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network....

📅 2026-07-14 Inspect Dossier →
microsoft/windows_10_1809 CWE-122 Remote (AV:N)

Heap-based buffer overflow in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network....

📅 2026-07-14 Inspect Dossier →
microsoft/windows_10_1607 CWE-121 Remote (AV:N)

Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network....

📅 2026-07-14 Inspect Dossier →
microsoft/windows_10_1607 CWE-416 Remote (AV:N)

Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network....

📅 2026-07-14 Inspect Dossier →
microsoft/age_of_empires_ii CWE-23 Remote (AV:N)

Relative path traversal in Age of Empires II: Definitive Edition Game allows an unauthorized attacker to execute code over a network....

📅 2026-07-14 Inspect Dossier →
microsoft/.net_framework CWE-400 Remote (AV:N)

Loop with unreachable exit condition ('infinite loop') in Azure Active Directory allows an unauthorized attacker to deny service over a network....

📅 2026-07-14 Inspect Dossier →
microsoft/.net_framework CWE-502 Remote (AV:N)

Deserialization of untrusted data in Azure Active Directory allows an unauthorized attacker to deny service over a network....

📅 2026-07-14 Inspect Dossier →
CVE-2026-50522 CRITICAL 9.8
microsoft/sharepoint_server CWE-502 Remote (AV:N)

Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network....

📅 2026-07-14 Inspect Dossier →
microsoft/asp.net_core_odata CWE-770 Remote (AV:N)

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network....

📅 2026-07-14 Inspect Dossier →
microsoft/azure_spring_cloud CWE-287 Remote (AV:N)

Improper authentication in Azure Spring Apps allows an authorized attacker to elevate privileges over a network....

📅 2026-07-14 Inspect Dossier →
CVE-2026-49799 MEDIUM 6.5
microsoft/windows_10_1607 CWE-400 Remote (AV:N)

Uncontrolled resource consumption in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network....

📅 2026-07-14 Inspect Dossier →
microsoft/windows_10_1607 CWE-770 Remote (AV:N)

Allocation of resources without limits or throttling in HTTP/2 allows an unauthorized attacker to deny service over a network....

📅 2026-07-14 Inspect Dossier →
microsoft/windows_10_1607 CWE-770 Remote (AV:N)

Allocation of resources without limits or throttling in Windows HTTP.sys allows an unauthorized attacker to deny service over a network....

📅 2026-07-14 Inspect Dossier →
microsoft/windows_10_1607 CWE-191 Remote (AV:N)

Integer underflow (wrap or wraparound) in Windows DHCP Client allows an unauthorized attacker to elevate privileges over a network....

📅 2026-07-14 Inspect Dossier →
microsoft/windows_10_1607 CWE-122 Remote (AV:N)

Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to execute code over a network....

📅 2026-07-14 Inspect Dossier →
CVE-2026-49172 CRITICAL 9.8
microsoft/windows_10_1607 CWE-122 Remote (AV:N)

Heap-based buffer overflow in Windows FTP Service allows an unauthorized attacker to execute code over a network....

📅 2026-07-14 Inspect Dossier →
microsoft/windows_server_2025 CWE-416 Remote (AV:N)

Use after free in DNS Server allows an authorized attacker to execute code over a network....

📅 2026-07-14 Inspect Dossier →
microsoft/windows_10_1607 CWE-122 Remote (AV:N)

Heap-based buffer overflow in Active Directory Domain Services allows an unauthorized attacker to execute code over a network....

📅 2026-07-14 Inspect Dossier →
microsoft/windows_10_1607 CWE-122 Remote (AV:N)

Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network....

📅 2026-07-14 Inspect Dossier →
CVE-2026-48561 CRITICAL 9.6
microsoft/365_copilot CWE-77 Remote (AV:N)

Improper neutralization of special elements used in a command ('command injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to execute code over a network....

📅 2026-07-14 Inspect Dossier →
CVE-2026-47282 MEDIUM 6.5
microsoft/visual_studio_code CWE-200 Remote (AV:N)

Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network....

📅 2026-07-14 Inspect Dossier →
microsoft/asp.net_core_odata CWE-770 Remote (AV:N)

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network....

📅 2026-07-14 Inspect Dossier →
CVE-2026-44806 MEDIUM 5.3
microsoft/windows_10_1607 CWE-401 Remote (AV:N)

Missing release of memory after effective lifetime in Windows Cryptographic Services allows an unauthorized attacker to deny service over a network....

📅 2026-07-14 Inspect Dossier →
CVE-2026-42990 CRITICAL 9.8
microsoft/windows_10_1607 CWE-122 Remote (AV:N)

Heap-based buffer overflow in SQL Server ODBC driver allows an unauthorized attacker to execute code over a network....

📅 2026-07-14 Inspect Dossier →
Showing Page 137 of 2,711 • 65,059 newly disclosed advisories